This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json) Hash identifier: +ZRgCN8z2fLKaa16PR9rI99JH+dgNkuHMQe6q89U+7o= Subject key identifier: 95:DC:95:17:1F:D8:33:8C:53:D6:3F:A4:FB:FB:13:56:FC:59:1B:4F Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba Certificate serial: 019BF6F5DD62CEB375E5267751431DC04835 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft Manifest number: 173B Signing time: Sun 25 Jan 2026 21:01:06 +0000 Manifest this update: Sun 25 Jan 2026 21:01:06 +0000 Manifest next update: Mon 26 Jan 2026 21:01:06 +0000 Files and hashes: 1: bRkSXs7HJYfGolIXlp_OUMppLHU.roa (hash: O55vTlV+QjBtTC8WSDYZmRO38cgs2ptGTqF2SkO6B/I=) 2: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: tViKo1RGfjQXcM3GB6TSY+UxAgrhlJk3VsB+KrsAsus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:dd:62:ce:b3:75:e5:26:77:51:43:1d:c0:48:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba Validity Not Before: Jan 25 21:01:06 2026 GMT Not After : Jan 26 21:01:06 2026 GMT Subject: CN=95dc95171fd8338c53d63fa4fbfb1356fc591b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e4:0b:c7:e7:1a:61:a8:c3:6d:64:66:60:43: d7:7c:f4:a7:6e:c2:3d:06:59:6b:85:9c:d5:bc:cc: f8:29:bc:b8:9c:28:8d:24:7b:68:75:7e:e8:e3:da: d4:4c:9a:7d:38:d1:5d:92:38:a2:16:41:3a:df:57: 75:e9:d2:a9:31:7e:dd:3a:eb:31:75:6e:4a:55:ec: bb:72:ab:d3:85:06:01:53:ff:2e:87:1c:f6:a8:73: bb:94:38:ef:82:b1:7f:9c:2f:ff:a4:00:51:fd:70: 75:ba:ae:9c:d2:dc:77:7a:58:06:d8:ec:db:0a:57: 92:ef:ce:23:c8:86:66:50:d3:57:15:39:01:e0:b0: be:80:3d:82:1c:5c:0b:5b:81:2a:4f:13:52:ea:4c: eb:1a:5e:c4:be:af:f5:76:45:8b:20:43:19:d2:b5: 7c:f8:aa:38:8f:7a:6a:f4:68:9b:dd:c9:c6:c7:5a: 6b:1a:b4:07:29:62:24:ff:2d:56:77:ed:bd:79:10: 62:41:69:10:81:16:da:7c:62:c5:15:8f:96:98:99: 3f:7b:01:95:d4:87:ad:12:eb:45:73:5a:5f:ca:3e: 1b:a6:71:b4:d1:1c:31:9d:78:54:47:50:d8:10:3c: ea:91:df:4f:4b:b0:48:fe:6d:f5:ac:e2:f9:ce:fe: 01:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DC:95:17:1F:D8:33:8C:53:D6:3F:A4:FB:FB:13:56:FC:59:1B:4F X509v3 Authority Key Identifier: keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:dd:29:1a:f5:7f:da:d1:e2:0d:ae:1e:0e:6c:1e:9b:d8:bf: 12:68:69:42:cc:7d:4c:25:38:58:eb:a5:f1:0f:aa:fd:52:be: 05:eb:65:11:a8:01:d6:43:8a:6e:78:95:cc:6c:3a:3b:54:0a: 55:b6:cb:79:e4:20:d8:f3:c2:41:c1:3d:53:86:b4:75:a0:2f: 22:f9:e7:17:30:eb:4f:c9:a7:9b:5e:7b:92:cf:c5:b2:58:9b: eb:7f:46:73:4d:c7:28:64:ca:16:8d:f1:e0:ae:84:82:a1:1f: 1b:92:ff:e6:b0:58:88:05:c4:c1:57:1c:80:50:c7:36:b3:18: ad:02:2f:f3:22:0f:db:4d:60:eb:7a:f3:f5:61:3e:ef:7c:3c: 0c:af:5e:fc:d4:c2:b8:8e:14:dc:3e:b6:78:f0:dd:d8:2a:b6: dc:d1:0e:24:a6:93:d5:fb:a6:76:ee:5a:18:58:30:00:20:cd: 4c:75:f4:3f:c7:24:d2:8f:92:bf:54:ce:e8:aa:71:56:f1:24: 87:7f:a5:42:42:2b:c0:80:d3:e9:b1:20:26:dd:9e:5e:4f:0c: bb:35:cf:c3:d4:d1:85:d0:bb:ad:dc:54:3e:ef:cf:31:96:ee: 61:09:f9:e3:0c:be:72:3d:88:81:55:00:df:d4:f3:e8:c6:15: c2:8a:92:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29d1izrN15SZ3UUMdwEg1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzkxYzUwYmZmOWNhMDU5ZTZlMzhiMmUwYzdlYjg1MmE2 MzBiYmEwHhcNMjYwMTI1MjEwMTA2WhcNMjYwMTI2MjEwMTA2WjAzMTEwLwYDVQQD Eyg5NWRjOTUxNzFmZDgzMzhjNTNkNjNmYTRmYmZiMTM1NmZjNTkxYjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+QLx+caYajDbWRmYEPXfPSnbsI9 BllrhZzVvMz4Kby4nCiNJHtodX7o49rUTJp9ONFdkjiiFkE631d16dKpMX7dOusx dW5KVey7cqvThQYBU/8uhxz2qHO7lDjvgrF/nC//pABR/XB1uq6c0tx3elgG2Ozb CleS784jyIZmUNNXFTkB4LC+gD2CHFwLW4EqTxNS6kzrGl7Evq/1dkWLIEMZ0rV8 +Ko4j3pq9Gib3cnGx1prGrQHKWIk/y1Wd+29eRBiQWkQgRbafGLFFY+WmJk/ewGV 1IetEutFc1pfyj4bpnG00RwxnXhUR1DYEDzqkd9PS7BI/m31rOL5zv4BeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXclRcf2DOMU9Y/pPv7E1b8WRtPMB8GA1UdIwQY MBaAFI3JHFC/+coFnm44suDH64UqYwu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjhkNGQtOGI2NC00ZTc1LTllNTQt NTczMDlkZjY5NjQyLzEvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9jNjhkNGQtOGI2NC00ZTc1LTllNTQtNTczMDlkZjY5NjQy LzEvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVN0pGvV/ 2tHiDa4eDmwem9i/EmhpQsx9TCU4WOul8Q+q/VK+BetlEagB1kOKbniVzGw6O1QK VbbLeeQg2PPCQcE9U4a0daAvIvnnFzDrT8mnm157ks/Fslib639Gc03HKGTKFo3x 4K6EgqEfG5L/5rBYiAXEwVccgFDHNrMYrQIv8yIP201g63rz9WE+73w8DK9e/NTC uI4U3D62ePDd2Cq23NEOJKaT1fumdu5aGFgwACDNTHX0P8ck0o+Sv1TO6KpxVvEk h3+lQkIrwIDT6bEgJt2eXk8MuzXPw9TRhdC7rdxUPu/PMZbuYQn54wy+cj2IgVUA 39Tz6MYVwoqSMw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:35:51 2026 by rpki-client