This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft File: J4YXdA7NlbcE2pel-eU8AxFEQms.mft (raw, json) Hash identifier: YQuwflpPJ5DHgcjU/xCZYbFFhrXsAmoeBO8Q/tbwflQ= Subject key identifier: 3E:67:9D:38:BE:09:BC:07:7E:3D:45:17:C9:70:43:1C:87:49:E6:09 Authority key identifier: 27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B Certificate issuer: /CN=278617740ecd95b704da97a5f9e53c031144426b Certificate serial: 019BB3CC365C2138DE2EE661D036F1D2F168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft Manifest number: 136F Signing time: Mon 12 Jan 2026 20:01:03 +0000 Manifest this update: Mon 12 Jan 2026 20:01:03 +0000 Manifest next update: Tue 13 Jan 2026 20:01:03 +0000 Files and hashes: 1: J4YXdA7NlbcE2pel-eU8AxFEQms.crl (hash: vOJryGVtT+FatEgTEiDjONSTxG2q8B4PaBaRvaZn+IE=) 2: hv5F2fKm7cZ-fqlTGhS4HLwa_Mo.roa (hash: 3e8QQ5wpWIE1xn2kF+A/CiSMbxQICMGVp/zM+nv9PN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 20:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:cc:36:5c:21:38:de:2e:e6:61:d0:36:f1:d2:f1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=278617740ecd95b704da97a5f9e53c031144426b Validity Not Before: Jan 12 20:01:03 2026 GMT Not After : Jan 13 20:01:03 2026 GMT Subject: CN=3e679d38be09bc077e3d4517c970431c8749e609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:05:17:a8:e9:82:94:78:03:30:7a:be:da:f2: 62:e1:30:a1:02:69:5e:3c:9f:6d:f1:4a:ef:4a:fa: 0a:7b:58:05:a2:3d:0b:1f:37:ab:c0:04:e5:5a:56: 95:c4:e6:30:f5:eb:07:42:42:f3:e2:2f:1e:41:2a: 77:94:32:78:27:a2:b4:db:ac:b4:20:88:02:f1:f1: 6d:73:c6:7a:4d:49:17:8e:14:ee:6e:3a:74:6d:56: af:b0:49:b8:52:04:2a:d2:c7:bf:a3:4e:bc:14:1a: d9:ed:90:d8:e3:2b:7d:76:73:c1:9f:9c:b5:7a:d2: 1c:ea:49:7c:84:f1:c8:5c:54:87:a1:5e:b8:36:d4: 2b:7b:5d:f6:0d:ff:ce:b8:92:de:bf:1f:7d:d1:b4: 5d:31:93:94:e2:82:85:8b:59:1b:3c:f6:e2:9f:33: 09:64:cb:da:03:94:dc:8a:49:30:1c:2d:4c:cf:fa: c5:77:85:84:b5:b5:60:f3:1f:7e:f6:ba:1b:9d:bd: b8:62:43:d6:f6:0f:25:d5:af:21:f6:11:b4:60:c6: 70:3c:bf:6b:01:31:e6:8e:49:91:b9:e9:b4:82:76: fc:70:9c:d0:36:93:66:f1:16:a9:66:0c:c9:bf:ff: 1a:72:dc:d2:4d:f2:41:bc:a4:e8:46:62:2f:c7:68: 13:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:67:9D:38:BE:09:BC:07:7E:3D:45:17:C9:70:43:1C:87:49:E6:09 X509v3 Authority Key Identifier: keyid:27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d1:2e:86:cb:77:c1:5f:7f:8b:53:d5:98:73:ab:84:b0:e1: fc:fb:04:41:5e:bf:49:2a:ac:52:5b:9f:81:aa:0a:7c:94:97: 6b:53:68:9c:6a:0c:d2:47:43:e7:09:a4:79:ac:9f:65:7e:1e: 44:5f:83:3c:3b:9d:42:4b:d8:44:7e:b7:2e:8f:5a:ba:4a:ff: 02:cd:40:b0:e7:11:92:1b:db:4c:7c:04:6f:d9:7e:e3:87:86: 34:ec:e2:c5:45:f1:50:68:3d:89:3e:39:58:f1:b7:3c:df:a1: 1a:0f:10:34:36:38:fa:0c:8a:14:6c:f6:cb:60:6c:be:d6:eb: ef:02:2f:19:1c:e6:99:f3:35:a4:ae:f3:56:02:9a:af:96:58: f2:53:8d:01:d1:55:3c:db:03:2e:fa:62:09:0f:4d:06:3e:7c: 53:f5:67:ac:a4:90:71:8c:f2:a9:dd:ab:e5:e0:10:91:66:76: 73:14:13:94:47:8e:04:ac:38:55:3c:f7:ca:24:66:85:2d:4c: 80:b6:5c:a2:1d:ed:b7:65:f5:16:18:eb:e7:8e:92:85:99:c4: 7b:fe:4d:a5:e6:e2:22:db:08:b3:04:17:62:e6:4d:bc:06:83: 8a:9f:6d:99:d9:f3:24:5e:0c:0a:e4:ea:9f:f3:bc:84:c0:f4: 66:ac:db:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzzDZcITjeLuZh0Dbx0vFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ODYxNzc0MGVjZDk1YjcwNGRhOTdhNWY5ZTUzYzAzMTE0 NDQyNmIwHhcNMjYwMTEyMjAwMTAzWhcNMjYwMTEzMjAwMTAzWjAzMTEwLwYDVQQD EygzZTY3OWQzOGJlMDliYzA3N2UzZDQ1MTdjOTcwNDMxYzg3NDllNjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QUXqOmClHgDMHq+2vJi4TChAmle PJ9t8UrvSvoKe1gFoj0LHzerwATlWlaVxOYw9esHQkLz4i8eQSp3lDJ4J6K026y0 IIgC8fFtc8Z6TUkXjhTubjp0bVavsEm4UgQq0se/o068FBrZ7ZDY4yt9dnPBn5y1 etIc6kl8hPHIXFSHoV64NtQre132Df/OuJLevx990bRdMZOU4oKFi1kbPPbinzMJ ZMvaA5TcikkwHC1Mz/rFd4WEtbVg8x9+9robnb24YkPW9g8l1a8h9hG0YMZwPL9r ATHmjkmRuem0gnb8cJzQNpNm8RapZgzJv/8actzSTfJBvKToRmIvx2gTjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5nnTi+CbwHfj1FF8lwQxyHSeYJMB8GA1UdIwQY MBaAFCeGF3QOzZW3BNqXpfnlPAMRREJrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjRZWGRBN05sYmNFMnBlbC1lVThBeEZFUW1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNzhhYjQtMzQ5MC00MDBiLTkwMTkt OWVkZDAxZDA3MjNjLzEvSjRZWGRBN05sYmNFMnBlbC1lVThBeEZFUW1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNzhhYjQtMzQ5MC00MDBiLTkwMTktOWVkZDAxZDA3MjNj LzEvSjRZWGRBN05sYmNFMnBlbC1lVThBeEZFUW1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9Euhst3 wV9/i1PVmHOrhLDh/PsEQV6/SSqsUlufgaoKfJSXa1NonGoM0kdD5wmkeayfZX4e RF+DPDudQkvYRH63Lo9aukr/As1AsOcRkhvbTHwEb9l+44eGNOzixUXxUGg9iT45 WPG3PN+hGg8QNDY4+gyKFGz2y2Bsvtbr7wIvGRzmmfM1pK7zVgKar5ZY8lONAdFV PNsDLvpiCQ9NBj58U/VnrKSQcYzyqd2r5eAQkWZ2cxQTlEeOBKw4VTz3yiRmhS1M gLZcoh3tt2X1Fhjr546ShZnEe/5NpebiItsIswQXYuZNvAaDip9tmdnzJF4MCuTq n/O8hMD0Zqzb5g== -----END CERTIFICATE-----Generated at Tue Jan 13 05:49:43 2026 by rpki-client