This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft File: JrFSTsAdz0BfRBcYKe1nopkqpC0.mft (raw, json) Hash identifier: zIkWcNlHWiLjmVDZue9otL8TEhmWGZgIuis+4cUVdwU= Subject key identifier: F0:D9:57:9A:7B:7F:21:72:FC:ED:23:02:DD:D5:6F:4A:65:2B:54:DE Authority key identifier: 26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D Certificate issuer: /CN=26b1524ec01dcf405f44171829ed67a2992aa42d Certificate serial: 019BF53E52F98A718452AADA2631A96865B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft Manifest number: 0517 Signing time: Sun 25 Jan 2026 13:01:00 +0000 Manifest this update: Sun 25 Jan 2026 13:01:00 +0000 Manifest next update: Mon 26 Jan 2026 13:01:00 +0000 Files and hashes: 1: JrFSTsAdz0BfRBcYKe1nopkqpC0.crl (hash: +seU8gPz77IHCcBUczO7Fmythpj6CzHceHzER6i+/GA=) 2: _Y_601F6eAt7O-baCpdg3BQDJXc.roa (hash: vyG9YG54wVQIAnIU/YKZPIrIY0HUdh61Oh6KNWA0bnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:52:f9:8a:71:84:52:aa:da:26:31:a9:68:65:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26b1524ec01dcf405f44171829ed67a2992aa42d Validity Not Before: Jan 25 13:01:00 2026 GMT Not After : Jan 26 13:01:00 2026 GMT Subject: CN=f0d9579a7b7f2172fced2302ddd56f4a652b54de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bd:89:dd:b8:61:19:e0:f3:b1:54:0a:28:cd: 09:74:b3:d3:4f:38:19:4b:cd:cb:b2:5c:b3:79:ed: a9:42:81:3d:91:e8:c5:1c:f9:44:91:95:33:e2:e5: b2:57:90:af:3d:02:ad:49:9b:22:c8:77:b1:a3:b7: 4e:78:fb:5d:5f:39:53:48:cc:3c:68:ca:ec:4f:04: fd:c1:34:e0:82:d3:aa:ed:6f:f5:e2:8c:e4:61:ca: 5b:90:40:9a:da:81:8a:4e:3b:1b:32:8d:b4:bf:14: fe:f6:24:eb:04:c6:b7:ed:d6:6f:0e:15:e4:35:a7: 13:11:2f:6d:ed:20:e2:0f:45:eb:56:3e:d9:66:a6: fb:f1:f6:e2:b8:c5:09:75:0b:30:61:c0:96:a5:a0: e5:9f:d0:7a:05:47:57:7a:99:6c:9e:3f:99:50:64: f3:fb:8e:e9:40:e4:27:ee:a9:4f:c9:d1:96:6c:06: 67:09:d5:92:58:c9:13:cf:05:85:e0:cc:18:80:43: fa:9c:00:47:ac:a3:bf:62:77:cd:3c:b5:c1:f4:dc: b0:9f:6d:44:3b:43:06:29:4b:69:1a:40:88:68:d5: 1b:34:57:52:9a:dd:d5:8b:ab:ec:5c:50:57:a5:52: 72:0d:bd:58:b0:75:b7:86:f9:2e:a8:a1:3e:d7:cc: e6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D9:57:9A:7B:7F:21:72:FC:ED:23:02:DD:D5:6F:4A:65:2B:54:DE X509v3 Authority Key Identifier: keyid:26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:cd:4f:d1:dc:ad:c0:1d:14:16:68:2b:a5:d1:e6:39:9c:cf: 1b:6f:e3:bf:30:a2:99:99:32:ce:1e:99:d3:54:dd:d9:91:a5: 