This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft File: Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft (raw, json) Hash identifier: lJDzJbwrZqcPsV6BWKhmIsxiy4dhY7aoAdBxOA8hEFY= Subject key identifier: 84:A6:F2:13:A3:67:99:3A:DE:B3:87:CE:0A:81:E4:66:F3:BF:09:5C Authority key identifier: 26:7E:59:5A:B2:26:CB:FC:53:C0:B8:96:50:F1:B3:96:70:FF:0B:4E Certificate issuer: /CN=267e595ab226cbfc53c0b89650f1b39670ff0b4e Certificate serial: 019BD959E242ED47DF9B750BAE598A49EA6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft Manifest number: 176A Signing time: Tue 20 Jan 2026 03:01:45 +0000 Manifest this update: Tue 20 Jan 2026 03:01:45 +0000 Manifest next update: Wed 21 Jan 2026 03:01:45 +0000 Files and hashes: 1: Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl (hash: lLa1pNHN1m43w6GTTXiukOfCbSMiwHJbN49mVNXX7Ik=) 2: apgFIZZ2kNrAvx4UT-WLtpzNCTA.roa (hash: Kr/qYxPomhktonhz5Ep98c+wnNlvv7s4Ib91hHUnMsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:59:e2:42:ed:47:df:9b:75:0b:ae:59:8a:49:ea:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=267e595ab226cbfc53c0b89650f1b39670ff0b4e Validity Not Before: Jan 20 03:01:45 2026 GMT Not After : Jan 21 03:01:45 2026 GMT Subject: CN=84a6f213a367993adeb387ce0a81e466f3bf095c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6b:fb:17:b6:24:1f:aa:c3:bb:fe:7a:c2:db: 11:bc:a2:4e:23:99:80:a8:50:77:12:aa:95:06:8a: 11:a2:ad:c4:c2:f9:7f:d8:96:77:be:e1:7e:cc:ad: df:4d:7c:ea:9b:3a:28:81:6b:26:68:eb:64:8b:a5: 02:fe:32:db:70:a8:12:24:4c:e4:a3:3d:3d:e1:69: 2f:cf:34:86:f1:f6:c8:8b:31:50:f3:8d:1d:57:3e: fd:c4:6f:c7:19:a4:5f:dc:a7:be:f5:1e:33:7a:9a: c2:46:58:00:b8:ef:73:e0:e9:d8:e6:03:09:ec:a0: 3d:7a:29:55:7c:92:43:01:2b:c0:15:1a:0c:48:c0: 82:bb:7d:85:0f:fb:97:9e:f8:18:ff:ef:23:ab:26: 54:9b:0b:00:3d:c6:cd:52:4d:d7:24:0c:5c:93:be: 37:80:ba:04:78:1b:40:00:f6:d1:2d:1a:fe:10:f1: 6f:59:79:68:4c:f5:83:c1:a8:14:60:eb:27:80:8e: ee:e0:ef:ed:08:a3:7e:dd:3d:8a:5c:c7:a0:ba:56: 0d:bd:fc:33:f6:f9:44:93:42:88:20:16:9e:b9:09: 9b:99:e0:b3:30:e7:52:6a:5b:3c:1f:4e:6a:d3:e8: fb:c7:9e:79:9a:8d:43:9b:d6:57:52:30:18:42:fc: 06:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A6:F2:13:A3:67:99:3A:DE:B3:87:CE:0A:81:E4:66:F3:BF:09:5C X509v3 Authority Key Identifier: keyid:26:7E:59:5A:B2:26:CB:FC:53:C0:B8:96:50:F1:B3:96:70:FF:0B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:86:fd:6c:b2:e3:e2:4d:5b:b6:77:ec:ab:fb:08:b1:8f:2f: 