This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft File: jlKjlU4w5HU-LgCg74FpZtbWDbY.mft (raw, json) Hash identifier: Da6dNeZ5b+ttmkg3GnbjCztS09T7YV1J57m+xGWe5PA= Subject key identifier: 5E:57:DC:6B:48:68:A1:74:CA:88:86:7F:E5:F1:CE:17:D7:D4:F5:54 Authority key identifier: 8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6 Certificate issuer: /CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6 Certificate serial: 019BB2F0E5A8C7B5791369E2070B7D7A3D43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft Manifest number: 17C7 Signing time: Mon 12 Jan 2026 16:01:30 +0000 Manifest this update: Mon 12 Jan 2026 16:01:30 +0000 Manifest next update: Tue 13 Jan 2026 16:01:30 +0000 Files and hashes: 1: jlKjlU4w5HU-LgCg74FpZtbWDbY.crl (hash: cT8fq3L05By2sw0WVHCPtYlrp52xbqr0IUi2JueOUO0=) 2: p_L2QpRj3ttW5zYJBodD2QWnHQk.roa (hash: jJxb3YNiA4DSQOly6eBKE2Fc+ul2//HbGqi6YUq+XKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:f0:e5:a8:c7:b5:79:13:69:e2:07:0b:7d:7a:3d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6 Validity Not Before: Jan 12 16:01:30 2026 GMT Not After : Jan 13 16:01:30 2026 GMT Subject: CN=5e57dc6b4868a174ca88867fe5f1ce17d7d4f554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c4:ad:51:98:7c:f1:f1:5b:6a:f5:5b:63:80: 9a:da:a9:60:e9:32:23:8a:34:43:df:4d:93:b1:aa: 16:ba:17:72:e0:95:e3:0b:66:c5:ae:47:b7:66:06: 58:10:17:c2:7c:63:64:be:a6:e5:88:e3:1f:9d:19: ce:4e:5c:28:d8:44:24:cb:d1:43:a9:47:80:bf:8f: c2:66:d4:12:95:dd:b3:e2:22:a4:bf:e6:f6:f1:79: ee:0d:38:f2:7a:ae:ee:93:9d:ef:5c:8b:e6:90:e4: 1c:c2:a6:77:ba:23:e4:42:f7:80:93:4b:79:50:a1: f2:4a:a2:83:15:a2:fd:54:36:1f:aa:05:3c:b7:33: 64:c0:7a:5c:dd:42:f2:84:67:bd:ec:91:17:b2:6b: a5:c4:a1:88:84:0c:23:64:9f:cc:4b:db:2f:e7:e1: 15:08:57:3d:d3:6e:51:d2:25:59:f4:3e:ea:80:ae: b9:9e:b5:53:ce:31:12:e6:0f:f1:e7:1d:76:ec:94: 4a:8a:32:45:b3:ed:18:4a:73:8b:30:fa:94:a5:33: 35:cd:28:fb:6b:f8:f2:23:8d:5a:62:8c:87:c3:2f: f1:28:1a:f0:7f:91:8a:34:0d:b1:97:df:70:89:24: a0:74:c8:da:db:6e:71:ab:4f:1c:d0:81:d2:4b:2b: 1e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:57:DC:6B:48:68:A1:74:CA:88:86:7F:E5:F1:CE:17:D7:D4:F5:54 X509v3 Authority Key Identifier: keyid:8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f1:6b:4b:3b:a1:d6:ee:ea:aa:0f:33:58:38:0a:48:c7:84: 7e:ff:32:01:c3:2d:96:d5:95:94:43:32:0b:07:93:6f:84:57: 