This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft File: JU0Xi-GyC41zhEa-BS4InImgCrM.mft (raw, json) Hash identifier: Zo0TESm3lbeXbEFjaU7eqR+5g7oPcmwiUf4KPdLF8pI= Subject key identifier: 98:41:F5:54:7D:9B:38:84:70:79:59:0F:2A:11:AB:BE:21:08:F6:8B Authority key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3 Certificate issuer: /CN=254d178be1b20b8d738446be052e089c89a00ab3 Certificate serial: 019BF5E2F4C1E865D138034C7099E3102B0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft Manifest number: 17E5 Signing time: Sun 25 Jan 2026 16:00:50 +0000 Manifest this update: Sun 25 Jan 2026 16:00:50 +0000 Manifest next update: Mon 26 Jan 2026 16:00:50 +0000 Files and hashes: 1: JU0Xi-GyC41zhEa-BS4InImgCrM.crl (hash: AhHjF5qrm0+iT1CsTYSIBoRODWph0WRYWC9NBPPMVPA=) 2: q-eaNpAC9-NYXDr75-5OxlW81pM.roa (hash: CQhgKaD5oRyS83HVo64oNNz+j4/NbRXCDPlLnL181NA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e2:f4:c1:e8:65:d1:38:03:4c:70:99:e3:10:2b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=254d178be1b20b8d738446be052e089c89a00ab3 Validity Not Before: Jan 25 16:00:50 2026 GMT Not After : Jan 26 16:00:50 2026 GMT Subject: CN=9841f5547d9b38847079590f2a11abbe2108f68b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:32:fc:5e:0e:d0:31:91:d6:c0:d0:50:aa:aa: 54:fd:18:30:44:d4:93:c3:a3:ec:a5:c6:47:93:94: b2:38:aa:dd:ce:dc:4e:e6:ac:ea:44:d9:72:99:77: 2d:b7:c2:b9:2b:9e:73:09:b1:5a:eb:b6:57:99:d6: 20:b0:75:e0:fc:91:6a:8c:8e:12:45:12:5b:21:be: d9:84:d4:96:01:bf:ca:c4:05:e2:a6:4f:40:55:93: ad:5d:34:28:d3:69:60:67:20:7e:20:ad:f2:36:84: c6:66:ac:a2:32:8c:fc:5f:f2:71:19:f5:66:68:b9: 6c:c1:6e:ba:9b:4a:d3:96:63:4f:c2:59:e6:9b:41: 98:0b:a7:ec:73:91:7c:f5:e5:86:0f:b4:91:08:ff: 6d:a5:6a:59:6c:73:a7:56:cb:37:bf:09:ae:66:36: 2a:c9:93:9c:81:fb:a3:a5:0b:c7:02:db:e5:51:96: 37:b1:5d:c1:af:5d:0a:02:8d:52:16:02:1c:68:fb: 2a:a5:c4:82:5e:7b:db:35:b4:2e:bc:b8:ec:7c:e5: 04:4f:95:a3:1f:60:5a:5a:f9:ad:a8:9b:de:f8:b7: c1:2f:74:4d:b4:4c:77:ef:97:eb:31:13:a8:2c:23: 82:61:36:07:53:fd:79:20:0f:36:20:e1:22:9d:cf: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:41:F5:54:7D:9B:38:84:70:79:59:0F:2A:11:AB:BE:21:08:F6:8B X509v3 Authority Key Identifier: keyid:25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:c3:30:4d:86:0a:39:eb:76:a4:d1:29:84:45:aa:e6:98:54: 0c:b8:af:34:81:3c:d6:e0:ae:e3:d2:e9:9b:4e:d8:cb:dd:63: d2:c5:80:f4:58:8b:00:52:78:7f:0d:bd:2a:c5:b7:af:6e:71: a7:14:d5:21:71:52:0a:c9:93:ee:28:5f:ee:01:bb:a1:55:73: a6:40:a2:01:fd:c5:85:df:d6:ff:94:74:e6:2d:65:52:0b:43: 55:cc:d3:d2:9a:ce:0a:80:47:ff:a5:f7:51:58:ac:77:56:3f: 93:a3:7a:dc:43:3b:6b:16:cc:f6:79:62:0a:7d:6a:49:d9:10: 29:69:8c:ce:8d:86:70:cf:e2:d2:d7:34:2a:43:34:4b:de:69: f3:72:e4:01:df:b9:36:27:68:5e:8b:52:95:a3:4e:21:b0:2a: fe:f8:60:2c:ee:95:ab:d1:64:d7:be:f4:fb:e5:ad:15:a3:ee: 99:d9:56:8d:a3:53:64:15:61:3f:b4:68:cb:9b:cb:6c:f7:68: ae:9e:3d:5f:1e:04:bd:b0:98:5d:e9:e8:5c:38:44:45:bd:52: 3e:a4:9f:63:86:3f:c1:07:64:04:c0:aa:f7:77:11:77:0a:22: 52:44:99:10:a5:d7:6b:1b:28:77:af:4f:92:0e:2a:aa:f3:8d: cc:25:12:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14vTB6GXROANMcJnjECsKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NGQxNzhiZTFiMjBiOGQ3Mzg0NDZiZTA1MmUwODljODlh MDBhYjMwHhcNMjYwMTI1MTYwMDUwWhcNMjYwMTI2MTYwMDUwWjAzMTEwLwYDVQQD Eyg5ODQxZjU1NDdkOWIzODg0NzA3OTU5MGYyYTExYWJiZTIxMDhmNjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzL8Xg7QMZHWwNBQqqpU/RgwRNST w6PspcZHk5SyOKrdztxO5qzqRNlymXctt8K5K55zCbFa67ZXmdYgsHXg/JFqjI4S RRJbIb7ZhNSWAb/KxAXipk9AVZOtXTQo02lgZyB+IK3yNoTGZqyiMoz8X/JxGfVm aLlswW66m0rTlmNPwlnmm0GYC6fsc5F89eWGD7SRCP9tpWpZbHOnVss3vwmuZjYq yZOcgfujpQvHAtvlUZY3sV3Br10KAo1SFgIcaPsqpcSCXnvbNbQuvLjsfOUET5Wj H2BaWvmtqJve+LfBL3RNtEx375frMROoLCOCYTYHU/15IA82IOEinc/x1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhB9VR9mziEcHlZDyoRq74hCPaLMB8GA1UdIwQY MBaAFCVNF4vhsguNc4RGvgUuCJyJoAqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlUwWGktR3lDNDF6aEVhLUJTNEluSW1nQ3JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC82OGFjZTctM2UzMS00Y2ZlLWExZTQt YTEwNGQyNDc3MTVmLzEvSlUwWGktR3lDNDF6aEVhLUJTNEluSW1nQ3JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC82OGFjZTctM2UzMS00Y2ZlLWExZTQtYTEwNGQyNDc3MTVm LzEvSlUwWGktR3lDNDF6aEVhLUJTNEluSW1nQ3JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8MwTYYK Oet2pNEphEWq5phUDLivNIE81uCu49Lpm07Yy91j0sWA9FiLAFJ4fw29KsW3r25x pxTVIXFSCsmT7ihf7gG7oVVzpkCiAf3Fhd/W/5R05i1lUgtDVczT0prOCoBH/6X3 UVisd1Y/k6N63EM7axbM9nliCn1qSdkQKWmMzo2GcM/i0tc0KkM0S95p83LkAd+5 NidoXotSlaNOIbAq/vhgLO6Vq9Fk1770++WtFaPumdlWjaNTZBVhP7Roy5vLbPdo rp49Xx4EvbCYXenoXDhERb1SPqSfY4Y/wQdkBMCq93cRdwoiUkSZEKXXaxsod69P kg4qqvONzCUSXQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:41 2026 by rpki-client