This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json) Hash identifier: eOnT77rfY6O8PaY4Vz4avs4W8cPXGVpk6UH8YCm8O4E= Subject key identifier: 02:FE:CB:30:31:59:78:DC:C8:67:F7:C8:22:06:D3:97:33:A0:BC:DE Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98 Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698 Certificate serial: 019BFF546EB1782B5E201D62A7B259C1040B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft Manifest number: 17EB Signing time: Tue 27 Jan 2026 12:01:21 +0000 Manifest this update: Tue 27 Jan 2026 12:01:21 +0000 Manifest next update: Wed 28 Jan 2026 12:01:21 +0000 Files and hashes: 1: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: H3LW7fY5uzRbpBr56lHCWNW/XKq67nHxNeHgbQeEbKU=) 2: of1ZOsMHp_mh7IEEJP4_o4HLJfM.roa (hash: 1EXbUVtSBjioTg80JwxjnFqS0TnS0UjDFk3emb+9E38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:54:6e:b1:78:2b:5e:20:1d:62:a7:b2:59:c1:04:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698 Validity Not Before: Jan 27 12:01:21 2026 GMT Not After : Jan 28 12:01:21 2026 GMT Subject: CN=02fecb30315978dcc867f7c82206d39733a0bcde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6d:a6:b5:98:9d:a9:d0:b2:50:4e:dd:f2:0b: 08:15:62:d1:ad:b2:7e:1c:96:d6:6a:1b:b8:e3:81: 71:42:fe:cf:1b:cc:ec:ce:ca:e5:3b:9f:25:67:38: d7:a7:74:95:e6:7b:d0:c9:e0:1d:98:43:a1:49:2a: 07:19:29:95:e9:db:6c:d0:72:2a:6e:bf:ec:6e:14: c7:96:a9:d7:bd:2c:ea:39:a0:ea:a5:91:ac:01:64: 95:3b:7b:9f:6b:88:e0:48:ee:89:08:6c:d7:e0:2e: 91:f3:9b:3b:73:ff:4a:d6:9d:cf:ac:93:c8:82:37: 51:63:26:1d:34:e9:24:af:3c:95:71:7f:e1:ca:17: b9:90:ed:20:bf:a5:e1:e0:c9:46:63:4a:d5:76:46: 36:60:41:dc:aa:75:ec:96:1e:aa:14:0e:11:5c:0f: c0:a7:bd:fa:94:2a:5f:ce:57:51:95:d7:72:dc:c0: 19:6b:8e:18:7a:a3:a0:14:e2:5a:17:b2:a3:22:5b: f3:a5:ab:6c:63:71:1d:5b:8a:f3:47:6c:26:ba:6b: c2:66:2e:18:93:1a:e2:bf:0e:1f:67:74:51:b8:b6: 6e:7b:00:cb:d4:3e:68:cf:99:5b:88:d6:5a:2d:af: 5f:1b:2f:e3:d2:2d:8c:dd:de:20:72:d3:93:88:57: 9d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FE:CB:30:31:59:78:DC:C8:67:F7:C8:22:06:D3:97:33:A0:BC:DE X509v3 Authority Key Identifier: keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:6b:3a:32:b6:9f:78:5d:28:5d:cf:59:9c:52:3e:58:e8:81: eb:a6:33:5e:ff:af:a9:1c:1d:5d:d1:0d:a4:fc:1b:3c:9c:78: 5e:35:83:cb:db:d7:70:96:98:e1:e0:5f:12:95:f1:ef:8b:6e: 20:d6:6d:c4:89:b2:2f:08:98:72:d0:37:e0:3b:f8:7c:9b:ed: 08:49:98:aa:5a:3d:11:17:36:85:0a:8e:a4:ca:5d:b1:df:38: 85:99:bf:cd:55:69:21:32:cd:4b:51:26:99:51:5f:54:ec:c8: a3:3e:b2:0f:69:c3:7f:1f:aa:1b:62:17:31:76:87:03:1e:8a: 21:2d:7a:e2:f7:7a:f5:07:03:44:1f:5a:7f:f0:44:ab:13:1e: f9:18:21:d3:8f:fc:3f:34:75:90:31:0b:cd:d0:66:59:68:06: 2e:85:52:62:d5:f8:80:0c:af:f1:40:30:43:9b:ab:56:18:4a: 8a:8f:d0:61:a0:74:c1:23:db:2e:25:62:6d:92:84:b1:9e:3e: 65:1d:7c:b7:c4:c4:de:d1:6b:40:d0:10:3b:07:91:90:6e:58: 96:be:41:f4:2b:bc:19:78:8a:83:5b:c2:f7:f3:1c:ad:35:1e: 0c:2f:fa:88:92:e0:7d:9e:ce:64:17:f2:44:5d:2e:c9:6c:90: 06:51:0e:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/VG6xeCteIB1ip7JZwQQLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDliYjA1MzBkZmUzMjI4ZjgzYjA4NjEzOTJlMjg0NTkz NGI2OTgwHhcNMjYwMTI3MTIwMTIxWhcNMjYwMTI4MTIwMTIxWjAzMTEwLwYDVQQD EygwMmZlY2IzMDMxNTk3OGRjYzg2N2Y3YzgyMjA2ZDM5NzMzYTBiY2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm2mtZidqdCyUE7d8gsIFWLRrbJ+ HJbWahu444FxQv7PG8zszsrlO58lZzjXp3SV5nvQyeAdmEOhSSoHGSmV6dts0HIq br/sbhTHlqnXvSzqOaDqpZGsAWSVO3ufa4jgSO6JCGzX4C6R85s7c/9K1p3PrJPI gjdRYyYdNOkkrzyVcX/hyhe5kO0gv6Xh4MlGY0rVdkY2YEHcqnXslh6qFA4RXA/A p736lCpfzldRlddy3MAZa44YeqOgFOJaF7KjIlvzpatsY3EdW4rzR2wmumvCZi4Y kxrivw4fZ3RRuLZuewDL1D5oz5lbiNZaLa9fGy/j0i2M3d4gctOTiFeddQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAL+yzAxWXjcyGf3yCIG05czoLzeMB8GA1UdIwQY MBaAFCTZuwUw3+Mij4OwhhOS4oRZNLaYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hOTk3OWMtZDk4OS00NmZmLWI5MWUt NGVhMzAxMWRhYjZjLzEvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9hOTk3OWMtZDk4OS00NmZmLWI5MWUtNGVhMzAxMWRhYjZj LzEvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWs6Mraf eF0oXc9ZnFI+WOiB66YzXv+vqRwdXdENpPwbPJx4XjWDy9vXcJaY4eBfEpXx74tu INZtxImyLwiYctA34Dv4fJvtCEmYqlo9ERc2hQqOpMpdsd84hZm/zVVpITLNS1Em mVFfVOzIoz6yD2nDfx+qG2IXMXaHAx6KIS164vd69QcDRB9af/BEqxMe+Rgh04/8 PzR1kDELzdBmWWgGLoVSYtX4gAyv8UAwQ5urVhhKio/QYaB0wSPbLiVibZKEsZ4+ ZR18t8TE3tFrQNAQOweRkG5Ylr5B9Cu8GXiKg1vC9/McrTUeDC/6iJLgfZ7OZBfy RF0uyWyQBlEOjA== -----END CERTIFICATE-----Generated at Tue Jan 27 19:27:23 2026 by rpki-client