This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft File: JY9ajila0de0ih4RlYeQBStXolM.mft (raw, json) Hash identifier: QrdJ6e0004W6dawAzPzLDqUIl/slHUFDttevCtwhAkw= Subject key identifier: 1A:81:10:42:B5:66:74:40:AE:24:8D:10:C8:34:09:38:6B:D0:4C:79 Authority key identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53 Certificate issuer: /CN=258f5a8e295ad1d7b48a1e11958790052b57a253 Certificate serial: 019B9C6940912072578BF47F575F2025612C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft Manifest number: 1711 Signing time: Thu 08 Jan 2026 07:01:41 +0000 Manifest this update: Thu 08 Jan 2026 07:01:41 +0000 Manifest next update: Fri 09 Jan 2026 07:01:41 +0000 Files and hashes: 1: JY9ajila0de0ih4RlYeQBStXolM.crl (hash: sWtbU3Bo6Y60N5FlpUPKWVAUuzxQFZ5ic5H/87aUMzk=) 2: XsoOkS5cVinDKGylaIEe4V2iJiI.roa (hash: yUEIW+aXADdubfFegT02HQm/MXVHfJjhRJSJMZb2fr0=) 3: d9SsK9JFe4erW3mFTzDPmAS0ODY.roa (hash: eDnr+btVqcRjIrpyGoGoaGlmtxJe33quRXxSlU0qhfA=) 4: lcmCUf_CgzeIR8L7taeEF8YZZn4.roa (hash: WXtKI31hDy0GKZrnRRKtBFDImlVMPaG1/eg9VugOcII=) 5: lhg5zVYrNMLRf5rtCyfanPHKWCo.roa (hash: tJ2WDHFTAECq/EoCtDCOE9Vj8E1Ebzh5Ex98VPbUM4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:69:40:91:20:72:57:8b:f4:7f:57:5f:20:25:61:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258f5a8e295ad1d7b48a1e11958790052b57a253 Validity Not Before: Jan 8 07:01:41 2026 GMT Not After : Jan 9 07:01:41 2026 GMT Subject: CN=1a811042b5667440ae248d10c83409386bd04c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b1:81:f8:df:28:30:ac:c5:eb:3e:d6:c6:3b: d6:23:d4:38:6b:9b:bc:05:42:19:db:dc:50:26:03: df:0d:a0:00:02:46:80:c2:16:6c:80:b8:20:19:7f: 61:bb:d1:f6:f5:22:40:0d:55:76:79:d0:ca:cd:15: 07:07:d5:e9:20:50:bc:77:52:38:5c:eb:33:6d:b6: b3:9a:16:5c:57:1e:c8:b9:75:ff:98:69:ec:f1:38: 6f:c4:24:7d:d4:04:7f:20:ab:75:5b:8d:e4:cc:db: c8:35:49:46:d6:6b:88:5f:ae:4b:26:b4:1f:cc:34: 12:c2:13:72:e7:23:a2:7e:f3:f9:fb:5d:59:24:3d: 59:d2:40:eb:73:ed:b6:ef:22:ce:57:e8:0a:50:a7: b7:20:d0:3d:4c:ce:ba:39:43:c1:59:b2:48:d4:d5: 14:c2:34:a0:5e:54:94:84:3a:fb:91:71:87:b7:75: de:e7:cf:99:65:60:04:96:ac:3b:0c:cf:9b:ab:22: 9c:50:ec:62:87:7e:44:a8:76:aa:53:64:9b:8e:a4: c6:07:05:62:2a:9c:dc:e5:bf:88:5a:b2:83:a1:aa: 5e:f3:8e:dc:22:7d:92:94:97:0e:15:48:bb:12:c0: 03:08:29:4a:8c:5f:87:3c:3e:0d:42:0a:a9:cd:04: 36:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:81:10:42:B5:66:74:40:AE:24:8D:10:C8:34:09:38:6B:D0:4C:79 X509v3 Authority Key Identifier: keyid:25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:9a:a8:56:2d:a9:6f:0d:cc:e3:6a:ec:13:6a:7c:1d:d8:3f: c6:7c:ce:8d:a5:29:a2:0b:64:a6:3d:86:46:6c:f2:53:4f:ec: 46:1a:67:64:f6:9b:ba:9f:68:23:ee:79:0f:ab:ca:9b:98:f1: 67:8d:91:f6:25:89:3e:89:ce:a8:1c:2b:b5:65:53:4d:0f:a4: f3:83:90:94:c0:b8:16:09:03:18:73:cc:a7:cc:fb:14:bf:86: f4:94:30:9a:6a:3a:8d:7f:c4:1a:a1:1e:ff:50:8a:7d:5a:2c: d2:f7:e0:af:cc:b4:70:34:41:de:d4:76:c0:c8:3f:db:84:de: 32:23:e6:ab:07:83:89:08:eb:cf:de:c0:35:86:5b:fd:08:f3: e2:01:a3:73:65:a4:72:4c:8d:bd:cb:af:5f:b9:04:ec:a5:18: 79:07:1d:1b:66:fa:4a:42:00:ea:83:c1:ec:30:7b:eb:e0:4f: 1f:6f:63:eb:6c:13:a7:d9:d0:f3:81:ad:1b:9e:c6:f7:b4:f1: 6b:7f:bc:f2:4b:c4:96:78:bd:d1:2d:95:43:39:bc:cd:41:eb: 79:0e:7e:8d:7b:c2:53:b4:8e:17:6d:6d:d6:90:24:3b:0f:6f: 74:38:93:45:ae:b9:86:c1:dc:15:63:fc:75:45:53:5d:c2:98: 05:3e:1c:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZucaUCRIHJXi/R/V18gJWEsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OGY1YThlMjk1YWQxZDdiNDhhMWUxMTk1ODc5MDA1MmI1 N2EyNTMwHhcNMjYwMTA4MDcwMTQxWhcNMjYwMTA5MDcwMTQxWjAzMTEwLwYDVQQD EygxYTgxMTA0MmI1NjY3NDQwYWUyNDhkMTBjODM0MDkzODZiZDA0Yzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27GB+N8oMKzF6z7WxjvWI9Q4a5u8 BUIZ29xQJgPfDaAAAkaAwhZsgLggGX9hu9H29SJADVV2edDKzRUHB9XpIFC8d1I4 XOszbbazmhZcVx7IuXX/mGns8ThvxCR91AR/IKt1W43kzNvINUlG1muIX65LJrQf zDQSwhNy5yOifvP5+11ZJD1Z0kDrc+227yLOV+gKUKe3INA9TM66OUPBWbJI1NUU wjSgXlSUhDr7kXGHt3Xe58+ZZWAElqw7DM+bqyKcUOxih35EqHaqU2SbjqTGBwVi Kpzc5b+IWrKDoape847cIn2SlJcOFUi7EsADCClKjF+HPD4NQgqpzQQ2WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqBEEK1ZnRAriSNEMg0CThr0Ex5MB8GA1UdIwQY MBaAFCWPWo4pWtHXtIoeEZWHkAUrV6JTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlk5YWppbGEwZGUwaWg0UmxZZVFCU3RYb2xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zNzE5ZjMtMjJlMS00MzQ0LTlhMzkt NDU4YTI3MzYxNTdhLzEvSlk5YWppbGEwZGUwaWg0UmxZZVFCU3RYb2xNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8zNzE5ZjMtMjJlMS00MzQ0LTlhMzktNDU4YTI3MzYxNTdh LzEvSlk5YWppbGEwZGUwaWg0UmxZZVFCU3RYb2xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5qoVi2p bw3M42rsE2p8Hdg/xnzOjaUpogtkpj2GRmzyU0/sRhpnZPabup9oI+55D6vKm5jx Z42R9iWJPonOqBwrtWVTTQ+k84OQlMC4FgkDGHPMp8z7FL+G9JQwmmo6jX/EGqEe /1CKfVos0vfgr8y0cDRB3tR2wMg/24TeMiPmqweDiQjrz97ANYZb/Qjz4gGjc2Wk ckyNvcuvX7kE7KUYeQcdG2b6SkIA6oPB7DB76+BPH29j62wTp9nQ84GtG57G97Tx a3+88kvElni90S2VQzm8zUHreQ5+jXvCU7SOF21t1pAkOw9vdDiTRa65hsHcFWP8 dUVTXcKYBT4cBw== -----END CERTIFICATE-----Generated at Thu Jan 8 17:25:55 2026 by rpki-client