This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json) Hash identifier: KaspAiMqxiNFZHjXowP5CXuvJ1GL+j3t/dYYCkFzUio= Subject key identifier: 8C:AD:B1:E2:33:AF:39:9A:75:2C:0C:78:68:33:9A:48:42:63:AE:99 Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7 Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7 Certificate serial: 019BFDD3FFC07FA46E808E504750549E23A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft Manifest number: 09A7 Signing time: Tue 27 Jan 2026 05:01:27 +0000 Manifest this update: Tue 27 Jan 2026 05:01:27 +0000 Manifest next update: Wed 28 Jan 2026 05:01:27 +0000 Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: Dff11eTU0E6Wnbwp9rCssshlCbLh22DmxGCqNPD/IA0=) 2: gWon8go1X1etoZ8VVC7MVcrh7rw.roa (hash: +h9DsffeSnMEN/znqbhxvFFiJiaGvYzj2iIhf/egNzg=) 3: nePHPrOEtQ2PBdl8CIDH53O4jYo.roa (hash: LtVuUBSEUcTSpEfdLMbOtpgX1qZbM9aciFJAh+jdl4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 05:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:d3:ff:c0:7f:a4:6e:80:8e:50:47:50:54:9e:23:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7 Validity Not Before: Jan 27 05:01:27 2026 GMT Not After : Jan 28 05:01:27 2026 GMT Subject: CN=8cadb1e233af399a752c0c7868339a484263ae99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:19:e9:48:bb:78:d5:27:07:74:1f:25:65:cd: 75:11:5e:4b:a3:b9:9f:da:a7:42:da:03:2c:d9:55: ad:cc:8f:69:3e:a8:e1:47:b7:ab:3c:ad:e7:8c:52: 08:f4:05:dd:4e:7a:09:0c:63:3e:96:46:9f:f3:9d: 35:42:4a:63:b1:f0:7e:54:9a:14:e5:54:3b:c6:b9: 3a:62:7a:7c:e6:ff:02:9d:05:ab:53:51:4b:9c:76: d7:b8:c7:10:90:35:a8:1f:66:9e:32:88:e9:9a:52: e5:4a:ee:a0:b9:10:a0:e4:f1:ac:a9:3d:fb:c2:05: 0d:5e:27:a8:61:28:aa:74:59:f2:43:c2:53:ed:7e: bb:37:f2:9b:55:a9:2e:da:ec:24:0f:56:90:ab:83: 0c:9d:03:69:b2:36:ba:a5:86:a3:f6:7f:91:fd:a9: bb:be:9f:fa:61:30:79:6c:4d:15:26:6e:ef:96:8b: 9d:35:1a:51:cb:33:ab:37:50:1f:76:0b:f0:1b:6b: b0:2e:a8:e3:42:d4:d6:dd:a0:72:6c:28:17:0b:94: 96:f1:0e:79:2a:e1:2d:17:92:92:b2:33:ac:4c:c2: ef:81:3f:c2:4d:98:17:ab:4f:f8:f5:a0:94:1c:79: 96:9b:65:e1:da:26:e7:98:20:89:8f:4e:c6:c5:8a: b4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AD:B1:E2:33:AF:39:9A:75:2C:0C:78:68:33:9A:48:42:63:AE:99 X509v3 Authority Key Identifier: keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:86:7a:cb:f6:b0:a0:32:8c:2a:12:62:fb:ea:95:e3:f2:fa: 48:de:c9:74:ea:fe:92:5c:d9:3c:99:c3:9b:2c:54:c7:c6:5d: dd:79:01:30:e2:44:dc:b4:1d:b9:49:33:c5:d4:dc:7f:91:90: 3c:5e:60:d8:e0:b8:64:5d:12:77:09:c4:fa:8b:f3:13:8f:a4: ae:bf:2e:a3:32:8b:8f:ab:70:e3:18:51:8f:db:36:f8:8e:03: e2:7d:6f:fc:09:fc:6a:57:5d:98:6e:5c:5e:32:8f:5d:69:f8: 10:9f:40:93:4a:87:4d:6a:fa:be:39:9e:f5:30:af:58:79:5a: 75:4f:4e:e5:bd:48:50:11:9d:80:ff:02:97:c4:bd:b1:81:9f: 7f:03:2d:f5:c0:37:f6:ce:05:89:b4:05:ef:e1:0f:e6:d5:81: 7c:9f:d9:8a:0b:94:9a:79:b8:cf:4c:1a:2c:57:f7:cd:cc:cd: 8b:dc:2e:3e:47:81:e7:77:57:c8:3c:fa:71:e4:26:d6:33:ec: 0c:ef:6c:83:20:d7:4b:69:72:2a:23:2d:0f:7c:c5:89:10:72: a1:70:6c:f5:f1:4a:76:63:3c:4d:c3:1b:fe:da:3b:4b:ef:6a: ea:ba:b2:de:b9:7d:0d:94:b2:c7:3d:f8:97:f5:dd:19:72:21: 55:fa:53:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv90//Af6RugI5QR1BUniOhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDkwNmI5MGMxZDg1NjY3M2U0MTRmMzk4MDViZTU4M2Qy MzBiYTcwHhcNMjYwMTI3MDUwMTI3WhcNMjYwMTI4MDUwMTI3WjAzMTEwLwYDVQQD Eyg4Y2FkYjFlMjMzYWYzOTlhNzUyYzBjNzg2ODMzOWE0ODQyNjNhZTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBnpSLt41ScHdB8lZc11EV5Lo7mf 2qdC2gMs2VWtzI9pPqjhR7erPK3njFII9AXdTnoJDGM+lkaf8501QkpjsfB+VJoU 5VQ7xrk6Ynp85v8CnQWrU1FLnHbXuMcQkDWoH2aeMojpmlLlSu6guRCg5PGsqT37 wgUNXieoYSiqdFnyQ8JT7X67N/KbVaku2uwkD1aQq4MMnQNpsja6pYaj9n+R/am7 vp/6YTB5bE0VJm7vloudNRpRyzOrN1AfdgvwG2uwLqjjQtTW3aBybCgXC5SW8Q55 KuEtF5KSsjOsTMLvgT/CTZgXq0/49aCUHHmWm2Xh2ibnmCCJj07GxYq0sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIytseIzrzmadSwMeGgzmkhCY66ZMB8GA1UdIwQY MBaAFCTZBrkMHYVmc+QU85gFvlg9IwunMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iNTNkYjEtMWUwZS00NGQwLWExMzEt NGZjMjhlNTA5OGM3LzEvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iNTNkYjEtMWUwZS00NGQwLWExMzEtNGZjMjhlNTA5OGM3 LzEvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoZ6y/aw oDKMKhJi++qV4/L6SN7JdOr+klzZPJnDmyxUx8Zd3XkBMOJE3LQduUkzxdTcf5GQ PF5g2OC4ZF0SdwnE+ovzE4+krr8uozKLj6tw4xhRj9s2+I4D4n1v/An8alddmG5c XjKPXWn4EJ9Ak0qHTWr6vjme9TCvWHladU9O5b1IUBGdgP8Cl8S9sYGffwMt9cA3 9s4FibQF7+EP5tWBfJ/ZiguUmnm4z0waLFf3zczNi9wuPkeB53dXyDz6ceQm1jPs DO9sgyDXS2lyKiMtD3zFiRByoXBs9fFKdmM8TcMb/to7S+9q6rqy3rl9DZSyxz34 l/XdGXIhVfpTIQ== -----END CERTIFICATE-----Generated at Tue Jan 27 12:44:21 2026 by rpki-client