This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json) Hash identifier: N8FfwVsDSSbM9qpkwqDhhmi57TLxvE6ujALjKRTBW1k= Subject key identifier: EC:BD:39:FA:4E:35:49:09:79:9B:DD:21:AD:7D:7D:96:51:E6:D8:7E Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe Certificate serial: 019BF651447944A8F25CA0889DBD879D35C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft Manifest number: 1396 Signing time: Sun 25 Jan 2026 18:01:19 +0000 Manifest this update: Sun 25 Jan 2026 18:01:19 +0000 Manifest next update: Mon 26 Jan 2026 18:01:19 +0000 Files and hashes: 1: 2zatrSnboczgSJyqZMZSlWLUtgU.roa (hash: X83ll2h7XLvQkyBb5b0DZRoRK6wcb/CaXhRs2FxEIUI=) 2: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: cTNkhC+HUgUeAll4EePhzzpJkeDCNiiOk8mC5wparwc=) 3: RrW3iZFpgHFuK1USxDsMnM1LusA.roa (hash: /DqnuC18dHwT7Z+hUMZE9xD1UgRrxpE5xwXXr5v68Yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:44:79:44:a8:f2:5c:a0:88:9d:bd:87:9d:35:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe Validity Not Before: Jan 25 18:01:19 2026 GMT Not After : Jan 26 18:01:19 2026 GMT Subject: CN=ecbd39fa4e354909799bdd21ad7d7d9651e6d87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:18:3a:0f:ad:65:6f:40:b9:d7:9a:7d:22:2d: e7:c3:6b:91:4c:28:a0:65:82:23:5f:b6:99:df:3e: 81:e4:94:e7:6e:cb:74:e5:cd:aa:7b:3d:89:59:4c: 87:83:a1:79:14:76:b8:c7:76:be:4e:ca:6b:8e:3e: 12:c1:7e:f6:7b:02:dc:f4:1c:7f:a7:06:19:e2:7a: 4a:f5:3f:be:4e:ee:95:3e:c7:23:2a:fd:85:9e:57: 28:85:3d:1d:6b:80:91:73:17:f8:36:5d:af:a0:aa: 00:58:9b:ac:86:6c:d0:8e:c7:bf:58:5b:12:24:e0: 86:8c:ea:aa:a8:00:35:de:50:3d:8e:d3:46:b8:f5: 14:65:5a:fd:ee:bb:3b:c6:58:2a:29:95:8d:de:a2: be:bd:09:8c:14:9a:ee:23:a0:40:19:2d:d7:bf:fe: e2:2f:27:3b:06:a2:14:6d:50:77:79:bc:73:3b:94: e3:28:48:e2:0a:11:3a:20:0f:18:3e:d1:4c:7f:29: 58:dc:da:22:79:34:68:56:d7:be:67:cf:79:a3:c0: 6d:f3:89:aa:76:b9:e1:75:09:46:70:a2:0c:06:86: c5:49:8b:c4:69:a1:4f:e0:ca:7e:75:30:75:c9:36: 5e:8d:e6:19:78:2e:47:45:36:c7:f7:29:16:31:bf: a1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BD:39:FA:4E:35:49:09:79:9B:DD:21:AD:7D:7D:96:51:E6:D8:7E X509v3 Authority Key Identifier: keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:77:5e:76:40:21:2b:34:a6:de:9b:79:c3:e5:14:ff:64:e5: a6:e7:e3:00:d4:1f:80:6b:4a:48:eb:33:73:97:52:33:50:b7: 55:0b:a3:a0:d2:e8:67:e2:96:12:74:d5:94:d9:71:bf:fe:fc: 