This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft File: jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json) Hash identifier: h7PUu7+cww2WOsS+l9v5YOwJVaKng222gbcjqiaAQeY= Subject key identifier: 9B:81:BA:46:59:28:A2:46:EC:84:04:17:E0:53:02:4C:0F:00:3C:AC Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76 Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76 Certificate serial: 019BAD5CA7AF130FE1FAFE6B4901C4E43E4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft Manifest number: 0FE0 Signing time: Sun 11 Jan 2026 14:01:29 +0000 Manifest this update: Sun 11 Jan 2026 14:01:29 +0000 Manifest next update: Mon 12 Jan 2026 14:01:29 +0000 Files and hashes: 1: a8MwW9uA1QblypP4WtvHf2_buTE.roa (hash: KOPlkZDXHkxKuQQUEqNV5mrWVVkmRluPORCXFGTA7CA=) 2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: Lvl1B+PRJFtf5MLOC600d0KZRAmCGaPYbB7dIInn+xc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:5c:a7:af:13:0f:e1:fa:fe:6b:49:01:c4:e4:3e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76 Validity Not Before: Jan 11 14:01:29 2026 GMT Not After : Jan 12 14:01:29 2026 GMT Subject: CN=9b81ba465928a246ec840417e053024c0f003cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:95:82:fc:ab:7f:f5:29:0e:f4:b5:60:f8:39: 6b:65:90:9b:58:30:11:85:d4:21:3e:22:32:4d:ec: 0c:ee:2a:91:90:3e:b4:b2:3e:67:8c:dd:36:89:fa: 70:6d:52:5b:c0:2c:e6:0b:94:be:08:c4:14:20:fb: 3a:01:47:60:34:ad:b3:22:f8:e9:c3:79:3a:a5:78: af:8f:42:97:a1:74:c3:27:32:cc:ed:13:38:d9:96: 55:a5:07:e9:63:a9:8a:ff:00:49:86:94:c9:7d:a4: eb:74:9d:70:ed:6d:ff:e9:5b:36:05:71:82:a1:6f: 59:f1:03:f7:e8:32:bb:cf:0c:40:22:c8:9a:4e:48: 9a:14:a5:ce:d5:7a:b2:7b:73:86:86:22:13:18:82: 86:3c:bf:35:da:4d:be:8b:71:2c:51:6d:7e:d4:65: 7e:22:e4:28:18:49:4e:db:d3:73:7b:fb:33:83:73: c8:fd:42:de:10:a4:20:0a:2d:35:93:ff:04:9b:9a: 8f:b7:18:e1:63:f1:12:fa:05:c0:06:00:a2:b7:03: 2c:e9:58:c5:e2:50:1d:62:c2:83:f3:43:b8:1d:30: 3c:23:2d:e5:8c:fa:d8:98:18:e0:ae:ec:15:b9:33: 0d:15:18:2c:c4:aa:dd:7c:fd:ac:c5:33:15:30:67: f2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:81:BA:46:59:28:A2:46:EC:84:04:17:E0:53:02:4C:0F:00:3C:AC X509v3 Authority Key Identifier: keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:81:83:24:16:f9:b2:b7:d5:17:cc:d8:ce:98:8d:c7:1a:1d: c1:11:49:d7:f1:47:0f:5c:84:6c:db:57:ed:c6:30:88:6f:c7: 9b:0f:0a:b2:84:7e:90:94:5f:89:7f:06:ac:1e:c6:3a:8c:58: 16:c8:a1:8e:47:15:99:c6:4a:7c:fa:0b:80:9f:ac:2f:6f:75: b2:56:c2:f2:91:13:11:71:bf:94:f9:8a:5e:f9:f8:4f:26:23: b4:71:30:09:e2:e2:c5:e8:0a:87:ec:fa:e8:11:54:75:6c:06: 3d:df:b6:79:05:51:2c:3e:91:75:8e:76:c5:17:6e:0e:34:29: 74:3f:80:95:f2:9b:e9:b0:7c:ea:c3:43:15:f5:f4:11:c9:f5: 48:62:95:6d:91:69:43:4a:74:aa:60:14:62:82:1f:c7:85:71: 6d:b1:07:ef:9f:59:05:bf:92:d0:ff:6c:d3:66:d5:02:94:00: 9e:2a:4f:a4:59:60:d8:f1:eb:82:a7:a7:eb:61:cb:1a:ed:4b: ef:df:da:3f:f4:04:0a:e2:dd:4e:a6:af:aa:69:b6:17:5f:36: ce:84:c6:b4:a8:be:78:62:af:f7:5c:50:bb:72:3e:d8:77:20: 42:a1:c2:3a:4f:72:0f:88:ef:02:ca:cd:ed:40:43:f4:a7:d7: 99:41:f7:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutXKevEw/h+v5rSQHE5D5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNTRhODQ2NjMyZTgzMzQwZTExNGQwZDM1NTkxYjNkNDIx ODhiNzYwHhcNMjYwMTExMTQwMTI5WhcNMjYwMTEyMTQwMTI5WjAzMTEwLwYDVQQD Eyg5YjgxYmE0NjU5MjhhMjQ2ZWM4NDA0MTdlMDUzMDI0YzBmMDAzY2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZWC/Kt/9SkO9LVg+DlrZZCbWDAR hdQhPiIyTewM7iqRkD60sj5njN02ifpwbVJbwCzmC5S+CMQUIPs6AUdgNK2zIvjp w3k6pXivj0KXoXTDJzLM7RM42ZZVpQfpY6mK/wBJhpTJfaTrdJ1w7W3/6Vs2BXGC oW9Z8QP36DK7zwxAIsiaTkiaFKXO1Xqye3OGhiITGIKGPL812k2+i3EsUW1+1GV+ IuQoGElO29Nze/szg3PI/ULeEKQgCi01k/8Em5qPtxjhY/ES+gXABgCitwMs6VjF 4lAdYsKD80O4HTA8Iy3ljPrYmBjgruwVuTMNFRgsxKrdfP2sxTMVMGfy1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuBukZZKKJG7IQEF+BTAkwPADysMB8GA1UdIwQY MBaAFIxUqEZjLoM0DhFNDTVZGz1CGIt2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC84MmE2NjEtNTU4Ny00MDgzLTgxM2Mt MzQ1OWJlMjY2NzMxLzEvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC84MmE2NjEtNTU4Ny00MDgzLTgxM2MtMzQ1OWJlMjY2NzMx LzEvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoGDJBb5 srfVF8zYzpiNxxodwRFJ1/FHD1yEbNtX7cYwiG/Hmw8KsoR+kJRfiX8GrB7GOoxY FsihjkcVmcZKfPoLgJ+sL291slbC8pETEXG/lPmKXvn4TyYjtHEwCeLixegKh+z6 6BFUdWwGPd+2eQVRLD6RdY52xRduDjQpdD+AlfKb6bB86sNDFfX0Ecn1SGKVbZFp Q0p0qmAUYoIfx4VxbbEH759ZBb+S0P9s02bVApQAnipPpFlg2PHrgqen62HLGu1L 79/aP/QECuLdTqavqmm2F182zoTGtKi+eGKv91xQu3I+2HcgQqHCOk9yD4jvAsrN 7UBD9KfXmUH3/w== -----END CERTIFICATE-----Generated at Mon Jan 12 00:02:24 2026 by rpki-client