This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft File: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft (raw, json) Hash identifier: RLBVZ8W3qO3yTOi3zHcQ7k5m6RjKtyXyEsVd1I9FWAE= Subject key identifier: C4:9A:1A:F4:D3:64:AD:74:F5:66:0A:BE:57:C5:8C:EC:29:87:29:EC Authority key identifier: 27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F Certificate issuer: /CN=2750f3d7ed825617e26be09aeccc62dda4ea314f Certificate serial: 019BF507616CFB1D661E4680177B67021BB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft Manifest number: 024D Signing time: Sun 25 Jan 2026 12:01:00 +0000 Manifest this update: Sun 25 Jan 2026 12:01:00 +0000 Manifest next update: Mon 26 Jan 2026 12:01:00 +0000 Files and hashes: 1: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl (hash: Z0LV0iDs9/UdavI+ESSE4ldSMh5JeiNtmIPR3kdJqdA=) 2: TKAcyjW-K2fMWFteP_AgVE5Sf58.roa (hash: EQ/0GqnYlDDezTnOJGpjIfUWvXw1RICNNg5+3Mf+uqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:61:6c:fb:1d:66:1e:46:80:17:7b:67:02:1b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2750f3d7ed825617e26be09aeccc62dda4ea314f Validity Not Before: Jan 25 12:01:00 2026 GMT Not After : Jan 26 12:01:00 2026 GMT Subject: CN=c49a1af4d364ad74f5660abe57c58cec298729ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1f:13:a7:27:f1:5e:64:d1:5f:aa:0f:4e:88: 77:a0:c4:d0:67:db:fb:9a:4c:29:84:8e:23:b2:43: c1:9d:bc:f2:8b:ad:76:87:7b:c8:99:55:27:13:9d: d3:57:5a:aa:a7:ae:11:1f:ca:6a:bd:05:59:91:bd: e9:5f:f9:2f:b4:45:c1:d3:d1:d2:38:ed:ca:58:dc: 92:a1:d5:02:1d:2b:75:cd:81:30:07:3b:f1:dd:3e: 4b:2c:a0:25:ae:8d:6a:e0:5c:b9:ec:c5:5f:5c:75: a6:16:99:a5:5a:8c:cc:a8:f1:a2:04:a4:d1:30:31: 50:bd:18:61:e3:7e:89:d1:67:86:8b:bf:f7:38:db: 96:77:82:eb:46:6f:bb:67:7a:a7:64:42:58:11:e5: ef:b2:10:11:a8:4b:71:8b:bd:44:24:45:a3:87:5d: d2:17:4a:15:c3:3b:fe:8d:3d:2c:3a:98:a2:8b:a2: bf:e1:37:b9:4b:73:ae:4a:1e:dd:58:27:bd:0b:6a: 97:99:ff:97:a4:81:e8:d8:10:7e:58:d5:90:f7:50: 94:63:96:21:79:9b:0a:46:98:f6:cc:f9:e1:23:4d: fc:62:72:e9:79:dd:9d:37:09:ad:30:d6:f5:68:45: fc:73:46:8f:4a:26:c6:40:9e:6d:7a:7b:96:38:f4: 2c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9A:1A:F4:D3:64:AD:74:F5:66:0A:BE:57:C5:8C:EC:29:87:29:EC X509v3 Authority Key Identifier: keyid:27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:ac:7d:59:56:98:5d:d4:f3:8f:97:4f:8e:d0:24:f8:b7:c3: 