This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft File: JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json) Hash identifier: 2ZF5UwXmODBSkw0wZjokaEHXNxaBj1YAk+bhjAtvu+k= Subject key identifier: 15:9C:4E:0F:6A:F1:6B:B5:41:B5:0C:28:92:F4:FC:3D:B7:E8:E6:9A Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7 Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7 Certificate serial: 019BF9893CA6D328A7BAE5DE16D78A191831 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft Manifest number: 0620 Signing time: Mon 26 Jan 2026 09:01:19 +0000 Manifest this update: Mon 26 Jan 2026 09:01:19 +0000 Manifest next update: Tue 27 Jan 2026 09:01:19 +0000 Files and hashes: 1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: UKOT2EzXeV/+a1WadIOZ6ISXRc3G3gzQCK3tbFyR7l4=) 2: qkkBRbbgk03fhxQbqtIxu6rxUSs.roa (hash: O2DGXBeKtsG4B29jCyT2BVcPBMzu25RKDg9by8oTkos=) 3: tHXazgBXsceuUAJhoJGckJWKiyM.roa (hash: 6b1NPFovjCL0B3snTScPHML/dlS9QVd+EflwMNuX4WE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:3c:a6:d3:28:a7:ba:e5:de:16:d7:8a:19:18:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7 Validity Not Before: Jan 26 09:01:19 2026 GMT Not After : Jan 27 09:01:19 2026 GMT Subject: CN=159c4e0f6af16bb541b50c2892f4fc3db7e8e69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4c:b6:7d:0f:e9:38:df:cc:b2:58:3f:8e:bb: ec:e7:1e:ea:ca:d7:b6:7c:82:d5:7b:09:40:4c:8b: 48:de:16:89:6d:f7:32:2c:86:55:a8:f2:1a:99:48: f8:45:23:b1:1b:d7:6a:db:c8:a0:9e:0f:f6:56:44: b2:6c:8f:bd:bb:34:1f:dc:7d:95:ff:8d:c4:81:f6: 19:a6:cf:ad:0c:8d:de:84:2e:57:60:00:87:f4:38: c6:4a:bd:a0:6e:0a:cf:c0:af:44:c9:6c:88:66:24: bb:b1:20:c1:86:43:cc:7c:42:80:7d:5e:7f:ba:d4: 16:ba:07:10:14:f3:b5:b7:95:f5:31:20:23:a2:02: e8:f5:d7:cf:51:f5:3b:76:7b:29:92:f4:a7:4f:50: 25:2d:b3:34:85:70:14:8e:3c:5c:89:ad:58:df:30: 79:71:91:17:f7:1c:05:2e:69:5e:7f:e9:03:f6:76: 54:25:cd:07:39:3d:00:81:c0:48:07:19:69:7f:1a: 56:fc:13:e6:34:df:a1:c6:51:83:b3:3e:14:55:04: 98:4e:ec:a0:b5:2b:c7:1e:c5:b4:54:97:75:6e:3d: ca:e5:ac:56:e7:ed:d9:cd:d2:1a:a5:db:11:a9:0e: 98:d8:ed:02:90:76:2d:e9:df:b7:f7:bd:5f:94:b9: 75:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9C:4E:0F:6A:F1:6B:B5:41:B5:0C:28:92:F4:FC:3D:B7:E8:E6:9A X509v3 Authority Key Identifier: keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:ff:35:d0:63:85:d3:67:00:61:09:cd:06:71:31:db:3a:c0: 46:fb:be:58:1a:64:3f:24:ab:c4:0f:ab:29:3c:17:31:3c:84: 50:3d:a2:05:30:6d:e9:f3:ea:f4:a4:d6:5f:79:11:06:1a:88: 01:80:74:24:59:1f:9a:4b:39:22:9e:9f:6f:35:cb:a2:f4:a3: 64:73:5f:af:ba:9d:e9:cb:5e:11:34:73:1f:86:2e:2b:18:72: d0:98:e2:aa:19:5f:d6:30:63:f6:aa:f5:87:38:12:60:61:0d: 1f:c1:a5:a0:85:46:d9:9f:b0:4c:06:19:15:93:c0:7f:75:2b: 01:07:7c:45:32:50:4c:a8:fd:f3:34:0b:e1:b3:55:d3:3f:df: 23:af:6c:11:da:d5:e6:14:9b:0b:65:64:66:c4:d3:2f:d7:45: 7b:02:f8:d7:f0:76:f9:a2:ed:33:d3:4e:7c:17:47:40:42:51: be:b3:87:a3:56:93:ed:17:d4:ae:2e:72:89:97:b3:43:b4:ea: 5f:29:74:30:dd:7d:a5:4d:e8:6d:49:f6:ee:ef:ba:ed:56:8a: e5:48:68:0f:50:a7:e6:84:bd:53:66:9b:25:e8:31:0b:d3:a7: 2c:f2:6f:fe:33:1c:f8:e3:4d:15:bd:36:f6:2a:6b:1e:89:1c: ca:8e:9c:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iTym0yinuuXeFteKGRgxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTdmNzNiZjAyZjc1NGIxZTYzMTdlZTlhNGYzZTg4NjM3 ZjFhYTcwHhcNMjYwMTI2MDkwMTE5WhcNMjYwMTI3MDkwMTE5WjAzMTEwLwYDVQQD EygxNTljNGUwZjZhZjE2YmI1NDFiNTBjMjg5MmY0ZmMzZGI3ZThlNjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Uy2fQ/pON/Mslg/jrvs5x7qyte2 fILVewlATItI3haJbfcyLIZVqPIamUj4RSOxG9dq28igng/2VkSybI+9uzQf3H2V /43EgfYZps+tDI3ehC5XYACH9DjGSr2gbgrPwK9EyWyIZiS7sSDBhkPMfEKAfV5/ utQWugcQFPO1t5X1MSAjogLo9dfPUfU7dnspkvSnT1AlLbM0hXAUjjxcia1Y3zB5 cZEX9xwFLmlef+kD9nZUJc0HOT0AgcBIBxlpfxpW/BPmNN+hxlGDsz4UVQSYTuyg tSvHHsW0VJd1bj3K5axW5+3ZzdIapdsRqQ6Y2O0CkHYt6d+3971flLl1fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWcTg9q8Wu1QbUMKJL0/D236OaaMB8GA1UdIwQY MBaAFCRX9zvwL3VLHmMX7ppPPohjfxqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wYmE1OWItZmY0Zi00MzhjLTg0MTct NWZhMzgwNzQ5NDk3LzEvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8wYmE1OWItZmY0Zi00MzhjLTg0MTctNWZhMzgwNzQ5NDk3 LzEvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkP810GOF 02cAYQnNBnEx2zrARvu+WBpkPySrxA+rKTwXMTyEUD2iBTBt6fPq9KTWX3kRBhqI AYB0JFkfmks5Ip6fbzXLovSjZHNfr7qd6cteETRzH4YuKxhy0Jjiqhlf1jBj9qr1 hzgSYGENH8GloIVG2Z+wTAYZFZPAf3UrAQd8RTJQTKj98zQL4bNV0z/fI69sEdrV 5hSbC2VkZsTTL9dFewL41/B2+aLtM9NOfBdHQEJRvrOHo1aT7RfUri5yiZezQ7Tq Xyl0MN19pU3obUn27u+67VaK5UhoD1Cn5oS9U2abJegxC9OnLPJv/jMc+ONNFb02 9iprHokcyo6cfQ== -----END CERTIFICATE-----Generated at Mon Jan 26 14:48:01 2026 by rpki-client