This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft File: JxnUEBB2de7YtizK1DUzb4GeCm0.mft (raw, json) Hash identifier: M64SYrf1R30++RutOUP+FTpkCvi9fT6Y5+JYMpjoRWo= Subject key identifier: 81:44:8F:D3:36:A7:A7:4A:B3:12:68:5A:6D:B7:12:0A:B3:02:30:84 Authority key identifier: 27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D Certificate issuer: /CN=2719d410107675eed8b62ccad435336f819e0a6d Certificate serial: 019BF57545CED8832F707F3FC0E54D4757DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft Manifest number: 0A28 Signing time: Sun 25 Jan 2026 14:01:01 +0000 Manifest this update: Sun 25 Jan 2026 14:01:01 +0000 Manifest next update: Mon 26 Jan 2026 14:01:01 +0000 Files and hashes: 1: JxnUEBB2de7YtizK1DUzb4GeCm0.crl (hash: p22XDphZWD41YT+C5G6xVBSyH1RSOEd1wUHhWBeVj2g=) 2: topvI4u_yc05Ro-Wd1LgO-ILlDM.roa (hash: YcyOx4QELjJwJBph+m+FjlEMDtBjOHDtaRK96fGlHwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:45:ce:d8:83:2f:70:7f:3f:c0:e5:4d:47:57:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2719d410107675eed8b62ccad435336f819e0a6d Validity Not Before: Jan 25 14:01:01 2026 GMT Not After : Jan 26 14:01:01 2026 GMT Subject: CN=81448fd336a7a74ab312685a6db7120ab3023084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:c5:c2:84:be:02:1c:03:82:bb:ad:20:46: c9:bc:ca:72:10:2c:23:0e:b7:92:49:34:52:3d:7f: 94:e1:ea:35:69:f6:a5:2d:13:b1:23:47:3d:37:83: f1:4c:67:20:ea:51:c6:b0:94:64:48:60:6e:4f:89: 64:99:c7:f3:c4:4a:6c:69:44:6f:fe:59:51:bd:08: 24:6d:14:5e:d3:f2:70:c1:f1:7b:a6:59:7b:af:45: d7:2b:9e:f2:1d:d4:af:fb:b9:75:4c:ff:c1:4a:57: 28:45:d2:31:a0:4c:66:8e:bb:f9:1f:60:f9:dc:e4: 22:6b:93:34:43:e0:96:67:f4:d7:b2:f5:b4:be:f2: 65:83:3f:56:3e:98:4f:0c:4e:d0:c7:f9:4c:f1:e7: 7a:d6:8a:8c:18:ca:c3:4d:29:2e:1a:2a:df:cc:ee: 60:6d:2b:5d:35:9a:65:3f:9b:f7:84:f6:58:f1:2e: ea:aa:43:12:39:cc:99:03:95:d4:05:ed:65:4e:b9: 20:c5:9e:ac:16:a2:2b:56:5d:7c:6c:3a:db:fc:17: 2a:d8:e2:bb:bb:6b:e3:2e:5a:a4:d8:0f:7d:3c:90: 84:0b:29:c4:ef:90:17:d4:29:db:fa:9c:bc:58:45: 73:e9:0e:b4:cf:39:6f:ad:23:79:7e:e0:c4:f3:06: 40:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:44:8F:D3:36:A7:A7:4A:B3:12:68:5A:6D:B7:12:0A:B3:02:30:84 X509v3 Authority Key Identifier: keyid:27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:60:06:82:b0:1c:93:ec:5a:0c:09:de:90:7e:bd:d0:94:42: 7a:a1:4c:b5:f2:a3:91:3c:0c:77:8c:a6:ec:b1:f9:7d:44:a4: 