This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft File: jgo5Gq64_HyDP4JX16nnSlWzOv4.mft (raw, json) Hash identifier: pBb46fgQfn/bbW5k3hk9YXjTTPe36Aik6Cp2evOdsDQ= Subject key identifier: 31:5E:CA:76:41:C6:5D:00:7E:62:22:58:BC:D7:3B:0E:6B:12:D6:1F Authority key identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE Certificate issuer: /CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe Certificate serial: 019BF5077006EF20E05CB41C0C7676BDC9DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft Manifest number: 172D Signing time: Sun 25 Jan 2026 12:01:03 +0000 Manifest this update: Sun 25 Jan 2026 12:01:03 +0000 Manifest next update: Mon 26 Jan 2026 12:01:03 +0000 Files and hashes: 1: jgo5Gq64_HyDP4JX16nnSlWzOv4.crl (hash: Km5/DBxQBPSvN7cb/XrP8gFPSGub/Lx/GdMZNHG1vZA=) 2: wBtREldvDjl4K9_Eyc6xek7-RYI.roa (hash: z4RdhE9lhhi0tt8aHo4p1WawqFAV7GTzx2aHrOIBbVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:70:06:ef:20:e0:5c:b4:1c:0c:76:76:bd:c9:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe Validity Not Before: Jan 25 12:01:03 2026 GMT Not After : Jan 26 12:01:03 2026 GMT Subject: CN=315eca7641c65d007e622258bcd73b0e6b12d61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:14:a3:1f:5c:96:0b:50:b8:be:48:ed:06:83: 24:55:54:a9:81:81:a5:82:5a:42:a6:e4:95:4a:97: 33:eb:8a:2a:0d:e5:b2:31:9a:f1:f3:cc:30:54:13: fc:64:47:de:13:f2:b8:f6:fb:c3:a1:16:21:e9:f4: a8:45:db:06:2e:9f:df:cf:94:79:ae:06:bc:e4:61: 68:55:7e:8c:b2:31:77:47:5a:de:2d:af:e7:ce:2f: ab:11:b2:38:dd:06:42:6e:b7:8e:92:cf:fa:10:65: 92:30:c0:cd:43:5a:2a:15:c7:fb:36:40:d0:c5:cb: 96:e4:85:5a:9a:a7:34:24:02:8d:1f:d4:22:2c:1e: 09:0c:b3:3c:93:77:90:b1:eb:10:e3:82:46:ca:8f: 0e:55:4d:4a:e8:94:36:c8:34:b2:95:8b:7d:a4:b9: 79:6c:36:1f:01:dc:e6:3a:f2:19:7c:c6:32:32:9d: db:54:ac:e1:fe:32:af:36:3c:24:56:3e:d0:41:a9: ab:9e:a1:3b:dc:74:a1:1b:18:2f:c3:c5:a4:c2:bc: f9:88:2b:db:91:69:71:ac:71:3c:f5:d4:dd:22:36: d9:96:5d:a9:a9:9c:21:84:f2:8b:a9:17:6f:f1:10: fe:5d:87:4d:bd:2d:a2:2b:d1:62:13:b3:f6:91:da: c6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5E:CA:76:41:C6:5D:00:7E:62:22:58:BC:D7:3B:0E:6B:12:D6:1F X509v3 Authority Key Identifier: keyid:8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d5:89:8f:f0:ee:87:e6:50:fe:b7:14:6d:27:7c:7e:32:83: d9:cf:f6:43:ab:a7:30:a9:f1:6a:35:8d:6d:80:54:32:df:5f: d7:14:a7:4d:21:b4:95:74:99:aa:af:84:f7:f8:cc:3c:26:54: dc:9a:91:31:9c:f3:45:91:70:07:22:c3:f7:7d:a7:29:87:13: 91:30:a0:82:72:05:19:86:a9:e0:be:c3:a5:91:aa:c4:d8:ea: cb:1a:79:b6:aa:a2:7c:54:e6:ee:11:41:f7:0f:3e:75:6b:81: 9b:f5:de:1d:35:f5:e8:a6:be:09:87:f2:40:d2:5d:1b:b6:23: 25:98:7b:24:1d:86:6b:bf:82:5d:98:12:d3:ff:a2:50:aa:40: 51:29:09:59:35:37:a3:5f:75:63:1e:dc:49:3c:17:31:bd:c7: d0:39:d0:32:ef:84:37:7a:fc:5d:02:6c:90:93:a8:b9:97:39: 22:91:72:f0:7f:b3:fd:50:ef:aa:bd:37:75:c6:bf:f4:ef:92: dd:bf:1e:aa:ab:8e:40:21:b2:20:d1:18:f4:40:af:16:75:7c: d1:0c:7f:88:66:c3:9c:cd:1c:18:ac:a6:77:71:fc:f4:b2:1c: 8b:a0:93:6f:57:1e:87:d2:83:de:a1:38:e4:46:98:60:3f:8d: ae:5b:11:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B3AG7yDgXLQcDHZ2vcncMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMGEzOTFhYWViOGZjN2M4MzNmODI1N2Q3YTllNzRhNTVi MzNhZmUwHhcNMjYwMTI1MTIwMTAzWhcNMjYwMTI2MTIwMTAzWjAzMTEwLwYDVQQD EygzMTVlY2E3NjQxYzY1ZDAwN2U2MjIyNThiY2Q3M2IwZTZiMTJkNjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthSjH1yWC1C4vkjtBoMkVVSpgYGl glpCpuSVSpcz64oqDeWyMZrx88wwVBP8ZEfeE/K49vvDoRYh6fSoRdsGLp/fz5R5 rga85GFoVX6MsjF3R1reLa/nzi+rEbI43QZCbreOks/6EGWSMMDNQ1oqFcf7NkDQ xcuW5IVamqc0JAKNH9QiLB4JDLM8k3eQsesQ44JGyo8OVU1K6JQ2yDSylYt9pLl5 bDYfAdzmOvIZfMYyMp3bVKzh/jKvNjwkVj7QQamrnqE73HShGxgvw8Wkwrz5iCvb kWlxrHE89dTdIjbZll2pqZwhhPKLqRdv8RD+XYdNvS2iK9FiE7P2kdrGZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFeynZBxl0AfmIiWLzXOw5rEtYfMB8GA1UdIwQY MBaAFI4KORquuPx8gz+CV9ep50pVszr+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamdvNUdxNjRfSHlEUDRKWDE2bm5TbFd6T3Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMjY1MDEtNjcxOC00MmJjLTkxZGYt ZWRiNDNlMWQ0ZWUwLzEvamdvNUdxNjRfSHlEUDRKWDE2bm5TbFd6T3Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mMjY1MDEtNjcxOC00MmJjLTkxZGYtZWRiNDNlMWQ0ZWUw LzEvamdvNUdxNjRfSHlEUDRKWDE2bm5TbFd6T3Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNWJj/Du h+ZQ/rcUbSd8fjKD2c/2Q6unMKnxajWNbYBUMt9f1xSnTSG0lXSZqq+E9/jMPCZU 3JqRMZzzRZFwByLD932nKYcTkTCggnIFGYap4L7DpZGqxNjqyxp5tqqifFTm7hFB 9w8+dWuBm/XeHTX16Ka+CYfyQNJdG7YjJZh7JB2Ga7+CXZgS0/+iUKpAUSkJWTU3 o191Yx7cSTwXMb3H0DnQMu+EN3r8XQJskJOouZc5IpFy8H+z/VDvqr03dca/9O+S 3b8eqquOQCGyINEY9ECvFnV80Qx/iGbDnM0cGKymd3H89LIci6CTb1ceh9KD3qE4 5EaYYD+NrlsRAQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:33:35 2026 by rpki-client