This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft File: JgGttY6Dyu5nXc94lUugiqkwGg4.mft (raw, json) Hash identifier: ShXp+gyUBmtySa8lsOavI6c24z15on3ZbezirBFAXoE= Subject key identifier: 2F:32:09:44:12:76:BE:77:F3:0B:1D:EF:77:56:C1:7C:1B:E1:5B:2C Authority key identifier: 26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E Certificate issuer: /CN=2601adb58e83caee675dcf78954ba08aa9301a0e Certificate serial: 019BF875EC57237D0E4A70390B5DC062ECE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft Manifest number: 0859 Signing time: Mon 26 Jan 2026 04:00:36 +0000 Manifest this update: Mon 26 Jan 2026 04:00:36 +0000 Manifest next update: Tue 27 Jan 2026 04:00:36 +0000 Files and hashes: 1: JgGttY6Dyu5nXc94lUugiqkwGg4.crl (hash: i+nwZn3A0Anpcg/fF3Gr9z+pB9grSu7ROpBISmGQZY4=) 2: Z6vatnL6NtCRiDp6Ve37t82vRgw.asa (hash: 3sZUNRMLW8dUaIbhqd6KZTzlBAD1dC7cg3A2YJwGJ1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:75:ec:57:23:7d:0e:4a:70:39:0b:5d:c0:62:ec:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2601adb58e83caee675dcf78954ba08aa9301a0e Validity Not Before: Jan 26 04:00:36 2026 GMT Not After : Jan 27 04:00:36 2026 GMT Subject: CN=2f3209441276be77f30b1def7756c17c1be15b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2f:1e:b7:fd:9e:4c:9c:34:1d:8b:fc:ad:70: cc:d3:f7:ac:b5:48:14:9c:27:55:f2:04:95:cf:3e: 42:41:62:fd:1e:27:5f:f4:76:b6:ca:7a:0c:fa:2a: a5:c0:c5:dc:c4:a6:3c:fc:1d:c3:98:b7:50:e3:1b: ef:70:47:45:c1:98:f1:bf:5a:2c:20:27:09:3d:dc: e0:2e:88:ad:e6:58:81:e8:aa:90:91:80:a2:06:c6: 6e:74:bc:96:51:5e:30:d0:5e:c2:9b:11:06:57:3c: a9:9c:77:f9:07:00:50:19:43:3a:0f:24:54:b8:88: fe:55:7e:53:c8:1a:46:77:c9:4d:e6:4e:e0:1b:42: 1a:38:75:b5:7f:75:f1:21:d4:8d:da:76:6d:cf:30: 87:96:f2:cc:28:f4:74:41:b8:93:c3:76:bf:45:5e: fb:cf:ce:d9:72:e6:99:b9:0b:6c:36:34:6e:9a:a9: ac:b2:13:72:1f:9f:e1:e1:ba:6e:d6:37:b5:47:ea: 2a:f7:1a:18:e0:3e:6c:7e:a9:a8:32:6d:c8:7b:dd: b1:8b:e5:7d:bf:fc:f5:cd:2f:98:9d:99:0f:7f:fe: 8b:8e:b9:bf:d4:eb:4c:65:9f:14:64:d2:00:55:e9: a0:1b:a6:72:4a:9d:c9:2c:25:f6:2e:bf:d9:2a:36: 47:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:32:09:44:12:76:BE:77:F3:0B:1D:EF:77:56:C1:7C:1B:E1:5B:2C X509v3 Authority Key Identifier: keyid:26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:77:c2:77:c2:dc:de:9d:d6:5b:e1:ef:29:ed:a9:80:c6:a3: 8c:4f:d4:a7:eb:26:97:7a:32:11:88:08:1f:86:d9:96:eb:47: 