This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft File: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft (raw, json) Hash identifier: nKMHABmcEOXBjdWAQl03c9yD+5Lgnm2Ix7W1/0olaa8= Subject key identifier: C6:1B:2B:FF:81:2B:B4:96:B9:FD:90:8E:D8:B2:5B:96:31:6E:B3:98 Authority key identifier: 27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F Certificate issuer: /CN=2750f3d7ed825617e26be09aeccc62dda4ea314f Certificate serial: 019BD9FE267B27859036912DE0AB234F8A5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft Manifest number: 023F Signing time: Tue 20 Jan 2026 06:01:10 +0000 Manifest this update: Tue 20 Jan 2026 06:01:10 +0000 Manifest next update: Wed 21 Jan 2026 06:01:10 +0000 Files and hashes: 1: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl (hash: Zmrcs77MQZtKNTOn5nokux78dqYsVDcCO6dhIq6VvJQ=) 2: TKAcyjW-K2fMWFteP_AgVE5Sf58.roa (hash: EQ/0GqnYlDDezTnOJGpjIfUWvXw1RICNNg5+3Mf+uqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:fe:26:7b:27:85:90:36:91:2d:e0:ab:23:4f:8a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2750f3d7ed825617e26be09aeccc62dda4ea314f Validity Not Before: Jan 20 06:01:10 2026 GMT Not After : Jan 21 06:01:10 2026 GMT Subject: CN=c61b2bff812bb496b9fd908ed8b25b96316eb398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2a:10:9e:34:98:bb:8f:54:1c:a8:ef:7e:78: cd:95:ea:04:fb:7c:32:06:76:12:87:aa:b6:28:5a: b3:6d:ac:34:da:59:07:0c:69:0f:67:0e:b1:70:a8: 60:7f:54:0f:7b:22:f8:80:a8:e0:f5:a6:8c:74:7c: e0:30:f3:b3:74:0b:ef:b4:0c:41:99:84:45:f0:0a: aa:93:69:ca:09:47:91:27:03:4a:54:22:b7:70:4e: db:c5:55:d2:e6:4b:70:da:ad:0f:3a:30:b1:6a:e1: a0:b3:5f:bc:19:e0:0e:1c:29:ac:40:25:dc:68:be: da:3d:fd:22:a1:90:ac:71:88:a0:d7:6c:b3:71:b6: 90:3a:1f:85:f2:76:ba:97:8b:bc:f0:b6:7b:35:3a: 94:7c:1e:99:25:74:9d:cc:a3:2d:d4:ae:05:8e:5e: f1:66:a3:94:08:a3:c8:76:0e:25:7f:e2:fa:fa:17: df:83:16:d3:ab:5c:eb:2a:d0:4d:90:fd:90:f1:71: e2:8c:18:a9:6d:ab:7b:ca:6c:4d:d6:7e:17:41:be: e1:6e:0b:8d:6d:a4:ea:32:64:f7:5f:f4:8a:31:c2: 0d:b8:ba:76:85:aa:1d:72:b2:a9:43:af:79:4b:34: 9a:9c:35:2f:f9:ae:c8:c9:18:15:2c:c4:e6:2d:bf: de:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1B:2B:FF:81:2B:B4:96:B9:FD:90:8E:D8:B2:5B:96:31:6E:B3:98 X509v3 Authority Key Identifier: keyid:27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:f9:0d:f7:c0:19:d4:64:10:0a:ab:be:8a:33:4d:71:99:7f: 