This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft File: jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft (raw, json) Hash identifier: VjHMHWscN3t8Y+5bKZ6bCkJq9W4BALUC580mplSLQXE= Subject key identifier: EA:2D:AC:28:09:28:4D:74:E4:7F:C3:38:7B:02:6C:98:D8:A5:79:84 Authority key identifier: 8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4 Certificate issuer: /CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4 Certificate serial: 019B774974EAFB627E94CCD2D5D093BD97BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft Manifest number: 14C7 Signing time: Thu 01 Jan 2026 02:01:01 +0000 Manifest this update: Thu 01 Jan 2026 02:01:01 +0000 Manifest next update: Fri 02 Jan 2026 02:01:01 +0000 Files and hashes: 1: 4OlXHZjPNi_ZrlyOHLrnACz2H5w.roa (hash: WcKTWMqR73pqlk4NefweGCzhLoO2KaXXmg8w4iimJxY=) 2: jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl (hash: pfbTjphtGXz0s8OSV5C6pjyU/ZKms7EeLozHuceF67A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 02:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:49:74:ea:fb:62:7e:94:cc:d2:d5:d0:93:bd:97:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4 Validity Not Before: Jan 1 02:01:01 2026 GMT Not After : Jan 2 02:01:01 2026 GMT Subject: CN=ea2dac2809284d74e47fc3387b026c98d8a57984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:96:dc:56:14:b1:e7:f7:87:46:55:8e:5b:c5: 64:ea:30:0c:01:e1:57:c6:a5:68:44:fb:60:0c:1f: 81:ec:11:d9:d5:8b:04:1a:90:78:62:66:64:1d:8e: eb:7b:57:26:2c:37:b4:a9:15:70:d8:bc:12:0c:16: 95:cd:9d:69:7e:6f:b5:b8:3a:45:ad:07:03:f2:fd: 22:0c:f2:20:2f:c3:a5:93:08:03:45:28:3d:aa:1c: 76:d3:9e:03:9b:6b:eb:55:30:d3:63:95:d5:36:17: 7f:77:1d:10:70:2f:30:3f:c7:37:b2:a2:37:00:fd: 45:49:01:9c:37:bc:e2:e4:1c:b1:97:c6:2a:a2:da: 1c:77:bd:cc:37:03:c6:ac:0c:bb:bc:82:fe:c5:26: 40:f2:c0:bd:85:1f:77:a2:9b:c8:62:0f:40:53:e8: a6:c9:55:92:fd:fe:6b:b3:95:a1:9c:3c:0a:d1:15: 80:db:97:52:8d:4a:af:15:2b:09:b2:3d:5e:57:f8: 43:55:f0:8e:56:e0:bc:18:ea:23:2b:e0:52:ac:d5: cb:44:d9:d4:11:53:c4:83:d4:f5:8f:66:13:07:0c: 49:4a:bb:32:80:c8:35:62:93:50:49:2c:c4:91:6b: 90:a2:0d:1a:e1:c8:48:53:38:e1:c5:58:86:81:e7: c1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2D:AC:28:09:28:4D:74:E4:7F:C3:38:7B:02:6C:98:D8:A5:79:84 X509v3 Authority Key Identifier: keyid:8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:7c:4a:93:b6:72:ab:d0:d0:d5:77:58:39:c9:35:9b:86:f7: 