61:4b:cf:24:be:ee:8c:41:cd:0f:dc:8a:d3:c6:e4:9c:8f:e7: 7c:5d:1e:42:6c:35:39:de:e8:8c:8e:76:d6:96:34:06:15:2d: ba:93:b7:8b:af:35:3b:75:ed:8e:d1:d5:c8:16:21:c3:b7:18: 46:93:56:48:07:4a:ad:bb:07:db:8f:97:be:50:b9:70:f4:4a: 34:95:6c:3e:0b:af:ca:f3:0f:a6:8a:ec:da:ea:9e:e4:1d:e6: ec:ff:1f:bd:56:1e:b0:b7:96:85:20:30:49:40:ea:15:b5:a3: 9d:14:6b:24:91:27:eb:42:58:66:1f:c8:37:2e:49:6e:43:9a: 72:6e:76:d5:8f:34:f3:d0:66:21:64:30:05:10:02:d9:df:b6: d8:d8:e2:d3:bc:08:70:85:b0:3e:39:5d:2c:da:ba:0d:90:33: b5:9d:8c:01:68:5b:d8:2c:8c:1d:90:15:d5:62:43:fc:91:5e: 31:f6:bf:33:80:db:df:a7:3d:49:6d:cf:d3:cc:5d:bd:11:9c: 1b:7c:69:23:bd:9e:43:eb:b6:ea:63:e0:c3:16:6c:68:49:99: 25:4c:3c:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dUXO2IMvcH8/wOVNR1ffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MTlkNDEwMTA3Njc1ZWVkOGI2MmNjYWQ0MzUzMzZmODE5 ZTBhNmQwHhcNMjYwMTI1MTQwMTAxWhcNMjYwMTI2MTQwMTAxWjAzMTEwLwYDVQQD Eyg4MTQ0OGZkMzM2YTdhNzRhYjMxMjY4NWE2ZGI3MTIwYWIzMDIzMDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvknFwoS+AhwDgrutIEbJvMpyECwj DreSSTRSPX+U4eo1afalLROxI0c9N4PxTGcg6lHGsJRkSGBuT4lkmcfzxEpsaURv /llRvQgkbRRe0/JwwfF7pll7r0XXK57yHdSv+7l1TP/BSlcoRdIxoExmjrv5H2D5 3OQia5M0Q+CWZ/TXsvW0vvJlgz9WPphPDE7Qx/lM8ed61oqMGMrDTSkuGirfzO5g bStdNZplP5v3hPZY8S7qqkMSOcyZA5XUBe1lTrkgxZ6sFqIrVl18bDrb/Bcq2OK7 u2vjLlqk2A99PJCECynE75AX1Cnb+py8WEVz6Q60zzlvrSN5fuDE8wZATQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFEj9M2p6dKsxJoWm23EgqzAjCEMB8GA1UdIwQY MBaAFCcZ1BAQdnXu2LYsytQ1M2+BngptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnhuVUVCQjJkZTdZdGl6SzFEVXpiNEdlQ20wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83MTVlZjItMDZlOS00NTVkLThiNzEt NzcxODUxMmYwZGVmLzEvSnhuVUVCQjJkZTdZdGl6SzFEVXpiNEdlQ20wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni83MTVlZjItMDZlOS00NTVkLThiNzEtNzcxODUxMmYwZGVm LzEvSnhuVUVCQjJkZTdZdGl6SzFEVXpiNEdlQ20wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2AGgrAc k+xaDAnekH690JRCeqFMtfKjkTwMd4ym7LH5fUSkYUvPJL7ujEHND9yK08bknI/n fF0eQmw1Od7ojI521pY0BhUtupO3i681O3XtjtHVyBYhw7cYRpNWSAdKrbsH24+X vlC5cPRKNJVsPguvyvMPpors2uqe5B3m7P8fvVYesLeWhSAwSUDqFbWjnRRrJJEn 60JYZh/INy5JbkOacm521Y8089BmIWQwBRAC2d+22Nji07wIcIWwPjldLNq6DZAz tZ2MAWhb2CyMHZAV1WJD/JFeMfa/M4Db36c9SW3P08xdvRGcG3xpI72eQ+u26mPg wxZsaEmZJUw8WA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:39:25 2026 by rpki-client