This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft File: JI9eJvHAj0SGyZEci2Cerotst00.mft (raw, json) Hash identifier: k9/J42ptoARXEaggaon9xz2Jsmb70R3yshbuySXUEJk= Subject key identifier: 5C:25:CE:3A:12:FA:D8:9C:41:12:69:04:DD:2D:3D:FE:65:4A:FF:7D Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d Certificate serial: 019BF4D0DCCB2AD633EEE99AC2CCA4AAC7F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 11:01:27 +0000 Manifest this update: Sun 25 Jan 2026 11:01:27 +0000 Manifest next update: Mon 26 Jan 2026 11:01:27 +0000 Files and hashes: 1: 9WiLMBOOIFui37XsSkkIFcDbunw.roa (hash: 41f5PwE35LBjKoYTvONiL6ypIZadvUiy3rHjOLDko1A=) 2: C0xNgAEq_VkYSa0gjqSo4X9OgDk.roa (hash: rs9H4EjX84lTTLv+iIvf+6h9tBHNg+MMsrqn9SRaoow=) 3: JI9eJvHAj0SGyZEci2Cerotst00.crl (hash: IACpGq5fHOYr8DRAACp/wQmTXd8pg76OOt5l2jMPRmU=) 4: PpAX2uR7dOm-fqI5gBjMqcI_sj0.roa (hash: hBH45ktoJ8q7ItYmiVnvXeZkIWerDTCntuxa+oH08yo=) 5: XVbyZDeAu74wqWgE4Lug0IJ0xJ4.roa (hash: G5/qOs1gotpqFOvbgNgnzqAQEWPvAJWudCVSYuYf4PQ=) 6: gVsFB1HmrHHx_F0oTpBh0qNylSQ.roa (hash: 0WvPL4gzlPSQJArhjHg92bA8wa85QK1qdsvxPM8R9XY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:dc:cb:2a:d6:33:ee:e9:9a:c2:cc:a4:aa:c7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d Validity Not Before: Jan 25 11:01:27 2026 GMT Not After : Jan 26 11:01:27 2026 GMT Subject: CN=5c25ce3a12fad89c41126904dd2d3dfe654aff7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2d:0c:5d:99:fd:78:cc:e3:93:a6:85:aa:b5: e4:fe:92:5a:da:a1:20:38:67:04:c0:1e:0d:5f:3e: 3a:8e:fe:0d:70:6a:82:2a:ed:8b:cd:43:c5:e4:49: 75:87:61:81:4f:76:60:04:6d:69:86:a5:38:13:4c: 5c:10:5d:1e:b0:4a:f2:a9:0c:74:0f:a8:79:f3:17: f1:fb:12:c8:1c:7a:69:7c:23:15:68:3c:3f:d7:f3: db:d6:65:9b:0f:6f:3a:81:39:9e:62:a6:30:d8:ec: 02:77:91:e7:ff:7c:01:a1:fc:ee:46:a1:14:20:e4: fd:b5:fb:d5:a1:b3:21:1b:98:be:ad:b9:21:9c:e2: 95:2d:bc:bb:78:c4:59:2e:11:c3:f1:d7:e5:d9:db: ed:8d:c2:b4:a1:ef:32:13:e6:46:93:e5:21:99:7a: 39:82:c4:aa:ca:b7:12:81:a0:7f:61:58:e3:d0:b7: 1a:a9:57:53:a0:18:65:94:a4:96:a4:a1:f2:90:af: 0f:69:77:2c:6d:c4:17:b3:f7:d8:58:be:a2:eb:93: c5:17:ed:b3:2b:88:9d:c6:7c:64:a7:bb:7e:bb:21: fb:7d:4c:df:ed:37:63:2c:21:96:6b:55:eb:c1:49: fe:1a:e6:ab:3a:85:32:e7:27:d1:12:8f:ae:86:7c: a4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:25:CE:3A:12:FA:D8:9C:41:12:69:04:DD:2D:3D:FE:65:4A:FF:7D X509v3 Authority Key Identifier: keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ba:b0:ab:5e:04:0b:6f:af:1c:3a:fc:f6:a2:d8:bb:56:7d: c0:73:a5:66:b1:dd:96:cf:4a:16:75:0d:b1:48:d5:30:e4:4e: 50:ce:8f:ec:21:c8:c1:ba:bd:da:0b:9f:a6:09:9d:f0:cb:70: 75:1f:2d:2d:cf:82:7d:58:b4:d7:6e:64:bc:52:a9:8e:94:f9: f3:f7:0f:db:73:6c:9f:e6:60:fa:93:26:f3:5a:3e:ed:8d:98: 74:df:4d:4b:5a:d8:85:1a:b1:05:89:08:7a:c2:9f:ba:fe:9a: fc:d5:80:43:a5:cd:f6:6f:fe:9d:68:db:81:15:a0:e0:c6:55: d7:c7:5b:9a:c4:f4:59:2b:ef:a3:75:a1:96:36:0a:62:80:0f: 66:fa:53:05:d3:7f:cf:81:a8:dc:86:19:b7:e4:20:84:02:36: bd:60:75:c9:08:3b:67:43:dc:c5:b3:fd:61:75:83:98:c0:74: 41:d2:40:bb:e6:2b:ac:da:70:d0:fb:79:1a:ea:1b:d5:92:b3: fd:88:cf:b0:ee:73:bf:26:38:82:bd:a8:53:d3:62:1e:ad:30: 2c:46:7e:d5:0e:c4:c4:69:b1:81:a1:d6:54:ff:68:60:d4:69: 7d:5a:b0:6c:8d:1b:59:a2:02:99:ba:e2:83:e2:15:1e:af:97: a8:1d:5c:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00NzLKtYz7umawsykqsf3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0OGY1ZTI2ZjFjMDhmNDQ4NmM5OTExYzhiNjA5ZWFlOGI2 Y2I3NGQwHhcNMjYwMTI1MTEwMTI3WhcNMjYwMTI2MTEwMTI3WjAzMTEwLwYDVQQD Eyg1YzI1Y2UzYTEyZmFkODljNDExMjY5MDRkZDJkM2RmZTY1NGFmZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S0MXZn9eMzjk6aFqrXk/pJa2qEg OGcEwB4NXz46jv4NcGqCKu2LzUPF5El1h2GBT3ZgBG1phqU4E0xcEF0esEryqQx0 D6h58xfx+xLIHHppfCMVaDw/1/Pb1mWbD286gTmeYqYw2OwCd5Hn/3wBofzuRqEU IOT9tfvVobMhG5i+rbkhnOKVLby7eMRZLhHD8dfl2dvtjcK0oe8yE+ZGk+UhmXo5 gsSqyrcSgaB/YVjj0LcaqVdToBhllKSWpKHykK8PaXcsbcQXs/fYWL6i65PFF+2z K4idxnxkp7t+uyH7fUzf7TdjLCGWa1XrwUn+GuarOoUy5yfREo+uhnykvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwlzjoS+ticQRJpBN0tPf5lSv99MB8GA1UdIwQY MBaAFCSPXibxwI9EhsmRHItgnq6LbLdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkk5ZUp2SEFqMFNHeVpFY2kyQ2Vyb3RzdDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kYWU4YjAtOTdkMC00OGQ0LTliMjYt MDEzN2IxZjc1ZDAyLzEvSkk5ZUp2SEFqMFNHeVpFY2kyQ2Vyb3RzdDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9kYWU4YjAtOTdkMC00OGQ0LTliMjYtMDEzN2IxZjc1ZDAy LzEvSkk5ZUp2SEFqMFNHeVpFY2kyQ2Vyb3RzdDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLqwq14E C2+vHDr89qLYu1Z9wHOlZrHdls9KFnUNsUjVMOROUM6P7CHIwbq92gufpgmd8Mtw dR8tLc+CfVi0125kvFKpjpT58/cP23Nsn+Zg+pMm81o+7Y2YdN9NS1rYhRqxBYkI esKfuv6a/NWAQ6XN9m/+nWjbgRWg4MZV18dbmsT0WSvvo3WhljYKYoAPZvpTBdN/ z4Go3IYZt+QghAI2vWB1yQg7Z0PcxbP9YXWDmMB0QdJAu+YrrNpw0Pt5Guob1ZKz /YjPsO5zvyY4gr2oU9NiHq0wLEZ+1Q7ExGmxgaHWVP9oYNRpfVqwbI0bWaICmbri g+IVHq+XqB1cWQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:11 2026 by rpki-client