This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft File: JdYnfp1eXwpz2jcfMLWseZknkjo.mft (raw, json) Hash identifier: NPorfcCmpd+ggl6ffEy0dvTV8PhRCFi1biCJ+p7N3K0= Subject key identifier: C0:75:92:59:65:05:BB:FB:7D:15:AF:BA:0F:54:AC:45:CA:61:8A:CB Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A Certificate issuer: /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a Certificate serial: 019BD733AF640F8B7D62A191E1B047757F21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft Manifest number: 04F9 Signing time: Mon 19 Jan 2026 17:00:47 +0000 Manifest this update: Mon 19 Jan 2026 17:00:47 +0000 Manifest next update: Tue 20 Jan 2026 17:00:47 +0000 Files and hashes: 1: JdYnfp1eXwpz2jcfMLWseZknkjo.crl (hash: w3Ap3m/tL0jetec3+wrO0Divhkz6Cdqlw4WuQJ7th5s=) 2: gUQyWeEpQgGbTNbqg5fkirZYaTk.roa (hash: Uag44MrYWD7AlqlTHqDCPjaMLMN6/SqLUtWcxqj+gh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:33:af:64:0f:8b:7d:62:a1:91:e1:b0:47:75:7f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a Validity Not Before: Jan 19 17:00:47 2026 GMT Not After : Jan 20 17:00:47 2026 GMT Subject: CN=c07592596505bbfb7d15afba0f54ac45ca618acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:39:84:19:26:92:63:06:54:66:d2:81:86:b6: e3:e8:1e:03:5f:e7:e3:d5:11:04:ee:4e:8f:7e:d4: 67:53:21:15:0e:51:fa:3c:d9:fe:fb:d8:a3:2a:19: ba:38:f9:a6:f3:67:53:00:72:20:81:76:a6:0f:fe: 7f:13:4b:6e:22:03:1c:f9:b0:ce:c2:4e:c3:63:23: 6a:55:f2:4a:9b:04:96:63:71:80:a3:1b:ad:fd:31: 88:54:65:6e:61:5f:db:11:64:e8:08:97:4a:c0:18: db:79:94:b6:4c:e4:3e:7d:b4:f6:1b:50:1c:2e:5e: 89:95:63:70:49:34:c9:2d:99:3f:9e:87:96:0d:33: ca:ea:56:7d:c2:f3:e5:37:b7:78:8e:14:11:14:51: 7b:ce:45:f9:e2:76:56:a8:ac:56:0a:39:dd:6e:86: 55:e0:d2:b8:4a:6b:b4:38:49:16:f0:9b:a5:18:ff: 75:95:b8:59:20:1c:38:6b:01:37:af:16:13:f2:c9: 1d:20:f4:af:ea:09:0b:89:0a:e5:30:c7:f1:43:2a: 9d:e1:f9:a7:2c:c4:fb:ce:79:61:8f:b0:70:61:3a: 00:4b:49:ed:93:d8:2e:90:4f:86:59:a2:53:49:11: 20:97:15:8c:b7:52:40:7c:e8:be:c6:3c:59:b4:0e: a1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:75:92:59:65:05:BB:FB:7D:15:AF:BA:0F:54:AC:45:CA:61:8A:CB X509v3 Authority Key Identifier: keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:7a:14:ff:86:b0:11:07:e2:02:f8:df:e3:66:b0:0c:2e:3f: 56:e8:e1:d4:a6:b7:95:9e:03:f7:6a:21:23:f4:9a:54:83:3b: ff:e8:a0:55:39:8d:7c:ef:13:af:8d:cf:f0:1e:47:c2:85:aa: c7:11:75:0a:4f:40:84:7d:cc:ac:38:74:96:52:8f:e6:8f:67: ae:02:2a:fe:07:9f:9d:9e:74:89:93:1e:ed:24:02:3d:e5:13: 03:fb:35:a8:c9:c1:1d:a3:48:25:b9:0b:d2:51:db:c3:86:31: df:6f:ec:b0:19:4c:d2:31:8a:9a:fa:dd:0f:8f:a5:ce:78:f2: 3e:3e:e8:a9:ed:eb:18:a6:02:f2:03:78:44:38:19:d2:ca:f2: 67:c4:ff:37:99:4a:9d:0a:bf:24:0b:37:58:48:c0:7e:aa:ef: 7a:9e:5f:13:fe:04:9c:3a:91:0b:08:da:07:a4:6c:16:52:23: fa:74:c0:13:3c:b8:68:fe:6b:1c:03:39:c1:23:0b:56:74:9f: 27:18:f8:7b:2d:93:0d:04:81:7a:34:e1:d0:33:16:b1:fb:f2: fe:89:96:29:ab:6d:c7:71:b0:e4:75:1f:17:1d:19:a3:34:d1: 7d:2d:f1:6a:99:cc:62:d9:ca:f6:26:f9:82:17:01:f9:99:03: 63:3f:d0:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvXM69kD4t9YqGR4bBHdX8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZDYyNzdlOWQ1ZTVmMGE3M2RhMzcxZjMwYjVhYzc5OTky NzkyM2EwHhcNMjYwMTE5MTcwMDQ3WhcNMjYwMTIwMTcwMDQ3WjAzMTEwLwYDVQQD EyhjMDc1OTI1OTY1MDViYmZiN2QxNWFmYmEwZjU0YWM0NWNhNjE4YWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjmEGSaSYwZUZtKBhrbj6B4DX+fj 1REE7k6PftRnUyEVDlH6PNn++9ijKhm6OPmm82dTAHIggXamD/5/E0tuIgMc+bDO wk7DYyNqVfJKmwSWY3GAoxut/TGIVGVuYV/bEWToCJdKwBjbeZS2TOQ+fbT2G1Ac Ll6JlWNwSTTJLZk/noeWDTPK6lZ9wvPlN7d4jhQRFFF7zkX54nZWqKxWCjndboZV 4NK4Smu0OEkW8JulGP91lbhZIBw4awE3rxYT8skdIPSv6gkLiQrlMMfxQyqd4fmn LMT7znlhj7BwYToAS0ntk9gukE+GWaJTSREglxWMt1JAfOi+xjxZtA6hbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMB1klllBbv7fRWvug9UrEXKYYrLMB8GA1UdIwQY MBaAFCXWJ36dXl8Kc9o3HzC1rHmZJ5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83YmVmM2QtNTQyNi00MGNmLTg0MWUt NDcxOTI3YTgzY2UzLzEvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83YmVmM2QtNTQyNi00MGNmLTg0MWUtNDcxOTI3YTgzY2Uz LzEvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHoU/4aw EQfiAvjf42awDC4/Vujh1Ka3lZ4D92ohI/SaVIM7/+igVTmNfO8Tr43P8B5HwoWq xxF1Ck9AhH3MrDh0llKP5o9nrgIq/gefnZ50iZMe7SQCPeUTA/s1qMnBHaNIJbkL 0lHbw4Yx32/ssBlM0jGKmvrdD4+lznjyPj7oqe3rGKYC8gN4RDgZ0sryZ8T/N5lK nQq/JAs3WEjAfqrvep5fE/4EnDqRCwjaB6RsFlIj+nTAEzy4aP5rHAM5wSMLVnSf Jxj4ey2TDQSBejTh0DMWsfvy/omWKattx3Gw5HUfFx0ZozTRfS3xapnMYtnK9ib5 ghcB+ZkDYz/QZQ== -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:16 2026 by rpki-client