This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft File: Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json) Hash identifier: poPxX9tl/b7wEXfpnSM6yHRVr9uBj4h6D3+295t+7qk= Subject key identifier: 73:5E:3E:B2:E1:BF:42:20:0D:F0:29:14:E2:77:FB:33:CF:18:2D:95 Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4 Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4 Certificate serial: 019BF6884E3E34C0B89D063D93A00F41DE81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 19:01:26 +0000 Manifest this update: Sun 25 Jan 2026 19:01:26 +0000 Manifest next update: Mon 26 Jan 2026 19:01:26 +0000 Files and hashes: 1: 6MvEEf7_I3zO3ShtqYd8LKtfRq8.roa (hash: lIgvAYq1Ass4AfPtbYog1dJL/68LEdNig8uh3pGw9vM=) 2: EKgYi5uwmdQ3SbZogfsfQT2cobM.roa (hash: Y3gYmZwUht9JEwQTGH6EyDKQhtm/rC13n1867BeBzvQ=) 3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: QLixb7m04MwDziVGJq77LBZRUGsEuH82zsv3PfvdMpM=) 4: Jqk7oDaY0GyweY_m1dLexacLzPE.roa (hash: prybAkap/ary1cwam/oMqauOzBkuf1YCV2giq0/4yoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:4e:3e:34:c0:b8:9d:06:3d:93:a0:0f:41:de:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4 Validity Not Before: Jan 25 19:01:26 2026 GMT Not After : Jan 26 19:01:26 2026 GMT Subject: CN=735e3eb2e1bf42200df02914e277fb33cf182d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:53:2d:7b:5b:83:12:a2:b2:66:50:7c:05:e8: 4f:51:72:e8:62:54:0e:c7:a0:e2:3d:48:39:e4:42: e2:3b:9d:b1:d9:96:6b:f4:4f:dc:f8:9d:10:f2:56: 46:c5:0c:e4:5a:15:1d:3b:6d:b0:8c:75:3d:f1:1b: b9:7f:7d:64:b9:8d:c1:e6:4f:11:94:99:dd:f2:85: 9e:ba:12:e6:13:67:d6:71:8f:e5:d2:8a:c6:cc:78: 01:db:71:db:4c:ed:56:cb:85:b7:31:74:87:50:62: b8:bc:f3:a5:db:36:f7:99:98:c0:41:66:11:1d:0a: 80:b4:c7:dd:d7:4b:55:28:cb:c9:c0:ce:71:4a:6b: be:f1:a7:c3:9a:fe:3a:dd:86:8d:b3:a4:ec:5b:b2: 1f:66:86:5c:bb:11:f3:5c:e1:cf:75:7d:2c:e1:0d: 6d:9f:22:9b:5c:c4:af:4a:b5:31:0e:ec:4a:6c:f7: 63:59:e2:04:2e:40:92:9b:3f:f6:5b:42:27:72:77: a4:a8:63:0a:6b:ed:1b:1f:b6:be:8d:4d:6b:ae:a2: 3f:5a:b0:17:ae:a9:64:39:c3:46:a6:42:49:4f:e9: 3d:ab:a4:34:c6:f2:71:88:ff:84:08:ab:47:80:02: c0:7d:f2:6a:df:15:87:6a:aa:9e:06:3c:f9:fa:1b: 2e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5E:3E:B2:E1:BF:42:20:0D:F0:29:14:E2:77:FB:33:CF:18:2D:95 X509v3 Authority Key Identifier: keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e9:c2:27:0f:98:a6:b2:88:12:c7:a8:75:58:73:85:21:38: b2:48:53:a0:ee:55:56:23:1f:58:54:c2:7a:35:21:ad:ec:ae: 64:18:1a:3b:d7:a4:fe:40:01:90:f4:88:12:7e:18:47:98:03: 16:69:49:04:92:31:70:b6:b5:07:a9:82:67:95:33:80:15:15: 00:28:03:35:85:47:7e:52:bf:14:f4:96:a5:b7:fa:dc:7f:c1: a7:85:b3:bd:39:62:94:cc:be:67:ce:3d:be:a0:bd:e9:65:02: 8b:8a:24:b2:a9:66:e9:26:de:5a:e3:e2:e6:e1:ef:9f:76:f5: 92:a6:9c:b0:50:78:e9:43:6a:35:eb:f4:17:9a:7a:60:2b:91: d4:72:5b:ef:39:eb:f5:f5:1f:be:4e:34:3a:7d:87:31:7b:3d: 21:44:9c:63:10:90:42:e8:7e:4e:87:f8:43:5f:b6:07:5b:66: df:50:b1:a5:58:fd:28:7b:bb:6a:d5:f2:2c:39:ee:e3:fc:00: 26:a1:9c:8b:60:ad:0f:31:f1:10:71:71:c8:91:10:91:e3:ea: 07:cd:3d:74:d0:3b:07:4a:bc:98:c2:62:fe:00:38:c4:1f:9f: 96:67:17:56:47:ce:9b:03:68:25:69:a7:3b:96:48:09:21:83: 30:2f:45:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iE4+NMC4nQY9k6APQd6BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YTg3OWQ2MjhmZTVlYzhhNzYxYzQ3NDg2Nzk5OTNmOWM2 OWY4YjQwHhcNMjYwMTI1MTkwMTI2WhcNMjYwMTI2MTkwMTI2WjAzMTEwLwYDVQQD Eyg3MzVlM2ViMmUxYmY0MjIwMGRmMDI5MTRlMjc3ZmIzM2NmMTgyZDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1Mte1uDEqKyZlB8BehPUXLoYlQO x6DiPUg55ELiO52x2ZZr9E/c+J0Q8lZGxQzkWhUdO22wjHU98Ru5f31kuY3B5k8R lJnd8oWeuhLmE2fWcY/l0orGzHgB23HbTO1Wy4W3MXSHUGK4vPOl2zb3mZjAQWYR HQqAtMfd10tVKMvJwM5xSmu+8afDmv463YaNs6TsW7IfZoZcuxHzXOHPdX0s4Q1t nyKbXMSvSrUxDuxKbPdjWeIELkCSmz/2W0IncnekqGMKa+0bH7a+jU1rrqI/WrAX rqlkOcNGpkJJT+k9q6Q0xvJxiP+ECKtHgALAffJq3xWHaqqeBjz5+hsutQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNePrLhv0IgDfApFOJ3+zPPGC2VMB8GA1UdIwQY MBaAFCWoedYo/l7Ip2HEdIZ5mT+cafi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMt ZDg2YjRjYWVkMTFkLzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMtZDg2YjRjYWVkMTFk LzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOnCJw+Y prKIEseodVhzhSE4skhToO5VViMfWFTCejUhreyuZBgaO9ek/kABkPSIEn4YR5gD FmlJBJIxcLa1B6mCZ5UzgBUVACgDNYVHflK/FPSWpbf63H/Bp4WzvTlilMy+Z849 vqC96WUCi4oksqlm6SbeWuPi5uHvn3b1kqacsFB46UNqNev0F5p6YCuR1HJb7znr 9fUfvk40On2HMXs9IUScYxCQQuh+Tof4Q1+2B1tm31CxpVj9KHu7atXyLDnu4/wA JqGci2CtDzHxEHFxyJEQkePqB809dNA7B0q8mMJi/gA4xB+flmcXVkfOmwNoJWmn O5ZICSGDMC9FPA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:42 2026 by rpki-client