This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft File: JgGttY6Dyu5nXc94lUugiqkwGg4.mft (raw, json) Hash identifier: wuinIAch9DJcO9sB8IZKrUa+QoZFbrPkLr04YC+OyOE= Subject key identifier: 59:A3:D3:BC:FF:40:F7:15:6E:2A:71:85:01:DE:66:CD:97:DD:DE:BC Authority key identifier: 26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E Certificate issuer: /CN=2601adb58e83caee675dcf78954ba08aa9301a0e Certificate serial: 019C1B38DC92E4875E85C06DC14366CF6B69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft Manifest number: 086C Signing time: Sun 01 Feb 2026 22:00:37 +0000 Manifest this update: Sun 01 Feb 2026 22:00:37 +0000 Manifest next update: Mon 02 Feb 2026 22:00:37 +0000 Files and hashes: 1: 2l98OJUUaR9ta-P_Yl3BL25xX6E.asa (hash: epA5OEpKpO6J6HOrXhbe4eK7JMJAieEm7djq/rBNlXc=) 2: JgGttY6Dyu5nXc94lUugiqkwGg4.crl (hash: CRRrL1zD9FvWKQGOuX0m+B1akmoI3zWPjYZ8gnyeWxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:38:dc:92:e4:87:5e:85:c0:6d:c1:43:66:cf:6b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2601adb58e83caee675dcf78954ba08aa9301a0e Validity Not Before: Feb 1 22:00:37 2026 GMT Not After : Feb 2 22:00:37 2026 GMT Subject: CN=59a3d3bcff40f7156e2a718501de66cd97dddebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5e:ad:d9:56:13:8f:0c:d6:fe:18:b3:32:10: 9c:49:7b:07:da:f6:41:19:21:ac:b1:70:ca:39:0b: 6e:f1:bb:f3:13:9d:64:74:f3:ea:8c:1a:71:99:4c: 51:31:7a:6e:88:5d:22:2a:52:0f:da:4c:b4:89:6d: 84:6e:df:29:bd:65:8b:a5:dc:53:d3:14:97:40:cb: 2e:9d:93:e3:82:5b:aa:97:14:ad:d7:e8:32:bb:8c: 99:f4:70:d9:93:4d:a6:63:fa:6d:37:9f:7d:c3:9f: b6:6a:cc:8f:31:d4:12:39:ad:92:7a:4a:49:d0:20: 94:24:2b:6f:97:f4:70:b9:38:8b:8c:a2:4e:0a:c8: d4:92:a2:75:f3:7b:65:06:53:c0:26:0e:0c:1a:c3: 2f:b3:7c:bf:29:9e:aa:c2:26:ba:eb:e9:c1:c6:ba: a7:e7:dc:25:de:4f:ba:4d:f1:bb:5f:2f:85:f1:01: e6:ad:33:71:bb:04:2a:a9:81:0e:67:46:a1:58:fc: 2d:05:08:cb:73:53:e8:a1:6a:f6:65:c7:23:8a:66: 73:72:61:45:5c:1f:4b:b6:56:06:ee:bd:b9:5e:3b: 8c:64:d2:0d:92:25:d3:ff:3d:9c:33:19:7e:ae:3e: 6c:53:67:0d:82:0e:34:4d:62:5f:79:19:95:3e:ba: 82:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A3:D3:BC:FF:40:F7:15:6E:2A:71:85:01:DE:66:CD:97:DD:DE:BC X509v3 Authority Key Identifier: keyid:26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:44:0e:c4:8d:a2:c7:d7:dc:24:90:a6:a2:57:3f:d8:c8:1f: f8:0c:41:a5:19:fd:df:cf:88:0c:32:4b:10:5b:97:df:a7:08: 