43:2c:13:b7:56:41:3e:ae:6f:bf:76:f2:0c:dc:48:7d:eb:bb: d0:fa:d9:ae:35:87:81:a3:33:54:50:a4:38:23:ef:37:0b:17: 2c:48:51:26:f6:45:39:2a:58:ee:c8:94:10:74:e1:ff:4b:53: a2:28:dd:f6:ac:00:ae:78:fe:e4:9e:09:3b:2a:ac:05:fd:60: d6:26:f5:49:b4:b3:12:f4:ca:1c:f3:6f:36:b9:74:bd:80:71: ee:67:fc:df:0b:cb:08:ac:4e:a2:cc:f3:ad:94:db:fa:26:9d: 02:36:c5:2a:45:44:75:e7:16:61:ca:9f:9f:01:03:e4:2c:58: 8f:a9:63:27:6d:55:3c:10:70:db:bb:21:1c:c2:a1:68:0f:01: 8b:94:d1:57:1b:74:1c:47:7d:bf:f4:3b:6b:6e:14:91:d9:5a: a3:bb:72:9e:fd:77:c4:be:74:c5:3b:4f:e2:ba:d2:9b:5c:a9: 1a:3e:da:f9:42:1f:5c:60:c1:e2:9e:bc:48:b9:a7:6c:6f:4b: c5:48:06:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UUR5RKjyXKCInb2HnTXCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MmM0ZTJiZjVmMjEzODQ2MmVmNGE1ZDllMGY2ZTdhNzYz NTMwZmUwHhcNMjYwMTI1MTgwMTE5WhcNMjYwMTI2MTgwMTE5WjAzMTEwLwYDVQQD EyhlY2JkMzlmYTRlMzU0OTA5Nzk5YmRkMjFhZDdkN2Q5NjUxZTZkODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hg6D61lb0C515p9Ii3nw2uRTCig ZYIjX7aZ3z6B5JTnbst05c2qez2JWUyHg6F5FHa4x3a+Tsprjj4SwX72ewLc9Bx/ pwYZ4npK9T++Tu6VPscjKv2FnlcohT0da4CRcxf4Nl2voKoAWJushmzQjse/WFsS JOCGjOqqqAA13lA9jtNGuPUUZVr97rs7xlgqKZWN3qK+vQmMFJruI6BAGS3Xv/7i Lyc7BqIUbVB3ebxzO5TjKEjiChE6IA8YPtFMfylY3NoieTRoVte+Z895o8Bt84mq drnhdQlGcKIMBobFSYvEaaFP4Mp+dTB1yTZejeYZeC5HRTbH9ykWMb+hyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOy9OfpONUkJeZvdIa19fZZR5th+MB8GA1UdIwQY MBaAFCUsTiv18hOEYu9KXZ4Pbnp2NTD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlN4T0tfWHlFNFJpNzBwZG5nOXVlblkxTVA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iYmJhODgtMTM0NC00ZDg5LThmNTIt NmRmN2JmNTllMzI2LzEvSlN4T0tfWHlFNFJpNzBwZG5nOXVlblkxTVA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9iYmJhODgtMTM0NC00ZDg5LThmNTItNmRmN2JmNTllMzI2 LzEvSlN4T0tfWHlFNFJpNzBwZG5nOXVlblkxTVA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHdedkAh KzSm3pt5w+UU/2TlpufjANQfgGtKSOszc5dSM1C3VQujoNLoZ+KWEnTVlNlxv/78 QywTt1ZBPq5vv3byDNxIfeu70PrZrjWHgaMzVFCkOCPvNwsXLEhRJvZFOSpY7siU EHTh/0tToijd9qwArnj+5J4JOyqsBf1g1ib1SbSzEvTKHPNvNrl0vYBx7mf83wvL CKxOoszzrZTb+iadAjbFKkVEdecWYcqfnwED5CxYj6ljJ21VPBBw27shHMKhaA8B i5TRVxt0HEd9v/Q7a24Ukdlao7tynv13xL50xTtP4rrSm1ypGj7a+UIfXGDB4p68 SLmnbG9LxUgGKg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:20 2026 by rpki-client