This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json) Hash identifier: 0iR0RWnPv2OIQXin9fQISah7ld6Mmujaw6hteUyfBxE= Subject key identifier: 17:97:C6:03:7A:F8:9C:51:04:E0:F1:B1:F6:A7:17:7A:CA:DC:3E:52 Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3 Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3 Certificate serial: 019BDFFFB92195945BF07F50393B9C05B099 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft Manifest number: 1472 Signing time: Wed 21 Jan 2026 10:00:36 +0000 Manifest this update: Wed 21 Jan 2026 10:00:36 +0000 Manifest next update: Thu 22 Jan 2026 10:00:36 +0000 Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: fnppZ3u3PUXAybSSj/G586nfKAkROHYkryuYzWZD0RM=) 2: UTiXqpOnXnL7SsApTxG7VdzoF_M.roa (hash: xvzfHxziNr26zYJwG+snS1syo+ysKboS5MzS0bjlx5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:ff:b9:21:95:94:5b:f0:7f:50:39:3b:9c:05:b0:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3 Validity Not Before: Jan 21 10:00:36 2026 GMT Not After : Jan 22 10:00:36 2026 GMT Subject: CN=1797c6037af89c5104e0f1b1f6a7177acadc3e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4a:96:93:06:be:dc:4a:1a:c0:4d:3f:01:74: b8:57:43:18:0e:e0:30:30:95:23:2d:c2:d9:0a:dd: e4:32:8e:f3:c1:92:9e:4e:2b:4d:77:ab:01:d7:b3: cd:00:1c:d4:f8:ab:67:17:51:ee:6c:69:c6:3e:46: 9c:b1:fc:24:69:87:df:31:b3:ec:c6:85:6c:bc:d0: 42:91:76:3c:00:65:91:5f:a7:56:94:17:1d:ae:ff: 75:37:cd:7f:c4:8a:bc:fc:8b:4a:cb:7d:54:7a:e2: 56:60:db:b1:b3:82:b7:31:56:9d:d8:fd:d0:8b:68: 8a:1d:e3:8b:59:a6:6e:5f:36:96:ca:b5:be:eb:4f: 29:ba:b6:fd:70:59:89:c2:19:4a:5d:37:c3:05:fe: 61:f5:31:34:0e:36:03:f5:64:28:1c:9e:c7:a6:22: 48:94:d7:e3:65:7c:5b:cc:75:b0:2a:bc:0e:0e:9b: 12:c1:b4:db:00:a1:cb:92:1b:83:f9:4a:69:f1:3b: b2:5f:97:59:b5:f5:ac:3a:85:d5:eb:64:69:29:6c: 39:55:10:73:60:11:c4:e6:5e:f1:e4:7d:49:18:9d: 43:14:28:78:95:1d:29:3d:b1:8d:df:5a:cc:ff:3f: a0:4f:c5:88:7f:d0:36:86:6d:c4:a5:35:c0:17:10: 1c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:97:C6:03:7A:F8:9C:51:04:E0:F1:B1:F6:A7:17:7A:CA:DC:3E:52 X509v3 Authority Key Identifier: keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:6f:48:19:d0:da:d0:49:be:6b:84:39:43:0b:d5:a3:3d:7a: 21:bf:33:f1:46:35:60:05:51:7f:54:53:f9:a6:85:f6:22:5e: e8:40:00:78:43:01:da:ed:5d:0e:9e:f2:bb:a0:33:69:30:56: d8:bd:dc:b0:46:48:8d:79:07:8e:1f:6a:6d:b3:26:f6:16:dd: d2:7d:68:68:82:c1:09:0f:f8:bb:cc:af:8a:c8:7f:99:a3:2e: 60:22:96:01:51:c2:ee:74:ac:46:e4:70:ae:42:29:3c:24:7e: 77:b3:8e:27:1a:59:ba:41:0b:b8:77:91:a3:70:a3:da:41:71: 76:4f:66:13:3f:ae:ba:dc:7d:41:54:21:27:8a:f8:56:f1:ea: 18:e0:c9:34:fa:d3:1e:50:54:dc:b8:3e:2f:7c:91:5c:f1:09: cd:a1:6b:8c:8b:87:22:47:95:72:03:56:fb:16:c8:d5:c1:1f: 54:b1:fe:f4:ee:6d:75:25:b0:29:6c:bb:ee:68:f4:a3:67:5a: 4e:5b:22:4d:1c:d7:d5:82:cb:90:b5:82:f9:85:65:b0:10:9c: 81:2b:42:2a:90:f1:3d:1f:90:d3:ba:15:57:58:9f:6e:a8:5f: 6b:04:ef:bd:f9:85:3c:35:c0:77:33:23:f9:f7:32:34:98:b5: 8f:85:47:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvf/7khlZRb8H9QOTucBbCZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MjZjMTM4YWZhNDJhN2Q2NWNjNzc2MWFjNGYxODY4MzY2 ZmE3ZTMwHhcNMjYwMTIxMTAwMDM2WhcNMjYwMTIyMTAwMDM2WjAzMTEwLwYDVQQD EygxNzk3YzYwMzdhZjg5YzUxMDRlMGYxYjFmNmE3MTc3YWNhZGMzZTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0qWkwa+3EoawE0/AXS4V0MYDuAw MJUjLcLZCt3kMo7zwZKeTitNd6sB17PNABzU+KtnF1HubGnGPkacsfwkaYffMbPs xoVsvNBCkXY8AGWRX6dWlBcdrv91N81/xIq8/ItKy31UeuJWYNuxs4K3MVad2P3Q i2iKHeOLWaZuXzaWyrW+608purb9cFmJwhlKXTfDBf5h9TE0DjYD9WQoHJ7HpiJI lNfjZXxbzHWwKrwODpsSwbTbAKHLkhuD+Upp8TuyX5dZtfWsOoXV62RpKWw5VRBz YBHE5l7x5H1JGJ1DFCh4lR0pPbGN31rM/z+gT8WIf9A2hm3EpTXAFxAczQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeXxgN6+JxRBODxsfanF3rK3D5SMB8GA1UdIwQY MBaAFCUmwTivpCp9Zcx3YaxPGGg2b6fjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQt YjA2MjI4ZmNmMmMxLzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQtYjA2MjI4ZmNmMmMx LzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPm9IGdDa 0Em+a4Q5QwvVoz16Ib8z8UY1YAVRf1RT+aaF9iJe6EAAeEMB2u1dDp7yu6AzaTBW 2L3csEZIjXkHjh9qbbMm9hbd0n1oaILBCQ/4u8yvish/maMuYCKWAVHC7nSsRuRw rkIpPCR+d7OOJxpZukELuHeRo3Cj2kFxdk9mEz+uutx9QVQhJ4r4VvHqGODJNPrT HlBU3Lg+L3yRXPEJzaFrjIuHIkeVcgNW+xbI1cEfVLH+9O5tdSWwKWy77mj0o2da TlsiTRzX1YLLkLWC+YVlsBCcgStCKpDxPR+Q07oVV1ifbqhfawTvvfmFPDXAdzMj +fcyNJi1j4VH2Q== -----END CERTIFICATE-----Generated at Wed Jan 21 13:35:57 2026 by rpki-client