This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft File: JKmv_35_6wbhjeksJzVjuYAzMWs.mft (raw, json) Hash identifier: ETxyky7hrot19pBQ73SZ5UTnO+CfNFYhgQA/fCLXQB4= Subject key identifier: F5:FF:B6:7B:C8:45:93:CA:30:52:7B:88:85:9C:6C:D6:6A:F8:EB:45 Authority key identifier: 24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B Certificate issuer: /CN=24a9afff7e7feb06e18de92c273563b98033316b Certificate serial: 019BF46286D7D6433DD4442CA933E8AA57F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft Manifest number: 02D3 Signing time: Sun 25 Jan 2026 09:00:56 +0000 Manifest this update: Sun 25 Jan 2026 09:00:56 +0000 Manifest next update: Mon 26 Jan 2026 09:00:56 +0000 Files and hashes: 1: JKmv_35_6wbhjeksJzVjuYAzMWs.crl (hash: u3TCAz6iqcp4/Crd3+0Ls4Ar8SY3PDOJETLf1zoxXEU=) 2: OcGLgpdPjEji6rhRKA3ndoUPng8.roa (hash: uMbYxwC7JX58tZin/DJJELLb9OvFN38e9zDdfuZgxac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:86:d7:d6:43:3d:d4:44:2c:a9:33:e8:aa:57:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24a9afff7e7feb06e18de92c273563b98033316b Validity Not Before: Jan 25 09:00:56 2026 GMT Not After : Jan 26 09:00:56 2026 GMT Subject: CN=f5ffb67bc84593ca30527b88859c6cd66af8eb45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c0:b9:16:d4:1a:3a:b1:a8:6f:83:50:f0:e5: ac:a9:73:ac:7b:e1:9c:b3:d0:20:d2:b2:75:29:66: b6:11:6f:a7:4f:6e:04:d4:aa:4e:60:ac:fe:54:1a: 35:c0:cc:c3:3d:df:e3:01:be:10:57:32:0d:c7:21: 04:41:1f:2c:a4:57:55:65:7b:d2:60:76:21:45:44: 9c:c2:f7:e3:98:62:a1:5f:f6:9c:f0:7f:8a:38:a0: df:55:c0:22:ad:c4:a5:c2:fb:1c:c3:77:f4:fd:65: 49:a6:06:8c:a8:46:95:aa:da:05:41:50:7d:cd:77: 8f:bc:47:20:f8:3f:30:c9:20:37:97:59:b7:9d:32: 6d:2a:80:7f:4d:2c:46:f3:a9:f4:86:86:10:7a:6e: 76:d6:f0:9a:12:29:b4:17:5b:a6:87:ee:e0:52:1a: 0b:85:8b:01:8a:8e:96:33:eb:f2:d1:6a:11:68:43: dd:dd:76:ba:ff:e3:c3:dd:99:bd:10:38:f6:49:5b: 18:47:76:68:9a:18:06:97:26:73:db:8b:ce:9e:1f: e8:42:da:7c:62:79:68:3b:db:6e:5e:3d:24:2d:16: 53:db:f3:85:61:73:b0:ba:c0:ab:2a:c0:7c:f8:45: 0e:b6:1c:b6:24:e7:2d:01:b4:b7:75:a1:e5:ae:54: 2e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FF:B6:7B:C8:45:93:CA:30:52:7B:88:85:9C:6C:D6:6A:F8:EB:45 X509v3 Authority Key Identifier: keyid:24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:21:b8:b2:e1:77:f5:7c:e2:fb:3d:dc:48:50:cf:3c:c5:e2: 8f:be:40:9f:6c:00:01:43:fe:8b:23:a9:da:02:8e:fc:3c:69: 07:f3:58:ab:22:3c:e5:59:24:e4:79:d3:5e:03:9f:a0:87:c5: db:55:13:86:87:84:81:c4:9e:17:64:60:42:ff:9f:21:ca:09: f9:d4:05:4c:4a:72:fc:1c:1b:75:21:5e:74:11:3e:15:38:36: 5e:a5:5d:37:ba:c6:29:1c:8a:e3:c3:17:3d:32:0f:00:c7:3e: 48:65:83:9e:15:c0:fb:84:89:07:d8:0d:77:a7:c4:ef:2f:6a: 15:53:80:2e:9f:15:9c:06:ed:7b:ee:38:f4:ba:37:20:4a:47: bb:7d:1c:ed:0a:22:f0:b7:96:65:6a:c9:22:27:98:0c:5f:dc: 1a:9d:ca:c8:1f:4f:68:60:90:16:bd:65:b6:5e:80:67:e6:1e: 1a:5f:6a:08:c0:95:38:05:05:c6:e3:56:dd:80:ce:96:b3:ae: 29:b5:48:03:26:8f:2e:38:f1:3b:91:9c:4d:4d:91:37:9f:70: d4:06:79:ef:6d:21:b2:87:16:22:7d:10:99:f2:c7:e4:46:1e: 52:42:77:fc:ac:6f:c8:9c:22:b3:26:c8:5d:de:dd:28:a0:ce: a8:46:4a:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YobX1kM91EQsqTPoqlf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YTlhZmZmN2U3ZmViMDZlMThkZTkyYzI3MzU2M2I5ODAz MzMxNmIwHhcNMjYwMTI1MDkwMDU2WhcNMjYwMTI2MDkwMDU2WjAzMTEwLwYDVQQD EyhmNWZmYjY3YmM4NDU5M2NhMzA1MjdiODg4NTljNmNkNjZhZjhlYjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08C5FtQaOrGob4NQ8OWsqXOse+Gc s9Ag0rJ1KWa2EW+nT24E1KpOYKz+VBo1wMzDPd/jAb4QVzINxyEEQR8spFdVZXvS YHYhRUScwvfjmGKhX/ac8H+KOKDfVcAircSlwvscw3f0/WVJpgaMqEaVqtoFQVB9 zXePvEcg+D8wySA3l1m3nTJtKoB/TSxG86n0hoYQem521vCaEim0F1umh+7gUhoL hYsBio6WM+vy0WoRaEPd3Xa6/+PD3Zm9EDj2SVsYR3ZomhgGlyZz24vOnh/oQtp8 YnloO9tuXj0kLRZT2/OFYXOwusCrKsB8+EUOthy2JOctAbS3daHlrlQu/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPX/tnvIRZPKMFJ7iIWcbNZq+OtFMB8GA1UdIwQY MBaAFCSpr/9+f+sG4Y3pLCc1Y7mAMzFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZWNkMTEtYmM4MC00NTNhLTgyMDEt NzE2MTIwYWIyZGIyLzEvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jZWNkMTEtYmM4MC00NTNhLTgyMDEtNzE2MTIwYWIyZGIy LzEvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCG4suF3 9Xzi+z3cSFDPPMXij75An2wAAUP+iyOp2gKO/DxpB/NYqyI85Vkk5HnTXgOfoIfF 21UThoeEgcSeF2RgQv+fIcoJ+dQFTEpy/BwbdSFedBE+FTg2XqVdN7rGKRyK48MX PTIPAMc+SGWDnhXA+4SJB9gNd6fE7y9qFVOALp8VnAbte+449Lo3IEpHu30c7Qoi 8LeWZWrJIieYDF/cGp3KyB9PaGCQFr1ltl6AZ+YeGl9qCMCVOAUFxuNW3YDOlrOu KbVIAyaPLjjxO5GcTU2RN59w1AZ5720hsocWIn0QmfLH5EYeUkJ3/KxvyJwisybI Xd7dKKDOqEZKvg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:13 2026 by rpki-client