5b:b4:43:2b:f9:92:ca:74:11:2c:e8:4e:ca:15:b7:47:3e:de: 4e:6b:a8:40:52:93:4d:cf:59:c7:1c:8e:f9:b4:44:dc:27:ea: 44:fe:44:59:18:40:76:0f:87:41:07:ab:e9:86:4a:da:46:51: 13:42:22:3b:cf:50:b0:fc:30:52:bf:6b:3b:d0:f0:54:6c:49: a8:14:39:41:d1:e3:00:ca:89:b3:50:54:af:92:52:46:51:e9: 65:f6:64:bd:a1:49:1c:e6:84:7e:1b:d6:36:a2:b3:58:dc:d3: ed:62:9d:88:55:5d:2d:b8:90:8d:cf:31:d6:10:1f:dd:48:f8: ec:e5:e2:7d:0f:22:84:3e:52:25:82:85:9c:47:58:f9:d5:8e: 8d:4d:af:f5:a5:ba:e1:90:4e:c4:ed:a8:9c:3f:5b:4a:9f:75: 58:c7:01:ed:70:9e:45:93:e9:f5:0a:bb:d9:05:88:5c:83:62: 80:2f:2c:1a:e2:24:36:cd:87:87:5b:ad:2d:32:a1:01:64:2e: bf:fe:c4:7f:8a:2f:b2:42:82:23:d3:cb:6f:4a:24:b0:08:ae: 8a:c1:51:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PlL5inGEUqraJjGpaGW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YjE1MjRlYzAxZGNmNDA1ZjQ0MTcxODI5ZWQ2N2EyOTky YWE0MmQwHhcNMjYwMTI1MTMwMTAwWhcNMjYwMTI2MTMwMTAwWjAzMTEwLwYDVQQD EyhmMGQ5NTc5YTdiN2YyMTcyZmNlZDIzMDJkZGQ1NmY0YTY1MmI1NGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1b2J3bhhGeDzsVQKKM0JdLPTTzgZ S83Lslyzee2pQoE9kejFHPlEkZUz4uWyV5CvPQKtSZsiyHexo7dOePtdXzlTSMw8 aMrsTwT9wTTggtOq7W/14ozkYcpbkECa2oGKTjsbMo20vxT+9iTrBMa37dZvDhXk NacTES9t7SDiD0XrVj7ZZqb78fbiuMUJdQswYcCWpaDln9B6BUdXeplsnj+ZUGTz +47pQOQn7qlPydGWbAZnCdWSWMkTzwWF4MwYgEP6nABHrKO/YnfNPLXB9Nywn21E O0MGKUtpGkCIaNUbNFdSmt3Vi6vsXFBXpVJyDb1YsHW3hvkuqKE+18zmFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDZV5p7fyFy/O0jAt3Vb0plK1TeMB8GA1UdIwQY MBaAFCaxUk7AHc9AX0QXGCntZ6KZKqQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnJGU1RzQWR6MEJmUkJjWUtlMW5vcGtxcEMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNTY1NjMtZTYxYy00YjhhLThkNmUt NzY2YzgyNzU4MDY1LzEvSnJGU1RzQWR6MEJmUkJjWUtlMW5vcGtxcEMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wNTY1NjMtZTYxYy00YjhhLThkNmUtNzY2YzgyNzU4MDY1 LzEvSnJGU1RzQWR6MEJmUkJjWUtlMW5vcGtxcEMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJs1P0dyt wB0UFmgrpdHmOZzPG2/jvzCimZkyzh6Z01Td2ZGlW7RDK/mSynQRLOhOyhW3Rz7e TmuoQFKTTc9ZxxyO+bRE3CfqRP5EWRhAdg+HQQer6YZK2kZRE0IiO89QsPwwUr9r O9DwVGxJqBQ5QdHjAMqJs1BUr5JSRlHpZfZkvaFJHOaEfhvWNqKzWNzT7WKdiFVd LbiQjc8x1hAf3Uj47OXifQ8ihD5SJYKFnEdY+dWOjU2v9aW64ZBOxO2onD9bSp91 WMcB7XCeRZPp9Qq72QWIXINigC8sGuIkNs2Hh1utLTKhAWQuv/7Ef4ovskKCI9PL b0oksAiuisFRMQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:53:07 2026 by rpki-client