24:bb:38:97:84:b4:f7:1c:8f:0e:26:a1:d9:4c:01:d1:94:eb: 16:74:dd:dc:1a:47:fc:23:46:5c:6e:5a:5e:c9:23:4e:a1:64: 10:c7:36:63:e0:6d:1d:d7:f9:d4:38:cd:52:48:c3:2f:a8:dd: 82:81:13:54:1f:ee:5c:27:72:1d:6f:42:e0:75:5c:2b:6c:1c: 67:e0:f6:4a:b9:26:b5:d8:77:1e:a7:95:f7:ce:14:15:8a:2a: 43:3d:7d:f2:a3:2a:59:61:11:49:13:be:4f:f2:e4:a4:37:de: 61:bc:88:ec:a9:73:4b:60:f8:ef:82:26:d3:7f:1a:1f:f5:0a: 26:43:f1:be:6e:3e:cc:3a:d4:28:29:bf:6e:2c:37:71:6d:f9: b9:b8:b9:ae:5c:24:f5:8c:2c:d3:48:08:b4:6f:51:85:1a:7b: 7e:87:ec:43:17:16:1e:33:3d:29:a7:79:a3:7d:fb:6a:b4:72: c3:5c:84:31:d1:42:5d:57:ef:7d:bb:02:7f:e6:9d:c9:b4:2f: 12:3a:01:6c:a3:4d:5b:58:fd:23:53:20:07:03:87:57:4d:14: 2d:34:4c:62:d7:30:55:13:34:56:ff:6b:45:a2:f4:4a:6b:5e: b6:6e:9f:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3SXTq+2J+lMzS1dCTvZe/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZDA5ODE3ZGZlYTRjNjZjOTQxOGY5ZjM5MDZmMWQwZTA3 Y2M5ZDQwHhcNMjYwMTAxMDIwMTAxWhcNMjYwMTAyMDIwMTAxWjAzMTEwLwYDVQQD EyhlYTJkYWMyODA5Mjg0ZDc0ZTQ3ZmMzMzg3YjAyNmM5OGQ4YTU3OTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZbcVhSx5/eHRlWOW8Vk6jAMAeFX xqVoRPtgDB+B7BHZ1YsEGpB4YmZkHY7re1cmLDe0qRVw2LwSDBaVzZ1pfm+1uDpF rQcD8v0iDPIgL8OlkwgDRSg9qhx2054Dm2vrVTDTY5XVNhd/dx0QcC8wP8c3sqI3 AP1FSQGcN7zi5Byxl8Yqotocd73MNwPGrAy7vIL+xSZA8sC9hR93opvIYg9AU+im yVWS/f5rs5WhnDwK0RWA25dSjUqvFSsJsj1eV/hDVfCOVuC8GOojK+BSrNXLRNnU EVPEg9T1j2YTBwxJSrsygMg1YpNQSSzEkWuQog0a4chIUzjhxViGgefBBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOotrCgJKE105H/DOHsCbJjYpXmEMB8GA1UdIwQY MBaAFI3QmBff6kxmyUGPnzkG8dDgfMnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamRDWUY5X3FUR2JKUVktZk9RYngwT0I4eWRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85MzM3ZWMtYjRkZS00NDlhLWI2MDct ZWE5Y2I1MjdhZTcxLzEvamRDWUY5X3FUR2JKUVktZk9RYngwT0I4eWRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85MzM3ZWMtYjRkZS00NDlhLWI2MDctZWE5Y2I1MjdhZTcx LzEvamRDWUY5X3FUR2JKUVktZk9RYngwT0I4eWRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3xKk7Zy q9DQ1XdYOck1m4b3JLs4l4S09xyPDiah2UwB0ZTrFnTd3BpH/CNGXG5aXskjTqFk EMc2Y+BtHdf51DjNUkjDL6jdgoETVB/uXCdyHW9C4HVcK2wcZ+D2Srkmtdh3HqeV 984UFYoqQz198qMqWWERSRO+T/LkpDfeYbyI7KlzS2D474Im038aH/UKJkPxvm4+ zDrUKCm/biw3cW35ubi5rlwk9Yws00gItG9RhRp7fofsQxcWHjM9Kad5o337arRy w1yEMdFCXVfvfbsCf+adybQvEjoBbKNNW1j9I1MgBwOHV00ULTRMYtcwVRM0Vv9r RaL0Smtetm6f6Q== -----END CERTIFICATE-----Generated at Thu Jan 1 12:32:51 2026 by rpki-client