This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft File: j7phV8tS0RaPUIRsXlB5IkDt8-A.mft (raw, json) Hash identifier: U70wurTvb/q994B/KXA3/nCede9D7KdsaT7D51jNg5M= Subject key identifier: 9F:96:40:A3:C8:3E:3D:52:E5:10:6A:9F:46:4F:F1:45:79:D1:D9:96 Authority key identifier: 8F:BA:61:57:CB:52:D1:16:8F:50:84:6C:5E:50:79:22:40:ED:F3:E0 Certificate issuer: /CN=8fba6157cb52d1168f50846c5e50792240edf3e0 Certificate serial: 019BB0CC2E180C90C41E3188A413DE7149AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft Manifest number: 0AF4 Signing time: Mon 12 Jan 2026 06:02:09 +0000 Manifest this update: Mon 12 Jan 2026 06:02:09 +0000 Manifest next update: Tue 13 Jan 2026 06:02:09 +0000 Files and hashes: 1: j7phV8tS0RaPUIRsXlB5IkDt8-A.crl (hash: bsWN+q8eRBp4qrqGJxSzXOEB5NMAvxt6bUmtJFAB+tM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.crl rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 06:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:cc:2e:18:0c:90:c4:1e:31:88:a4:13:de:71:49:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fba6157cb52d1168f50846c5e50792240edf3e0 Validity Not Before: Jan 12 06:02:09 2026 GMT Not After : Jan 13 06:02:09 2026 GMT Subject: CN=9f9640a3c83e3d52e5106a9f464ff14579d1d996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:86:50:fb:1f:a8:77:51:cc:91:d1:21:76: 6d:73:bf:8c:b3:fc:91:b1:bf:e2:f0:e3:db:a5:4b: 26:3b:8e:33:b7:63:a4:78:74:53:37:35:76:1b:7e: 43:47:e3:cd:66:e1:1e:59:46:b1:91:cc:7d:c8:c1: 58:4f:1b:7c:4d:aa:ad:55:b6:cf:5f:06:03:b8:b1: 99:f5:23:1a:8a:4a:1a:c7:0b:89:4e:84:31:98:21: 90:9d:93:03:82:2c:4d:e2:88:0c:de:60:d3:10:18: 9c:2a:f7:b9:c6:5c:f0:7a:92:63:a2:6e:df:7b:66: b8:47:13:98:1a:d8:42:83:2b:60:74:da:da:d5:42: cc:09:7b:9f:b5:73:f5:9c:1b:eb:f4:bf:57:21:10: 4d:38:33:36:09:1f:56:4f:d1:b7:73:ef:dd:3c:40: 26:ab:13:a8:bd:95:27:00:2a:e9:02:ec:66:f6:9a: 38:8b:6e:cd:b2:5e:26:57:6a:7e:e8:91:b5:3a:b9: fe:85:42:77:c9:d3:cb:c1:0b:3d:9d:6a:5d:06:b9: c5:ae:da:cd:f2:ba:9f:46:ca:92:f4:5b:8a:d9:28: 1a:a4:28:e4:5d:69:21:13:eb:54:54:4d:a1:ee:f9: 14:f6:13:10:47:4e:38:eb:52:2d:60:f6:72:12:ba: b2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:96:40:A3:C8:3E:3D:52:E5:10:6A:9F:46:4F:F1:45:79:D1:D9:96 X509v3 Authority Key Identifier: keyid:8F:BA:61:57:CB:52:D1:16:8F:50:84:6C:5E:50:79:22:40:ED:F3:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:28:96:8b:66:e8:cf:b0:15:a2:cf:f6:65:4e:94:c5:8e:35: 