This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
File: JavmeyHTI7KytELGsGrjLMKANY0.mft (raw, json)
Hash identifier: m0JI1cA6BA+c9nr4AzXzKeOykNErdP0KTDpIlvpj028=
Subject key identifier: 58:12:12:43:49:DE:3E:28:88:8A:65:0A:B2:08:46:A9:64:98:EC:B7
Authority key identifier: 25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
Certificate issuer: /CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Certificate serial: 019BF83EEB424BD81154758F5219334F884F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
Manifest number: 0B1D
Signing time: Mon 26 Jan 2026 03:00:31 +0000
Manifest this update: Mon 26 Jan 2026 03:00:31 +0000
Manifest next update: Tue 27 Jan 2026 03:00:31 +0000
Files and hashes: 1: Du-XM-c7cfjHmKd00CKR9makRlg.roa (hash: bZdNBjpYg86yMRtuooKH77vDZynRPwu50M4bVcyHluQ=)
2: JavmeyHTI7KytELGsGrjLMKANY0.crl (hash: mPZpXJHODoKkklrvntJJTc5WcSHFwt3pugKMRvmdPhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:3e:eb:42:4b:d8:11:54:75:8f:52:19:33:4f:88:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Validity
Not Before: Jan 26 03:00:31 2026 GMT
Not After : Jan 27 03:00:31 2026 GMT
Subject: CN=5812124349de3e28888a650ab20846a96498ecb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bd:8f:63:4d:68:37:57:7f:9f:fd:69:a1:c8:
d0:79:62:3f:43:59:2a:fe:b7:56:30:8d:a0:38:64:
a1:fb:52:38:73:ae:b5:19:d9:26:5f:ff:3f:34:ac:
62:c6:18:05:6a:c3:ad:ce:a6:56:c0:df:e0:af:15:
56:73:d4:5c:fd:97:ba:65:8a:9d:91:7e:21:cd:4b:
a8:b3:b1:3a:f6:bb:fa:0f:c6:3c:21:5a:62:a5:b1:
5e:dd:86:fd:e3:2c:47:02:b5:dc:11:2c:1a:e5:bb:
f4:66:7f:1f:69:ba:dc:f4:cb:ab:69:53:e4:0d:8c:
88:99:b8:28:07:b1:53:3d:8c:cd:43:54:34:71:d4:
8f:f1:f2:9d:46:2d:0c:92:e8:f7:cd:f0:17:7f:71:
19:0f:eb:bb:0d:dd:cd:ff:aa:87:40:a7:ab:f3:dc:
89:a6:ed:89:f2:e7:34:9f:d2:b7:88:31:2d:49:32:
51:33:4f:a0:ae:01:ab:ff:52:db:69:ee:87:ff:99:
81:e4:9b:64:0a:d6:3c:3e:30:b8:c3:34:48:9a:26:
24:76:19:ad:db:0a:b0:e0:85:d9:82:c9:1e:4a:98:
59:13:c2:71:69:44:26:24:70:87:1e:0d:36:60:e1:
dc:a5:87:0b:47:9e:f2:88:21:e9:d2:06:d5:05:b3:
8b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:12:12:43:49:DE:3E:28:88:8A:65:0A:B2:08:46:A9:64:98:EC:B7
X509v3 Authority Key Identifier:
keyid:25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:95:e8:b3:6e:91:f4:5b:54:78:e4:2a:73:a1:df:ba:62:8f:
79:7a:cb:66:8b:ba:ba:04:81:fe:e0:23:c8:f1:9f:f6:14:85:
