This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft File: j1T8geUVM4bLQsFzMwUNqDGtqeU.mft (raw, json) Hash identifier: UisXg2VCoHhqMUypyMbh7idM2hnA8OMsJg21ZG/Z2OU= Subject key identifier: 37:D2:6B:23:D6:6D:63:E9:02:6B:C9:64:57:FF:E0:38:A6:29:2D:37 Authority key identifier: 8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5 Certificate issuer: /CN=8f54fc81e5153386cb42c17333050da831ada9e5 Certificate serial: 019B9779281FFF6438E384E5702ACECF5FDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft Manifest number: 0C2F Signing time: Wed 07 Jan 2026 08:00:58 +0000 Manifest this update: Wed 07 Jan 2026 08:00:58 +0000 Manifest next update: Thu 08 Jan 2026 08:00:58 +0000 Files and hashes: 1: j1T8geUVM4bLQsFzMwUNqDGtqeU.crl (hash: 0AElQGa9A6dMCiKau8rDW4SZU5l+E7IuMIJuARDwsPg=) 2: uIfxedIoPtI6sFt6tLFbdFhBmow.roa (hash: Q+T15udJmpOitf8fa/5KOsL5hhkwGZ8F5qC5MKVKRFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 08:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:79:28:1f:ff:64:38:e3:84:e5:70:2a:ce:cf:5f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f54fc81e5153386cb42c17333050da831ada9e5 Validity Not Before: Jan 7 08:00:58 2026 GMT Not After : Jan 8 08:00:58 2026 GMT Subject: CN=37d26b23d66d63e9026bc96457ffe038a6292d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fa:52:d1:81:f8:20:c3:9b:8a:02:f5:27:f2: 8c:96:ee:01:10:c1:f5:d1:34:1a:13:e8:d6:b4:aa: ed:fb:d3:17:4b:4b:5f:05:58:8f:28:75:80:85:e6: 44:73:56:f1:47:dc:eb:fa:98:60:c6:fe:d3:e9:88: 1d:06:4e:47:6b:fe:19:61:6d:74:5f:db:3b:b0:5a: 5d:9d:9d:63:ca:91:f6:c9:90:b5:e4:42:56:24:de: c1:78:11:96:16:2f:f7:10:b4:1d:b8:b2:8f:e7:83: b9:b7:4f:62:5d:11:05:99:79:cc:fd:7b:5d:d0:7a: 1f:eb:b6:3d:8f:98:01:72:9e:d4:b7:8e:fa:e8:d2: 7e:5f:c7:33:87:11:e3:32:a7:05:cd:af:94:82:c0: a5:24:14:cb:de:33:3f:58:90:9b:87:22:a8:96:a1: 19:7e:c6:6b:2c:83:00:6f:9d:b3:7a:26:a0:4f:3c: 5d:b9:b6:2b:24:bf:0d:5d:3d:43:34:d9:81:96:11: f1:32:ea:ba:17:a2:4a:7b:0b:f8:55:01:b2:d4:95: 79:0f:e6:40:69:a3:61:b5:a8:e7:5d:74:75:48:4b: 46:e6:31:8d:3e:be:a8:e9:7b:d3:a0:57:84:d9:35: 21:1e:65:79:25:ee:5c:0f:37:05:a6:5f:92:03:20: 65:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D2:6B:23:D6:6D:63:E9:02:6B:C9:64:57:FF:E0:38:A6:29:2D:37 X509v3 Authority Key Identifier: keyid:8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:e1:9a:d1:bd:78:86:8d:b0:30:8c:ec:c2:4e:bd:82:e2:52: 