23:7a:7e:ca:9c:6c:6d:e3:88:55:63:b4:09:df:16:6f:e3:8a: e2:0e:4a:c5:93:86:d5:73:2e:75:cb:72:fd:15:71:45:64:26: 2a:4d:e8:6d:e3:10:62:38:29:e6:32:ae:71:91:f3:ac:2e:cb: b0:2a:2b:dc:28:e9:98:e4:9d:68:37:86:6e:6b:fe:2f:67:8b: 25:34:99:ab:2f:05:24:c9:b5:ed:26:ff:85:18:7b:58:dc:96: 84:f6:6f:1f:7a:a6:ea:b8:02:ef:d0:8b:cb:bf:21:aa:d4:dc: ef:d4:ae:ee:f7:0c:73:93:d6:62:e9:dd:49:70:96:b8:f0:c5: 8f:62:a9:56:96:b6:e0:1b:79:91:36:06:8c:56:63:e6:3f:bb: b4:6c:a9:6b:05:7b:ea:74:de:cd:40:42:07:6b:0f:60:e5:ab: f6:62:68:e9:ca:d1:e0:ed:c1:a8:c5:7d:95:53:28:3b:44:53: c9:64:fc:9f:74:af:21:32:e5:8b:c8:17:98:c3:4f:20:36:af: e8:0f:14:c0:5e:8e:41:ac:0f:c6:62:2f:3b:87:fe:13:b1:d9: 72:91:bf:f6:d5:79:4a:f8:14:47:79:65:35:b0:ec:38:c0:92: 5b:42:3a:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwzC4YDJDEHjGIpBPecUmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYmE2MTU3Y2I1MmQxMTY4ZjUwODQ2YzVlNTA3OTIyNDBl ZGYzZTAwHhcNMjYwMTEyMDYwMjA5WhcNMjYwMTEzMDYwMjA5WjAzMTEwLwYDVQQD Eyg5Zjk2NDBhM2M4M2UzZDUyZTUxMDZhOWY0NjRmZjE0NTc5ZDFkOTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHqGUPsfqHdRzJHRIXZtc7+Ms/yR sb/i8OPbpUsmO44zt2OkeHRTNzV2G35DR+PNZuEeWUaxkcx9yMFYTxt8TaqtVbbP XwYDuLGZ9SMaikoaxwuJToQxmCGQnZMDgixN4ogM3mDTEBicKve5xlzwepJjom7f e2a4RxOYGthCgytgdNra1ULMCXuftXP1nBvr9L9XIRBNODM2CR9WT9G3c+/dPEAm qxOovZUnACrpAuxm9po4i27Nsl4mV2p+6JG1Orn+hUJ3ydPLwQs9nWpdBrnFrtrN 8rqfRsqS9FuK2SgapCjkXWkhE+tUVE2h7vkU9hMQR04461ItYPZyErqyOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+WQKPIPj1S5RBqn0ZP8UV50dmWMB8GA1UdIwQY MBaAFI+6YVfLUtEWj1CEbF5QeSJA7fPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajdwaFY4dFMwUmFQVUlSc1hsQjVJa0R0OC1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lMjViNjMtN2I5NC00NzU5LTkxOTUt MjBmYWQ5NGNhYjE0LzEvajdwaFY4dFMwUmFQVUlSc1hsQjVJa0R0OC1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9lMjViNjMtN2I5NC00NzU5LTkxOTUtMjBmYWQ5NGNhYjE0 LzEvajdwaFY4dFMwUmFQVUlSc1hsQjVJa0R0OC1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFSiWi2bo z7AVos/2ZU6UxY41I3p+ypxsbeOIVWO0Cd8Wb+OK4g5KxZOG1XMudcty/RVxRWQm Kk3obeMQYjgp5jKucZHzrC7LsCor3CjpmOSdaDeGbmv+L2eLJTSZqy8FJMm17Sb/ hRh7WNyWhPZvH3qm6rgC79CLy78hqtTc79Su7vcMc5PWYundSXCWuPDFj2KpVpa2 4Bt5kTYGjFZj5j+7tGypawV76nTezUBCB2sPYOWr9mJo6crR4O3BqMV9lVMoO0RT yWT8n3SvITLli8gXmMNPIDav6A8UwF6OQawPxmIvO4f+E7HZcpG/9tV5SvgUR3ll NbDsOMCSW0I6WA== -----END CERTIFICATE-----Generated at Mon Jan 12 16:41:41 2026 by rpki-client