This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft File: JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json) Hash identifier: Csi+iHqf199oN8eRs06sHYu+nDiTRs3XVYx9URZHsKg= Subject key identifier: D6:ED:16:A8:C8:FF:D5:3A:07:F4:AD:14:30:90:B8:2C:55:83:4B:19 Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93 Certificate issuer: /CN=25db0061f2d8ae1403497ca17e1a88df23048f93 Certificate serial: 019C1C154156F4DCF73E2EBFB7232DFD103C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft Manifest number: 166E Signing time: Mon 02 Feb 2026 02:01:20 +0000 Manifest this update: Mon 02 Feb 2026 02:01:20 +0000 Manifest next update: Tue 03 Feb 2026 02:01:20 +0000 Files and hashes: 1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: aeyNjvZb/GRD5RQ3ZbZLjv4jyqzPzex3Nmu9HWoeHn0=) 2: QT5YaQtwh10kjLMseFaZ5StOfCw.asa (hash: mXFjq/NajihGSXsqBXu5vBTGi2iI8iMdEQGHWiYPM84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:15:41:56:f4:dc:f7:3e:2e:bf:b7:23:2d:fd:10:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93 Validity Not Before: Feb 2 02:01:20 2026 GMT Not After : Feb 3 02:01:20 2026 GMT Subject: CN=d6ed16a8c8ffd53a07f4ad143090b82c55834b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:8e:82:22:2b:1c:e4:eb:be:ed:b8:17:fb: 88:07:9f:e8:eb:1b:21:fe:f2:88:ea:01:0f:ae:48: fd:80:66:a8:8f:3e:e5:3c:54:79:49:cb:fc:11:1f: 0d:61:9b:05:e0:19:9c:77:7a:1e:d0:ed:61:3d:fa: a3:63:f4:66:39:f3:68:f3:9c:16:08:3b:8c:e4:99: aa:fd:b8:88:81:9a:00:04:c5:1b:41:1b:d9:1e:57: 44:ad:46:13:f6:d8:06:3b:4a:4a:ea:d1:d0:db:42: 43:a9:99:9e:1b:0d:21:16:73:97:32:c9:4a:61:9e: e6:2a:a2:48:90:92:b9:c8:fb:f8:9d:fe:9f:a6:fb: 04:9f:d9:03:84:67:58:36:80:fd:3b:00:56:fe:b0: d3:69:69:6d:ac:27:c5:78:4b:6a:67:d1:d0:37:c5: 45:6f:89:db:bb:1a:7f:4a:8c:20:99:b0:91:42:a5: 25:9d:8f:0e:22:4c:ca:2a:98:a1:f0:77:65:5e:fa: 0f:fc:11:4c:91:8b:cd:66:0b:4b:cc:d9:62:ec:3d: 16:80:d2:03:29:fe:f0:6d:13:95:f4:76:41:64:7b: 33:b7:6f:e0:27:93:f9:ee:1b:74:e0:91:a4:41:8d: cf:54:e5:9e:5b:10:d3:f4:f9:f1:50:0f:3e:66:fa: 09:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:ED:16:A8:C8:FF:D5:3A:07:F4:AD:14:30:90:B8:2C:55:83:4B:19 X509v3 Authority Key Identifier: keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:82:f0:5d:e5:53:19:11:be:73:36:77:d1:8d:b4:e1:6a:ed: 78:ef:50:f1:4f:ce:8d:72:66:3c:ff:37:ec:79:3d:30:e1:0a: