This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json) Hash identifier: a80dRc5iO2n6x9aQOoT1B74oImEpFfDtVMcUQL26/Ho= Subject key identifier: 39:09:97:0D:C0:7B:24:1C:46:9F:58:8B:C2:A1:DF:E9:B7:B7:54:AF Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24 Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624 Certificate serial: 019BF507A93435CDE8DFEEB00D0E81CC7CB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft Manifest number: 0677 Signing time: Sun 25 Jan 2026 12:01:18 +0000 Manifest this update: Sun 25 Jan 2026 12:01:18 +0000 Manifest next update: Mon 26 Jan 2026 12:01:18 +0000 Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: fZxKeos/aFxbUWYH2odeyG9HvMr4sj2E6c8CPfEZvxs=) 2: ZSAjriqrsKE2YYg2ALkBE1sHfcc.roa (hash: FpdwZa7IuH64lhVGz4Lc/UmsF5GpQU9SPxwgj/w+504=) 3: g28y0lP7mHQY3_zrFQA4uIJDkhk.roa (hash: kLY9/EwIF/rD0/y9uzwAOFmWCsA9t1ocdJGqYiU1zTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:a9:34:35:cd:e8:df:ee:b0:0d:0e:81:cc:7c:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624 Validity Not Before: Jan 25 12:01:18 2026 GMT Not After : Jan 26 12:01:18 2026 GMT Subject: CN=3909970dc07b241c469f588bc2a1dfe9b7b754af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:72:13:2f:c4:6b:b3:12:62:8a:93:6a:65:8d: 75:49:b2:34:69:d7:53:8e:44:04:70:b2:8a:02:46: 73:61:7b:be:38:87:3d:6d:21:22:fb:67:05:01:02: 9c:08:a3:a6:d2:1a:84:42:85:af:87:d5:85:62:89: 47:37:08:e4:32:c0:be:08:50:b5:76:0f:e8:26:b3: a1:74:c5:e5:72:68:74:1a:54:c4:a0:da:d9:34:dc: 83:18:1f:be:45:4e:85:a1:ba:b0:5c:b5:32:d7:ce: 0c:62:08:f6:61:81:6e:f8:5c:23:a6:a8:4d:c5:aa: 07:c5:33:6b:82:59:d0:30:d7:86:08:70:08:c6:4d: 05:ca:fc:36:68:2f:44:14:f1:fd:6d:f7:62:1f:44: 57:8e:db:ce:db:ce:cb:9c:cf:b8:c5:77:f9:13:38: d0:5c:fa:16:a7:d2:5d:a7:10:39:1a:9a:5a:10:b2: ea:7b:c7:45:1d:cb:f9:f4:8b:20:13:25:0b:10:ef: 39:38:f8:a8:67:73:6f:1e:1c:3c:e6:2d:b7:02:a4: 17:b1:08:87:8f:73:cf:fb:fb:f4:6d:1b:64:e9:a5: 09:9c:aa:f0:55:36:df:1f:12:dc:6b:e5:f1:72:d8: 1d:52:fc:b0:fb:8e:13:6b:f9:5f:e4:29:8c:1c:cc: 14:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:09:97:0D:C0:7B:24:1C:46:9F:58:8B:C2:A1:DF:E9:B7:B7:54:AF X509v3 Authority Key Identifier: keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:4f:91:c0:d6:fa:63:b0:ae:6d:22:be:ea:c8:cf:4b:63:36: 75:ec:8d:b9:09:ac:86:a0:f9:cd:54:8d:22:76:4e:52:eb:d9: 58:3d:46:85:c4:90:38:b8:78:4e:50:1e:79:bc:a7:cb:60:14: 88:bb:66:a7:57:1a:cb:4b:5f:94:40:6f:be:28:d3:9c:d8:3d: 87:fc:b5:76:31:18:ed:d3:58:32:21:dc:1a:53:f2:5b:65:1f: 06:f7:58:8c:dc:3d:8e:fe:fc:d5:37:a8:d8:b9:62:cb:7d:09: 71:71:fd:64:ea:18:4f:e2:0c:2c:c5:b8:4d:c6:f1:0d:3e:ba: e9:09:b8:8f:fb:77:b1:dc:21:6c:c7:29:5c:55:f9:9a:a2:d0: 6a:52:83:49:c8:d7:95:72:51:2b:2a:ac:3a:6d:f6:0f:f9:d3: 3b:a8:50:fb:e5:05:d7:a5:3e:19:6c:d4:62:59:0a:e5:52:eb: 7e:02:2a:e2:5d:4f:cb:6d:57:60:81:68:79:b7:0e:1b:a6:cd: 46:a9:1c:f2:d5:0b:c9:45:e4:b6:fc:74:0f:f8:ee:67:4a:88: 86:f6:17:5e:8b:cc:9d:f3:a8:47:4f:4e:f8:e6:d0:1c:45:3c: 9b:09:a9:b0:c0:1a:fa:bb:4e:53:36:d5:18:be:eb:92:b0:3e: 25:47:e6:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B6k0Nc3o3+6wDQ6BzHy1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MjkyNjUyYTllY2Q5YzZiZGM4MjY0Yjk5NDhkZjYyMTIy MDc2MjQwHhcNMjYwMTI1MTIwMTE4WhcNMjYwMTI2MTIwMTE4WjAzMTEwLwYDVQQD EygzOTA5OTcwZGMwN2IyNDFjNDY5ZjU4OGJjMmExZGZlOWI3Yjc1NGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXITL8RrsxJiipNqZY11SbI0addT jkQEcLKKAkZzYXu+OIc9bSEi+2cFAQKcCKOm0hqEQoWvh9WFYolHNwjkMsC+CFC1 dg/oJrOhdMXlcmh0GlTEoNrZNNyDGB++RU6FobqwXLUy184MYgj2YYFu+FwjpqhN xaoHxTNrglnQMNeGCHAIxk0Fyvw2aC9EFPH9bfdiH0RXjtvO287LnM+4xXf5EzjQ XPoWp9JdpxA5GppaELLqe8dFHcv59IsgEyULEO85OPioZ3NvHhw85i23AqQXsQiH j3PP+/v0bRtk6aUJnKrwVTbfHxLca+XxctgdUvyw+44Ta/lf5CmMHMwU6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkJlw3AeyQcRp9Yi8Kh3+m3t1SvMB8GA1UdIwQY MBaAFCUpJlKp7NnGvcgmS5lI32ISIHYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yMWE0ZmQtYmQ4YS00YWE0LThjNDUt NTcxMDMwNTQzOWVjLzEvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yMWE0ZmQtYmQ4YS00YWE0LThjNDUtNTcxMDMwNTQzOWVj LzEvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkk+RwNb6 Y7CubSK+6sjPS2M2deyNuQmshqD5zVSNInZOUuvZWD1GhcSQOLh4TlAeebyny2AU iLtmp1cay0tflEBvvijTnNg9h/y1djEY7dNYMiHcGlPyW2UfBvdYjNw9jv781Teo 2Lliy30JcXH9ZOoYT+IMLMW4TcbxDT666Qm4j/t3sdwhbMcpXFX5mqLQalKDScjX lXJRKyqsOm32D/nTO6hQ++UF16U+GWzUYlkK5VLrfgIq4l1Py21XYIFoebcOG6bN Rqkc8tULyUXktvx0D/juZ0qIhvYXXovMnfOoR09O+ObQHEU8mwmpsMAa+rtOUzbV GL7rkrA+JUfmdg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:04:20 2026 by rpki-client