53:40:38:fe:7e:03:64:5c:cb:5f:57:78:91:58:ce:54:10:bc: 44:a7:7d:39:06:b9:f2:5e:38:c7:25:ba:d6:69:99:43:a5:61: e0:d9:22:8a:40:fd:a0:a4:2f:40:ae:69:56:e3:f9:f4:82:51: 21:7b:d8:79:ec:a4:ef:18:ba:24:d4:89:d8:c8:c2:46:4e:76: 92:0c:6d:12:88:52:50:f5:05:7a:8e:de:5e:92:48:ef:ed:6e: 8d:92:a3:32:49:55:7b:f5:e8:35:20:da:f4:2e:b2:e8:b2:8c: 01:c6:2d:f0:36:2d:4a:8f:e0:47:e0:46:c5:af:f2:92:ba:61: 01:c2:eb:6c:5b:31:10:86:3f:57:5c:e3:bd:d7:19:27:76:b5: b5:15:85:11:0a:c2:9c:93:2f:c4:e7:80:ce:7b:d2:8c:9d:47: d6:1b:cc:a0:a2:38:18:c4:64:a4:f3:e2:49:32:29:84:b9:fe: 23:d3:6e:0b:40:e9:e6:22:db:3a:ae:c4:20:dd:f8:b4:de:84: 89:ec:a8:db:db:23:f3:d5:8a:87:12:2a:35:68:ff:e7:c2:09: 6a:10:95:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuy8OWox7V5E2niBwt9ej1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNTJhMzk1NGUzMGU0NzUzZTJlMDBhMGVmODE2OTY2ZDZk NjBkYjYwHhcNMjYwMTEyMTYwMTMwWhcNMjYwMTEzMTYwMTMwWjAzMTEwLwYDVQQD Eyg1ZTU3ZGM2YjQ4NjhhMTc0Y2E4ODg2N2ZlNWYxY2UxN2Q3ZDRmNTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08StUZh88fFbavVbY4Ca2qlg6TIj ijRD302TsaoWuhdy4JXjC2bFrke3ZgZYEBfCfGNkvqbliOMfnRnOTlwo2EQky9FD qUeAv4/CZtQSld2z4iKkv+b28XnuDTjyeq7uk53vXIvmkOQcwqZ3uiPkQveAk0t5 UKHySqKDFaL9VDYfqgU8tzNkwHpc3ULyhGe97JEXsmulxKGIhAwjZJ/MS9sv5+EV CFc9025R0iVZ9D7qgK65nrVTzjES5g/x5x127JRKijJFs+0YSnOLMPqUpTM1zSj7 a/jyI41aYoyHwy/xKBrwf5GKNA2xl99wiSSgdMja225xq08c0IHSSysewQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5X3GtIaKF0yoiGf+XxzhfX1PVUMB8GA1UdIwQY MBaAFI5So5VOMOR1Pi4AoO+BaWbW1g22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxLamxVNHc1SFUtTGdDZzc0RnBadGJXRGJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMTc3YTItMjE5Yy00YjYwLWI5MDEt Yjg1NmRiMzNjNmM2LzEvamxLamxVNHc1SFUtTGdDZzc0RnBadGJXRGJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8xMTc3YTItMjE5Yy00YjYwLWI5MDEtYjg1NmRiMzNjNmM2 LzEvamxLamxVNHc1SFUtTGdDZzc0RnBadGJXRGJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPFrSzuh 1u7qqg8zWDgKSMeEfv8yAcMtltWVlEMyCweTb4RXU0A4/n4DZFzLX1d4kVjOVBC8 RKd9OQa58l44xyW61mmZQ6Vh4NkiikD9oKQvQK5pVuP59IJRIXvYeeyk7xi6JNSJ 2MjCRk52kgxtEohSUPUFeo7eXpJI7+1ujZKjMklVe/XoNSDa9C6y6LKMAcYt8DYt So/gR+BGxa/ykrphAcLrbFsxEIY/V1zjvdcZJ3a1tRWFEQrCnJMvxOeAznvSjJ1H 1hvMoKI4GMRkpPPiSTIphLn+I9NuC0Dp5iLbOq7EIN34tN6Eieyo29sj89WKhxIq NWj/58IJahCVIQ== -----END CERTIFICATE-----Generated at Mon Jan 12 22:13:15 2026 by rpki-client