This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft File: JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft (raw, json) Hash identifier: RL15CAfmzM5v7NToWnA7oztF3FvFSpgNv2tXYKjFDLk= Subject key identifier: F2:E9:36:48:5E:37:57:C9:F2:71:42:C2:92:E7:1B:72:C7:93:7E:3B Authority key identifier: 26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B Certificate issuer: /CN=26251cf7d8d6d057dc64715ba836299df39fd85b Certificate serial: 019BF5756A0B3538F14590853EF9B80AA50B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft Manifest number: 014D Signing time: Sun 25 Jan 2026 14:01:11 +0000 Manifest this update: Sun 25 Jan 2026 14:01:11 +0000 Manifest next update: Mon 26 Jan 2026 14:01:11 +0000 Files and hashes: 1: JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl (hash: U2mRpFf/GJEqjZPCFAdzLeJodPjEJMaEvMIaUi//i08=) 2: fX-rHvxMS7rGe-P0kdh6qBCV0kw.roa (hash: YxEpHCuxMU6/BR/ByERCcyICEyXZ5/Zrc7JTg1hXiro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:6a:0b:35:38:f1:45:90:85:3e:f9:b8:0a:a5:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26251cf7d8d6d057dc64715ba836299df39fd85b Validity Not Before: Jan 25 14:01:11 2026 GMT Not After : Jan 26 14:01:11 2026 GMT Subject: CN=f2e936485e3757c9f27142c292e71b72c7937e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:74:8d:e6:4d:86:d4:e0:12:34:dc:94:bd:c6: 91:76:df:19:bd:9a:2a:53:ff:1e:fb:f5:4a:21:72: 96:29:76:d7:b5:1a:61:95:8c:2d:1a:e4:74:1b:1c: 13:57:da:34:4e:38:46:73:cb:57:71:d0:1e:d5:58: ab:b0:40:bf:2c:5e:29:38:bd:30:a8:c9:78:ee:bf: 78:c9:4d:68:85:60:e7:6d:cd:75:66:b4:40:80:03: 24:25:4a:bd:ce:3f:0e:ae:19:db:ee:6d:2e:e0:b3: db:f5:b9:f0:50:82:ac:97:4d:e3:a4:02:61:2e:e1: 3d:59:2e:64:d9:74:9b:8f:b6:7c:52:b6:a5:42:84: 3d:66:05:81:d1:21:ca:a6:13:3f:4e:44:f1:bb:43: 16:ea:b1:dc:ab:d9:0e:4a:17:e7:92:6f:47:4c:29: 45:e3:6c:c9:c9:b6:8b:69:5a:d2:c2:e5:f3:08:36: 04:92:89:74:40:a9:25:26:ae:5f:cb:3b:b4:b7:cb: c8:31:88:fc:9a:be:66:8f:d1:bb:5a:36:f6:0a:e4: ff:80:46:a9:c1:6e:14:9a:e5:96:13:73:bc:60:23: 11:0f:8a:65:3b:f8:58:c8:c5:d6:d9:73:24:a5:3c: b1:00:9e:4b:a1:16:7e:bc:ac:3d:81:1b:23:d8:e1: 37:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E9:36:48:5E:37:57:C9:F2:71:42:C2:92:E7:1B:72:C7:93:7E:3B X509v3 Authority Key Identifier: keyid:26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a1:a9:41:da:ab:c0:6a:77:c0:f8:8a:79:60:ee:0f:a2:a4: 47:03:f9:3a:85:5a:86:2c:92:ae:99:3b:45:db:59:c9:dc:2a: 04:cd:d4:42:43:34:4a:d8:d5:43:26:86:81:c4:a8:c6:e1:98: 5a:03:2c:55:7a:b0:e8:9f:42:5d:dd:6d:6f:ea:eb:8b:bf:1c: 5b:54:17:bc:71:62:51:c0:58:28:21:c9:ca:59:cd:7a:dc:e0: 1c:f2:0c:e9:ac:ff:44:d4:dd:4b:a3:0f:ca:ca:93:0a:6f:ef: a8:39:cb:78:f8:7d:de:a6:57:7a:fe:74:06:77:d4:ec:e4:95: 4c:0c:ee:82:e4:bc:20:87:8c:08:47:de:90:03:73:42:10:39: 44:04:4d:30:6e:33:8e:68:c0:9d:a1:a2:83:5e:16:3b:3f:31: 00:0e:57:ee:17:d8:3e:f9:86:b1:d4:12:a5:44:f0:61:0b:9b: a0:b0:02:3a:5f:02:bb:67:78:43:cf:b9:c1:08:75:c0:bc:f4: cd:7f:ee:2c:12:40:3e:0b:3a:7a:a6:e0:c6:71:10:c5:67:cb: c0:b9:fa:1f:ca:9a:1b:19:7d:12:ef:37:c8:d8:cd:ed:9d:8b: a6:c9:ed:7f:44:58:6e:92:32:92:08:32:6a:49:ef:a5:37:7b: 30:ec:5e:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dWoLNTjxRZCFPvm4CqULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MjUxY2Y3ZDhkNmQwNTdkYzY0NzE1YmE4MzYyOTlkZjM5 ZmQ4NWIwHhcNMjYwMTI1MTQwMTExWhcNMjYwMTI2MTQwMTExWjAzMTEwLwYDVQQD EyhmMmU5MzY0ODVlMzc1N2M5ZjI3MTQyYzI5MmU3MWI3MmM3OTM3ZTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3SN5k2G1OASNNyUvcaRdt8ZvZoq U/8e+/VKIXKWKXbXtRphlYwtGuR0GxwTV9o0TjhGc8tXcdAe1VirsEC/LF4pOL0w qMl47r94yU1ohWDnbc11ZrRAgAMkJUq9zj8Orhnb7m0u4LPb9bnwUIKsl03jpAJh LuE9WS5k2XSbj7Z8UralQoQ9ZgWB0SHKphM/TkTxu0MW6rHcq9kOShfnkm9HTClF 42zJybaLaVrSwuXzCDYEkol0QKklJq5fyzu0t8vIMYj8mr5mj9G7Wjb2CuT/gEap wW4UmuWWE3O8YCMRD4plO/hYyMXW2XMkpTyxAJ5LoRZ+vKw9gRsj2OE3QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLpNkheN1fJ8nFCwpLnG3LHk347MB8GA1UdIwQY MBaAFCYlHPfY1tBX3GRxW6g2KZ3zn9hbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80OGI1MmMtYTA0NS00MDlmLTk4MWIt OTUyMDU0OWQ3ZmQxLzEvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80OGI1MmMtYTA0NS00MDlmLTk4MWItOTUyMDU0OWQ3ZmQx LzEvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6GpQdqr wGp3wPiKeWDuD6KkRwP5OoVahiySrpk7RdtZydwqBM3UQkM0StjVQyaGgcSoxuGY WgMsVXqw6J9CXd1tb+rri78cW1QXvHFiUcBYKCHJylnNetzgHPIM6az/RNTdS6MP ysqTCm/vqDnLePh93qZXev50BnfU7OSVTAzuguS8IIeMCEfekANzQhA5RARNMG4z jmjAnaGig14WOz8xAA5X7hfYPvmGsdQSpUTwYQuboLACOl8Cu2d4Q8+5wQh1wLz0 zX/uLBJAPgs6eqbgxnEQxWfLwLn6H8qaGxl9Eu83yNjN7Z2Lpsntf0RYbpIykggy aknvpTd7MOxejg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:07:25 2026 by rpki-client