This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft File: JwKaNvwMyi4KjQRfAi38gxpRcwg.mft (raw, json) Hash identifier: 9FKUB3cHvkFGO/TFkg86X6U5ICCy2gp1L0QGT6ADrKk= Subject key identifier: F9:1C:EE:39:91:3B:EC:AA:91:45:27:E9:2E:6D:B1:51:27:20:AD:94 Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08 Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308 Certificate serial: 019BFFC20AD299FD685601C6076C68309B72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft Manifest number: 1735 Signing time: Tue 27 Jan 2026 14:01:05 +0000 Manifest this update: Tue 27 Jan 2026 14:01:05 +0000 Manifest next update: Wed 28 Jan 2026 14:01:05 +0000 Files and hashes: 1: JwKaNvwMyi4KjQRfAi38gxpRcwg.crl (hash: w/JYd25tacArx8egzPrQov1jZS1hp9j60PNglN0eAzA=) 2: XzeIaRbu0fSJVgranQAMBnDnOYk.roa (hash: dqxt73O8AnvVTC/pUjNqknVJAUikBp+bFUF6OzADUcg=) 3: aZei7dPraMpoyMe9a8A85iz9U9k.roa (hash: KtkMVG0TF4vgfuc7Eg25bY2/F+3g8sFzTM72NzjE2qo=) 4: nYOMmq9r2jYKxOZ_vMZVsG2YoIY.roa (hash: 73YqhTgSFV2KW1q+D3iw3fdx9BOAWsHiW6Qx96ipVDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:c2:0a:d2:99:fd:68:56:01:c6:07:6c:68:30:9b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308 Validity Not Before: Jan 27 14:01:05 2026 GMT Not After : Jan 28 14:01:05 2026 GMT Subject: CN=f91cee39913becaa914527e92e6db1512720ad94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:50:ea:cd:e3:da:b1:4b:cb:cb:7b:27:7c:d4: f3:c6:84:33:2c:db:47:eb:b7:b3:5c:13:15:9c:01: 6f:00:83:63:67:de:00:fb:dc:0a:aa:2f:c6:a8:ff: 0d:2c:4b:b0:fa:4f:a1:a2:0e:27:46:71:26:0e:0a: 78:41:9c:37:8d:5b:22:ca:6e:31:df:d6:04:f6:b6: 2f:5f:69:12:ad:de:85:ae:60:eb:78:6b:c9:c8:49: ec:56:b0:ab:8d:c3:d6:54:86:6e:78:2d:93:e0:74: f1:03:5f:38:5c:97:cf:91:66:a2:8b:ec:6c:02:00: 7e:0a:ed:9f:df:c6:28:91:31:0c:1f:23:88:f7:15: 7e:b6:04:90:90:e0:f6:39:3c:ea:ce:eb:ce:10:d1: e0:66:81:2f:14:5b:04:de:01:39:83:6d:75:29:01: 67:de:5e:da:5e:95:d6:85:5f:b5:9b:5b:cb:b6:0c: f7:b9:74:61:db:37:e6:c2:b5:00:fb:39:3c:15:74: 32:dd:a6:49:90:04:a7:bd:20:c1:b7:5e:1f:02:fa: 5d:bb:44:45:d2:6c:48:7e:dc:3e:26:ac:33:82:58: b8:a4:3c:86:ad:63:37:1c:54:d4:1a:21:20:d8:05: 66:e7:b4:ce:7b:59:75:99:bc:40:84:9e:c4:ca:e6: 3b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1C:EE:39:91:3B:EC:AA:91:45:27:E9:2E:6D:B1:51:27:20:AD:94 X509v3 Authority Key Identifier: keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d0:59:0a:15:cf:0a:ed:8d:23:82:7b:a4:76:d3:99:f9:59: a4:a2:4f:38:8c:e7:96:11:73:62:c7:6b:99:95:4f:4b:9b:e6: a5:f1:e2:e4:eb:6d:d2:8c:4a:fc:4f:4a:56:86:0b:03:db:cb: 5a:8d:d8:2d:ed:2e:d2:26:c9:09:a0:19:8a:2f:b5:14:96:7d: 57:47:54:8d:16:3a:96:c3:8e:1f:e4:47:1f:ce:18:c3:c1:46: 3f:6b:5f:5e:57:4d:81:5f:24:7f:f0:68:32:d8:b9:c8:45:41: 01:21:8b:1f:25:62:7d:f0:c5:dd:c3:f9:92:5e:85:a6:f8:2f: e2:25:aa:8c:23:54:98:a3:42:5f:fa:79:40:ee:cf:e3:cb:a2: fa:fd:d8:5f:87:35:ba:df:0d:4e:ea:80:b1:12:2d:ae:23:5a: 3d:4f:5d:ef:43:12:63:1b:7d:54:37:d8:20:0f:26:a4:dd:3f: db:db:c5:9b:70:71:6c:04:5d:44:bd:b9:1e:97:f4:06:92:7b: 91:e0:82:5d:74:25:ea:e1:3f:0e:9e:e5:38:83:b6:39:e0:bc: 58:e8:46:51:94:9c:a5:e9:86:30:3a:81:95:ba:af:d6:d0:02: c9:ae:c8:2a:89:a5:e5:8c:a2:4c:08:ac:c8:ee:07:95:92:db: b6:43:8d:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/wgrSmf1oVgHGB2xoMJtyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MDI5YTM2ZmMwY2NhMmUwYThkMDQ1ZjAyMmRmYzgzMWE1 MTczMDgwHhcNMjYwMTI3MTQwMTA1WhcNMjYwMTI4MTQwMTA1WjAzMTEwLwYDVQQD EyhmOTFjZWUzOTkxM2JlY2FhOTE0NTI3ZTkyZTZkYjE1MTI3MjBhZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVDqzePasUvLy3snfNTzxoQzLNtH 67ezXBMVnAFvAINjZ94A+9wKqi/GqP8NLEuw+k+hog4nRnEmDgp4QZw3jVsiym4x 39YE9rYvX2kSrd6FrmDreGvJyEnsVrCrjcPWVIZueC2T4HTxA184XJfPkWaii+xs AgB+Cu2f38YokTEMHyOI9xV+tgSQkOD2OTzqzuvOENHgZoEvFFsE3gE5g211KQFn 3l7aXpXWhV+1m1vLtgz3uXRh2zfmwrUA+zk8FXQy3aZJkASnvSDBt14fAvpdu0RF 0mxIftw+Jqwzgli4pDyGrWM3HFTUGiEg2AVm57TOe1l1mbxAhJ7EyuY7WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkc7jmRO+yqkUUn6S5tsVEnIK2UMB8GA1UdIwQY MBaAFCcCmjb8DMouCo0EXwIt/IMaUXMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTct NTBkMGE1MzIzNjQxLzEvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTctNTBkMGE1MzIzNjQx LzEvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtBZChXP Cu2NI4J7pHbTmflZpKJPOIznlhFzYsdrmZVPS5vmpfHi5Ott0oxK/E9KVoYLA9vL Wo3YLe0u0ibJCaAZii+1FJZ9V0dUjRY6lsOOH+RHH84Yw8FGP2tfXldNgV8kf/Bo Mti5yEVBASGLHyViffDF3cP5kl6Fpvgv4iWqjCNUmKNCX/p5QO7P48ui+v3YX4c1 ut8NTuqAsRItriNaPU9d70MSYxt9VDfYIA8mpN0/29vFm3BxbARdRL25Hpf0BpJ7 keCCXXQl6uE/Dp7lOIO2OeC8WOhGUZScpemGMDqBlbqv1tACya7IKoml5YyiTAis yO4HlZLbtkONjw== -----END CERTIFICATE-----Generated at Tue Jan 27 16:42:40 2026 by rpki-client