8f:8b:35:cb:79:a1:d7:8b:fe:e1:e1:1c:3c:33:14:21:4a:4d: 0e:99:69:10:0b:73:d3:db:04:2c:bd:24:f3:a9:8f:23:21:54: 2a:d3:fc:f0:2b:8a:26:60:68:77:d9:e8:b1:94:12:4e:2a:60: 8b:c4:34:7c:59:0e:99:c0:9a:f9:92:18:ef:e1:45:4c:65:16: 5b:33:13:2e:99:6d:2f:ea:5e:8f:90:31:9d:02:67:f0:21:6b: b5:09:1a:4d:66:43:62:1c:dc:0b:26:53:73:43:18:77:59:b8: d2:79:19:36:89:2d:1b:29:b2:c5:21:4e:b6:92:01:8c:39:c7: 0e:f0:10:48:0c:b9:c2:9c:fc:51:00:42:cb:57:26:63:9e:8a: 0d:1a:d2:e4:83:24:24:a9:6a:ad:7d:af:1a:b5:41:ff:0d:9f: f9:25:96:44:03:d7:36:7a:46:4b:61:87:d8:80:b4:8f:2f:bc: 00:5c:b7:2a:12:a4:cf:80:96:5f:d2:a5:b0:ca:77:5f:d6:be: ac:fe:30:62:9a:fa:a9:eb:f2:6a:a6:91:74:4d:d6:6e:1f:b7: 5a:d0:e0:d4:0a:10:14:74:96:0e:aa:c3:2e:42:bc:be:b5:6d: e9:6d:cb:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B2Fs+x1mHkaAF3tnAhu0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NTBmM2Q3ZWQ4MjU2MTdlMjZiZTA5YWVjY2M2MmRkYTRl YTMxNGYwHhcNMjYwMTI1MTIwMTAwWhcNMjYwMTI2MTIwMTAwWjAzMTEwLwYDVQQD EyhjNDlhMWFmNGQzNjRhZDc0ZjU2NjBhYmU1N2M1OGNlYzI5ODcyOWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix8TpyfxXmTRX6oPToh3oMTQZ9v7 mkwphI4jskPBnbzyi612h3vImVUnE53TV1qqp64RH8pqvQVZkb3pX/kvtEXB09HS OO3KWNySodUCHSt1zYEwBzvx3T5LLKAlro1q4Fy57MVfXHWmFpmlWozMqPGiBKTR MDFQvRhh436J0WeGi7/3ONuWd4LrRm+7Z3qnZEJYEeXvshARqEtxi71EJEWjh13S F0oVwzv+jT0sOpiii6K/4Te5S3OuSh7dWCe9C2qXmf+XpIHo2BB+WNWQ91CUY5Yh eZsKRpj2zPnhI038YnLped2dNwmtMNb1aEX8c0aPSibGQJ5tenuWOPQsRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSaGvTTZK109WYKvlfFjOwphynsMB8GA1UdIwQY MBaAFCdQ89ftglYX4mvgmuzMYt2k6jFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjFEejEtMkNWaGZpYS1DYTdNeGkzYVRxTVU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84NTdhMmYtMzI4OC00NjdlLWIwNDMt MjQzMWU2YmE2MzExLzEvSjFEejEtMkNWaGZpYS1DYTdNeGkzYVRxTVU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84NTdhMmYtMzI4OC00NjdlLWIwNDMtMjQzMWU2YmE2MzEx LzEvSjFEejEtMkNWaGZpYS1DYTdNeGkzYVRxTVU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3ax9WVaY XdTzj5dPjtAk+LfDj4s1y3mh14v+4eEcPDMUIUpNDplpEAtz09sELL0k86mPIyFU KtP88CuKJmBod9nosZQSTipgi8Q0fFkOmcCa+ZIY7+FFTGUWWzMTLpltL+pej5Ax nQJn8CFrtQkaTWZDYhzcCyZTc0MYd1m40nkZNoktGymyxSFOtpIBjDnHDvAQSAy5 wpz8UQBCy1cmY56KDRrS5IMkJKlqrX2vGrVB/w2f+SWWRAPXNnpGS2GH2IC0jy+8 AFy3KhKkz4CWX9KlsMp3X9a+rP4wYpr6qevyaqaRdE3Wbh+3WtDg1AoQFHSWDqrD LkK8vrVt6W3Lfg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:44:57 2026 by rpki-client