This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft File: jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json) Hash identifier: kJCG90yQVCEDHOzi3FW9XEKWKl2CdpdeEBt5dyE34h4= Subject key identifier: EE:B1:E1:10:DE:38:34:F9:85:3B:C5:CF:80:FD:6A:33:E8:58:50:85 Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B Certificate issuer: /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b Certificate serial: 019BD01F4F9C8F21A43DA79542DFC34AA7B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft Manifest number: 17D5 Signing time: Sun 18 Jan 2026 08:01:11 +0000 Manifest this update: Sun 18 Jan 2026 08:01:11 +0000 Manifest next update: Mon 19 Jan 2026 08:01:11 +0000 Files and hashes: 1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: uxHSjugN1bBhFF6TyTv564djp76AEi/SX2/9xZpHOW8=) 2: twrQ972oI9ZzJB5lNnpdx6DecVA.roa (hash: R4HcQNJ+RCE6vVMBKIPOjPzd/TdNdxhTx9KPeq1FVRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:1f:4f:9c:8f:21:a4:3d:a7:95:42:df:c3:4a:a7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b Validity Not Before: Jan 18 08:01:11 2026 GMT Not After : Jan 19 08:01:11 2026 GMT Subject: CN=eeb1e110de3834f9853bc5cf80fd6a33e8585085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:66:e2:7a:00:c3:01:3f:65:f2:71:4c:ce:3a: 82:c2:dc:86:6d:94:ca:cb:6f:00:0b:77:f3:da:e9: 3d:ad:28:2c:1c:d0:1c:f4:f5:fd:a6:94:d1:88:a3: f8:73:31:51:28:0b:16:f9:d8:e1:c9:a6:18:9f:71: cb:e6:c3:88:60:d3:07:d8:a0:47:e6:b0:31:4e:36: 22:7c:7e:0a:06:f7:8b:01:51:e7:e4:0c:d9:0c:f9: 93:db:00:57:2a:fc:3e:fb:db:02:d0:f4:87:7d:71: 7d:00:47:02:90:11:95:39:c2:72:04:ef:f3:69:ce: 10:91:0f:87:3e:e2:e2:26:d0:cd:bc:09:2f:f4:44: 96:c6:79:b2:e6:41:d5:76:a4:27:7c:fa:0f:68:59: e2:8a:4e:c0:86:11:05:6a:f6:83:35:27:e3:ad:25: 5e:ab:18:0d:3b:55:92:ef:da:3b:0c:b2:1c:cf:6a: c4:9c:29:d3:51:ce:42:6e:6d:bf:0b:4b:9f:b6:da: 19:7e:c9:e6:0b:7e:a5:64:ec:14:03:22:d4:32:2f: 11:63:4b:4e:04:e7:03:a2:8d:48:a0:3a:fc:e6:8a: e5:53:c6:a9:84:bf:ba:ab:43:23:fa:f5:c8:19:c2: cb:9a:78:af:e6:32:d4:a5:bb:3e:81:7b:1d:88:c1: 18:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B1:E1:10:DE:38:34:F9:85:3B:C5:CF:80:FD:6A:33:E8:58:50:85 X509v3 Authority Key Identifier: keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:01:91:a5:e2:3a:84:99:97:ba:da:57:1d:67:d9:06:cc:34: 18:ff:43:b4:61:a5:7a:f8:65:11:6d:c7:9a:90:4d:aa:e5:5f: 