1b:bb:60:df:7f:ba:f6:69:14:08:e8:d7:bc:7e:4a:ad:50:de: a5:3f:f2:e1:9e:c0:05:f6:4a:04:ff:f0:fb:4f:ca:a0:f4:3d: 27:f0:78:ad:9b:05:59:2d:fe:4b:8c:c7:75:ba:0b:55:14:3e: f9:dc:cf:70:3d:78:a1:12:38:ea:7f:83:16:f6:0d:4e:f9:8c: 8e:f6:5c:2c:ea:6e:27:8b:92:e6:f0:9d:26:a8:83:13:7a:20: a2:f4:08:cb:9f:2d:0e:81:b6:52:09:b5:b0:38:6b:b0:7c:62: 1a:cf:f0:9f:a7:c0:37:ff:20:3d:ca:f2:bd:20:55:7d:25:6e: 60:1d:57:ad:43:b0:40:a2:5c:89:08:47:ae:7b:64:8c:5c:bc: 5c:eb:8a:1d:b3:88:90:3b:23:c9:4e:c0:14:f9:7e:4d:f8:86: fe:30:a2:aa:5e:97:10:1e:3d:ff:01:66:98:dd:5d:ee:87:30: 0e:ab:9f:41:4f:83:fe:e0:c4:8a:c1:60:cb:07:a5:4c:e5:fe: 0f:7b:15:79:3f:5e:af:a1:33:91:29:4f:9c:a0:b8:6a:c2:70: df:ad:55:a9:52:b9:94:6f:14:04:f3:00:88:b4:7d:11:b2:ed: 96:5d:cc:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuXeSgf/2Q444TlcCrOz1/eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNTRmYzgxZTUxNTMzODZjYjQyYzE3MzMzMDUwZGE4MzFh ZGE5ZTUwHhcNMjYwMTA3MDgwMDU4WhcNMjYwMTA4MDgwMDU4WjAzMTEwLwYDVQQD EygzN2QyNmIyM2Q2NmQ2M2U5MDI2YmM5NjQ1N2ZmZTAzOGE2MjkyZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvpS0YH4IMObigL1J/KMlu4BEMH1 0TQaE+jWtKrt+9MXS0tfBViPKHWAheZEc1bxR9zr+phgxv7T6YgdBk5Ha/4ZYW10 X9s7sFpdnZ1jypH2yZC15EJWJN7BeBGWFi/3ELQduLKP54O5t09iXREFmXnM/Xtd 0Hof67Y9j5gBcp7Ut4766NJ+X8czhxHjMqcFza+UgsClJBTL3jM/WJCbhyKolqEZ fsZrLIMAb52zeiagTzxdubYrJL8NXT1DNNmBlhHxMuq6F6JKewv4VQGy1JV5D+ZA aaNhtajnXXR1SEtG5jGNPr6o6XvToFeE2TUhHmV5Je5cDzcFpl+SAyBlWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfSayPWbWPpAmvJZFf/4DimKS03MB8GA1UdIwQY MBaAFI9U/IHlFTOGy0LBczMFDagxranlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajFUOGdlVVZNNGJMUXNGek13VU5xREd0cWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NDIyNTAtYmEwYi00YTEwLThiZGQt NDU3OTQ5MjRjYjUzLzEvajFUOGdlVVZNNGJMUXNGek13VU5xREd0cWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC81NDIyNTAtYmEwYi00YTEwLThiZGQtNDU3OTQ5MjRjYjUz LzEvajFUOGdlVVZNNGJMUXNGek13VU5xREd0cWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOGa0b14 ho2wMIzswk69guJSG7tg33+69mkUCOjXvH5KrVDepT/y4Z7ABfZKBP/w+0/KoPQ9 J/B4rZsFWS3+S4zHdboLVRQ++dzPcD14oRI46n+DFvYNTvmMjvZcLOpuJ4uS5vCd JqiDE3ogovQIy58tDoG2Ugm1sDhrsHxiGs/wn6fAN/8gPcryvSBVfSVuYB1XrUOw QKJciQhHrntkjFy8XOuKHbOIkDsjyU7AFPl+TfiG/jCiql6XEB49/wFmmN1d7ocw DqufQU+D/uDEisFgywelTOX+D3sVeT9er6EzkSlPnKC4asJw361VqVK5lG8UBPMA iLR9EbLtll3MsA== -----END CERTIFICATE-----Generated at Wed Jan 7 16:47:47 2026 by rpki-client