This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft File: jTrSodmrXJtPu05eAlIe4FK4nV8.mft (raw, json) Hash identifier: ihTFyGlDbPZ3DUpKzCVXrLbOd+bg5US0Hqai5kGfum4= Subject key identifier: 4B:9D:BE:E7:02:05:B0:A9:72:7D:51:7E:CC:3C:04:00:3C:93:45:F7 Authority key identifier: 8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F Certificate issuer: /CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f Certificate serial: 019B815ED3386B0FA995251E6B61A0160F29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft Manifest number: 17AC Signing time: Sat 03 Jan 2026 01:00:33 +0000 Manifest this update: Sat 03 Jan 2026 01:00:33 +0000 Manifest next update: Sun 04 Jan 2026 01:00:33 +0000 Files and hashes: 1: jTrSodmrXJtPu05eAlIe4FK4nV8.crl (hash: dXkGpI0MNm+o99OtiTcZDRHLLBUQH7cuiy+9oaKJLM4=) 2: jj1QCdoz6DIRBrESW5B-wlAqOc8.roa (hash: ZaZ7JhsHU0NSgwU2H6qsoPOdqLQB7G06Y4u8Nuaw8mI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:5e:d3:38:6b:0f:a9:95:25:1e:6b:61:a0:16:0f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f Validity Not Before: Jan 3 01:00:33 2026 GMT Not After : Jan 4 01:00:33 2026 GMT Subject: CN=4b9dbee70205b0a9727d517ecc3c04003c9345f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ff:8a:10:3d:77:e9:cf:1e:08:93:fb:f9:b3: 4a:cc:af:ff:af:b8:05:b6:50:cb:24:87:38:1a:61: 3d:54:4a:c9:31:f1:6f:7f:72:b1:3b:d8:37:c3:83: 84:9b:3d:03:07:62:c4:5e:30:58:d8:87:f3:67:39: 91:86:9e:e7:42:f6:32:25:24:b9:19:7c:70:08:d3: fb:5f:cf:ca:ee:7a:69:a6:ce:6e:a6:d5:7e:9a:6e: ee:b3:15:7d:dd:e0:4d:2d:d4:92:d4:b3:99:95:56: 41:dc:8e:a3:08:86:88:6b:69:32:93:e9:65:69:0f: d1:34:89:34:93:99:ab:59:ed:65:ef:0c:66:fc:40: 3a:1b:87:f6:ba:3f:8f:04:cd:c4:0b:b3:6d:5f:17: 1f:8b:7d:1b:17:0c:63:5d:90:81:96:4d:6f:0a:1f: 33:f6:4a:0d:67:20:db:0c:5d:73:40:c9:5a:70:e1: 1b:91:3a:e0:55:c3:23:1d:98:17:3b:9f:45:9a:f6: 15:c3:b9:72:fc:0a:a7:53:ee:54:d3:6e:f7:b2:42: 40:56:94:23:67:41:0b:df:31:be:55:f2:71:c8:51: b6:62:b4:1f:b9:f4:00:aa:71:24:86:02:55:49:c7: 5c:4a:ad:8b:fa:e2:2b:37:05:a1:fa:3a:74:2d:1a: 57:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9D:BE:E7:02:05:B0:A9:72:7D:51:7E:CC:3C:04:00:3C:93:45:F7 X509v3 Authority Key Identifier: keyid:8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:de:d4:ff:3b:98:de:fa:cb:f2:ed:44:ac:c0:3c:5a:6f:5b: 49:65:6c:eb:0a:4c:39:6d:22:49:d6:3f:75:a7:c6:92:ac:4a: 56:09:e5:20:9d:e8:e0:8c:06:15:1f:4c:c9:31:64:8d:14:d8: 65:2c:98:45:11:6c:07:77:94:ab:b0:cb:9e:77:be:4d:4f:bd: f2:5b:dd:2a:3a:b2:4e:95:72:45:a7:1a:41:f2:34:58:8d:d2: e4:76:89:20:19:80:30:01:53:68:f9:cc:14:4e:60:a2:1a:0b: e6:32:e6:2c:8e:22:d9:37:8d:39:68:23:3a:ac:00:60:32:d6: 61:e2:a0:67:c1:24:c2:18:07:7c:e6:23:8e:5b:12:69:d2:03: d5:56:66:b0:39:10:b3:64:da:6a:f1:7d:bd:62:a0:9a:e6:f3: 8f:51:d6:d4:cf:78:cf:4e:af:2f:26:3e:51:4d:96:a5:ad:66: 71:40:2d:12:76:14:df:51:c4:c9:b2:dd:4e:f2:b1:79:a6:f7: 7c:8a:87:38:40:95:bc:ca:8f:4f:4f:18:47:e3:9f:b4:95:4b: 5a:ec:64:ae:63:e7:58:86:4a:59:52:64:11:f0:67:21:06:4a: 3a:43:3a:da:57:1d:57:48:bf:1c:cc:92:52:cf:fb:cf:f5:ce: a7:83:08:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuBXtM4aw+plSUea2GgFg8pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkM2FkMmExZDlhYjVjOWI0ZmJiNGU1ZTAyNTIxZWUwNTJi ODlkNWYwHhcNMjYwMTAzMDEwMDMzWhcNMjYwMTA0MDEwMDMzWjAzMTEwLwYDVQQD Eyg0YjlkYmVlNzAyMDViMGE5NzI3ZDUxN2VjYzNjMDQwMDNjOTM0NWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv+KED136c8eCJP7+bNKzK//r7gF tlDLJIc4GmE9VErJMfFvf3KxO9g3w4OEmz0DB2LEXjBY2IfzZzmRhp7nQvYyJSS5 GXxwCNP7X8/K7nppps5uptV+mm7usxV93eBNLdSS1LOZlVZB3I6jCIaIa2kyk+ll aQ/RNIk0k5mrWe1l7wxm/EA6G4f2uj+PBM3EC7NtXxcfi30bFwxjXZCBlk1vCh8z 9koNZyDbDF1zQMlacOEbkTrgVcMjHZgXO59FmvYVw7ly/AqnU+5U0273skJAVpQj Z0EL3zG+VfJxyFG2YrQfufQAqnEkhgJVScdcSq2L+uIrNwWh+jp0LRpX1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEudvucCBbCpcn1Rfsw8BAA8k0X3MB8GA1UdIwQY MBaAFI060qHZq1ybT7tOXgJSHuBSuJ1fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMmJmMzUtNTRhMy00Zjc4LWI3MjAt NGE5ZTI5NjE1YzA1LzEvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hMmJmMzUtNTRhMy00Zjc4LWI3MjAtNGE5ZTI5NjE1YzA1 LzEvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM97U/zuY 3vrL8u1ErMA8Wm9bSWVs6wpMOW0iSdY/dafGkqxKVgnlIJ3o4IwGFR9MyTFkjRTY ZSyYRRFsB3eUq7DLnne+TU+98lvdKjqyTpVyRacaQfI0WI3S5HaJIBmAMAFTaPnM FE5gohoL5jLmLI4i2TeNOWgjOqwAYDLWYeKgZ8EkwhgHfOYjjlsSadID1VZmsDkQ s2TaavF9vWKgmubzj1HW1M94z06vLyY+UU2Wpa1mcUAtEnYU31HEybLdTvKxeab3 fIqHOECVvMqPT08YR+OftJVLWuxkrmPnWIZKWVJkEfBnIQZKOkM62lcdV0i/HMyS Us/7z/XOp4MIow== -----END CERTIFICATE-----Generated at Sat Jan 3 06:30:49 2026 by rpki-client