This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft File: JZB_kNn52QL88EvQtGFSw4J6fVA.mft (raw, json) Hash identifier: Evy2W89HOqrHssyFURcgta9TY5N6XjrjB4tezHlgnJQ= Subject key identifier: DC:95:06:0A:1E:DD:05:BE:BF:E0:6D:36:E1:5D:85:DB:E4:CE:2D:1F Authority key identifier: 25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50 Certificate issuer: /CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50 Certificate serial: 019BF687833225D9AA71B3B256D2D1D70DDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft Manifest number: 9B Signing time: Sun 25 Jan 2026 19:00:34 +0000 Manifest this update: Sun 25 Jan 2026 19:00:34 +0000 Manifest next update: Mon 26 Jan 2026 19:00:34 +0000 Files and hashes: 1: EuHmvZqA0d7whOU9Mu_fZulPfvk.roa (hash: eTa89x27kdSBV0z11RQY9zM4csiG8i7HDOpZrHPd1yA=) 2: JZB_kNn52QL88EvQtGFSw4J6fVA.crl (hash: FOfQOZrHnL52q5aIeqACZwW0ng3qef47wRkSUXwpQ4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:83:32:25:d9:aa:71:b3:b2:56:d2:d1:d7:0d:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50 Validity Not Before: Jan 25 19:00:34 2026 GMT Not After : Jan 26 19:00:34 2026 GMT Subject: CN=dc95060a1edd05bebfe06d36e15d85dbe4ce2d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cb:7e:c4:10:69:a3:59:bf:1c:e7:aa:3c:5d: cd:6b:7d:e2:29:e7:0b:aa:e0:fc:27:69:bc:bf:ea: b8:a2:48:c9:4f:9d:36:7c:33:9c:93:b7:f9:c8:13: 57:85:0a:dc:1e:d6:4a:b0:24:31:52:a0:cf:30:c4: 3e:4d:96:a9:66:62:bf:1a:6d:a9:3f:37:3f:92:c0: c8:1a:77:a5:b0:0e:38:d1:b0:65:b3:03:bd:af:8e: 12:5b:af:db:e5:af:1d:4a:d9:76:92:20:d9:1e:4c: 5c:01:42:d0:6a:44:fd:c1:47:60:8e:01:68:32:fc: 7e:9c:11:88:c4:b8:dd:61:1e:84:7f:34:52:10:7b: cb:25:f9:57:a7:44:59:66:04:16:47:8f:f2:35:f5: 24:92:87:e7:b8:45:af:c6:0a:9f:3b:8b:4b:d8:a2: 4f:ea:53:ed:cb:81:c4:cf:a0:21:42:26:71:54:15: 9c:83:22:89:d7:24:ce:e4:02:b9:54:57:17:c1:33: 7c:5d:2d:bb:4f:5a:c7:83:0d:67:74:06:8f:47:0e: f5:af:33:97:fc:b4:d5:61:c6:67:c3:e4:3b:ec:c3: c6:ca:5a:c0:8f:2b:42:90:c0:5a:9b:dd:4b:c8:84: 3e:5b:8f:26:01:16:3c:ed:4f:ac:d1:3c:58:57:b5: af:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:95:06:0A:1E:DD:05:BE:BF:E0:6D:36:E1:5D:85:DB:E4:CE:2D:1F X509v3 Authority Key Identifier: keyid:25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:3f:14:0b:e9:01:68:26:2a:f8:ca:d5:f8:21:36:1b:48:2f: d7:c8:47:29:63:46:02:17:83:d0:b7:64:79:4c:bb:71:56:cd: 