This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft File: Jd40sXxTewli5M272bxnKcix2Qo.mft (raw, json) Hash identifier: ZJK3DodJSsspx7uObl3iHGqWCwG+8GrDeh8uPAsCgH8= Subject key identifier: B5:06:A5:45:A7:9C:74:E4:72:ED:20:14:89:6E:1C:14:EC:87:7D:1C Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A Certificate issuer: /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a Certificate serial: 019BF7D23FBAAF33162C068E53FD0F8584F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft Manifest number: 01CE Signing time: Mon 26 Jan 2026 01:01:49 +0000 Manifest this update: Mon 26 Jan 2026 01:01:49 +0000 Manifest next update: Tue 27 Jan 2026 01:01:49 +0000 Files and hashes: 1: Jd40sXxTewli5M272bxnKcix2Qo.crl (hash: nodTc6S/RxZSPAK2xK08Iad4jVFh7GkbJ2DyaYDcxiE=) 2: LPtgrCTtvqxu3cjuNnJKHmVe1hU.roa (hash: BGV23TnfOPa93rWNrPOH2klHvaD0qSg8RA6zxqAnbzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:3f:ba:af:33:16:2c:06:8e:53:fd:0f:85:84:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a Validity Not Before: Jan 26 01:01:49 2026 GMT Not After : Jan 27 01:01:49 2026 GMT Subject: CN=b506a545a79c74e472ed2014896e1c14ec877d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:63:35:22:e4:bc:70:42:dc:ef:b6:04:88:85: 7d:12:3f:8f:76:a3:ad:01:62:20:19:a4:cc:65:62: 12:8c:63:30:87:f7:98:e4:4b:45:9c:57:5a:f3:77: f9:8f:32:2b:8d:1b:bc:af:2c:fd:ce:ad:9c:44:46: 36:43:82:ac:f7:1c:7c:f6:7a:1c:f1:b8:f6:d4:22: 28:98:fe:e1:ac:bd:bf:39:a5:cd:29:19:b3:a1:6b: 7f:0e:0a:eb:1a:77:62:cd:3d:b1:67:c7:62:3f:a9: 06:a9:0f:a5:b3:29:c6:01:7d:30:12:7a:4c:6d:bf: a3:fa:97:0a:1b:25:4c:54:5a:e5:cc:8d:d1:a5:14: e2:e9:a3:80:f3:a4:25:47:1b:ff:53:8c:b6:b2:d9: c0:a0:b6:a2:50:39:09:56:4b:37:21:74:ec:75:ad: 9d:c8:d4:bf:ae:83:21:c0:81:6d:9e:3f:85:11:a3: ad:ec:9a:e8:b4:97:81:1b:fa:cc:77:33:a6:24:dc: f0:c1:82:aa:b3:ec:64:e4:0d:71:15:85:82:4e:29: 4f:84:42:25:3c:91:0b:32:0f:9d:43:8b:3c:b3:77: b0:12:0f:6c:34:27:20:68:d1:f5:23:29:ab:39:d9: 5a:5d:5b:97:e2:8b:54:64:9d:9b:4b:6c:80:35:18: d4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:06:A5:45:A7:9C:74:E4:72:ED:20:14:89:6E:1C:14:EC:87:7D:1C X509v3 Authority Key Identifier: keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:03:52:11:11:e4:ef:8c:7c:eb:16:87:04:14:54:b2:22:0a: 5a:7f:4e:f9:de:5c:44:b2:3e:f4:52:3f:8d:2a:ae:81:3b:76: e0:8c:8a:a3:1f:c7:cf:0d:3e:96:48:eb:80:1f:df:5a:84:08: 44:fb:fe:e1:8d:fa:48:67:c8:e2:5c:f5:a4:5f:e9:12:9e:0f: 0e:39:c0:d0:46:95:21:74:2e:0a:46:1c:b1:26:1d:98:1a:a9: 7b:3f:49:4f:d3:d9:31:90:2b:30:79:c5:ec:25:3c:02:fe:18: 25:74:6a:48:42:10:f9:df:5b:eb:24:de:4d:09:6c:b7:7b:fa: 9e:3d:74:41:50:fb:33:2c:b6:b1:85:b1:5e:a4:9c:c3:f0:62: 10:57:2c:2a:ed:4e:bd:c2:ff:ac:8e:f5:14:2f:85:ac:41:a7: ed:f6:a8:87:e6:45:08:ca:a4:b8:09:50:00:f0:00:b8:67:3c: 0b:b0:1c:62:98:f0:61:3b:51:ba:b7:05:1e:9f:9f:74:a8:29: c0:5c:a4:a8:7c:b2:eb:9f:ab:40:e3:20:26:4d:b3:22:19:05: b1:b9:ce:b6:d8:1b:2a:27:b7:48:80:55:38:34:2e:a8:3e:83: 70:af:05:13:40:3e:de:6b:b0:12:ab:34:38:7f:5d:a1:62:59: c0:33:7c:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30j+6rzMWLAaOU/0PhYT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZGUzNGIxN2M1MzdiMDk2MmU0Y2RiYmQ5YmM2NzI5Yzhi MWQ5MGEwHhcNMjYwMTI2MDEwMTQ5WhcNMjYwMTI3MDEwMTQ5WjAzMTEwLwYDVQQD EyhiNTA2YTU0NWE3OWM3NGU0NzJlZDIwMTQ4OTZlMWMxNGVjODc3ZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmM1IuS8cELc77YEiIV9Ej+PdqOt AWIgGaTMZWISjGMwh/eY5EtFnFda83f5jzIrjRu8ryz9zq2cREY2Q4Ks9xx89noc 8bj21CIomP7hrL2/OaXNKRmzoWt/DgrrGndizT2xZ8diP6kGqQ+lsynGAX0wEnpM bb+j+pcKGyVMVFrlzI3RpRTi6aOA86QlRxv/U4y2stnAoLaiUDkJVks3IXTsda2d yNS/roMhwIFtnj+FEaOt7JrotJeBG/rMdzOmJNzwwYKqs+xk5A1xFYWCTilPhEIl PJELMg+dQ4s8s3ewEg9sNCcgaNH1IymrOdlaXVuX4otUZJ2bS2yANRjU9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUGpUWnnHTkcu0gFIluHBTsh30cMB8GA1UdIwQY MBaAFCXeNLF8U3sJYuTNu9m8ZynIsdkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ZmQzZTEtMzVjMC00NTI4LTk4NTQt MDk4OTQ5NDU4OGJmLzEvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy83ZmQzZTEtMzVjMC00NTI4LTk4NTQtMDk4OTQ5NDU4OGJm LzEvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUANSERHk 74x86xaHBBRUsiIKWn9O+d5cRLI+9FI/jSqugTt24IyKox/Hzw0+lkjrgB/fWoQI RPv+4Y36SGfI4lz1pF/pEp4PDjnA0EaVIXQuCkYcsSYdmBqpez9JT9PZMZArMHnF 7CU8Av4YJXRqSEIQ+d9b6yTeTQlst3v6nj10QVD7Myy2sYWxXqScw/BiEFcsKu1O vcL/rI71FC+FrEGn7faoh+ZFCMqkuAlQAPAAuGc8C7AcYpjwYTtRurcFHp+fdKgp wFykqHyy65+rQOMgJk2zIhkFsbnOttgbKie3SIBVODQuqD6DcK8FE0A+3muwEqs0 OH9doWJZwDN8ow== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:52 2026 by rpki-client