This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json) Hash identifier: IBEflSMBl2WrATnxNMDmDETxUW4Tx7Kh1FdNKFm8n3o= Subject key identifier: 53:72:8C:43:08:A7:96:84:D1:95:B3:95:97:66:C0:15:AF:31:41:38 Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12 Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12 Certificate serial: 019BFC8A66337A4F8CB4729ECC4ED73BBF6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft Manifest number: 15C8 Signing time: Mon 26 Jan 2026 23:01:27 +0000 Manifest this update: Mon 26 Jan 2026 23:01:27 +0000 Manifest next update: Tue 27 Jan 2026 23:01:27 +0000 Files and hashes: 1: 5tyTgc_srf_03kELs6a4U2s2DWk.roa (hash: wbWsBOeJNFN6rAIBpjdQWOFJx9S5x9ucHlt9PYYje98=) 2: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: XGNknVIebpiVi9PKR3WP9aunwERMeuChsEMGetitWYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:66:33:7a:4f:8c:b4:72:9e:cc:4e:d7:3b:bf:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12 Validity Not Before: Jan 26 23:01:27 2026 GMT Not After : Jan 27 23:01:27 2026 GMT Subject: CN=53728c4308a79684d195b3959766c015af314138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:61:72:f4:04:00:f5:03:f3:06:38:0e:76:49: 95:05:ff:7a:90:72:7d:27:1a:5e:4e:b1:bf:85:ad: ea:e2:fb:f7:c5:06:b9:f7:51:40:52:9f:78:13:cd: cf:ca:4f:19:eb:b2:68:2b:0b:c9:91:b0:c8:59:55: 75:2a:54:f8:d6:0f:3b:52:9b:cd:28:0a:d4:46:e7: 64:d6:ee:24:76:2d:b3:01:ff:f3:36:10:8b:9d:fb: 6a:e3:8d:c9:0b:69:26:d2:69:17:39:62:f2:f0:25: d1:0c:c9:96:3d:02:16:e7:f1:f5:67:cf:fc:37:98: e3:c8:a9:3d:45:96:a6:a2:10:59:6b:4a:51:03:2e: ab:bb:a0:c1:7d:60:27:b0:c0:bf:31:ae:69:ed:aa: 0d:6c:fb:2d:3f:6f:20:03:10:eb:ee:a5:87:44:fd: 70:c1:68:50:62:0a:c7:2f:42:e0:fa:51:8a:f8:80: 8e:2e:88:0b:0f:03:91:93:9f:ba:67:41:5f:13:27: 6e:9c:6f:1f:d9:0d:17:45:57:88:0c:cc:00:5c:f8: 6d:7a:73:d8:90:c8:07:c4:f1:11:84:cd:d3:37:a2: d5:a9:38:b4:fd:2b:17:0e:58:ea:ae:12:ce:83:04: 5d:a9:1e:c0:60:81:83:66:42:b2:96:cf:ac:43:ad: 56:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:72:8C:43:08:A7:96:84:D1:95:B3:95:97:66:C0:15:AF:31:41:38 X509v3 Authority Key Identifier: keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f3:3e:ee:f1:e8:0a:3f:1b:db:8a:0b:c5:73:ee:16:ed:58: 95:c8:61:9f:5b:3f:ab:d0:9a:50:b2:8b:c6:20:99:d9:cc:54: 60:4b:a3:39:83:03:ad:c0:b0:a0:bb:aa:8c:b5:87:93:bc:ed: 32:cc:e2:aa:d5:4f:82:78:4d:86:e7:d3:61:49:f2:b5:1c:35: 34:5f:2e:22:19:9c:56:11:0e:0e:a5:af:28:54:72:a8:3c:3e: b3:df:0d:d9:2e:ec:34:3d:e1:77:31:3a:55:69:8b:d3:b5:db: ef:0a:c2:0c:80:9d:42:30:b1:4e:3c:82:36:c8:3b:ee:fb:b1: e4:a4:a1:f2:7a:fc:54:e1:bb:f3:51:be:54:6f:a8:71:24:bd: 9b:c2:06:5d:ae:54:93:9f:e0:6b:3a:1f:ec:98:17:52:47:9e: d2:2e:e6:55:fd:e5:12:a3:12:4e:be:85:65:2d:08:88:e2:33: ce:49:ab:3d:2a:ce:64:e9:db:53:86:7e:b9:d6:32:c1:52:6a: 8d:a7:0d:98:41:7b:2d:7d:aa:13:d7:1f:4b:a8:2c:ee:18:ca: a4:04:a3:e7:70:d0:e8:81:ce:2b:ad:2f:13:7f:45:96:45:c2: c4:8e:37:8d:9e:3d:40:9e:8c:65:f5:26:7b:21:a1:2a:54:af: 76:31:8f:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8imYzek+MtHKezE7XO79tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YjBlNGYxODE4M2ZiZDlkNjk1MGVlYTQzM2ZlNWQyMTZi ZDVmMTIwHhcNMjYwMTI2MjMwMTI3WhcNMjYwMTI3MjMwMTI3WjAzMTEwLwYDVQQD Eyg1MzcyOGM0MzA4YTc5Njg0ZDE5NWIzOTU5NzY2YzAxNWFmMzE0MTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWFy9AQA9QPzBjgOdkmVBf96kHJ9 JxpeTrG/ha3q4vv3xQa591FAUp94E83Pyk8Z67JoKwvJkbDIWVV1KlT41g87UpvN KArURudk1u4kdi2zAf/zNhCLnftq443JC2km0mkXOWLy8CXRDMmWPQIW5/H1Z8/8 N5jjyKk9RZamohBZa0pRAy6ru6DBfWAnsMC/Ma5p7aoNbPstP28gAxDr7qWHRP1w wWhQYgrHL0Lg+lGK+ICOLogLDwORk5+6Z0FfEydunG8f2Q0XRVeIDMwAXPhtenPY kMgHxPERhM3TN6LVqTi0/SsXDljqrhLOgwRdqR7AYIGDZkKyls+sQ61WxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNyjEMIp5aE0ZWzlZdmwBWvMUE4MB8GA1UdIwQY MBaAFCSw5PGBg/vZ1pUO6kM/5dIWvV8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NDliY2YtZGE1Zi00Yzk3LTk3YjEt NWJhNTk1NGRmYzM3LzEvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy84NDliY2YtZGE1Zi00Yzk3LTk3YjEtNWJhNTk1NGRmYzM3 LzEvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfM+7vHo Cj8b24oLxXPuFu1Ylchhn1s/q9CaULKLxiCZ2cxUYEujOYMDrcCwoLuqjLWHk7zt MsziqtVPgnhNhufTYUnytRw1NF8uIhmcVhEODqWvKFRyqDw+s98N2S7sND3hdzE6 VWmL07Xb7wrCDICdQjCxTjyCNsg77vux5KSh8nr8VOG781G+VG+ocSS9m8IGXa5U k5/gazof7JgXUkee0i7mVf3lEqMSTr6FZS0IiOIzzkmrPSrOZOnbU4Z+udYywVJq jacNmEF7LX2qE9cfS6gs7hjKpASj53DQ6IHOK60vE39FlkXCxI43jZ49QJ6MZfUm eyGhKlSvdjGPZw== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:39 2026 by rpki-client