2b:81:93:6a:76:04:fd:73:18:9c:d6:87:81:0e:ae:1f:18:4f: f9:13:ae:9c:aa:7f:0b:42:c5:a2:cb:36:47:2a:f2:62:e7:95: b0:5b:1c:1a:27:25:6f:b9:3d:ab:30:73:7e:cb:aa:5c:96:8b: 30:7a:51:39:28:0b:08:4f:a9:79:fd:f7:5c:e7:b3:a9:4e:49: a4:83:de:f5:67:68:bd:61:a9:03:8f:84:b6:92:4f:4a:68:ae: 22:99:c8:12:09:e5:3d:3f:ba:21:52:62:74:d0:46:d7:d8:56: 6f:bf:75:9d:bc:83:e3:10:00:52:f1:a8:e7:3e:d0:ff:81:92: a3:fa:17:c2:e6:51:5e:b9:61:05:ff:6f:f7:7c:de:2a:96:0a: f1:c7:8d:ce:5e:fd:d1:b8:68:47:95:97:be:9e:ba:cc:13:72: 0f:94:6b:ed:d6:71:46:55:55:b5:6b:d1:97:a7:06:71:d8:7f: 9d:63:a5:a0:a3:76:81:b4:96:34:ae:a2:74:83:bc:df:0d:b0: a9:37:2e:cb:4b:25:ca:c6:c2:fc:66:af:6b:78:3c:29:7a:4e: 10:89:47:8f:c1:7e:57:e7:8c:2b:2e:9f:93:4c:9f:84:0b:a7: 24:37:06:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZ/iZ7J4WQNpEt4KsjT4paMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NTBmM2Q3ZWQ4MjU2MTdlMjZiZTA5YWVjY2M2MmRkYTRl YTMxNGYwHhcNMjYwMTIwMDYwMTEwWhcNMjYwMTIxMDYwMTEwWjAzMTEwLwYDVQQD EyhjNjFiMmJmZjgxMmJiNDk2YjlmZDkwOGVkOGIyNWI5NjMxNmViMzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmioQnjSYu49UHKjvfnjNleoE+3wy BnYSh6q2KFqzbaw02lkHDGkPZw6xcKhgf1QPeyL4gKjg9aaMdHzgMPOzdAvvtAxB mYRF8Aqqk2nKCUeRJwNKVCK3cE7bxVXS5ktw2q0POjCxauGgs1+8GeAOHCmsQCXc aL7aPf0ioZCscYig12yzcbaQOh+F8na6l4u88LZ7NTqUfB6ZJXSdzKMt1K4Fjl7x ZqOUCKPIdg4lf+L6+hffgxbTq1zrKtBNkP2Q8XHijBipbat7ymxN1n4XQb7hbguN baTqMmT3X/SKMcINuLp2haodcrKpQ695SzSanDUv+a7IyRgVLMTmLb/eXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYbK/+BK7SWuf2QjtiyW5YxbrOYMB8GA1UdIwQY MBaAFCdQ89ftglYX4mvgmuzMYt2k6jFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjFEejEtMkNWaGZpYS1DYTdNeGkzYVRxTVU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84NTdhMmYtMzI4OC00NjdlLWIwNDMt MjQzMWU2YmE2MzExLzEvSjFEejEtMkNWaGZpYS1DYTdNeGkzYVRxTVU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84NTdhMmYtMzI4OC00NjdlLWIwNDMtMjQzMWU2YmE2MzEx LzEvSjFEejEtMkNWaGZpYS1DYTdNeGkzYVRxTVU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPkN98AZ 1GQQCqu+ijNNcZl/K4GTanYE/XMYnNaHgQ6uHxhP+ROunKp/C0LFoss2RyryYueV sFscGiclb7k9qzBzfsuqXJaLMHpROSgLCE+pef33XOezqU5JpIPe9WdovWGpA4+E tpJPSmiuIpnIEgnlPT+6IVJidNBG19hWb791nbyD4xAAUvGo5z7Q/4GSo/oXwuZR XrlhBf9v93zeKpYK8ceNzl790bhoR5WXvp66zBNyD5Rr7dZxRlVVtWvRl6cGcdh/ nWOloKN2gbSWNK6idIO83w2wqTcuy0slysbC/Gava3g8KXpOEIlHj8F+V+eMKy6f k0yfhAunJDcGwA== -----END CERTIFICATE-----Generated at Tue Jan 20 14:09:07 2026 by rpki-client