ba:8a:22:82:47:ba:b2:ae:0f:fe:e3:c7:41:95:df:ac:95:78: 24:65:23:ce:d5:8f:21:93:09:2f:07:7a:22:58:f6:9c:06:13: 96:e8:c7:ca:b9:62:ea:4e:62:f9:b6:db:f7:c6:16:16:e4:c8: 28:eb:5e:2a:78:9c:9f:e5:51:a9:0e:58:bd:12:17:42:45:20: f3:39:5e:73:4b:a0:e0:e3:e8:d7:86:f5:14:6e:0c:9b:59:9a: e9:df:ea:f5:d0:2d:a7:20:d2:20:aa:ad:f9:76:a2:f6:2c:18: 01:6a:6a:89:68:dd:87:70:1a:9a:04:55:80:10:f9:ec:d9:7a: b5:a1:9a:8c:0a:32:f8:0d:61:8e:70:09:4d:f5:35:8b:ec:fb: 69:d1:a8:03:bd:fe:d6:3b:98:8a:0a:ed:b6:6e:1a:db:3d:76: d1:7d:05:b0:6b:7f:72:bc:23:34:31:cc:6e:ad:fc:05:65:30: a9:04:94:c0:38:04:16:78:ae:c9:fb:f8:2d:19:92:90:d8:2d: 2f:68:a1:41:19:cd:56:f1:f1:28:9d:32:d4:1e:be:06:25:1b: fd:ea:b6:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcFUFW9Nz3Pi6/tyMt/RA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZGIwMDYxZjJkOGFlMTQwMzQ5N2NhMTdlMWE4OGRmMjMw NDhmOTMwHhcNMjYwMjAyMDIwMTIwWhcNMjYwMjAzMDIwMTIwWjAzMTEwLwYDVQQD EyhkNmVkMTZhOGM4ZmZkNTNhMDdmNGFkMTQzMDkwYjgyYzU1ODM0YjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD+OgiIrHOTrvu24F/uIB5/o6xsh /vKI6gEPrkj9gGaojz7lPFR5Scv8ER8NYZsF4Bmcd3oe0O1hPfqjY/RmOfNo85wW CDuM5Jmq/biIgZoABMUbQRvZHldErUYT9tgGO0pK6tHQ20JDqZmeGw0hFnOXMslK YZ7mKqJIkJK5yPv4nf6fpvsEn9kDhGdYNoD9OwBW/rDTaWltrCfFeEtqZ9HQN8VF b4nbuxp/SowgmbCRQqUlnY8OIkzKKpih8HdlXvoP/BFMkYvNZgtLzNli7D0WgNID Kf7wbROV9HZBZHszt2/gJ5P57ht04JGkQY3PVOWeWxDT9PnxUA8+ZvoJLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbtFqjI/9U6B/StFDCQuCxVg0sZMB8GA1UdIwQY MBaAFCXbAGHy2K4UA0l8oX4aiN8jBI+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmRzQVlmTFlyaFFEU1h5aGZocUkzeU1FajVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jOWJlOTMtM2E1OC00Y2VjLThhNmIt MmFjYmUzZDUzZGZiLzEvSmRzQVlmTFlyaFFEU1h5aGZocUkzeU1FajVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9jOWJlOTMtM2E1OC00Y2VjLThhNmItMmFjYmUzZDUzZGZi LzEvSmRzQVlmTFlyaFFEU1h5aGZocUkzeU1FajVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAboLwXeVT GRG+czZ30Y204WrteO9Q8U/OjXJmPP837Hk9MOEKuooigke6sq4P/uPHQZXfrJV4 JGUjztWPIZMJLwd6Ilj2nAYTlujHyrli6k5i+bbb98YWFuTIKOteKnicn+VRqQ5Y vRIXQkUg8zlec0ug4OPo14b1FG4Mm1ma6d/q9dAtpyDSIKqt+Xai9iwYAWpqiWjd h3AamgRVgBD57Nl6taGajAoy+A1hjnAJTfU1i+z7adGoA73+1juYigrttm4a2z12 0X0FsGt/crwjNDHMbq38BWUwqQSUwDgEFniuyfv4LRmSkNgtL2ihQRnNVvHxKJ0y 1B6+BiUb/eq2nQ== -----END CERTIFICATE-----Generated at Mon Feb 2 08:16:46 2026 by rpki-client