43:1c:82:52:54:bc:85:ef:24:0d:a4:74:97:50:5a:95:6e:ed: 27:61:af:6c:db:af:95:d6:57:a8:0c:e1:f7:61:93:41:5a:80: e6:eb:0f:50:25:92:07:b1:93:c9:d8:81:84:c7:44:7d:b0:57: 72:7e:16:6c:ea:e3:c2:15:90:cc:2d:b7:95:b1:fe:18:c8:69: 70:ab:54:c2:c8:d5:40:b1:1f:78:5c:f1:7b:bd:8c:28:54:81: e5:8b:e2:a4:b8:1c:8d:2c:93:ee:b4:84:86:b1:56:67:c0:4c: 36:b7:2f:3d:bf:6c:91:42:7e:5d:95:60:b3:32:b7:03:31:7e: f6:c1:90:f0:d4:d3:20:5c:77:1a:7e:d2:dd:ed:6b:3f:e4:49: 48:cb:f0:17:6d:8c:b1:8c:b7:99:87:fd:a4:f7:c7:04:1c:6c: 8c:bc:18:b5:56:c0:ca:33:96:b6:74:49:0f:02:c9:a7:c0:25: 43:af:96:97:c7:84:b5:87:45:f7:de:f2:26:25:4a:78:2b:bf: 01:b4:60:d1:e6:59:0c:a7:dd:91:04:cd:ac:10:9d:dd:09:d0: 65:eb:c6:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbONyS5IdehcBtwUNmz2tpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MDFhZGI1OGU4M2NhZWU2NzVkY2Y3ODk1NGJhMDhhYTkz MDFhMGUwHhcNMjYwMjAxMjIwMDM3WhcNMjYwMjAyMjIwMDM3WjAzMTEwLwYDVQQD Eyg1OWEzZDNiY2ZmNDBmNzE1NmUyYTcxODUwMWRlNjZjZDk3ZGRkZWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF6t2VYTjwzW/hizMhCcSXsH2vZB GSGssXDKOQtu8bvzE51kdPPqjBpxmUxRMXpuiF0iKlIP2ky0iW2Ebt8pvWWLpdxT 0xSXQMsunZPjgluqlxSt1+gyu4yZ9HDZk02mY/ptN599w5+2asyPMdQSOa2SekpJ 0CCUJCtvl/RwuTiLjKJOCsjUkqJ183tlBlPAJg4MGsMvs3y/KZ6qwia66+nBxrqn 59wl3k+6TfG7Xy+F8QHmrTNxuwQqqYEOZ0ahWPwtBQjLc1PooWr2ZccjimZzcmFF XB9LtlYG7r25XjuMZNINkiXT/z2cMxl+rj5sU2cNgg40TWJfeRmVPrqCSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmj07z/QPcVbipxhQHeZs2X3d68MB8GA1UdIwQY MBaAFCYBrbWOg8ruZ13PeJVLoIqpMBoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmdHdHRZNkR5dTVuWGM5NGxVdWdpcWt3R2c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jNjk5YTMtN2Q1MS00YjM4LTgwOWQt MTUyOWFkYjBjOWQ3LzEvSmdHdHRZNkR5dTVuWGM5NGxVdWdpcWt3R2c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9jNjk5YTMtN2Q1MS00YjM4LTgwOWQtMTUyOWFkYjBjOWQ3 LzEvSmdHdHRZNkR5dTVuWGM5NGxVdWdpcWt3R2c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUQOxI2i x9fcJJCmolc/2Mgf+AxBpRn938+IDDJLEFuX36cIQxyCUlS8he8kDaR0l1BalW7t J2GvbNuvldZXqAzh92GTQVqA5usPUCWSB7GTydiBhMdEfbBXcn4WbOrjwhWQzC23 lbH+GMhpcKtUwsjVQLEfeFzxe72MKFSB5YvipLgcjSyT7rSEhrFWZ8BMNrcvPb9s kUJ+XZVgszK3AzF+9sGQ8NTTIFx3Gn7S3e1rP+RJSMvwF22MsYy3mYf9pPfHBBxs jLwYtVbAyjOWtnRJDwLJp8AlQ6+Wl8eEtYdF997yJiVKeCu/AbRg0eZZDKfdkQTN rBCd3QnQZevGbg== -----END CERTIFICATE-----Generated at Mon Feb 2 08:18:12 2026 by rpki-client