This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json) Hash identifier: raWzXPRHq50EubNIN1HssE6YQbUEwMFyHv8liCGv/r8= Subject key identifier: D9:F3:68:17:69:DC:6E:4B:26:3F:6D:C1:28:2C:76:69:01:86:09:AC Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32 Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32 Certificate serial: 019BFC8A4D0B62B4072C28115BCC08D00EE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft Manifest number: 0F8C Signing time: Mon 26 Jan 2026 23:01:20 +0000 Manifest this update: Mon 26 Jan 2026 23:01:20 +0000 Manifest next update: Tue 27 Jan 2026 23:01:20 +0000 Files and hashes: 1: ChullwnZqQZYUszFjSx3fewyjwo.roa (hash: Q47vpxHW3Ryw8e0pAegAXyctEwiMaOAhvKLpvI/M8b8=) 2: DNSKPd01dwV1m0UA3OWZjHrv0VI.roa (hash: xZ97A5jZ/SukMOaFd3zQ70K1ldM9Hn7h4aFpzYLuuQg=) 3: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: cxEaJhy6J6eiq/eVueBIm0HbO/W/UvWiOEq25G0aBlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:4d:0b:62:b4:07:2c:28:11:5b:cc:08:d0:0e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b660a611980c68273139e32affb74b454a9d32 Validity Not Before: Jan 26 23:01:20 2026 GMT Not After : Jan 27 23:01:20 2026 GMT Subject: CN=d9f3681769dc6e4b263f6dc1282c7669018609ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:51:d4:08:26:7a:81:a8:b0:65:d7:a5:54:67: b6:16:7d:cb:0c:64:73:20:0f:3e:a3:80:4b:ea:91: 77:65:73:82:fd:37:c6:41:18:86:cf:34:a3:80:c1: 9f:95:c2:e3:88:da:80:cf:24:da:17:8a:c8:33:fe: b4:ab:47:1e:a9:a9:11:26:87:3f:1c:27:16:b1:3d: fd:28:bb:52:83:ba:d6:df:09:8e:2d:f8:c9:25:5f: f1:26:e5:d2:1e:fb:3f:fc:1f:46:f3:3f:eb:39:58: b0:f8:90:d9:fd:13:49:d4:e6:cb:28:37:53:46:03: 6b:66:cc:46:bd:62:84:46:54:5e:cf:a9:b4:de:03: 3d:27:3b:42:3e:76:8a:46:c4:77:62:53:03:42:c9: 82:f2:49:d1:1f:03:ef:bb:e4:c3:e5:b8:2e:50:ff: 53:df:c8:81:28:76:33:d3:73:71:da:dd:3e:76:40: fe:53:03:20:b3:0d:7d:a2:c9:5c:45:a3:27:02:3d: e5:8c:ee:57:71:d6:c5:85:63:e1:28:8a:e7:85:4a: db:dc:4d:12:b6:ce:db:aa:46:d4:8d:73:b7:2c:14: 36:b9:02:6f:cb:e9:86:3f:af:a2:65:8c:41:47:bc: c1:59:9a:c6:3f:4e:ad:27:a3:1b:2c:2f:0b:cc:0d: 03:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F3:68:17:69:DC:6E:4B:26:3F:6D:C1:28:2C:76:69:01:86:09:AC X509v3 Authority Key Identifier: keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:a1:ce:1c:f4:34:ef:1a:34:41:c5:76:66:a0:0c:20:f6:ca: ce:00:a4:74:9b:8b:66:1d:cc:4b:90:11:ed:11:4c:32:e5:94: f5:8b:0e:f3:b3:96:5b:ff:07:d5:d1:ba:f1:5b:5d:c9:f7:46: 18:55:bb:c6:26:47:ed:02:f5:8c:23:56:b3:ad:e7:73:9f:91: 74:64:35:9f:3b:36:c0:c7:f2:66:5c:6c:bc:bb:22:03:c2:de: 91:76:e8:d0:cd:d9:91:59:53:7d:4d:1d:8c:ef:74:3b:c2:0c: 3f:e5:be:e9:ab:a6:88:ff:63:ea:54:8c:84:1a:07:9a:37:83: 02:cb:e8:54:95:ed:0c:30:9b:55:09:e6:ea:1e:98:f5:c4:0d: ed:04:67:29:14:95:6c:67:cb:89:82:21:b7:e1:4d:9d:e7:d1: 1f:16:fd:41:e7:c5:12:3d:a0:0d:94:d8:9a:a4:58:e4:6c:b9: 5e:4d:fc:de:65:71:3b:d8:d1:a8:9b:62:cb:44:8a:9e:71:47: 55:52:2e:46:c2:da:de:6d:c0:fc:16:df:f4:92:90:e4:c3:2b: 65:57:9d:ab:c1:09:e5:b0:97:c1:d4:3e:01:51:0d:c8:ca:48: 95:67:f6:bf:99:91:09:07:bb:ff:08:ad:ad:bc:f8:e3:46:4f: e2:ec:df:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ik0LYrQHLCgRW8wI0A7nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YjY2MGE2MTE5ODBjNjgyNzMxMzllMzJhZmZiNzRiNDU0 YTlkMzIwHhcNMjYwMTI2MjMwMTIwWhcNMjYwMTI3MjMwMTIwWjAzMTEwLwYDVQQD EyhkOWYzNjgxNzY5ZGM2ZTRiMjYzZjZkYzEyODJjNzY2OTAxODYwOWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFHUCCZ6gaiwZdelVGe2Fn3LDGRz IA8+o4BL6pF3ZXOC/TfGQRiGzzSjgMGflcLjiNqAzyTaF4rIM/60q0ceqakRJoc/ HCcWsT39KLtSg7rW3wmOLfjJJV/xJuXSHvs//B9G8z/rOViw+JDZ/RNJ1ObLKDdT RgNrZsxGvWKERlRez6m03gM9JztCPnaKRsR3YlMDQsmC8knRHwPvu+TD5bguUP9T 38iBKHYz03Nx2t0+dkD+UwMgsw19oslcRaMnAj3ljO5XcdbFhWPhKIrnhUrb3E0S ts7bqkbUjXO3LBQ2uQJvy+mGP6+iZYxBR7zBWZrGP06tJ6MbLC8LzA0D9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnzaBdp3G5LJj9twSgsdmkBhgmsMB8GA1UdIwQY MBaAFCS2YKYRmAxoJzE54yr/t0tFSp0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYt NzA1MTk3NTA3YTU5LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYtNzA1MTk3NTA3YTU5 LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqHOHPQ0 7xo0QcV2ZqAMIPbKzgCkdJuLZh3MS5AR7RFMMuWU9YsO87OWW/8H1dG68VtdyfdG GFW7xiZH7QL1jCNWs63nc5+RdGQ1nzs2wMfyZlxsvLsiA8LekXbo0M3ZkVlTfU0d jO90O8IMP+W+6aumiP9j6lSMhBoHmjeDAsvoVJXtDDCbVQnm6h6Y9cQN7QRnKRSV bGfLiYIht+FNnefRHxb9QefFEj2gDZTYmqRY5Gy5Xk383mVxO9jRqJtiy0SKnnFH VVIuRsLa3m3A/Bbf9JKQ5MMrZVedq8EJ5bCXwdQ+AVENyMpIlWf2v5mRCQe7/wit rbz440ZP4uzfkg== -----END CERTIFICATE-----Generated at Tue Jan 27 06:08:03 2026 by rpki-client