3e:d5:1b:9a:0c:ca:07:37:55:c0:63:e3:76:03:8f:ce:65:70: f3:a5:bc:a6:a8:0a:c8:63:76:98:97:71:17:d9:66:b3:9d:88: 7b:cd:90:a7:7e:fe:1f:07:3a:20:b0:d4:ea:59:bf:53:9d:2b: 25:b8:53:c5:ce:93:f4:cb:56:35:1a:d7:a2:90:08:0b:ff:c0: 7c:ce:10:6e:22:37:a9:81:18:fb:c6:2c:02:88:07:cd:97:ff: 13:3b:a2:db:30:75:b9:c4:1a:06:b0:92:58:11:20:48:de:12: 6d:16:6d:65:b6:be:5b:15:31:fa:d5:08:44:c3:81:6d:53:2c: 49:94:7f:42:34:ae:09:38:1d:e7:2f:73:5f:4a:84:1e:5a:7b: 35:f3:df:d6:b6:61:c6:20:71:27:b8:10:c8:c0:0e:48:07:cd: 32:b4:4e:7d:d6:cb:a8:6e:85:a5:3d:cb:5d:54:5d:d5:3c:13: fa:2a:d0:95:14:36:f0:d8:27:ec:9a:14:d2:4d:bb:62:af:81: a3:42:58:71:96:5d:b9:1d:55:99:df:2f:1a:c6:fe:19:e2:a2: 93:d9:c1:4c:43:f3:20:52:28:cd:c4:0d:19:4f:26:96:2c:ee: b7:2f:e0:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZWeJC7Uffm3ULrlmKSepvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2N2U1OTVhYjIyNmNiZmM1M2MwYjg5NjUwZjFiMzk2NzBm ZjBiNGUwHhcNMjYwMTIwMDMwMTQ1WhcNMjYwMTIxMDMwMTQ1WjAzMTEwLwYDVQQD Eyg4NGE2ZjIxM2EzNjc5OTNhZGViMzg3Y2UwYTgxZTQ2NmYzYmYwOTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Gv7F7YkH6rDu/56wtsRvKJOI5mA qFB3EqqVBooRoq3Ewvl/2JZ3vuF+zK3fTXzqmzoogWsmaOtki6UC/jLbcKgSJEzk oz094WkvzzSG8fbIizFQ840dVz79xG/HGaRf3Ke+9R4zeprCRlgAuO9z4OnY5gMJ 7KA9eilVfJJDASvAFRoMSMCCu32FD/uXnvgY/+8jqyZUmwsAPcbNUk3XJAxck743 gLoEeBtAAPbRLRr+EPFvWXloTPWDwagUYOsngI7u4O/tCKN+3T2KXMegulYNvfwz 9vlEk0KIIBaeuQmbmeCzMOdSals8H05q0+j7x555mo1Dm9ZXUjAYQvwGuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISm8hOjZ5k63rOHzgqB5GbzvwlcMB8GA1UdIwQY MBaAFCZ+WVqyJsv8U8C4llDxs5Zw/wtOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm41WldySW15X3hUd0xpV1VQR3psbkRfQzA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lNGUwNTctYzY5OC00OTMzLTlkMDUt N2MwYTk0YWUxNzE5LzEvSm41WldySW15X3hUd0xpV1VQR3psbkRfQzA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9lNGUwNTctYzY5OC00OTMzLTlkMDUtN2MwYTk0YWUxNzE5 LzEvSm41WldySW15X3hUd0xpV1VQR3psbkRfQzA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHob9bLLj 4k1btnfsq/sIsY8vPtUbmgzKBzdVwGPjdgOPzmVw86W8pqgKyGN2mJdxF9lms52I e82Qp37+Hwc6ILDU6lm/U50rJbhTxc6T9MtWNRrXopAIC//AfM4QbiI3qYEY+8Ys AogHzZf/Ezui2zB1ucQaBrCSWBEgSN4SbRZtZba+WxUx+tUIRMOBbVMsSZR/QjSu CTgd5y9zX0qEHlp7NfPf1rZhxiBxJ7gQyMAOSAfNMrROfdbLqG6FpT3LXVRd1TwT +irQlRQ28Ngn7JoU0k27Yq+Bo0JYcZZduR1Vmd8vGsb+GeKik9nBTEPzIFIozcQN GU8mlizuty/gxA== -----END CERTIFICATE-----Generated at Tue Jan 20 09:27:09 2026 by rpki-client