This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json) Hash identifier: bA8V3Rjy221/pXJVM1EPz4lNbfxacy7Jd3QeHHn1rbQ= Subject key identifier: 1B:A6:8E:79:1C:3E:40:E0:C7:7F:15:EE:C7:0D:A7:D3:69:97:7E:4A Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca Certificate serial: 019BE00081C86114E3CA40E1EE6C19B650ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft Manifest number: 17DF Signing time: Wed 21 Jan 2026 10:01:27 +0000 Manifest this update: Wed 21 Jan 2026 10:01:27 +0000 Manifest next update: Thu 22 Jan 2026 10:01:27 +0000 Files and hashes: 1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: lAmvBelJoBJCwCyeqhw1JVtFkzdjlQS12WjyJg2TvHA=) 2: NcvqQEHq7t81xbxiR-3wQxKy6sk.asa (hash: T6uf6iqamEiscrQRCCpxXU6qFtuegEXN91mKxUf+/xY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:00:81:c8:61:14:e3:ca:40:e1:ee:6c:19:b6:50:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca Validity Not Before: Jan 21 10:01:27 2026 GMT Not After : Jan 22 10:01:27 2026 GMT Subject: CN=1ba68e791c3e40e0c77f15eec70da7d369977e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fe:d3:9d:27:ee:3f:c6:42:14:e0:42:68:f1: 15:ce:42:26:b9:42:ab:41:73:a9:f6:29:c7:a5:42: 59:f0:0a:d5:ba:a4:c3:6d:9c:77:5b:75:50:26:b2: 5a:bd:52:0c:c0:a8:24:42:24:85:ed:33:d0:8e:e3: 42:7c:c2:83:ef:3b:5c:19:fc:97:db:55:9c:dd:ef: 63:a6:9c:75:45:06:00:4a:c6:54:ca:c6:ea:de:03: 01:95:0f:74:65:08:cb:39:a5:3b:db:76:49:b9:f8: eb:4a:45:1a:bb:e2:e9:54:ef:0e:4b:ba:33:dc:76: ee:8b:6c:c8:d6:10:5f:98:f3:8a:cb:46:79:09:6e: 28:0f:65:54:e8:48:a5:2b:96:b0:7e:a1:d6:21:e3: 0a:1d:9c:bf:e1:50:4d:ec:7e:53:b0:51:7a:2e:d7: 63:53:f8:49:22:f9:a1:cd:d2:00:02:4e:e3:6d:d6: cd:e3:98:cf:bc:79:48:04:6e:d2:a6:df:ce:95:6d: 5d:8d:f3:d8:4f:13:11:51:a3:c9:41:84:2e:90:9b: d7:2c:aa:a0:1a:94:e3:89:39:bf:a2:80:39:b7:5d: 61:24:2e:69:35:c6:d7:3b:0b:a5:bd:13:33:f3:e7: a2:a3:42:87:b0:95:c1:a7:46:4f:be:e9:39:af:62: 12:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A6:8E:79:1C:3E:40:E0:C7:7F:15:EE:C7:0D:A7:D3:69:97:7E:4A X509v3 Authority Key Identifier: keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:95:8d:38:17:fe:b7:71:38:8c:a8:41:44:dd:75:df:5c:1f: ed:42:bb:e4:9b:e1:6f:13:68:31:59:72:8a:0e:a2:17:3e:8d: d9:95:e7:7e:89:f8:44:90:90:4e:2d:8b:bb:bd:6f:dd:17:a5: a0:09:14:9e:3d:a1:3c:63:8c:cb:cf:43:39:f8:a8:c8:fb:63: 36:1f:2e:0a:a9:d0:bc:23:89:0a:64:c7:5d:df:f9:4c:14:82: 79:57:fa:dc:a4:f4:c5:e1:93:a7:bd:26:b1:21:f2:ae:36:19: 47:34:b8:c1:92:fb:80:67:1e:63:c5:8d:0c:a0:1d:f2:c3:59: 62:c0:96:fd:a4:96:ec:be:e5:dc:9e:1c:f0:03:9a:4f:a5:ae: 71:1b:7b:da:1e:ec:7e:1d:2f:ed:a4:59:cc:c6:37:3d:f8:b6: 01:fb:fc:c9:c8:da:3e:5b:59:00:10:ca:bc:e5:50:e3:cb:aa: 2e:62:54:80:25:f0:29:05:28:90:9a:6e:96:70:6c:38:f1:cf: 15:ef:b5:3c:bc:dd:63:1c:00:c8:5d:df:4d:d7:35:81:fc:81: 02:fd:96:ad:a2:8a:8b:54:4d:87:b8:bd:54:12:02:a1:3b:9b: 88:33:94:ad:a1:ec:66:fd:ef:91:d8:3f:f7:ce:6f:9d:aa:3b: 9d:8c:8d:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgAIHIYRTjykDh7mwZtlDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NDM5MjNlNzczZWIyNzA0OTJhZWNjOGRhMTVjMmU1Y2E1 N2MyY2EwHhcNMjYwMTIxMTAwMTI3WhcNMjYwMTIyMTAwMTI3WjAzMTEwLwYDVQQD EygxYmE2OGU3OTFjM2U0MGUwYzc3ZjE1ZWVjNzBkYTdkMzY5OTc3ZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv7TnSfuP8ZCFOBCaPEVzkImuUKr QXOp9inHpUJZ8ArVuqTDbZx3W3VQJrJavVIMwKgkQiSF7TPQjuNCfMKD7ztcGfyX 21Wc3e9jppx1RQYASsZUysbq3gMBlQ90ZQjLOaU723ZJufjrSkUau+LpVO8OS7oz 3Hbui2zI1hBfmPOKy0Z5CW4oD2VU6EilK5awfqHWIeMKHZy/4VBN7H5TsFF6Ltdj U/hJIvmhzdIAAk7jbdbN45jPvHlIBG7Spt/OlW1djfPYTxMRUaPJQYQukJvXLKqg GpTjiTm/ooA5t11hJC5pNcbXOwulvRMz8+eio0KHsJXBp0ZPvuk5r2ISPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBumjnkcPkDgx38V7scNp9Npl35KMB8GA1UdIwQY MBaAFCZDkj53PrJwSSrsyNoVwuXKV8LKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmtPU1BuYy1zbkJKS3V6STJoWEM1Y3BYd3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wNjMxYTctNDE2Yy00MWJlLThlNDUt NzhjMzdjMGIwZDk3LzEvSmtPU1BuYy1zbkJKS3V6STJoWEM1Y3BYd3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wNjMxYTctNDE2Yy00MWJlLThlNDUtNzhjMzdjMGIwZDk3 LzEvSmtPU1BuYy1zbkJKS3V6STJoWEM1Y3BYd3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZWNOBf+ t3E4jKhBRN1131wf7UK75JvhbxNoMVlyig6iFz6N2ZXnfon4RJCQTi2Lu71v3Rel oAkUnj2hPGOMy89DOfioyPtjNh8uCqnQvCOJCmTHXd/5TBSCeVf63KT0xeGTp70m sSHyrjYZRzS4wZL7gGceY8WNDKAd8sNZYsCW/aSW7L7l3J4c8AOaT6WucRt72h7s fh0v7aRZzMY3Pfi2Afv8ycjaPltZABDKvOVQ48uqLmJUgCXwKQUokJpulnBsOPHP Fe+1PLzdYxwAyF3fTdc1gfyBAv2WraKKi1RNh7i9VBICoTubiDOUraHsZv3vkdg/ 985vnao7nYyNUA== -----END CERTIFICATE-----Generated at Wed Jan 21 14:45:34 2026 by rpki-client