92:e0:2e:33:e1:74:5b:01:e3:ec:a5:74:68:d6:ff:79:d8:87: 89:cd:2d:25:a7:f5:8f:c4:ad:f7:40:c8:02:9e:7b:4b:bc:a2: 31:b8:f8:0e:cc:f0:24:fd:1a:9f:74:0e:fc:9c:14:21:14:62: d6:d0:f2:a2:99:a1:67:4a:77:10:06:c0:e3:f4:74:34:d0:bf: 30:b2:d8:f1:ef:7e:51:24:18:94:cd:45:b4:18:54:e2:c5:4f: 6d:3e:09:7b:f4:2b:3e:e2:33:ee:49:5e:2a:52:30:f2:63:3f: e1:7c:13:9a:98:43:92:2c:f1:32:5e:f7:b4:c2:b0:33:b4:9e: 1e:3b:f5:53:eb:4e:49:3c:a6:96:90:a9:7b:34:ef:d3:34:8f: 3f:58:15:0e:cb:77:12:7e:d7:d3:66:9f:31:67:8f:ca:dd:58: 77:21:d4:ab:ce:91:12:76:ca:05:57:90:48:cb:17:55:69:7c: 0e:70:8a:ea:47:8e:10:7f:6d:28:fc:ae:c3:11:5a:ef:21:41: 9b:5a:31:4f:42:2e:a6:83:af:b2:2d:6f:d3:67:24:36:33:a6: d0:6d:48:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h4MyJdmqcbOyVtLR1w3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OTA3ZjkwZDlmOWQ5MDJmY2YwNGJkMGI0NjE1MmMzODI3 YTdkNTAwHhcNMjYwMTI1MTkwMDM0WhcNMjYwMTI2MTkwMDM0WjAzMTEwLwYDVQQD EyhkYzk1MDYwYTFlZGQwNWJlYmZlMDZkMzZlMTVkODVkYmU0Y2UyZDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38t+xBBpo1m/HOeqPF3Na33iKecL quD8J2m8v+q4okjJT502fDOck7f5yBNXhQrcHtZKsCQxUqDPMMQ+TZapZmK/Gm2p Pzc/ksDIGnelsA440bBlswO9r44SW6/b5a8dStl2kiDZHkxcAULQakT9wUdgjgFo Mvx+nBGIxLjdYR6EfzRSEHvLJflXp0RZZgQWR4/yNfUkkofnuEWvxgqfO4tL2KJP 6lPty4HEz6AhQiZxVBWcgyKJ1yTO5AK5VFcXwTN8XS27T1rHgw1ndAaPRw71rzOX /LTVYcZnw+Q77MPGylrAjytCkMBam91LyIQ+W48mARY87U+s0TxYV7WvqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyVBgoe3QW+v+BtNuFdhdvkzi0fMB8GA1UdIwQY MBaAFCWQf5DZ+dkC/PBL0LRhUsOCen1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlpCX2tObjUyUUw4OEV2UXRHRlN3NEo2ZlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kZDFlYzctMzQ0Ni00NzA5LWI5M2Mt MDg5Yzg5ZWY2M2M4LzEvSlpCX2tObjUyUUw4OEV2UXRHRlN3NEo2ZlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9kZDFlYzctMzQ0Ni00NzA5LWI5M2MtMDg5Yzg5ZWY2M2M4 LzEvSlpCX2tObjUyUUw4OEV2UXRHRlN3NEo2ZlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXz8UC+kB aCYq+MrV+CE2G0gv18hHKWNGAheD0LdkeUy7cVbNkuAuM+F0WwHj7KV0aNb/ediH ic0tJaf1j8St90DIAp57S7yiMbj4DszwJP0an3QO/JwUIRRi1tDyopmhZ0p3EAbA 4/R0NNC/MLLY8e9+USQYlM1FtBhU4sVPbT4Je/QrPuIz7kleKlIw8mM/4XwTmphD kizxMl73tMKwM7SeHjv1U+tOSTymlpCpezTv0zSPP1gVDst3En7X02afMWePyt1Y dyHUq86REnbKBVeQSMsXVWl8DnCK6keOEH9tKPyuwxFa7yFBm1oxT0IupoOvsi1v 02ckNjOm0G1IiQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:37 2026 by rpki-client