This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json) Hash identifier: XQdgb0GUvPN0yKpzRI6cWejHW+7GIlQrxzlgUlawpAE= Subject key identifier: CF:EC:FE:DF:7C:D5:31:96:3C:35:3D:77:CB:B2:4B:BF:4A:F3:93:27 Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12 Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12 Certificate serial: 019BF6BF68B59A487E8FF38F5B6C242BDF26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft Manifest number: 15C5 Signing time: Sun 25 Jan 2026 20:01:37 +0000 Manifest this update: Sun 25 Jan 2026 20:01:37 +0000 Manifest next update: Mon 26 Jan 2026 20:01:37 +0000 Files and hashes: 1: 5tyTgc_srf_03kELs6a4U2s2DWk.roa (hash: wbWsBOeJNFN6rAIBpjdQWOFJx9S5x9ucHlt9PYYje98=) 2: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: Kz0FP0OQuw3FvrttVY6Pk9d69wpoGcTVL2orGJHSVy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:68:b5:9a:48:7e:8f:f3:8f:5b:6c:24:2b:df:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12 Validity Not Before: Jan 25 20:01:37 2026 GMT Not After : Jan 26 20:01:37 2026 GMT Subject: CN=cfecfedf7cd531963c353d77cbb24bbf4af39327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9a:2a:e2:ff:19:88:2e:6c:4d:11:36:e1:d8: 05:93:d5:62:01:d2:b0:cf:0a:7e:48:2a:60:a5:7c: ab:0d:1c:8d:27:25:b8:10:51:87:f4:f7:78:82:2a: f0:af:f1:8c:07:3f:b8:99:4a:bf:7e:a5:fd:99:df: aa:4d:71:3e:8e:18:ef:f5:46:7a:e6:6f:e5:35:53: 98:1f:d6:ae:6e:0b:5f:c5:14:20:cf:32:dd:d1:af: 85:51:9e:f3:1c:9e:ba:90:b0:fc:27:46:1a:e8:d4: 43:1d:6a:8c:4d:71:92:ba:e1:cd:53:b4:ef:0b:09: cb:7a:9c:af:57:4a:af:44:79:83:cd:f1:27:31:58: 22:f7:e2:c4:14:99:20:0e:25:f6:59:ca:df:f9:04: 51:70:dc:55:7f:21:d8:24:bd:cd:ca:92:fe:fb:71: 46:b7:b5:3d:72:b2:75:fd:8d:17:a7:5b:fa:12:82: 5c:29:3c:b6:0e:33:83:0a:f4:ac:32:64:55:09:ca: 33:4c:91:13:0b:a2:f4:be:88:e4:9f:77:c5:6f:ff: 17:a8:ae:78:97:74:4f:83:07:ee:78:e0:e8:51:c9: 15:c2:6e:42:32:f6:7d:4e:c4:73:8c:b1:70:a6:83: 7c:13:37:f9:c2:57:82:e9:87:1c:49:71:34:6c:dd: 85:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EC:FE:DF:7C:D5:31:96:3C:35:3D:77:CB:B2:4B:BF:4A:F3:93:27 X509v3 Authority Key Identifier: keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:1e:94:92:e9:7a:46:45:08:82:8d:5b:0e:98:fc:fb:77:7f: 85:52:de:8f:5e:b1:38:91:82:5d:75:a7:f5:cc:38:66:ba:a3: 54:3c:02:b6:6f:6c:d2:ce:ce:b8:f8:f7:16:58:16:b5:8d:ed: 35:6e:76:d5:b9:53:8b:62:51:44:ae:b0:bd:ef:ae:21:88:0f: 7c:36:b7:58:7c:db:38:fc:69:8e:ed:92:45:cc:86:a6:3b:53: 02:95:0f:e9:9b:03:47:1f:da:7a:48:be:42:18:87:70:7a:b3: 31:c4:0c:ef:6f:97:3f:65:56:b0:a5:ef:c4:34:d8:83:c7:9b: e0:97:73:df:33:26:4d:64:6e:e6:b6:41:08:81:05:43:6a:dd: 69:fa:ca:f5:0f:36:42:a6:e9:20:3a:bf:6d:92:cb:37:02:96: 16:43:72:1e:7f:3f:1b:fd:b4:2d:09:bf:ec:ce:f9:2b:8c:d4: 59:a9:65:82:c6:98:83:0f:9a:98:cb:a4:07:40:1a:cb:24:1d: 00:90:07:0b:ec:41:f1:53:d8:f6:ff:68:97:ea:f1:b3:08:ff: 46:18:34:74:29:53:71:3d:08:18:a2:46:57:65:af:c5:2b:4b: ff:5e:e2:16:cf:5f:4c:36:0d:58:26:bf:5b:da:36:7b:9c:15: 97:dc:58:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v2i1mkh+j/OPW2wkK98mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YjBlNGYxODE4M2ZiZDlkNjk1MGVlYTQzM2ZlNWQyMTZi ZDVmMTIwHhcNMjYwMTI1MjAwMTM3WhcNMjYwMTI2MjAwMTM3WjAzMTEwLwYDVQQD EyhjZmVjZmVkZjdjZDUzMTk2M2MzNTNkNzdjYmIyNGJiZjRhZjM5MzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5oq4v8ZiC5sTRE24dgFk9ViAdKw zwp+SCpgpXyrDRyNJyW4EFGH9Pd4girwr/GMBz+4mUq/fqX9md+qTXE+jhjv9UZ6 5m/lNVOYH9aubgtfxRQgzzLd0a+FUZ7zHJ66kLD8J0Ya6NRDHWqMTXGSuuHNU7Tv CwnLepyvV0qvRHmDzfEnMVgi9+LEFJkgDiX2Wcrf+QRRcNxVfyHYJL3NypL++3FG t7U9crJ1/Y0Xp1v6EoJcKTy2DjODCvSsMmRVCcozTJETC6L0vojkn3fFb/8XqK54 l3RPgwfueODoUckVwm5CMvZ9TsRzjLFwpoN8Ezf5wleC6YccSXE0bN2FSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/s/t981TGWPDU9d8uyS79K85MnMB8GA1UdIwQY MBaAFCSw5PGBg/vZ1pUO6kM/5dIWvV8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NDliY2YtZGE1Zi00Yzk3LTk3YjEt NWJhNTk1NGRmYzM3LzEvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy84NDliY2YtZGE1Zi00Yzk3LTk3YjEtNWJhNTk1NGRmYzM3 LzEvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoh6Ukul6 RkUIgo1bDpj8+3d/hVLej16xOJGCXXWn9cw4ZrqjVDwCtm9s0s7OuPj3FlgWtY3t NW521blTi2JRRK6wve+uIYgPfDa3WHzbOPxpju2SRcyGpjtTApUP6ZsDRx/aeki+ QhiHcHqzMcQM72+XP2VWsKXvxDTYg8eb4Jdz3zMmTWRu5rZBCIEFQ2rdafrK9Q82 QqbpIDq/bZLLNwKWFkNyHn8/G/20LQm/7M75K4zUWallgsaYgw+amMukB0AayyQd AJAHC+xB8VPY9v9ol+rxswj/Rhg0dClTcT0IGKJGV2WvxStL/17iFs9fTDYNWCa/ W9o2e5wVl9xYVw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:28:07 2026 by rpki-client