This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json) Hash identifier: CSDdDrUGaC0/UJysTNvfQTz5IwJujoiKVZuP7WDnT8I= Subject key identifier: 65:FC:DE:97:96:EC:1D:86:35:59:7E:E5:BA:D8:E3:F6:1A:77:9C:AC Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24 Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624 Certificate serial: 019BF6F5F361A05E5E376BD28CDDB5AB9B27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft Manifest number: 0678 Signing time: Sun 25 Jan 2026 21:01:12 +0000 Manifest this update: Sun 25 Jan 2026 21:01:12 +0000 Manifest next update: Mon 26 Jan 2026 21:01:12 +0000 Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: eNIVEt1r+xfmG6iEZtwU9kM42kTZHl7VHTvEv+/6Gww=) 2: ZSAjriqrsKE2YYg2ALkBE1sHfcc.roa (hash: FpdwZa7IuH64lhVGz4Lc/UmsF5GpQU9SPxwgj/w+504=) 3: g28y0lP7mHQY3_zrFQA4uIJDkhk.roa (hash: kLY9/EwIF/rD0/y9uzwAOFmWCsA9t1ocdJGqYiU1zTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:f3:61:a0:5e:5e:37:6b:d2:8c:dd:b5:ab:9b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624 Validity Not Before: Jan 25 21:01:12 2026 GMT Not After : Jan 26 21:01:12 2026 GMT Subject: CN=65fcde9796ec1d8635597ee5bad8e3f61a779cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fb:b6:a5:22:8a:4f:8e:86:83:3c:0f:2b:89: 4e:cd:33:e0:da:5e:55:c1:89:03:22:07:6a:c1:2f: b0:bf:4f:6f:fe:d1:7c:23:11:a4:ac:5f:17:aa:da: cc:29:bb:ad:cf:cc:0c:51:d6:6a:33:01:4c:2e:07: 17:e5:fa:7a:19:5e:bf:76:ec:81:65:d0:96:b6:e6: 5d:73:bb:5a:a0:84:a2:45:1c:71:1d:c5:09:35:97: 00:2f:ac:18:17:3a:3e:f9:c6:c4:85:93:d4:a0:dc: a0:46:3d:f6:1e:75:7a:b9:90:5e:dd:6f:9a:f9:78: 4b:6c:b5:66:ab:33:5a:dc:63:09:59:2d:05:67:09: ee:28:9f:1b:c2:49:5f:ac:de:5f:30:cf:9a:c1:10: 71:f7:3a:7a:84:40:58:73:08:04:35:19:2d:72:f5: 7d:98:a1:e7:7e:44:df:87:16:3d:98:3c:42:4d:c4: 50:c5:b6:f0:82:b0:61:c6:f7:74:24:b9:07:71:23: 12:3b:c0:3d:7d:53:96:8c:fa:b8:f5:45:cf:7a:7c: 64:61:8f:85:bc:bc:94:f1:cb:b8:ac:8c:0d:5d:55: 3e:31:50:d3:59:84:cf:3c:9c:0c:cf:91:a3:ee:e3: f8:04:31:29:56:0e:93:50:df:69:7b:ca:79:5c:84: b5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FC:DE:97:96:EC:1D:86:35:59:7E:E5:BA:D8:E3:F6:1A:77:9C:AC X509v3 Authority Key Identifier: keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a6:77:71:76:7b:a2:b2:4a:c0:59:ae:1a:13:40:23:66:ec: 42:5b:49:0e:d4:cd:3f:31:41:05:35:04:94:da:c3:07:24:c6: d3:3b:76:3f:4b:9e:ee:bd:84:85:89:d1:54:ad:dc:fa:26:c7: b5:ef:59:b6:3d:e9:a9:d4:87:ba:4c:15:95:12:53:fc:96:bb: c9:b3:37:0f:87:fd:ab:4b:13:12:04:90:6c:db:af:ca:d5:18: a1:d3:1e:74:d9:94:75:c2:ca:61:d7:9d:4a:ab:47:8b:d6:46: 6d:24:38:5e:64:ef:db:e0:75:30:b6:3f:b7:76:15:d1:58:19: f5:5a:e9:05:6b:97:e5:67:c1:41:0e:31:a4:90:e8:3e:5d:5f: 18:05:8d:35:53:02:ca:80:18:10:f5:02:81:78:f9:ca:3e:8a: 1b:ce:dd:06:7d:29:64:97:a1:66:d0:b8:21:26:82:b9:4f:45: 5e:01:08:87:6e:d8:af:5f:76:15:db:b2:4c:99:31:1d:74:d8: 34:79:c9:2a:1f:69:9f:9d:64:7a:b9:ee:60:3f:da:fc:e5:a5: 2c:60:d8:a8:db:00:ed:69:41:b1:f2:ed:01:f6:1f:6a:1c:22: 32:7f:ae:a5:7f:fe:28:96:a2:a1:b6:e9:3f:2a:9f:de:22:4b: bf:38:d0:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29fNhoF5eN2vSjN21q5snMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MjkyNjUyYTllY2Q5YzZiZGM4MjY0Yjk5NDhkZjYyMTIy MDc2MjQwHhcNMjYwMTI1MjEwMTEyWhcNMjYwMTI2MjEwMTEyWjAzMTEwLwYDVQQD Eyg2NWZjZGU5Nzk2ZWMxZDg2MzU1OTdlZTViYWQ4ZTNmNjFhNzc5Y2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/u2pSKKT46GgzwPK4lOzTPg2l5V wYkDIgdqwS+wv09v/tF8IxGkrF8XqtrMKbutz8wMUdZqMwFMLgcX5fp6GV6/duyB ZdCWtuZdc7taoISiRRxxHcUJNZcAL6wYFzo++cbEhZPUoNygRj32HnV6uZBe3W+a +XhLbLVmqzNa3GMJWS0FZwnuKJ8bwklfrN5fMM+awRBx9zp6hEBYcwgENRktcvV9 mKHnfkTfhxY9mDxCTcRQxbbwgrBhxvd0JLkHcSMSO8A9fVOWjPq49UXPenxkYY+F vLyU8cu4rIwNXVU+MVDTWYTPPJwMz5Gj7uP4BDEpVg6TUN9pe8p5XIS1NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGX83peW7B2GNVl+5brY4/Yad5ysMB8GA1UdIwQY MBaAFCUpJlKp7NnGvcgmS5lI32ISIHYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yMWE0ZmQtYmQ4YS00YWE0LThjNDUt NTcxMDMwNTQzOWVjLzEvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yMWE0ZmQtYmQ4YS00YWE0LThjNDUtNTcxMDMwNTQzOWVj LzEvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKZ3cXZ7 orJKwFmuGhNAI2bsQltJDtTNPzFBBTUElNrDByTG0zt2P0ue7r2EhYnRVK3c+ibH te9Ztj3pqdSHukwVlRJT/Ja7ybM3D4f9q0sTEgSQbNuvytUYodMedNmUdcLKYded SqtHi9ZGbSQ4XmTv2+B1MLY/t3YV0VgZ9VrpBWuX5WfBQQ4xpJDoPl1fGAWNNVMC yoAYEPUCgXj5yj6KG87dBn0pZJehZtC4ISaCuU9FXgEIh27Yr192FduyTJkxHXTY NHnJKh9pn51kernuYD/a/OWlLGDYqNsA7WlBsfLtAfYfahwiMn+upX/+KJaiobbp Pyqf3iJLvzjQeA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:38 2026 by rpki-client