This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft File: JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json) Hash identifier: f4rGNUXazk6Sohv+ke0q4CuXdVK5n0o57mUnviCTwuY= Subject key identifier: 22:44:EF:91:F4:F4:C7:61:7E:B3:04:FC:EF:1E:7C:33:22:89:E6:55 Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93 Certificate issuer: /CN=25db0061f2d8ae1403497ca17e1a88df23048f93 Certificate serial: 019BF763418FA7E862E69B5A4FD00F469D85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft Manifest number: 165B Signing time: Sun 25 Jan 2026 23:00:35 +0000 Manifest this update: Sun 25 Jan 2026 23:00:35 +0000 Manifest next update: Mon 26 Jan 2026 23:00:35 +0000 Files and hashes: 1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: nDweLLoxUe7isV0CdsS2vxrdpNZsXh6wKittiaFwEo8=) 2: QT5YaQtwh10kjLMseFaZ5StOfCw.asa (hash: mXFjq/NajihGSXsqBXu5vBTGi2iI8iMdEQGHWiYPM84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:41:8f:a7:e8:62:e6:9b:5a:4f:d0:0f:46:9d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93 Validity Not Before: Jan 25 23:00:35 2026 GMT Not After : Jan 26 23:00:35 2026 GMT Subject: CN=2244ef91f4f4c7617eb304fcef1e7c332289e655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ae:10:7c:94:ed:ad:0a:f8:75:f6:59:dd:a6: e4:29:67:e2:ec:28:fd:f7:46:f9:eb:d8:99:77:3a: d7:eb:1e:04:99:4c:31:31:09:43:5d:15:e9:4e:26: 20:02:47:f3:42:83:d0:d1:24:67:7c:9c:fa:16:5d: c8:f7:53:29:d7:04:c8:31:3d:29:73:36:22:23:29: 74:f9:1a:11:6b:c4:ee:57:fa:b3:63:75:2c:cf:b5: 9a:44:1c:56:8f:72:dd:d7:e8:94:5b:c9:4c:e9:b7: 31:07:95:31:66:ea:8f:be:d7:21:e2:07:a7:c6:d6: 9d:07:68:96:3c:1d:c2:90:0e:62:65:32:13:16:e2: a0:21:8e:5c:3d:4c:8b:5f:4a:23:41:7e:1d:52:14: 51:63:8e:79:db:24:c8:7c:fd:1c:5f:78:5c:29:8f: e0:74:0f:75:63:3b:3e:0c:1e:3a:e3:f2:fc:57:6e: 83:0e:6c:47:c3:1c:3f:d3:bd:8d:bf:9b:fa:85:62: 55:01:32:cc:ad:7e:b3:3a:7e:ae:fc:2f:6d:37:db: 23:d5:c6:8b:e2:0b:66:04:35:83:14:4f:07:24:89: 57:7d:9d:06:45:d7:3a:6e:46:95:fe:7d:30:88:74: 38:c2:a8:bb:7d:ae:cf:22:c4:b1:f8:78:df:ee:87: 02:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:44:EF:91:F4:F4:C7:61:7E:B3:04:FC:EF:1E:7C:33:22:89:E6:55 X509v3 Authority Key Identifier: keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:53:70:41:a4:e4:7e:54:55:01:e0:93:d6:33:9d:59:a5:a8: f1:9f:0a:3a:b1:6b:ee:a3:47:db:c1:be:e8:6b:8e:f0:fb:e0: ba:82:46:06:16:34:c2:19:06:4a:2d:b8:10:f4:12:bc:c1:64: 12:7b:bb:5c:5c:7e:19:ff:84:e6:0a:2b:3f:31:36:87:21:c1: 81:9d:50:ed:dc:29:7e:a8:30:51:bf:33:78:72:7d:2e:bc:6b: bd:9c:7b:fc:d8:64:71:a9:d0:53:d0:08:a6:03:e5:c2:0c:50: cb:c0:59:65:23:34:be:fa:78:7c:95:23:c2:0e:b6:b2:ef:89: c7:04:f0:af:8e:ec:50:dc:02:31:4d:8f:26:62:1e:b1:73:ae: c4:4d:e3:a2:e4:49:40:e9:a1:ad:5b:9e:8a:bb:93:24:ac:14: 86:18:59:4a:7c:a5:3c:ab:4f:14:ec:de:5d:93:70:da:e7:01: 34:da:36:e6:e5:56:9d:f2:1f:09:0b:f7:ee:d7:d5:32:a0:cd: b6:6c:65:52:ec:2b:51:fd:ac:ca:c4:af:d6:d5:e7:01:8c:dd: 74:9a:38:41:48:0a:94:de:07:1c:8a:c2:87:c6:65:c5:e6:fe: 23:eb:2a:00:01:09:1c:22:19:7d:82:3c:96:7f:90:4b:6d:e8: 78:f5:6c:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y0GPp+hi5ptaT9APRp2FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZGIwMDYxZjJkOGFlMTQwMzQ5N2NhMTdlMWE4OGRmMjMw NDhmOTMwHhcNMjYwMTI1MjMwMDM1WhcNMjYwMTI2MjMwMDM1WjAzMTEwLwYDVQQD EygyMjQ0ZWY5MWY0ZjRjNzYxN2ViMzA0ZmNlZjFlN2MzMzIyODllNjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq4QfJTtrQr4dfZZ3abkKWfi7Cj9 90b569iZdzrX6x4EmUwxMQlDXRXpTiYgAkfzQoPQ0SRnfJz6Fl3I91Mp1wTIMT0p czYiIyl0+RoRa8TuV/qzY3Usz7WaRBxWj3Ld1+iUW8lM6bcxB5UxZuqPvtch4gen xtadB2iWPB3CkA5iZTITFuKgIY5cPUyLX0ojQX4dUhRRY4552yTIfP0cX3hcKY/g dA91Yzs+DB464/L8V26DDmxHwxw/072Nv5v6hWJVATLMrX6zOn6u/C9tN9sj1caL 4gtmBDWDFE8HJIlXfZ0GRdc6bkaV/n0wiHQ4wqi7fa7PIsSx+Hjf7ocC2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJE75H09MdhfrME/O8efDMiieZVMB8GA1UdIwQY MBaAFCXbAGHy2K4UA0l8oX4aiN8jBI+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmRzQVlmTFlyaFFEU1h5aGZocUkzeU1FajVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jOWJlOTMtM2E1OC00Y2VjLThhNmIt MmFjYmUzZDUzZGZiLzEvSmRzQVlmTFlyaFFEU1h5aGZocUkzeU1FajVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9jOWJlOTMtM2E1OC00Y2VjLThhNmItMmFjYmUzZDUzZGZi LzEvSmRzQVlmTFlyaFFEU1h5aGZocUkzeU1FajVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvFNwQaTk flRVAeCT1jOdWaWo8Z8KOrFr7qNH28G+6GuO8PvguoJGBhY0whkGSi24EPQSvMFk Enu7XFx+Gf+E5gorPzE2hyHBgZ1Q7dwpfqgwUb8zeHJ9LrxrvZx7/NhkcanQU9AI pgPlwgxQy8BZZSM0vvp4fJUjwg62su+JxwTwr47sUNwCMU2PJmIesXOuxE3jouRJ QOmhrVueiruTJKwUhhhZSnylPKtPFOzeXZNw2ucBNNo25uVWnfIfCQv37tfVMqDN tmxlUuwrUf2sysSv1tXnAYzddJo4QUgKlN4HHIrCh8Zlxeb+I+sqAAEJHCIZfYI8 ln+QS23oePVsrw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:05 2026 by rpki-client