This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft File: JFjwpFOzL_OiHmajG3T-SdjkajM.mft (raw, json) Hash identifier: vTRAofvX4z9Wd1dqBqmw00gdnR8elOKv8Odf1/8Q0aA= Subject key identifier: 64:2C:EB:7A:3D:3D:C3:1D:97:EE:09:E3:29:24:A6:51:D5:51:7D:5B Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33 Certificate issuer: /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33 Certificate serial: 019B76DBE1F6D51099DA823D7889D5455DA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft Manifest number: 12D3 Signing time: Thu 01 Jan 2026 00:01:20 +0000 Manifest this update: Thu 01 Jan 2026 00:01:20 +0000 Manifest next update: Fri 02 Jan 2026 00:01:20 +0000 Files and hashes: 1: JFjwpFOzL_OiHmajG3T-SdjkajM.crl (hash: wkgcnLuUjyK5UafYHWUCKT7CihG5eMzcFSftEeATFRM=) 2: _d1GEPj08rPnUJ5e0jIgKD6QCFQ.roa (hash: vnr1x2ojeLhbVafxW9oqVV43qotLr8cLQwIIuErWSfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:db:e1:f6:d5:10:99:da:82:3d:78:89:d5:45:5d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33 Validity Not Before: Jan 1 00:01:20 2026 GMT Not After : Jan 2 00:01:20 2026 GMT Subject: CN=642ceb7a3d3dc31d97ee09e32924a651d5517d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:35:52:d4:78:aa:4a:48:ba:4b:bb:1e:59:70: 18:e8:27:9f:f6:f8:9b:07:2f:4f:8d:4d:12:09:da: ba:0e:ed:53:46:e0:aa:2e:c4:d3:20:93:fb:dd:5c: a1:50:14:58:a6:55:7f:94:8c:6c:00:49:66:d2:59: 3c:e8:ba:33:f3:af:ad:23:d4:c1:e9:25:da:72:a3: 30:20:ec:3a:63:6d:67:74:1e:38:69:c8:a7:54:bd: 9b:2a:9f:a3:34:ab:1f:34:15:5b:00:71:a2:18:cb: 88:f3:cb:31:0d:db:30:c0:77:5b:f0:8c:e0:84:d4: 09:10:fc:4a:cc:e5:c8:21:99:48:90:1f:24:51:ea: 61:f2:15:9c:cc:a8:b8:df:cb:08:db:cc:ff:90:55: 2a:91:22:a6:e8:22:f9:4c:77:68:3b:46:0d:6b:c2: b9:66:ce:8c:c1:f9:d5:6e:91:27:76:d1:98:8e:2e: 02:76:e3:74:1d:94:31:95:c8:a2:e1:d1:04:46:b3: 10:4a:12:53:8c:ad:cb:02:26:8d:2a:26:ea:b8:d2: b5:9a:0b:9a:73:2f:22:dd:86:e2:77:98:0d:0d:3b: c1:3c:55:3e:fb:b9:3b:22:e3:01:00:dc:54:af:6c: fa:ca:3f:eb:d9:a5:0d:8e:94:b6:eb:2a:cd:38:fd: 5b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2C:EB:7A:3D:3D:C3:1D:97:EE:09:E3:29:24:A6:51:D5:51:7D:5B X509v3 Authority Key Identifier: keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:70:03:cb:ec:90:24:e5:74:03:64:a7:c3:46:48:16:c1:b6: d0:30:0a:ea:1c:d3:9b:dc:a3:46:e9:fe:5c:09:a0:b0:74:cc: 55:51:a2:31:b5:3a:f3:7c:66:bc:5d:89:6f:94:5c:4b:51:40: ae:3a:56:ce:95:09:23:db:d3:31:2c:a5:18:7b:ed:65:86:a1: ec:fb:e3:61:33:7f:63:b5:a0:0a:46:ca:c4:28:d5:b5:06:a8: 3a:59:9e:48:27:ce:99:25:6a:19:97:e2:fb:bc:70:07:55:f3: b5:ff:53:52:97:c1:59:19:22:f8:f9:a4:db:d7:8f:e5:02:53: da:16:b2:7e:6b:50:8d:05:5f:77:07:bd:38:9e:be:ab:5a:9c: 9c:86:c9:73:f1:6a:97:64:f7:1d:96:0a:37:81:1e:26:81:26: 39:ef:3c:ed:1b:f2:9c:eb:7d:4b:0c:d0:08:3d:24:b2:f4:91: 8d:66:19:5c:ff:ce:a9:0e:7f:80:8e:81:7e:5a:94:be:f0:42: 57:a7:91:fb:b4:18:d8:d8:59:cb:c8:16:64:92:3b:f7:d9:5d: 90:6b:33:bd:87:51:8a:53:4a:d9:2c:c4:75:62:96:ce:3d:40: 86:d9:f7:72:aa:51:2e:45:f0:7b:6f:24:53:9f:53:10:92:87: ce:d4:f0:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt22+H21RCZ2oI9eInVRV2oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NThmMGE0NTNiMzJmZjNhMjFlNjZhMzFiNzRmZTQ5ZDhl NDZhMzMwHhcNMjYwMTAxMDAwMTIwWhcNMjYwMTAyMDAwMTIwWjAzMTEwLwYDVQQD Eyg2NDJjZWI3YTNkM2RjMzFkOTdlZTA5ZTMyOTI0YTY1MWQ1NTE3ZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTVS1HiqSki6S7seWXAY6Cef9vib By9PjU0SCdq6Du1TRuCqLsTTIJP73VyhUBRYplV/lIxsAElm0lk86Loz86+tI9TB 6SXacqMwIOw6Y21ndB44acinVL2bKp+jNKsfNBVbAHGiGMuI88sxDdswwHdb8Izg hNQJEPxKzOXIIZlIkB8kUeph8hWczKi438sI28z/kFUqkSKm6CL5THdoO0YNa8K5 Zs6MwfnVbpEndtGYji4CduN0HZQxlcii4dEERrMQShJTjK3LAiaNKibquNK1mgua cy8i3Ybid5gNDTvBPFU++7k7IuMBANxUr2z6yj/r2aUNjpS26yrNOP1bHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQs63o9PcMdl+4J4ykkplHVUX1bMB8GA1UdIwQY MBaAFCRY8KRTsy/zoh5moxt0/knY5GozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xMTE5MmQtMTc0MC00ZThlLTllMDQt ZWUzNzk1MThjNjg2LzEvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8xMTE5MmQtMTc0MC00ZThlLTllMDQtZWUzNzk1MThjNjg2 LzEvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXADy+yQ JOV0A2Snw0ZIFsG20DAK6hzTm9yjRun+XAmgsHTMVVGiMbU683xmvF2Jb5RcS1FA rjpWzpUJI9vTMSylGHvtZYah7PvjYTN/Y7WgCkbKxCjVtQaoOlmeSCfOmSVqGZfi +7xwB1Xztf9TUpfBWRki+Pmk29eP5QJT2hayfmtQjQVfdwe9OJ6+q1qcnIbJc/Fq l2T3HZYKN4EeJoEmOe887RvynOt9SwzQCD0ksvSRjWYZXP/OqQ5/gI6BflqUvvBC V6eR+7QY2NhZy8gWZJI799ldkGszvYdRilNK2SzEdWKWzj1Ahtn3cqpRLkXwe28k U59TEJKHztTwWQ== -----END CERTIFICATE-----Generated at Thu Jan 1 07:35:59 2026 by rpki-client