This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft File: JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json) Hash identifier: 5nT/4oJWUmQWHlhZlXsKwSnPnjTcGUWBosTCIm5yq44= Subject key identifier: 3F:F8:E6:9E:0F:4E:C8:11:18:74:12:57:46:8F:0D:80:1E:C8:FC:CD Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA Certificate issuer: /CN=251e7871fd38f2df918242dda1c6fc35688423ca Certificate serial: 019BF65084E668AC912C040D11AF71937594 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft Manifest number: 08C2 Signing time: Sun 25 Jan 2026 18:00:30 +0000 Manifest this update: Sun 25 Jan 2026 18:00:30 +0000 Manifest next update: Mon 26 Jan 2026 18:00:30 +0000 Files and hashes: 1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: 1ZvPcP62arpOnj7BSG/8tHkFJKBM3I2/WZpf56fxcSY=) 2: XbK16gp1Rd7CTE3ryMVkvlqNehI.roa (hash: wmv1rflTHLRXNBfeQWldsma4iJiCHJfDkNf/3azIuu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:84:e6:68:ac:91:2c:04:0d:11:af:71:93:75:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca Validity Not Before: Jan 25 18:00:30 2026 GMT Not After : Jan 26 18:00:30 2026 GMT Subject: CN=3ff8e69e0f4ec81118741257468f0d801ec8fccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:46:0d:ea:08:71:16:6b:8e:c1:4d:35:be:29: 7e:e5:80:2c:13:ae:43:6f:19:f6:ee:bf:d0:85:74: 22:b1:a4:ea:d4:d3:eb:fd:ca:f5:53:7b:a0:39:17: 76:52:0e:fa:4e:67:74:7a:41:a0:87:d4:0d:57:9f: 48:91:b1:06:5f:6c:e0:f6:57:61:64:bd:86:32:b2: ad:5a:a9:0a:c8:c5:9a:64:31:fd:22:7d:41:fb:8e: 38:5c:ad:60:4a:6d:3a:77:24:4a:26:e5:a4:04:4e: 1d:90:f1:46:93:46:c4:3a:a2:ac:44:03:4d:93:dd: 9e:e4:87:55:19:26:24:91:b6:cd:7e:09:1f:64:13: f0:9b:af:49:4e:85:47:a8:7f:7a:55:b6:60:00:12: 62:7d:b1:71:a6:95:4f:41:44:70:de:49:6a:f8:a9: 51:bd:da:84:7f:a8:1b:09:5b:51:98:06:95:57:da: 66:ea:07:98:04:ca:ed:e7:44:05:9f:54:52:cb:1b: 25:eb:c2:2a:34:6e:1d:ce:12:8c:96:d7:40:96:ed: ed:04:57:30:71:9f:9f:47:34:4d:25:0d:a9:56:5f: 0a:0f:21:e9:f2:d3:2a:ac:13:fe:06:6b:d4:86:94: cc:bc:f1:1a:9d:f6:10:41:bc:33:31:f4:74:60:31: cd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F8:E6:9E:0F:4E:C8:11:18:74:12:57:46:8F:0D:80:1E:C8:FC:CD X509v3 Authority Key Identifier: keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:08:78:07:da:2f:ad:d9:71:35:22:b2:e1:1d:29:84:bf:30: 89:09:74:c4:37:22:22:a1:0e:52:45:56:35:b1:05:08:00:b7: 31:dc:03:2e:5e:6e:4d:36:21:6b:83:87:f1:12:13:05:9b:cf: 07:c4:3f:21:41:87:5b:55:0f:8c:d6:8d:6a:2f:d4:a5:68:90: 83:e0:6b:d8:3e:3a:37:90:50:99:1e:5a:ac:7b:4e:18:6f:bb: c2:d5:3d:1d:05:4f:b8:41:33:8e:76:95:57:c5:3d:ba:2d:21: 9a:be:78:e8:d7:24:7d:03:eb:a9:69:56:87:0b:8d:b8:7d:e9: 49:a8:90:b4:13:d9:3b:61:49:a6:66:30:6b:34:01:4b:42:63: 09:40:aa:3e:26:dc:e0:cc:2d:cc:12:c1:09:de:3c:c9:90:ab: 7d:13:c1:0d:da:6d:69:89:ad:d9:27:db:b9:e5:bd:72:94:43: 1b:81:8e:dc:53:fb:ce:b9:e3:e6:0e:ec:c2:cc:da:6f:73:5c: 45:58:af:b9:03:d4:e4:75:6c:cc:21:97:b7:99:11:34:56:e4: a4:b2:02:27:9e:24:0a:ae:7e:3a:37:49:a1:d5:46:7b:35:19: 60:6c:8a:ea:a4:36:37:b2:90:1d:ed:40:c0:00:50:43:ea:60: 26:ce:8f:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UITmaKyRLAQNEa9xk3WUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MWU3ODcxZmQzOGYyZGY5MTgyNDJkZGExYzZmYzM1Njg4 NDIzY2EwHhcNMjYwMTI1MTgwMDMwWhcNMjYwMTI2MTgwMDMwWjAzMTEwLwYDVQQD EygzZmY4ZTY5ZTBmNGVjODExMTg3NDEyNTc0NjhmMGQ4MDFlYzhmY2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkYN6ghxFmuOwU01vil+5YAsE65D bxn27r/QhXQisaTq1NPr/cr1U3ugORd2Ug76Tmd0ekGgh9QNV59IkbEGX2zg9ldh ZL2GMrKtWqkKyMWaZDH9In1B+444XK1gSm06dyRKJuWkBE4dkPFGk0bEOqKsRANN k92e5IdVGSYkkbbNfgkfZBPwm69JToVHqH96VbZgABJifbFxppVPQURw3klq+KlR vdqEf6gbCVtRmAaVV9pm6geYBMrt50QFn1RSyxsl68IqNG4dzhKMltdAlu3tBFcw cZ+fRzRNJQ2pVl8KDyHp8tMqrBP+BmvUhpTMvPEanfYQQbwzMfR0YDHN6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/45p4PTsgRGHQSV0aPDYAeyPzNMB8GA1UdIwQY MBaAFCUeeHH9OPLfkYJC3aHG/DVohCPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlI1NGNmMDQ4dC1SZ2tMZG9jYjhOV2lFSThvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83MTEzZGYtZTBlOC00NDBlLWExMTgt OGJlYWRhYWFkMGIxLzEvSlI1NGNmMDQ4dC1SZ2tMZG9jYjhOV2lFSThvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC83MTEzZGYtZTBlOC00NDBlLWExMTgtOGJlYWRhYWFkMGIx LzEvSlI1NGNmMDQ4dC1SZ2tMZG9jYjhOV2lFSThvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmAh4B9ov rdlxNSKy4R0phL8wiQl0xDciIqEOUkVWNbEFCAC3MdwDLl5uTTYha4OH8RITBZvP B8Q/IUGHW1UPjNaNai/UpWiQg+Br2D46N5BQmR5arHtOGG+7wtU9HQVPuEEzjnaV V8U9ui0hmr546NckfQPrqWlWhwuNuH3pSaiQtBPZO2FJpmYwazQBS0JjCUCqPibc 4MwtzBLBCd48yZCrfRPBDdptaYmt2SfbueW9cpRDG4GO3FP7zrnj5g7swszab3Nc RVivuQPU5HVszCGXt5kRNFbkpLICJ54kCq5+OjdJodVGezUZYGyK6qQ2N7KQHe1A wABQQ+pgJs6P6Q== -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:40 2026 by rpki-client