This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft File: JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json) Hash identifier: HoHy4nyn0gyrq3OouDVpw/JNIYF46OLGL8VuWU0A+Xw= Subject key identifier: C3:A9:80:6E:9E:25:31:3C:C8:8A:9F:42:91:FC:2C:57:5F:A9:85:B7 Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9 Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9 Certificate serial: 019BF3BDB3D7E5D3C62932CBA06FE1029923 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft Manifest number: 1018 Signing time: Sun 25 Jan 2026 06:00:54 +0000 Manifest this update: Sun 25 Jan 2026 06:00:54 +0000 Manifest next update: Mon 26 Jan 2026 06:00:54 +0000 Files and hashes: 1: BSTG1ttnOn5TiV5vto-5DGzkv5E.roa (hash: 9vJ/dkO9dcx6CPua0P9hZtcRYppMY64t3Y1Q4CY2UxQ=) 2: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: p96MmjJghWV5G2UGDcH7S74d6tEvLWqHEPo+gaQbLs4=) 3: KkmWSGykoPl9WKIjokmVqUHLE_E.roa (hash: bNMQL1twNCxrJQ7tLIUTLyGCOVMxMviSfN90YHRBRho=) 4: LSs7jJVtuYrRTPczs6ZkVJL73zs.roa (hash: hMye0Wrx9U0ST59KqaMgbH8lXZVPY0W9iBqW/uFQLzI=) 5: k7JflfqXnMHelt6wfEleP-MOc70.roa (hash: rjDtKCAd/y7DIDwn4KthMGn3kODXPkka7cFwUkDi28M=) 6: lWXP4ZD7LyYWsz6B8qMtLIJG-sE.roa (hash: qryQy/5tlRLO0dyPYHVWOe1mQmpdbIPyn8DRUs1T4c4=) 7: mkQb5astOXlF9aqqEzzgXK8P4sE.roa (hash: hQAMPQuYpMvhUOw6tcbiYvo2RyId0JQGIKuqDGNYqaE=) 8: oWslWTdsPisLu5dLVq8YM202DZ8.roa (hash: 6ByCKcMEW1ltcRcQ9i9epnu9qzfwpABCMtLyrHAD/uA=) 9: s4rhjerfhsq49RDwrY2imc6pigs.roa (hash: ohkoid0GtCL3tCMVcP87iu5zXvmVKSxAuJuHsjuZBRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:b3:d7:e5:d3:c6:29:32:cb:a0:6f:e1:02:99:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9 Validity Not Before: Jan 25 06:00:54 2026 GMT Not After : Jan 26 06:00:54 2026 GMT Subject: CN=c3a9806e9e25313cc88a9f4291fc2c575fa985b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bb:5c:7f:6c:a6:8d:c7:25:73:c6:f7:cc:7a: 10:b5:32:90:77:2b:da:47:ba:cd:b3:04:05:85:97: b2:40:86:d8:99:3b:02:20:db:65:7a:b2:ab:4a:7b: ba:87:c9:20:ed:9f:47:2e:53:ae:70:18:45:f7:49: c0:f2:86:1f:40:17:36:ae:b5:de:66:f7:a4:f4:22: 36:c2:e9:16:35:be:04:72:fc:29:10:76:d6:37:5b: 78:d7:56:18:1c:d0:53:38:11:c4:10:67:66:bf:d7: be:32:7d:85:ab:c9:be:9a:ee:11:29:5b:94:e4:d1: c2:48:59:8b:6c:04:81:d1:c2:61:9a:d4:4b:a9:4e: 75:42:f9:d4:f3:b4:82:d5:57:11:43:68:89:0b:d6: 2f:93:17:e5:c4:74:74:00:ec:a2:b9:f8:65:ad:dd: 52:20:5c:5a:bd:fc:93:4a:64:24:88:f8:c1:8e:6b: 77:00:eb:da:9d:21:3b:7b:0b:68:9a:cb:79:ca:7f: 8e:76:6d:44:b2:c0:ab:35:c4:95:75:4f:e9:f0:ad: 91:50:68:ac:98:1b:9e:17:2f:68:91:cb:d4:67:11: b0:a7:c8:8a:73:df:85:57:e6:4d:5e:0d:e8:50:3e: 94:b9:73:3c:32:0f:fa:4e:e2:6c:b1:50:fc:e2:29: 3f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A9:80:6E:9E:25:31:3C:C8:8A:9F:42:91:FC:2C:57:5F:A9:85:B7 X509v3 Authority Key Identifier: keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:c3:3a:a5:6d:e3:05:3b:a4:58:f2:20:c0:6c:28:fd:a7:ec: 4e:f2:e7:45:96:d7:c0:56:22:11:59:44:6b:a3:7b:12:a2:11: 25:3d:c0:56:b5:99:8c:7f:46:d7:47:5d:7d:e8:dd:4b:f2:a2: dc:fc:32:93:bf:da:61:5f:33:40:de:30:7c:75:00:aa:fc:52: 2b:fb:c4:ac:e7:67:d9:4b:2a:02:77:3d:2f:2b:df:f2:3a:4a: a8:b0:71:19:4d:aa:3a:91:2d:fd:71:be:ff:4f:fc:78:1d:45: ff:2c:55:3a:6d:a7:42:02:37:b7:51:db:ba:75:43:17:8f:83: 44:c3:b2:45:41:8b:52:7a:b6:e8:4a:96:1c:bb:2b:7b:77:e8: 14:13:c7:e6:73:98:aa:96:e9:42:e9:e4:4b:fa:3b:5b:44:3e: 86:36:ba:f8:6b:ce:88:20:52:ad:74:4b:7e:ca:d6:b0:0a:57: 54:23:0e:b4:16:c9:7f:9b:ea:74:05:0f:ab:9c:60:c7:58:64: ef:de:99:ee:6d:c5:38:c9:6a:f5:f0:09:f6:66:e1:8a:aa:9b: db:90:69:f3:6d:43:de:13:f9:15:b1:9c:51:dc:ed:2a:f5:af: 7c:a1:75:10:90:26:99:93:3c:fc:f7:84:e1:fe:ae:15:57:5b: c8:03:7d:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvbPX5dPGKTLLoG/hApkjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OTQ5MGM1ZGJjZmJmNTkwZGEzM2JmYmQzNzk3MGEwNzYz NDY5YzkwHhcNMjYwMTI1MDYwMDU0WhcNMjYwMTI2MDYwMDU0WjAzMTEwLwYDVQQD EyhjM2E5ODA2ZTllMjUzMTNjYzg4YTlmNDI5MWZjMmM1NzVmYTk4NWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubtcf2ymjcclc8b3zHoQtTKQdyva R7rNswQFhZeyQIbYmTsCINtlerKrSnu6h8kg7Z9HLlOucBhF90nA8oYfQBc2rrXe Zvek9CI2wukWNb4EcvwpEHbWN1t411YYHNBTOBHEEGdmv9e+Mn2Fq8m+mu4RKVuU 5NHCSFmLbASB0cJhmtRLqU51QvnU87SC1VcRQ2iJC9YvkxflxHR0AOyiufhlrd1S IFxavfyTSmQkiPjBjmt3AOvanSE7ewtomst5yn+Odm1EssCrNcSVdU/p8K2RUGis mBueFy9okcvUZxGwp8iKc9+FV+ZNXg3oUD6UuXM8Mg/6TuJssVD84ik/vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOpgG6eJTE8yIqfQpH8LFdfqYW3MB8GA1UdIwQY MBaAFCWUkMXbz79ZDaM7+9N5cKB2NGnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQt M2NlM2NmOGIxYzQ5LzEvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQtM2NlM2NmOGIxYzQ5 LzEvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAucM6pW3j BTukWPIgwGwo/afsTvLnRZbXwFYiEVlEa6N7EqIRJT3AVrWZjH9G10ddfejdS/Ki 3Pwyk7/aYV8zQN4wfHUAqvxSK/vErOdn2UsqAnc9Lyvf8jpKqLBxGU2qOpEt/XG+ /0/8eB1F/yxVOm2nQgI3t1HbunVDF4+DRMOyRUGLUnq26EqWHLsre3foFBPH5nOY qpbpQunkS/o7W0Q+hja6+GvOiCBSrXRLfsrWsApXVCMOtBbJf5vqdAUPq5xgx1hk 796Z7m3FOMlq9fAJ9mbhiqqb25Bp821D3hP5FbGcUdztKvWvfKF1EJAmmZM8/PeE 4f6uFVdbyAN9Aw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:44:39 2026 by rpki-client