This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft File: jsH30FMGguG2jjv-WodE7lGtM10.mft (raw, json) Hash identifier: 8ODwW0Cxe56IXQM15qScOZWl8JB6ZLANtXU0HoeClDQ= Subject key identifier: 1D:98:42:B8:33:E4:90:33:49:DF:FB:43:FE:40:FE:D5:63:71:76:57 Authority key identifier: 8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D Certificate issuer: /CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d Certificate serial: 019BB094CC7C5F59CDE604020F4E298215AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft Manifest number: 17C5 Signing time: Mon 12 Jan 2026 05:01:40 +0000 Manifest this update: Mon 12 Jan 2026 05:01:40 +0000 Manifest next update: Tue 13 Jan 2026 05:01:40 +0000 Files and hashes: 1: VndZi1ag43yUYbp1p18VZaT1S-Q.roa (hash: YUCC1yTTSNVtoC4MDdJQsWo/Nb81JBpWk0EnfDrruB8=) 2: jsH30FMGguG2jjv-WodE7lGtM10.crl (hash: HNqtsRkEutmALCLkdjcktiCjS9qWwzdor0SpNsPOXlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:94:cc:7c:5f:59:cd:e6:04:02:0f:4e:29:82:15:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d Validity Not Before: Jan 12 05:01:40 2026 GMT Not After : Jan 13 05:01:40 2026 GMT Subject: CN=1d9842b833e4903349dffb43fe40fed563717657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a0:98:21:6a:34:9e:be:9d:ec:86:56:b4:3e: d9:6f:89:10:50:19:1e:10:02:1e:c8:a0:a8:39:e6: f7:fc:95:c6:55:ed:cd:b5:82:eb:bb:41:f4:3f:c2: 57:25:41:79:ae:e7:99:99:7f:e7:0c:15:e8:b3:e6: 21:cf:a4:f9:49:d7:25:af:27:1e:53:6f:0d:e2:ee: 11:73:8e:e0:f5:cd:3b:72:19:71:ed:74:95:37:c6: 69:76:72:64:e7:4d:59:07:db:f2:7d:e4:27:ca:0b: ed:21:76:0d:b6:2a:f9:60:6c:2e:c4:73:ff:fc:8c: 56:43:c2:d7:8e:d7:ad:b4:00:55:0a:66:77:36:5b: 70:10:27:72:fe:cc:fe:7d:a6:5a:41:71:18:2c:a3: 46:51:c0:ec:8a:78:c4:aa:03:0e:1d:bd:7a:2f:61: 24:5e:5b:75:bf:21:26:33:d6:dd:a3:8b:eb:f0:4d: 58:13:60:cf:33:a6:fe:07:c2:a5:c0:48:e5:3d:00: ac:55:4e:f7:b0:ef:3f:5b:b5:3a:25:7d:55:b1:f8: 56:bd:20:60:96:1d:75:2e:5a:2c:ca:40:ee:58:0a: c6:45:dc:de:f5:78:d8:d3:03:9f:c2:0d:42:5d:7a: 97:50:f7:8f:4b:52:32:c0:b1:e7:a7:15:97:a7:13: 8b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:98:42:B8:33:E4:90:33:49:DF:FB:43:FE:40:FE:D5:63:71:76:57 X509v3 Authority Key Identifier: keyid:8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:28:6c:64:fc:dc:bb:c1:f6:c3:7f:cf:d3:a5:08:bf:71:b2: 65:11:67:5b:02:76:2a:a8:01:c6:b3:2d:82:a6:aa:a3:7a:45: 22:3e:d6:22:92:97:f6:33:df:65:39:41:17:80:49:55:05:39: 2c:4c:57:e3:13:66:73:0c:f2:5c:ca:d2:72:05:50:6e:ab:4b: 9d:7c:07:32:3c:20:ea:aa:75:b9:03:a0:5b:71:98:d5:a4:5f: 9a:bb:d5:fa:ba:47:2b:67:70:32:57:56:6c:fb:cd:c9:cf:b3: ef:1e:98:f4:a5:61:5d:61:3d:e3:60:cb:f8:0e:fe:cd:f8:55: 56:a8:5c:d0:3c:68:db:5d:b5:38:ca:45:d7:46:eb:33:7b:08: 05:77:04:e0:e7:52:a7:71:83:b9:15:1e:bc:ac:94:b2:ff:49: a9:54:30:cf:f9:7e:6e:c0:ec:4b:29:ab:97:0f:6a:f8:cf:d9: b7:10:f4:aa:93:87:de:51:8f:2a:9d:34:67:74:3b:f3:31:60: 4d:a1:30:15:cd:46:f0:2a:ed:e2:96:d3:f5:c4:1f:d2:6c:ce: 82:ed:47:66:a1:1c:ce:bb:5a:6b:2c:30:74:11:71:41:9d:89: 4f:63:3f:14:7c:f7:f7:aa:bb:37:d1:94:80:86:f3:97:28:f4: be:66:fc:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwlMx8X1nN5gQCD04pghWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYzFmN2QwNTMwNjgyZTFiNjhlM2JmZTVhODc0NGVlNTFh ZDMzNWQwHhcNMjYwMTEyMDUwMTQwWhcNMjYwMTEzMDUwMTQwWjAzMTEwLwYDVQQD EygxZDk4NDJiODMzZTQ5MDMzNDlkZmZiNDNmZTQwZmVkNTYzNzE3NjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6CYIWo0nr6d7IZWtD7Zb4kQUBke EAIeyKCoOeb3/JXGVe3NtYLru0H0P8JXJUF5rueZmX/nDBXos+Yhz6T5Sdclryce U28N4u4Rc47g9c07chlx7XSVN8ZpdnJk501ZB9vyfeQnygvtIXYNtir5YGwuxHP/ /IxWQ8LXjtettABVCmZ3NltwECdy/sz+faZaQXEYLKNGUcDsinjEqgMOHb16L2Ek Xlt1vyEmM9bdo4vr8E1YE2DPM6b+B8KlwEjlPQCsVU73sO8/W7U6JX1VsfhWvSBg lh11LlosykDuWArGRdze9XjY0wOfwg1CXXqXUPePS1IywLHnpxWXpxOLNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2YQrgz5JAzSd/7Q/5A/tVjcXZXMB8GA1UdIwQY MBaAFI7B99BTBoLhto47/lqHRO5RrTNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85MThhMzMtNjc2Ni00Nzk1LTg1NzMt YWVlNjk4YWY2OGI3LzEvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS85MThhMzMtNjc2Ni00Nzk1LTg1NzMtYWVlNjk4YWY2OGI3 LzEvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXihsZPzc u8H2w3/P06UIv3GyZRFnWwJ2KqgBxrMtgqaqo3pFIj7WIpKX9jPfZTlBF4BJVQU5 LExX4xNmcwzyXMrScgVQbqtLnXwHMjwg6qp1uQOgW3GY1aRfmrvV+rpHK2dwMldW bPvNyc+z7x6Y9KVhXWE942DL+A7+zfhVVqhc0Dxo2121OMpF10brM3sIBXcE4OdS p3GDuRUevKyUsv9JqVQwz/l+bsDsSymrlw9q+M/ZtxD0qpOH3lGPKp00Z3Q78zFg TaEwFc1G8Crt4pbT9cQf0mzOgu1HZqEczrtaaywwdBFxQZ2JT2M/FHz396q7N9GU gIbzlyj0vmb8UA== -----END CERTIFICATE-----Generated at Mon Jan 12 12:31:56 2026 by rpki-client