76:58:d7:fb:2c:fd:e8:2f:6f:22:62:0d:a3:f2:d5:49:91:d6:
29:37:39:43:8e:d3:9f:41:c2:83:d7:40:6d:d8:16:05:d2:42:
f6:cb:82:76:98:73:a0:26:d1:7e:69:eb:4a:83:ee:40:e1:b3:
b6:34:83:55:15:72:88:0d:39:bc:2b:e6:d6:e7:78:7d:a4:97:
b8:81:83:34:d0:e1:d1:e5:58:12:1d:36:72:78:52:f4:7f:a9:
4d:f2:cb:71:28:f8:d9:98:cf:32:c3:20:70:f4:2e:b0:11:2d:
72:b5:6f:f1:9a:0a:7e:87:9d:7a:76:aa:5d:7d:d6:dd:f1:84:
fb:9b:cd:9c:cf:55:e8:f4:8a:23:7e:eb:64:d1:ed:52:67:f7:
87:76:c6:6b:55:b1:98:9a:07:35:a8:76:e3:d0:49:db:2c:66:
28:bf:db:d8:ae:cb:85:cd:db:75:c0:6b:b4:1f:ce:a4:a3:c0:
6d:f0:87:91:fa:42:bb:73:e3:32:af:5b:f2:ae:91:d7:d6:f2:
95:b4:33:8f:68:b7:c5:bf:b8:ef:68:67:83:f7:d1:7f:ac:e1:
8a:02:b4:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4PutCS9gRVHWPUhkzT4hPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YWJlNjdiMjFkMzIzYjJiMmI0NDJjNmIwNmFlMzJjYzI4
MDM1OGQwHhcNMjYwMTI2MDMwMDMxWhcNMjYwMTI3MDMwMDMxWjAzMTEwLwYDVQQD
Eyg1ODEyMTI0MzQ5ZGUzZTI4ODg4YTY1MGFiMjA4NDZhOTY0OThlY2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6r2PY01oN1d/n/1pocjQeWI/Q1kq
/rdWMI2gOGSh+1I4c661GdkmX/8/NKxixhgFasOtzqZWwN/grxVWc9Rc/Ze6ZYqd
kX4hzUuos7E69rv6D8Y8IVpipbFe3Yb94yxHArXcESwa5bv0Zn8fabrc9MuraVPk
DYyImbgoB7FTPYzNQ1Q0cdSP8fKdRi0Mkuj3zfAXf3EZD+u7Dd3N/6qHQKer89yJ
pu2J8uc0n9K3iDEtSTJRM0+grgGr/1Lbae6H/5mB5JtkCtY8PjC4wzRImiYkdhmt
2wqw4IXZgskeSphZE8JxaUQmJHCHHg02YOHcpYcLR57yiCHp0gbVBbOLHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgSEkNJ3j4oiIplCrIIRqlkmOy3MB8GA1UdIwQY
MBaAFCWr5nsh0yOysrRCxrBq4yzCgDWNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmF2bWV5SFRJN0t5dEVMR3NHcmpMTUtBTlkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zN2I2NGEtY2M1ZS00NjMwLTk2ZjIt
NzIxOGEzMTc5MGYzLzEvSmF2bWV5SFRJN0t5dEVMR3NHcmpMTUtBTlkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8zN2I2NGEtY2M1ZS00NjMwLTk2ZjItNzIxOGEzMTc5MGYz
LzEvSmF2bWV5SFRJN0t5dEVMR3NHcmpMTUtBTlkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZXos26R
9FtUeOQqc6HfumKPeXrLZou6ugSB/uAjyPGf9hSFdljX+yz96C9vImINo/LVSZHW
KTc5Q47Tn0HCg9dAbdgWBdJC9suCdphzoCbRfmnrSoPuQOGztjSDVRVyiA05vCvm
1ud4faSXuIGDNNDh0eVYEh02cnhS9H+pTfLLcSj42ZjPMsMgcPQusBEtcrVv8ZoK
foedenaqXX3W3fGE+5vNnM9V6PSKI37rZNHtUmf3h3bGa1WxmJoHNah249BJ2yxm
KL/b2K7Lhc3bdcBrtB/OpKPAbfCHkfpCu3PjMq9b8q6R19bylbQzj2i3xb+472hn
g/fRf6zhigK0Vw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 11:47:11 2026 by rpki-client