This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json) Hash identifier: TY3RdwnSATbp2S4G7TxVaRvLl3Wtmbp8CxcMI4K30zU= Subject key identifier: 79:58:FB:BA:72:EF:74:6D:A5:1F:4A:1C:DB:A1:54:25:86:89:38:67 Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d Certificate serial: 019BF5E3C06B6782F12F4164DAF316FC9876 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft Manifest number: 1779 Signing time: Sun 25 Jan 2026 16:01:42 +0000 Manifest this update: Sun 25 Jan 2026 16:01:42 +0000 Manifest next update: Mon 26 Jan 2026 16:01:42 +0000 Files and hashes: 1: F542RKRQvPrXJffMgDoWUXOCGjM.roa (hash: i0Pd1YsF/0CZkMewWg+RkQERNB+Z6enGZOfMb6J8Sd0=) 2: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: NeXorIzJibtwEU3y4ZiMSxK0g5UdwuRyyWoHz+k1dW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:c0:6b:67:82:f1:2f:41:64:da:f3:16:fc:98:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d Validity Not Before: Jan 25 16:01:42 2026 GMT Not After : Jan 26 16:01:42 2026 GMT Subject: CN=7958fbba72ef746da51f4a1cdba1542586893867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:93:b7:db:94:7a:08:e3:33:b8:16:86:e0:32: ea:4b:4e:49:5b:8d:dd:d3:95:22:70:fc:5b:46:18: 6b:11:5a:e4:40:98:ad:2b:09:36:d1:8b:2c:84:3a: 2e:f9:48:36:7c:f7:44:15:a5:91:09:72:62:ac:af: 69:a0:09:67:c4:2d:f1:76:a9:3c:8d:8e:39:65:d2: cd:b1:f1:c4:ad:75:d4:fa:08:90:30:59:84:7f:d2: a6:10:ae:c7:d2:57:42:22:89:63:f8:73:27:c4:d1: fc:fd:58:b3:62:1b:06:b7:3d:2f:1b:59:78:8e:37: a9:30:d1:13:5d:03:e0:03:ba:f1:63:32:01:d2:62: da:a1:74:44:6d:00:58:a5:b7:40:d4:77:6b:ff:bd: 83:63:e9:22:9c:74:65:70:0d:b4:a9:c9:57:e9:31: 53:76:28:b1:0c:c8:4d:c0:cf:8d:cb:2f:74:6d:87: 9b:96:5b:bc:83:7c:d9:99:4f:c4:fb:9a:96:0e:3e: 92:e6:27:10:15:cd:fe:07:2d:80:64:ab:11:78:d7: da:e9:cd:17:12:c8:fd:ee:11:98:2d:d0:d3:69:3e: 98:69:a5:96:ee:67:ac:04:c9:ed:b1:b6:1c:57:66: ab:37:ec:4e:2d:16:0c:26:17:51:bc:5e:44:dc:2f: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:58:FB:BA:72:EF:74:6D:A5:1F:4A:1C:DB:A1:54:25:86:89:38:67 X509v3 Authority Key Identifier: keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:08:6c:b2:04:50:42:2c:ba:18:1f:5c:74:49:ee:91:90:33: 3d:be:2c:e2:5e:4d:e7:b9:bf:e4:14:70:b5:8d:86:bc:85:8a: 3e:81:fc:a1:fa:15:bb:ce:02:b5:03:89:41:11:f1:6a:94:42: 36:59:f6:27:84:7e:bc:55:88:3b:83:58:3a:7a:f6:ab:0d:70: 2e:3d:27:58:ba:07:4d:0c:a1:13:e5:11:12:5c:c8:a9:3a:6a: be:a4:54:45:02:ed:85:d3:64:ac:8b:e6:23:5c:96:0b:ca:03: 51:5b:83:04:b1:92:98:29:44:23:79:b1:9b:3a:fe:ce:e1:79: 5f:c1:5b:bb:f1:b6:c5:cf:ec:cb:41:66:fe:cb:b3:2b:af:57: 2d:88:f5:f5:2a:53:09:81:84:44:f2:4e:97:bc:46:58:a2:53: d4:c5:eb:e2:64:e6:1a:95:5c:d1:61:30:7d:91:96:ee:b2:5b: f0:a2:fc:9d:44:7f:5a:3a:4a:81:7e:68:73:63:0b:0e:2c:ad: 2c:8b:ea:af:45:81:17:55:d2:11:87:3c:b5:3e:9d:0c:05:f3: 48:a0:8c:6a:22:69:b0:44:df:ba:f5:47:1b:96:d8:a4:d1:65: 53:04:4f:7a:5a:85:23:59:88:65:30:16:c0:c9:68:d2:3e:6a: e2:d5:a9:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv148BrZ4LxL0Fk2vMW/Jh2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MGU3NTk0YWFlMjRhNGZkNmMzODU1NDUxN2Q4YjlkNmZh ZTA2MGQwHhcNMjYwMTI1MTYwMTQyWhcNMjYwMTI2MTYwMTQyWjAzMTEwLwYDVQQD Eyg3OTU4ZmJiYTcyZWY3NDZkYTUxZjRhMWNkYmExNTQyNTg2ODkzODY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpO325R6COMzuBaG4DLqS05JW43d 05UicPxbRhhrEVrkQJitKwk20YsshDou+Ug2fPdEFaWRCXJirK9poAlnxC3xdqk8 jY45ZdLNsfHErXXU+giQMFmEf9KmEK7H0ldCIolj+HMnxNH8/VizYhsGtz0vG1l4 jjepMNETXQPgA7rxYzIB0mLaoXREbQBYpbdA1Hdr/72DY+kinHRlcA20qclX6TFT diixDMhNwM+Nyy90bYebllu8g3zZmU/E+5qWDj6S5icQFc3+By2AZKsReNfa6c0X Esj97hGYLdDTaT6YaaWW7mesBMntsbYcV2arN+xOLRYMJhdRvF5E3C9B1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlY+7py73RtpR9KHNuhVCWGiThnMB8GA1UdIwQY MBaAFCQOdZSq4kpP1sOFVFF9i51vrgYNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkE1MWxLcmlTa19XdzRWVVVYMkxuVy11QmcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81YTI2MGUtYWVjMC00ZTRhLWFhODUt NGI4ZGYwOTg0OTZkLzEvSkE1MWxLcmlTa19XdzRWVVVYMkxuVy11QmcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS81YTI2MGUtYWVjMC00ZTRhLWFhODUtNGI4ZGYwOTg0OTZk LzEvSkE1MWxLcmlTa19XdzRWVVVYMkxuVy11QmcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawhssgRQ Qiy6GB9cdEnukZAzPb4s4l5N57m/5BRwtY2GvIWKPoH8ofoVu84CtQOJQRHxapRC Nln2J4R+vFWIO4NYOnr2qw1wLj0nWLoHTQyhE+URElzIqTpqvqRURQLthdNkrIvm I1yWC8oDUVuDBLGSmClEI3mxmzr+zuF5X8Fbu/G2xc/sy0Fm/suzK69XLYj19SpT CYGERPJOl7xGWKJT1MXr4mTmGpVc0WEwfZGW7rJb8KL8nUR/WjpKgX5oc2MLDiyt LIvqr0WBF1XSEYc8tT6dDAXzSKCMaiJpsETfuvVHG5bYpNFlUwRPelqFI1mIZTAW wMlo0j5q4tWpbw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:50:44 2026 by rpki-client