6c:2a:9a:80:f2:f9:be:5e:3d:18:f1:5a:ee:fb:64:79:41:f2: 99:ea:d6:3e:9b:2f:55:05:b8:63:45:f5:70:8d:a1:ce:5a:2b: 09:51:5c:3d:6c:4d:cf:4c:2a:ec:9e:d8:0a:43:50:e5:aa:3a: f8:7f:87:f2:54:88:48:8e:fe:1c:a0:c8:ed:4d:c4:21:80:0a: 1a:fc:06:71:ea:d4:d4:c1:b6:c1:51:6b:80:a5:bc:a5:3c:f3: 6d:7c:d0:36:14:b2:7d:65:22:0d:7d:a3:f3:1a:d8:79:e8:aa: 30:94:50:96:f4:d3:c4:e8:38:70:6b:68:29:6f:02:db:72:0b: ab:2d:c2:b1:f6:9d:44:e3:44:22:60:f0:8f:9f:da:22:03:e6: 60:ea:7e:86:4b:73:87:b2:81:52:aa:02:5f:03:c9:70:c9:f6: 15:9c:56:d5:f6:6a:2f:65:b8:f1:ef:a4:23:8c:90:20:cb:b4: b2:14:f5:c7:43:d0:af:07:3e:c9:b4:8c:94:13:b3:d4:7d:0f: 24:2f:99:13:f8:b0:8c:93:8d:e2:46:25:88:25:79:9d:e6:0b: ae:7f:85:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvQH0+cjyGkPaeVQt/DSqe1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlOWIxZmUzMTJmMDA5ZjIwOGVhOGEyYjczMjBjZWE3NjVk ZDUxOGIwHhcNMjYwMTE4MDgwMTExWhcNMjYwMTE5MDgwMTExWjAzMTEwLwYDVQQD EyhlZWIxZTExMGRlMzgzNGY5ODUzYmM1Y2Y4MGZkNmEzM2U4NTg1MDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmbiegDDAT9l8nFMzjqCwtyGbZTK y28AC3fz2uk9rSgsHNAc9PX9ppTRiKP4czFRKAsW+djhyaYYn3HL5sOIYNMH2KBH 5rAxTjYifH4KBveLAVHn5AzZDPmT2wBXKvw++9sC0PSHfXF9AEcCkBGVOcJyBO/z ac4QkQ+HPuLiJtDNvAkv9ESWxnmy5kHVdqQnfPoPaFniik7AhhEFavaDNSfjrSVe qxgNO1WS79o7DLIcz2rEnCnTUc5Cbm2/C0ufttoZfsnmC36lZOwUAyLUMi8RY0tO BOcDoo1IoDr85orlU8aphL+6q0Mj+vXIGcLLmniv5jLUpbs+gXsdiMEYtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6x4RDeODT5hTvFz4D9ajPoWFCFMB8GA1UdIwQY MBaAFI6bH+MS8AnyCOqKK3Mgzqdl3VGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanBzZjR4THdDZklJNm9vcmN5RE9wMlhkVVlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iYTRkYTYtMWQxZS00ODc4LTg3NmUt YTg1Mzk5ZGI2MGJmLzEvanBzZjR4THdDZklJNm9vcmN5RE9wMlhkVVlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9iYTRkYTYtMWQxZS00ODc4LTg3NmUtYTg1Mzk5ZGI2MGJm LzEvanBzZjR4THdDZklJNm9vcmN5RE9wMlhkVVlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgGRpeI6 hJmXutpXHWfZBsw0GP9DtGGlevhlEW3HmpBNquVfbCqagPL5vl49GPFa7vtkeUHy merWPpsvVQW4Y0X1cI2hzlorCVFcPWxNz0wq7J7YCkNQ5ao6+H+H8lSISI7+HKDI 7U3EIYAKGvwGcerU1MG2wVFrgKW8pTzzbXzQNhSyfWUiDX2j8xrYeeiqMJRQlvTT xOg4cGtoKW8C23ILqy3CsfadRONEImDwj5/aIgPmYOp+hktzh7KBUqoCXwPJcMn2 FZxW1fZqL2W48e+kI4yQIMu0shT1x0PQrwc+ybSMlBOz1H0PJC+ZE/iwjJON4kYl iCV5neYLrn+F5Q== -----END CERTIFICATE-----Generated at Sun Jan 18 11:45:36 2026 by rpki-client