This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft File: JwKaNvwMyi4KjQRfAi38gxpRcwg.mft (raw, json) Hash identifier: NdOUiyckzbjK/m1Z0rM2t1gfjTmn1ujDrRF1QnCl4J0= Subject key identifier: 41:24:9B:31:9E:AF:D4:C8:BB:B2:6D:AE:97:F4:9A:1C:89:2C:67:42 Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08 Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308 Certificate serial: 019BF61A05AC7D9F5311ACE936E1C224FF08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft Manifest number: 1730 Signing time: Sun 25 Jan 2026 17:00:58 +0000 Manifest this update: Sun 25 Jan 2026 17:00:58 +0000 Manifest next update: Mon 26 Jan 2026 17:00:58 +0000 Files and hashes: 1: JwKaNvwMyi4KjQRfAi38gxpRcwg.crl (hash: qlgYQ9Ad6Gbm5+vWkTbLIv6Ki/CP/sw7qr1/Chs1ToQ=) 2: XzeIaRbu0fSJVgranQAMBnDnOYk.roa (hash: dqxt73O8AnvVTC/pUjNqknVJAUikBp+bFUF6OzADUcg=) 3: aZei7dPraMpoyMe9a8A85iz9U9k.roa (hash: KtkMVG0TF4vgfuc7Eg25bY2/F+3g8sFzTM72NzjE2qo=) 4: nYOMmq9r2jYKxOZ_vMZVsG2YoIY.roa (hash: 73YqhTgSFV2KW1q+D3iw3fdx9BOAWsHiW6Qx96ipVDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:05:ac:7d:9f:53:11:ac:e9:36:e1:c2:24:ff:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308 Validity Not Before: Jan 25 17:00:58 2026 GMT Not After : Jan 26 17:00:58 2026 GMT Subject: CN=41249b319eafd4c8bbb26dae97f49a1c892c6742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c3:f0:2c:ac:40:c1:b3:1e:9a:31:56:ab:07: 44:bc:f8:cf:3b:14:6c:4d:ad:60:2e:63:db:c0:0a: 10:50:9c:d5:c4:3b:cf:19:81:75:16:a7:ef:65:ad: 67:b7:51:35:b7:e9:16:62:19:4a:b5:99:65:ab:07: b8:64:3f:b2:71:1c:72:13:fc:e2:28:65:e5:32:96: 95:e4:19:e5:36:b2:20:be:f4:d6:f2:02:8e:86:13: ca:d7:9b:7e:21:3a:10:9f:8e:c7:89:d0:32:82:9f: eb:70:52:31:79:d6:50:37:c0:72:6a:6a:99:25:94: 07:da:37:71:a5:37:5b:4d:c8:69:54:28:a1:f1:89: 21:de:58:d3:a8:0f:70:a8:c4:b2:b5:6f:87:30:c5: 64:c8:d0:e8:06:0e:cf:0d:cf:7a:9c:d7:cc:8c:68: 7c:e9:8b:bd:28:f9:b1:6c:9c:a2:0a:70:23:20:33: 93:01:74:f2:75:c1:5d:40:5f:98:3c:f7:df:72:3b: ac:8c:9a:9f:65:09:07:f9:ae:c2:30:76:30:19:19: b0:34:e6:fd:74:28:12:3a:c8:2c:ba:3e:23:55:d7: e3:96:75:9d:43:c8:f2:e7:7e:89:a0:88:93:08:b5: 2f:76:9d:cc:49:41:51:f5:b5:b6:fb:63:c8:98:1b: 39:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:24:9B:31:9E:AF:D4:C8:BB:B2:6D:AE:97:F4:9A:1C:89:2C:67:42 X509v3 Authority Key Identifier: keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a6:57:47:1b:b4:4f:51:ba:63:ab:b2:70:6b:6a:c1:70:c3: 16:5e:c2:11:f4:94:72:da:c7:2a:ff:13:9e:7f:29:dc:e8:37: aa:a4:24:94:c1:5c:67:3c:71:a1:47:5c:a5:b0:fe:38:b0:c2: d1:65:bd:4f:fb:84:e8:84:2b:08:52:60:7c:96:5c:40:ea:81: 5e:ec:a8:bd:e9:00:6a:53:00:95:f1:3e:a4:aa:fe:38:cb:a2: 3d:b1:64:6e:ee:63:a2:e0:68:73:37:f9:96:eb:d6:1b:3a:96: 8f:79:27:55:6f:36:78:be:25:1c:0c:35:d5:5f:a9:23:db:e2: 5a:fc:e8:34:c5:e6:36:38:3d:81:ff:6b:34:43:ac:fd:0a:72: 28:d4:d3:23:67:64:8d:5e:34:d2:f1:a9:2b:f6:96:51:fe:d1: 31:39:c4:e1:46:b5:3e:ab:65:d0:36:40:81:7c:4f:90:f7:7a: 95:3b:63:0d:cc:7e:6a:65:81:9a:a0:5a:a1:66:33:8d:34:b8: c6:12:72:01:5c:a6:47:8e:3f:0c:ce:11:ad:71:dc:0a:92:5b: 06:ac:10:d0:7d:70:05:73:a8:3c:76:56:31:50:78:fb:e2:25: d8:27:08:a2:05:53:e0:9c:b1:d7:74:ed:89:04:33:32:96:18: 6c:51:58:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GgWsfZ9TEazpNuHCJP8IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MDI5YTM2ZmMwY2NhMmUwYThkMDQ1ZjAyMmRmYzgzMWE1 MTczMDgwHhcNMjYwMTI1MTcwMDU4WhcNMjYwMTI2MTcwMDU4WjAzMTEwLwYDVQQD Eyg0MTI0OWIzMTllYWZkNGM4YmJiMjZkYWU5N2Y0OWExYzg5MmM2NzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsPwLKxAwbMemjFWqwdEvPjPOxRs Ta1gLmPbwAoQUJzVxDvPGYF1FqfvZa1nt1E1t+kWYhlKtZllqwe4ZD+ycRxyE/zi KGXlMpaV5BnlNrIgvvTW8gKOhhPK15t+IToQn47HidAygp/rcFIxedZQN8ByamqZ JZQH2jdxpTdbTchpVCih8Ykh3ljTqA9wqMSytW+HMMVkyNDoBg7PDc96nNfMjGh8 6Yu9KPmxbJyiCnAjIDOTAXTydcFdQF+YPPffcjusjJqfZQkH+a7CMHYwGRmwNOb9 dCgSOsgsuj4jVdfjlnWdQ8jy536JoIiTCLUvdp3MSUFR9bW2+2PImBs5QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEkmzGer9TIu7Jtrpf0mhyJLGdCMB8GA1UdIwQY MBaAFCcCmjb8DMouCo0EXwIt/IMaUXMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTct NTBkMGE1MzIzNjQxLzEvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTctNTBkMGE1MzIzNjQx LzEvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmqZXRxu0 T1G6Y6uycGtqwXDDFl7CEfSUctrHKv8Tnn8p3Og3qqQklMFcZzxxoUdcpbD+OLDC 0WW9T/uE6IQrCFJgfJZcQOqBXuyovekAalMAlfE+pKr+OMuiPbFkbu5jouBoczf5 luvWGzqWj3knVW82eL4lHAw11V+pI9viWvzoNMXmNjg9gf9rNEOs/QpyKNTTI2dk jV400vGpK/aWUf7RMTnE4Ua1Pqtl0DZAgXxPkPd6lTtjDcx+amWBmqBaoWYzjTS4 xhJyAVymR44/DM4RrXHcCpJbBqwQ0H1wBXOoPHZWMVB4++Il2CcIogVT4Jyx13Tt iQQzMpYYbFFYlg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:12:21 2026 by rpki-client