This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json) Hash identifier: 3VpmJF0TuCwieqQuzU4LlTpWfqCiHbRlNZvff3eqOWA= Subject key identifier: F4:98:BF:BA:50:91:E6:CC:C3:D6:3A:97:C4:5A:60:24:AE:6D:72:7D Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3 Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3 Certificate serial: 019BF72CB8EACFD6BABD240B9419065A67E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft Manifest number: 147E Signing time: Sun 25 Jan 2026 22:01:01 +0000 Manifest this update: Sun 25 Jan 2026 22:01:01 +0000 Manifest next update: Mon 26 Jan 2026 22:01:01 +0000 Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: 3+MDz4dVwfw8vnv9GBfG+s93my5vv9VtEx35tUMYa3Y=) 2: UTiXqpOnXnL7SsApTxG7VdzoF_M.roa (hash: xvzfHxziNr26zYJwG+snS1syo+ysKboS5MzS0bjlx5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:b8:ea:cf:d6:ba:bd:24:0b:94:19:06:5a:67:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3 Validity Not Before: Jan 25 22:01:01 2026 GMT Not After : Jan 26 22:01:01 2026 GMT Subject: CN=f498bfba5091e6ccc3d63a97c45a6024ae6d727d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4f:0f:0d:a3:5c:01:70:8c:76:20:0d:0c:46: 00:96:fd:e0:7e:7c:c2:04:25:33:b7:59:5d:49:01: 5d:dc:59:27:29:3c:8e:85:77:1e:0c:02:d1:5d:06: 8e:aa:74:3b:90:ad:ec:c8:bb:69:02:dd:a7:d7:39: 7e:c8:31:a7:25:30:a6:dc:93:9c:57:7e:2a:07:e3: 61:13:0b:95:82:e0:9d:67:fd:cd:c3:0a:90:91:43: 03:62:0b:0e:e8:f8:09:13:fd:56:11:e7:3d:25:32: 23:da:84:0e:d7:c4:c6:5d:c3:7d:7f:84:39:11:45: ab:b1:d8:88:bb:c6:28:ec:60:fa:96:b5:4e:6c:15: 03:7a:45:08:cf:58:73:51:2d:c0:79:e0:36:e2:28: d7:7e:1a:79:1d:2c:53:79:91:96:67:26:6d:d2:1e: 48:fe:88:2c:75:ce:38:e4:6a:24:9b:13:74:64:aa: 4f:ea:8e:17:09:7c:8d:70:ad:cc:9f:50:a0:6f:c8: 25:12:8c:3a:7d:16:ae:e1:0b:ed:3e:a3:ec:ea:39: d9:54:72:3a:77:55:47:d5:21:ba:6d:1b:24:ba:9b: ec:1a:b9:f0:cf:16:d8:68:ea:50:59:ad:b6:25:28: f3:ca:76:1c:57:93:5b:cc:03:9b:7e:05:51:5c:2d: ae:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:98:BF:BA:50:91:E6:CC:C3:D6:3A:97:C4:5A:60:24:AE:6D:72:7D X509v3 Authority Key Identifier: keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:b2:7b:7e:04:f4:cd:32:40:96:2f:d6:25:d0:9a:da:2b:c3: db:87:81:52:34:af:c1:50:d3:76:a0:34:b4:b8:cc:44:a3:6b: a2:ad:2d:18:c7:43:09:2f:e2:cf:22:bc:20:3a:a3:c2:8c:57: 1a:87:3e:e4:84:1e:f5:21:7d:e4:c3:bb:a4:09:8f:ee:9b:85: 69:a3:f8:8f:eb:f1:b1:7d:94:6f:48:5a:b6:cf:ca:ef:5c:df: 9b:66:1d:73:b4:b4:f1:78:42:9f:7c:46:4b:8f:8e:85:16:44: 30:76:bf:2b:16:42:53:16:14:a3:90:59:c4:82:79:72:f7:50: ef:8f:26:73:34:43:f9:4a:7d:a6:46:57:51:8f:e8:dc:05:b5: 61:19:c1:a3:ed:59:f9:55:e0:f7:89:89:ea:73:5f:0d:44:5f: 03:b5:86:55:6d:7c:8d:ff:61:7f:f3:73:9e:c8:23:cd:cc:1c: ab:76:46:06:b9:22:c4:d0:ff:f8:56:10:16:5d:82:bf:79:a4: 54:f3:7b:58:29:6e:c0:fa:d1:8b:fc:89:cd:fa:ab:44:e5:bd: ff:6c:21:be:3d:dd:fd:e5:27:e9:eb:f2:b3:32:c5:36:8a:3e: 8f:62:e4:b8:30:82:48:22:f2:25:b2:c7:d3:c9:d7:1c:f1:bb: da:1a:f8:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LLjqz9a6vSQLlBkGWmfjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MjZjMTM4YWZhNDJhN2Q2NWNjNzc2MWFjNGYxODY4MzY2 ZmE3ZTMwHhcNMjYwMTI1MjIwMTAxWhcNMjYwMTI2MjIwMTAxWjAzMTEwLwYDVQQD EyhmNDk4YmZiYTUwOTFlNmNjYzNkNjNhOTdjNDVhNjAyNGFlNmQ3MjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE8PDaNcAXCMdiANDEYAlv3gfnzC BCUzt1ldSQFd3FknKTyOhXceDALRXQaOqnQ7kK3syLtpAt2n1zl+yDGnJTCm3JOc V34qB+NhEwuVguCdZ/3NwwqQkUMDYgsO6PgJE/1WEec9JTIj2oQO18TGXcN9f4Q5 EUWrsdiIu8Yo7GD6lrVObBUDekUIz1hzUS3AeeA24ijXfhp5HSxTeZGWZyZt0h5I /ogsdc445GokmxN0ZKpP6o4XCXyNcK3Mn1Cgb8glEow6fRau4QvtPqPs6jnZVHI6 d1VH1SG6bRskupvsGrnwzxbYaOpQWa22JSjzynYcV5NbzAObfgVRXC2u4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSYv7pQkebMw9Y6l8RaYCSubXJ9MB8GA1UdIwQY MBaAFCUmwTivpCp9Zcx3YaxPGGg2b6fjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQt YjA2MjI4ZmNmMmMxLzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQtYjA2MjI4ZmNmMmMx LzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbrJ7fgT0 zTJAli/WJdCa2ivD24eBUjSvwVDTdqA0tLjMRKNroq0tGMdDCS/izyK8IDqjwoxX Goc+5IQe9SF95MO7pAmP7puFaaP4j+vxsX2Ub0hats/K71zfm2Ydc7S08XhCn3xG S4+OhRZEMHa/KxZCUxYUo5BZxIJ5cvdQ748mczRD+Up9pkZXUY/o3AW1YRnBo+1Z +VXg94mJ6nNfDURfA7WGVW18jf9hf/Nznsgjzcwcq3ZGBrkixND/+FYQFl2Cv3mk VPN7WCluwPrRi/yJzfqrROW9/2whvj3d/eUn6evyszLFNoo+j2LkuDCCSCLyJbLH 08nXHPG72hr4qA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:51 2026 by rpki-client