This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json) Hash identifier: TneFE26zYIEeA+Q9ViHt2YBgcSVzpRekYyc+sXJFgAM= Subject key identifier: 65:54:2E:65:98:51:70:F9:B5:D0:FB:3C:25:39:E4:1A:F0:33:5B:ED Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0 Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0 Certificate serial: 019BF5E40AB01F6BFBEA2A4C57E5B52B668A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft Manifest number: 10DF Signing time: Sun 25 Jan 2026 16:02:01 +0000 Manifest this update: Sun 25 Jan 2026 16:02:01 +0000 Manifest next update: Mon 26 Jan 2026 16:02:01 +0000 Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: 8ctc/3kgmLrMKkqsBbHpWHgfci6UAtBIypyVf5Z9myw=) 2: OHHaGHrJUG4Z7QEZTM3vHVpbnVE.roa (hash: nJnrlEE8x/srGp0O1q5atoaBywa0T1yFutOMsJNy5B0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e4:0a:b0:1f:6b:fb:ea:2a:4c:57:e5:b5:2b:66:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0 Validity Not Before: Jan 25 16:02:01 2026 GMT Not After : Jan 26 16:02:01 2026 GMT Subject: CN=65542e65985170f9b5d0fb3c2539e41af0335bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a1:23:c7:6d:60:83:26:4f:aa:46:d7:88:8f: fb:4f:50:cb:5b:ae:ae:c0:2d:28:ee:e9:79:e0:a7: b1:47:aa:b5:97:37:36:6d:f2:9e:cc:0d:b1:7d:ca: 7d:54:55:a1:37:6d:c8:51:9e:d7:b2:d8:62:e9:11: 20:52:2e:21:15:db:b7:3d:ec:31:27:36:3d:03:da: 02:eb:c3:84:44:0c:5f:39:c7:2f:67:75:b9:08:61: 52:47:a0:2b:cc:f9:d7:37:e9:c0:45:b0:25:93:5f: e0:44:d1:31:1d:a4:a4:9e:30:dc:20:47:44:7d:cf: dd:7f:2a:10:42:66:73:86:74:e9:fd:6b:87:f7:3f: af:70:d2:ee:6a:0c:ad:7d:a0:a5:d6:fe:ab:c1:a6: 65:69:a2:25:6e:33:97:25:f5:b7:f3:43:7a:06:74: 2a:7a:10:c8:a4:61:89:03:9e:e4:58:b9:4d:9d:b0: c4:5f:2b:5c:a0:99:52:4a:ae:07:f9:38:61:c9:fc: ef:a3:90:19:63:25:83:54:cb:d0:68:19:b0:56:2b: bf:32:ae:f8:d7:d0:16:bb:8d:20:a3:da:b0:23:48: 6e:62:e1:2b:02:47:fa:4f:f3:6d:0b:b1:65:4a:cf: 8f:e3:95:4d:04:aa:b1:37:93:ba:9d:71:1c:dd:90: f3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:54:2E:65:98:51:70:F9:B5:D0:FB:3C:25:39:E4:1A:F0:33:5B:ED X509v3 Authority Key Identifier: keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8a:a5:75:95:ab:b6:a4:57:58:cc:5a:21:e8:dc:52:52:1a: 41:3a:f7:60:5d:ae:9e:99:d1:6e:95:56:66:0f:90:ba:a1:c6: ac:3d:2d:92:cf:37:1d:cf:3b:ad:9f:8d:57:a8:cc:63:63:68: f3:e3:3e:cd:c3:fd:e8:4d:03:b3:22:1b:46:aa:39:8c:98:ba: 4b:35:ed:3e:b8:d4:65:10:ff:cc:67:5e:49:83:0d:9c:9a:f9: 57:1a:7b:46:51:84:5a:26:43:19:b2:59:e2:f4:3f:65:c7:99: 47:47:5d:ea:7c:8e:0c:68:26:e2:26:8e:74:28:56:ba:85:fd: 6f:0b:b0:0c:0c:c2:83:02:03:b5:6d:48:ad:c1:95:e0:ff:42: 74:92:d3:5a:a3:ee:4d:43:94:6e:c2:d9:17:12:c3:59:10:96: 63:7e:0f:99:b2:7f:1a:89:d0:1a:6b:63:fc:6e:7f:13:92:13: 88:0d:e4:39:89:46:9e:c2:0b:31:c0:89:fe:da:b6:19:2d:e2: f9:68:51:42:e6:e5:33:97:d2:65:0e:bb:44:a0:eb:6f:b5:53: 64:3d:2d:17:19:1f:b1:c3:39:e9:ff:45:e1:a6:d4:60:8e:af: 68:14:6a:6f:99:51:a2:20:fe:22:bb:10:8f:95:f6:9b:66:22: 06:d4:97:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv15AqwH2v76ipMV+W1K2aKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NTg3M2FlMjM1MGQwZTNlOGMzNTUzYmY5MDY0NjExMjc2 NGUxYzAwHhcNMjYwMTI1MTYwMjAxWhcNMjYwMTI2MTYwMjAxWjAzMTEwLwYDVQQD Eyg2NTU0MmU2NTk4NTE3MGY5YjVkMGZiM2MyNTM5ZTQxYWYwMzM1YmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06Ejx21ggyZPqkbXiI/7T1DLW66u wC0o7ul54KexR6q1lzc2bfKezA2xfcp9VFWhN23IUZ7Xsthi6REgUi4hFdu3Pewx JzY9A9oC68OERAxfOccvZ3W5CGFSR6ArzPnXN+nARbAlk1/gRNExHaSknjDcIEdE fc/dfyoQQmZzhnTp/WuH9z+vcNLuagytfaCl1v6rwaZlaaIlbjOXJfW380N6BnQq ehDIpGGJA57kWLlNnbDEXytcoJlSSq4H+Thhyfzvo5AZYyWDVMvQaBmwViu/Mq74 19AWu40go9qwI0huYuErAkf6T/NtC7FlSs+P45VNBKqxN5O6nXEc3ZDz3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVULmWYUXD5tdD7PCU55BrwM1vtMB8GA1UdIwQY MBaAFCZYc64jUNDj6MNVO/kGRhEnZOHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82M2MzNDQtYjUwZS00YWYwLTllOWUt ZmNkNGY3OTdkMzU2LzEvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC82M2MzNDQtYjUwZS00YWYwLTllOWUtZmNkNGY3OTdkMzU2 LzEvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoqldZWr tqRXWMxaIejcUlIaQTr3YF2unpnRbpVWZg+QuqHGrD0tks83Hc87rZ+NV6jMY2No 8+M+zcP96E0DsyIbRqo5jJi6SzXtPrjUZRD/zGdeSYMNnJr5Vxp7RlGEWiZDGbJZ 4vQ/ZceZR0dd6nyODGgm4iaOdChWuoX9bwuwDAzCgwIDtW1IrcGV4P9CdJLTWqPu TUOUbsLZFxLDWRCWY34PmbJ/GonQGmtj/G5/E5ITiA3kOYlGnsILMcCJ/tq2GS3i +WhRQublM5fSZQ67RKDrb7VTZD0tFxkfscM56f9F4abUYI6vaBRqb5lRoiD+IrsQ j5X2m2YiBtSXOA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:54:18 2026 by rpki-client