This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft File: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json) Hash identifier: Om7OdejiBbfxettPUV3V8dPiqi+kK5r9ADsIkPcXZWs= Subject key identifier: 5D:95:85:10:11:FF:18:BF:36:4C:64:36:A1:80:10:7F:EE:15:C3:3F Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF Certificate issuer: /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf Certificate serial: 019BF53DF1090BDE82D5E95B19F66193CFCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 13:00:35 +0000 Manifest this update: Sun 25 Jan 2026 13:00:35 +0000 Manifest next update: Mon 26 Jan 2026 13:00:35 +0000 Files and hashes: 1: 3A9howO8D1X-BLYPqKD3XZ5Kxz0.roa (hash: cw3EW0tYOXjRTKHLWeTNQZy58ZLoHee03jDMcZoncWw=) 2: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: JcPCftZC+2Rzhxn2m11oCmp9HtnynfyO7Vk3m1owB4A=) 3: xhe1ftuP4eIHL857T_L-xO3GLdU.roa (hash: jxlOSVGh50KvsEL1junXJzFdVjHdQEvGO3d67LIevSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3d:f1:09:0b:de:82:d5:e9:5b:19:f6:61:93:cf:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf Validity Not Before: Jan 25 13:00:35 2026 GMT Not After : Jan 26 13:00:35 2026 GMT Subject: CN=5d95851011ff18bf364c6436a180107fee15c33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cd:26:93:74:23:13:68:74:cc:c1:7a:8a:c7: e0:2e:a4:45:72:df:3a:6e:9d:24:a0:d5:ab:fb:7e: 39:15:dd:a8:29:d3:33:58:40:cc:31:75:99:ed:d9: 1b:19:1d:39:3c:e0:e9:26:c4:ae:36:bf:a6:b0:20: 33:c2:0d:58:6a:16:57:4c:81:dd:1b:62:4c:8b:92: cb:01:1b:be:85:bb:f9:ef:5a:53:7d:08:37:aa:47: 12:07:53:c0:c6:3c:af:1e:39:b8:07:52:2c:9d:47: 54:44:3e:c8:d1:3a:94:6f:3b:d6:fa:e3:0b:68:9b: 6c:3b:d7:98:c5:47:a9:a0:13:2a:3c:24:b7:8f:e2: 5c:e5:76:06:ad:bb:c8:2b:66:73:cc:59:f8:ce:b5: 1e:17:a5:f0:8e:26:35:fa:6a:59:aa:9a:fa:1a:9a: d7:ad:9d:aa:67:83:3c:96:05:d3:ac:b6:35:cd:99: 2c:84:6d:77:71:6a:3f:83:9e:4d:3e:19:7d:e4:8c: 3c:29:1e:c1:2c:20:a8:cd:0f:0d:25:b8:b2:cb:02: 8f:73:ea:79:67:48:4b:0a:e8:8f:57:ae:c5:76:19: 8c:bc:2e:00:b6:4d:52:32:2a:51:7f:6c:bd:e9:e7: 69:ee:81:3e:f1:65:3e:75:66:71:3f:37:be:11:1e: e9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:95:85:10:11:FF:18:BF:36:4C:64:36:A1:80:10:7F:EE:15:C3:3F X509v3 Authority Key Identifier: keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:4e:a8:d8:4f:2a:ff:19:39:46:b2:10:97:51:56:64:9c:ef: b4:1b:9e:ba:61:3b:4c:03:26:9e:0b:b7:55:58:4d:d2:a4:1d: a2:21:32:70:18:a1:e0:38:86:42:87:e1:3e:62:65:ab:70:b1: 7a:ff:bb:d0:23:3c:77:7f:dd:23:0b:c9:ad:98:a4:22:e3:25: 77:93:bc:11:b7:42:18:c7:04:d0:ee:22:fd:8b:1a:ea:35:57: 7b:39:74:55:6f:36:e3:41:15:6b:a8:61:75:6a:f5:41:32:ac: 5f:69:fe:fb:81:38:11:e7:5b:f7:74:f6:46:88:61:60:c6:a0: 73:41:bc:a9:74:40:ff:a6:08:e8:3a:4a:d2:6c:8c:2b:11:5a: 6c:ee:11:99:47:4a:2a:25:e3:93:21:52:9e:14:ae:84:0e:79: 3b:6d:d4:97:21:50:10:8c:66:4f:0c:fc:47:6a:cc:7e:5e:34: 5f:af:f9:dc:e7:6e:44:30:05:1f:b5:b4:91:1c:52:7f:a7:8c: 6a:3d:3d:d8:5e:84:6d:d2:79:81:e2:b9:f5:99:73:85:bd:fa: e4:3c:14:f9:9b:29:2f:49:e6:aa:c4:e3:09:30:20:57:99:44: 3b:4f:ec:22:f1:70:d4:e2:07:d6:d5:c0:2a:8d:75:ea:a9:c9: 0c:f0:41:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PfEJC96C1elbGfZhk8/OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YTkxOGYxYjEwZWMxZDY2MGIxY2ZjYjFiZmUxOTZjMmZl YjA2YmYwHhcNMjYwMTI1MTMwMDM1WhcNMjYwMTI2MTMwMDM1WjAzMTEwLwYDVQQD Eyg1ZDk1ODUxMDExZmYxOGJmMzY0YzY0MzZhMTgwMTA3ZmVlMTVjMzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA080mk3QjE2h0zMF6isfgLqRFct86 bp0koNWr+345Fd2oKdMzWEDMMXWZ7dkbGR05PODpJsSuNr+msCAzwg1YahZXTIHd G2JMi5LLARu+hbv571pTfQg3qkcSB1PAxjyvHjm4B1IsnUdURD7I0TqUbzvW+uML aJtsO9eYxUepoBMqPCS3j+Jc5XYGrbvIK2ZzzFn4zrUeF6XwjiY1+mpZqpr6GprX rZ2qZ4M8lgXTrLY1zZkshG13cWo/g55NPhl95Iw8KR7BLCCozQ8NJbiyywKPc+p5 Z0hLCuiPV67FdhmMvC4Atk1SMipRf2y96edp7oE+8WU+dWZxPze+ER7pTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2VhRAR/xi/NkxkNqGAEH/uFcM/MB8GA1UdIwQY MBaAFCSpGPGxDsHWYLHPyxv+GWwv6wa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xZjVmZWItN2FjZi00YzFkLThlOWYt MWYyNjJkOWM5YjA3LzEvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xZjVmZWItN2FjZi00YzFkLThlOWYtMWYyNjJkOWM5YjA3 LzEvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQk6o2E8q /xk5RrIQl1FWZJzvtBueumE7TAMmngu3VVhN0qQdoiEycBih4DiGQofhPmJlq3Cx ev+70CM8d3/dIwvJrZikIuMld5O8EbdCGMcE0O4i/Ysa6jVXezl0VW8240EVa6hh dWr1QTKsX2n++4E4Eedb93T2RohhYMagc0G8qXRA/6YI6DpK0myMKxFabO4RmUdK KiXjkyFSnhSuhA55O23UlyFQEIxmTwz8R2rMfl40X6/53OduRDAFH7W0kRxSf6eM aj092F6EbdJ5geK59Zlzhb365DwU+ZspL0nmqsTjCTAgV5lEO0/sIvFw1OIH1tXA Ko116qnJDPBBqQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:01:04 2026 by rpki-client