85:a9:ca:dc:c6:fd:11:50:39:8e:ac:2e:57:7e:10:32:99:f7: f7:27:73:7a:16:43:27:8b:fa:c1:d1:b2:43:03:79:d5:d3:3f: fa:44:32:cd:46:4c:67:a7:1d:40:14:8b:2e:7e:4c:c9:20:7c: 8c:e2:0c:2f:03:f6:6e:b1:48:07:2a:c6:6e:d7:83:67:48:2c: 52:ab:6c:89:d5:47:5a:90:51:44:e0:83:8e:ea:54:59:71:89: d2:de:ff:f1:d7:36:b6:1e:39:b1:74:62:55:df:f3:57:53:01: 86:47:55:24:a4:4a:5f:9d:97:ba:6a:c4:32:9f:37:18:ff:ee: dc:b8:37:d5:51:90:60:78:8a:6c:21:25:f6:73:c7:2b:52:92: 2c:af:22:68:ac:ea:0d:ac:e8:9c:53:23:bf:f8:5d:cb:3a:0f: da:81:9a:f9:58:88:c1:b5:e7:42:9f:a5:50:f8:95:8b:10:73: 28:dd:7b:9c:6c:00:cc:14:80:42:3b:78:8c:21:25:92:fd:fa: af:1e:04:25:e2:5d:23:12:9e:44:a8:eb:23:11:ae:12:ef:eb: 20:33:21:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dexXI30OSnA5C13AYuzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MDFhZGI1OGU4M2NhZWU2NzVkY2Y3ODk1NGJhMDhhYTkz MDFhMGUwHhcNMjYwMTI2MDQwMDM2WhcNMjYwMTI3MDQwMDM2WjAzMTEwLwYDVQQD EygyZjMyMDk0NDEyNzZiZTc3ZjMwYjFkZWY3NzU2YzE3YzFiZTE1YjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy8et/2eTJw0HYv8rXDM0/estUgU nCdV8gSVzz5CQWL9Hidf9Ha2ynoM+iqlwMXcxKY8/B3DmLdQ4xvvcEdFwZjxv1os ICcJPdzgLoit5liB6KqQkYCiBsZudLyWUV4w0F7CmxEGVzypnHf5BwBQGUM6DyRU uIj+VX5TyBpGd8lN5k7gG0IaOHW1f3XxIdSN2nZtzzCHlvLMKPR0QbiTw3a/RV77 z87ZcuaZuQtsNjRumqmsshNyH5/h4bpu1je1R+oq9xoY4D5sfqmoMm3Ie92xi+V9 v/z1zS+YnZkPf/6Ljrm/1OtMZZ8UZNIAVemgG6ZySp3JLCX2Lr/ZKjZH6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8yCUQSdr538wsd73dWwXwb4VssMB8GA1UdIwQY MBaAFCYBrbWOg8ruZ13PeJVLoIqpMBoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmdHdHRZNkR5dTVuWGM5NGxVdWdpcWt3R2c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jNjk5YTMtN2Q1MS00YjM4LTgwOWQt MTUyOWFkYjBjOWQ3LzEvSmdHdHRZNkR5dTVuWGM5NGxVdWdpcWt3R2c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9jNjk5YTMtN2Q1MS00YjM4LTgwOWQtMTUyOWFkYjBjOWQ3 LzEvSmdHdHRZNkR5dTVuWGM5NGxVdWdpcWt3R2c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnfCd8Lc 3p3WW+HvKe2pgMajjE/Up+sml3oyEYgIH4bZlutHhanK3Mb9EVA5jqwuV34QMpn3 9ydzehZDJ4v6wdGyQwN51dM/+kQyzUZMZ6cdQBSLLn5MySB8jOIMLwP2brFIByrG bteDZ0gsUqtsidVHWpBRROCDjupUWXGJ0t7/8dc2th45sXRiVd/zV1MBhkdVJKRK X52XumrEMp83GP/u3Lg31VGQYHiKbCEl9nPHK1KSLK8iaKzqDazonFMjv/hdyzoP 2oGa+ViIwbXnQp+lUPiVixBzKN17nGwAzBSAQjt4jCElkv36rx4EJeJdIxKeRKjr IxGuEu/rIDMhFA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:48:30 2026 by rpki-client