This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft File: 2JW-5WBWMPcEix_7PwA7OdKeR6A.mft (raw, json) Hash identifier: FAf0dLjZnR9D885KiMEPT4qSq0WEq0ZlzLj5RiIiBA0= Subject key identifier: 1E:B6:2A:C2:65:FA:1D:0E:A9:9C:51:09:9D:B3:9F:E3:6D:46:2B:A4 Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0 Certificate issuer: /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0 Certificate serial: 019BDE49108A37A00A245E21753086494CD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft Manifest number: 0760 Signing time: Wed 21 Jan 2026 02:01:28 +0000 Manifest this update: Wed 21 Jan 2026 02:01:28 +0000 Manifest next update: Thu 22 Jan 2026 02:01:28 +0000 Files and hashes: 1: 2JW-5WBWMPcEix_7PwA7OdKeR6A.crl (hash: VnspJl3Uzd2pHP9f256w/1FD4IouT5rdH2hv7n7Z3LI=) 2: lQThS4mk1Leh8tKsh4-tfyHe4H0.roa (hash: H+cr/TGcF1ncxkT8Z3p54kLCJ/SNrYTbccJfu39qAvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:49:10:8a:37:a0:0a:24:5e:21:75:30:86:49:4c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0 Validity Not Before: Jan 21 02:01:28 2026 GMT Not After : Jan 22 02:01:28 2026 GMT Subject: CN=1eb62ac265fa1d0ea99c51099db39fe36d462ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dd:db:04:0d:85:09:dc:64:30:a6:40:4d:eb: 0e:e8:cf:a9:64:9d:46:af:96:09:63:71:6e:b0:f3: ad:cd:70:e8:c5:10:d7:d2:5f:6e:89:cf:e8:18:a8: 6f:6b:18:9f:66:49:bc:ce:ce:a1:d0:ea:cd:dc:e4: 01:b8:db:fd:1e:b0:05:63:0e:4d:31:78:6d:5b:72: 07:12:71:b1:fe:c8:ce:91:9c:f5:73:1a:28:9d:4a: 39:71:7a:95:4f:91:a7:cd:46:fc:19:a5:fd:da:99: 42:7a:8d:f0:3c:71:96:e2:92:36:7f:67:2c:37:26: 8e:73:00:85:a5:d0:97:84:5f:24:cf:a3:38:45:23: 41:24:15:e8:47:81:8c:06:1e:64:71:20:ac:cd:a1: 66:a4:f7:ad:e7:0f:ea:fb:a3:41:45:bf:0a:1c:e5: 41:24:da:8c:ec:77:f1:c7:72:21:fb:5e:de:87:b5: c8:cb:1f:ec:6e:f7:69:20:66:f6:84:bb:7b:46:87: 42:0c:12:15:0c:ee:c6:c5:1e:c8:dd:e3:58:49:03: f2:79:c3:f9:93:18:e8:c9:de:e4:13:8d:88:81:87: 98:d1:3c:cf:5c:0f:e9:26:4b:86:4d:97:2c:f3:23: ae:d8:59:19:60:14:ad:87:f9:12:fb:12:b8:bc:9f: 5f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B6:2A:C2:65:FA:1D:0E:A9:9C:51:09:9D:B3:9F:E3:6D:46:2B:A4 X509v3 Authority Key Identifier: keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a5:a8:78:cc:26:49:20:e9:13:f8:72:58:82:94:cd:fe:04: 6a:d9:f7:67:4b:57:8d:4a:3a:b2:ef:73:16:03:8d:db:a1:19: fa:a8:6c:8a:66:5f:b0:05:55:0f:bf:91:5c:d7:92:ab:f7:64: 1e:cf:7a:ad:6f:62:8e:e1:32:e4:f5:be:d1:98:dd:33:c6:b4: 56:87:89:ae:8c:f2:0a:33:c0:22:44:53:b1:bb:e2:69:c3:94: f7:c9:d4:ec:f2:c0:16:3b:6c:da:3b:20:3f:90:43:59:d4:62: 2d:2b:5f:8c:3a:5f:42:54:79:d4:af:ba:aa:99:18:6c:44:71: a4:65:ae:55:7a:72:cd:90:71:d0:ea:10:ef:b8:37:83:0b:86: 2e:89:e3:c0:e4:85:2a:30:f7:85:ee:2b:9f:bc:bf:11:76:ef: bc:ab:31:68:13:09:50:8c:08:ea:f8:06:8e:48:80:47:20:5f: e5:35:b1:df:56:44:18:6d:fc:e6:8f:6c:e9:ea:95:7b:54:d1: 1c:9d:3a:8f:fb:45:ab:0f:2e:f2:29:b7:30:5a:b6:ba:b8:c8: 29:2a:b1:dc:6f:ee:dc:d1:39:68:3a:1d:8a:fd:af:be:b2:e5: e9:da:97:27:82:90:94:b3:1e:3e:7e:ef:ff:3d:e2:eb:28:40: 19:88:9a:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZveSRCKN6AKJF4hdTCGSUzXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTViZWU1NjA1NjMwZjcwNDhiMWZmYjNmMDAzYjM5ZDI5 ZTQ3YTAwHhcNMjYwMTIxMDIwMTI4WhcNMjYwMTIyMDIwMTI4WjAzMTEwLwYDVQQD EygxZWI2MmFjMjY1ZmExZDBlYTk5YzUxMDk5ZGIzOWZlMzZkNDYyYmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt3bBA2FCdxkMKZATesO6M+pZJ1G r5YJY3FusPOtzXDoxRDX0l9uic/oGKhvaxifZkm8zs6h0OrN3OQBuNv9HrAFYw5N MXhtW3IHEnGx/sjOkZz1cxoonUo5cXqVT5GnzUb8GaX92plCeo3wPHGW4pI2f2cs NyaOcwCFpdCXhF8kz6M4RSNBJBXoR4GMBh5kcSCszaFmpPet5w/q+6NBRb8KHOVB JNqM7Hfxx3Ih+17eh7XIyx/sbvdpIGb2hLt7RodCDBIVDO7GxR7I3eNYSQPyecP5 kxjoyd7kE42IgYeY0TzPXA/pJkuGTZcs8yOu2FkZYBSth/kS+xK4vJ9fAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB62KsJl+h0OqZxRCZ2zn+NtRiukMB8GA1UdIwQY MBaAFNiVvuVgVjD3BIsf+z8AOznSnkegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lNzU0ZDYtMGRhYy00MjQ2LTlmZDYt MjAyYTA5ODBjMTc2LzEvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lNzU0ZDYtMGRhYy00MjQ2LTlmZDYtMjAyYTA5ODBjMTc2 LzEvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKWoeMwm SSDpE/hyWIKUzf4Eatn3Z0tXjUo6su9zFgON26EZ+qhsimZfsAVVD7+RXNeSq/dk Hs96rW9ijuEy5PW+0ZjdM8a0VoeJrozyCjPAIkRTsbviacOU98nU7PLAFjts2jsg P5BDWdRiLStfjDpfQlR51K+6qpkYbERxpGWuVXpyzZBx0OoQ77g3gwuGLonjwOSF KjD3he4rn7y/EXbvvKsxaBMJUIwI6vgGjkiARyBf5TWx31ZEGG385o9s6eqVe1TR HJ06j/tFqw8u8im3MFq2urjIKSqx3G/u3NE5aDodiv2vvrLl6dqXJ4KQlLMePn7v /z3i6yhAGYiaAQ== -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:27 2026 by rpki-client