This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft File: n-JpKxvOewMnwf51yJKZ4vhiF_w.mft (raw, json) Hash identifier: A6vaDohP9+DhDI2M7kYBGeZCx9RQu0rvHkzKURcUW20= Subject key identifier: 8D:31:07:A7:BF:69:A9:95:E3:F3:B6:D4:88:1C:FC:5D:48:BC:EC:03 Authority key identifier: 9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC Certificate issuer: /CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc Certificate serial: 019BB2831E3FB775E2BE8E4B5C1ABA064BED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft Manifest number: 0515 Signing time: Mon 12 Jan 2026 14:01:35 +0000 Manifest this update: Mon 12 Jan 2026 14:01:35 +0000 Manifest next update: Tue 13 Jan 2026 14:01:35 +0000 Files and hashes: 1: n-JpKxvOewMnwf51yJKZ4vhiF_w.crl (hash: oepwj65xWlUfv7/h/fgMl0C9yEx9p4P0VxWp6Zy9ja0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 14:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:83:1e:3f:b7:75:e2:be:8e:4b:5c:1a:ba:06:4b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc Validity Not Before: Jan 12 14:01:35 2026 GMT Not After : Jan 13 14:01:35 2026 GMT Subject: CN=8d3107a7bf69a995e3f3b6d4881cfc5d48bcec03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:83:58:01:34:c9:e1:09:3e:bf:04:8b:56:fe: db:20:12:67:65:f3:e1:4b:15:76:06:01:fa:f7:fa: e9:ca:b9:98:77:66:be:44:ee:e8:bb:35:79:08:a8: db:fc:29:c1:06:d2:f9:5f:b2:8d:b1:69:7a:7e:ed: d0:c5:81:e1:0b:16:47:bb:91:71:32:cc:6c:18:eb: d3:69:61:44:0e:40:85:03:9d:67:a5:a2:8d:a4:00: 12:b1:78:8e:25:e5:22:05:5f:b7:47:30:c4:8b:2a: f2:09:90:84:c8:ed:05:b3:39:8b:11:0d:88:85:d2: 67:33:8f:61:49:93:ff:0e:6a:31:13:da:a5:4d:ba: 75:70:41:d4:cb:75:21:2a:f2:fa:d6:fd:a6:f8:38: 3f:89:3c:d9:45:44:5f:58:30:d1:17:a2:3e:bc:c5: 33:84:8a:79:d1:45:a6:4a:cc:f9:93:7d:cf:1b:94: 6d:0b:26:b9:66:0c:e0:a4:fd:2b:3d:33:79:96:d6: 6d:a8:07:0f:ac:45:36:f8:ac:b1:9a:90:93:1d:04: 40:87:11:18:92:9c:0b:23:81:1b:cc:d9:e5:a2:cc: e1:b1:82:3d:ce:07:be:4c:15:8d:bd:d0:bb:bf:4b: 10:0d:07:cf:87:dc:ce:c2:41:91:91:6a:65:b4:be: 18:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:31:07:A7:BF:69:A9:95:E3:F3:B6:D4:88:1C:FC:5D:48:BC:EC:03 X509v3 Authority Key Identifier: keyid:9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ce:20:ef:ba:07:02:01:3e:f0:6e:fb:91:d1:7a:f7:65:93: 00:91:3e:94:68:8b:f5:15:ac:45:04:00:02:c1:cb:62:88:79: ec:23:ff:e5:b9:b2:c9:2e:e5:6e:33:b4:cb:8f:4b:44:be:87: b4:2a:9e:fb:32:a8:d5:cf:d9:90:ae:77:c3:fb:06:92:b8:db: 07:4a:be:b2:29:9c:1e:6f:b7:8c:c2:0d:99:0c:3f:d8:5f:f6: 8f:58:8a:33:3a:a6:cb:61:6c:41:50:73:0c:65:cb:83:56:63: 82:cb:01:91:3d:74:3a:e9:1f:fa:d0:62:cc:ed:4f:a2:ca:1e: c9:ee:74:c1:67:7c:4a:49:40:41:75:b1:97:cd:c7:92:c6:ed: fc:1d:26:31:85:c4:51:7b:99:18:ec:af:8b:62:19:30:52:91: fc:24:f9:fb:b2:32:09:88:8f:66:a7:63:ab:2c:1e:ac:58:dc: e8:e4:36:aa:e5:72:51:4e:1c:2a:e7:f8:1f:44:ed:61:c4:0e: ed:f3:c0:6a:8d:a9:c3:48:3e:08:ad:02:57:35:58:05:71:51: 98:d1:2a:48:8e:17:c7:0a:e7:19:58:73:4b:24:6c:02:83:bc: ea:0f:f8:8b:0a:81:cc:d1:07:17:97:c2:ac:1f:14:e7:b9:72: c1:c7:bd:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuygx4/t3Xivo5LXBq6BkvtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZTI2OTJiMWJjZTdiMDMyN2MxZmU3NWM4OTI5OWUyZjg2 MjE3ZmMwHhcNMjYwMTEyMTQwMTM1WhcNMjYwMTEzMTQwMTM1WjAzMTEwLwYDVQQD Eyg4ZDMxMDdhN2JmNjlhOTk1ZTNmM2I2ZDQ4ODFjZmM1ZDQ4YmNlYzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooNYATTJ4Qk+vwSLVv7bIBJnZfPh SxV2BgH69/rpyrmYd2a+RO7ouzV5CKjb/CnBBtL5X7KNsWl6fu3QxYHhCxZHu5Fx MsxsGOvTaWFEDkCFA51npaKNpAASsXiOJeUiBV+3RzDEiyryCZCEyO0FszmLEQ2I hdJnM49hSZP/DmoxE9qlTbp1cEHUy3UhKvL61v2m+Dg/iTzZRURfWDDRF6I+vMUz hIp50UWmSsz5k33PG5RtCya5ZgzgpP0rPTN5ltZtqAcPrEU2+KyxmpCTHQRAhxEY kpwLI4EbzNnloszhsYI9zge+TBWNvdC7v0sQDQfPh9zOwkGRkWpltL4YFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0xB6e/aamV4/O21Igc/F1IvOwDMB8GA1UdIwQY MBaAFJ/iaSsbznsDJ8H+dciSmeL4Yhf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbi1KcEt4dk9ld01ud2Y1MXlKS1o0dmhpRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9hM2RlNjItMTFlZC00ZGE2LTlmMzIt NzBmYzFlYWI1NGMxLzEvbi1KcEt4dk9ld01ud2Y1MXlKS1o0dmhpRl93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9hM2RlNjItMTFlZC00ZGE2LTlmMzItNzBmYzFlYWI1NGMx LzEvbi1KcEt4dk9ld01ud2Y1MXlKS1o0dmhpRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe84g77oH AgE+8G77kdF692WTAJE+lGiL9RWsRQQAAsHLYoh57CP/5bmyyS7lbjO0y49LRL6H tCqe+zKo1c/ZkK53w/sGkrjbB0q+simcHm+3jMINmQw/2F/2j1iKMzqmy2FsQVBz DGXLg1ZjgssBkT10Oukf+tBizO1Posoeye50wWd8SklAQXWxl83Hksbt/B0mMYXE UXuZGOyvi2IZMFKR/CT5+7IyCYiPZqdjqywerFjc6OQ2quVyUU4cKuf4H0TtYcQO 7fPAao2pw0g+CK0CVzVYBXFRmNEqSI4XxwrnGVhzSyRsAoO86g/4iwqBzNEHF5fC rB8U57lywce9Vg== -----END CERTIFICATE-----Generated at Mon Jan 12 23:36:27 2026 by rpki-client