This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft File: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft (raw, json) Hash identifier: iLwwIkXsPfMkvQHW1h0qC1w9ZZR/rcCev6G2xx/U4FM= Subject key identifier: 71:4C:01:A7:4D:5B:E8:93:07:B7:12:1A:9F:55:8D:55:A2:AB:B2:93 Authority key identifier: 25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1 Certificate issuer: /CN=25d25dfc652483cc7bffd6136f47735bd190d5a1 Certificate serial: 019BA1FD1F3892ECD5C24B8FBD13EC79312F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft Manifest number: 071E Signing time: Fri 09 Jan 2026 09:01:18 +0000 Manifest this update: Fri 09 Jan 2026 09:01:18 +0000 Manifest next update: Sat 10 Jan 2026 09:01:18 +0000 Files and hashes: 1: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl (hash: E1LNkShyTMY+u3rOQGuqjk9YiBtOvi7PTunUZMwrzXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:fd:1f:38:92:ec:d5:c2:4b:8f:bd:13:ec:79:31:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25d25dfc652483cc7bffd6136f47735bd190d5a1 Validity Not Before: Jan 9 09:01:18 2026 GMT Not After : Jan 10 09:01:18 2026 GMT Subject: CN=714c01a74d5be89307b7121a9f558d55a2abb293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:89:a9:c2:41:b9:d6:c3:5e:95:9f:18:c2:78: 19:62:b0:99:c9:a0:95:70:67:7d:ba:75:fe:35:ec: fd:fe:c3:36:aa:c1:e2:47:e5:a9:dc:ca:98:db:d9: c9:7c:d3:89:48:c2:68:93:27:7d:53:fd:db:6a:36: ce:11:3a:70:37:6c:b3:fb:9c:83:7c:0f:c7:03:c8: 63:22:aa:f2:cd:15:81:85:84:73:fd:2a:ce:db:89: cd:c6:ae:70:9c:19:0d:45:18:1c:3d:01:1b:6a:2f: 43:52:80:ab:34:c5:88:fb:90:80:ea:14:bc:e0:fe: 87:9f:69:51:c1:44:ce:ab:b1:d3:9a:c1:67:cd:20: 87:fb:77:04:2e:a4:5c:5e:0d:38:43:3c:3a:5b:f5: 22:e8:81:5e:09:de:70:ef:e2:77:55:95:20:87:70: a2:cf:80:25:ab:e8:b0:94:eb:2b:09:f0:ee:66:05: 78:39:4d:23:e9:5f:f6:de:9b:3a:bb:1d:2f:01:05: f2:37:78:49:62:1e:ca:95:e2:8d:df:67:d5:8c:55: f0:73:46:10:ce:59:4e:89:75:31:d8:fc:2e:94:ff: 3b:6d:32:da:62:c5:5f:22:02:2a:10:bb:41:10:98: c0:f2:39:b8:fb:2a:66:9d:03:57:19:dd:e7:1a:9d: 17:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4C:01:A7:4D:5B:E8:93:07:B7:12:1A:9F:55:8D:55:A2:AB:B2:93 X509v3 Authority Key Identifier: keyid:25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:93:f0:40:13:2e:71:37:96:06:6f:74:00:08:b4:ce:9d:b5: 76:65:ca:35:b1:92:27:44:a7:e9:62:49:8a:d9:b2:ed:28:75: b7:10:e9:c2:8e:ff:99:e0:c9:ea:59:8f:72:58:77:2a:ed:a4: 4b:86:41:9c:14:42:74:0f:6c:54:de:fb:6d:dc:e4:b8:e8:86: c1:bb:05:c2:0d:c8:7a:52:c8:59:d9:74:cd:43:be:78:b7:3b: 08:a2:d4:2e:3b:ce:fd:96:4e:e4:8d:b3:0e:f6:c0:62:94:0b: d3:f7:5f:aa:e2:dc:05:cc:ce:4b:c8:8c:76:fb:62:05:e6:e0: 45:94:2f:02:e0:04:8e:02:d5:38:56:d9:1a:36:d0:a4:7a:fa: 55:ec:98:7a:0f:dd:da:12:0e:bc:78:c9:34:ad:a1:15:53:4d: 95:7d:34:63:9d:b0:10:3f:b6:29:4f:80:a2:e2:ec:f8:48:39: d8:ce:fe:8c:8f:27:7a:f2:78:0a:d9:77:30:3e:5a:c5:ca:67: 0f:d5:99:59:95:58:50:57:12:2d:ef:bd:ba:26:6a:e2:78:68: 8a:c0:d5:f7:b0:fd:90:e3:99:6d:72:4e:cd:3b:39:82:a7:e4: eb:c8:9c:8c:25:6a:ce:ca:19:5b:d0:5b:18:e8:4b:5a:97:7a: eb:4a:26:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuh/R84kuzVwkuPvRPseTEvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZDI1ZGZjNjUyNDgzY2M3YmZmZDYxMzZmNDc3MzViZDE5 MGQ1YTEwHhcNMjYwMTA5MDkwMTE4WhcNMjYwMTEwMDkwMTE4WjAzMTEwLwYDVQQD Eyg3MTRjMDFhNzRkNWJlODkzMDdiNzEyMWE5ZjU1OGQ1NWEyYWJiMjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4mpwkG51sNelZ8YwngZYrCZyaCV cGd9unX+Nez9/sM2qsHiR+Wp3MqY29nJfNOJSMJokyd9U/3bajbOETpwN2yz+5yD fA/HA8hjIqryzRWBhYRz/SrO24nNxq5wnBkNRRgcPQEbai9DUoCrNMWI+5CA6hS8 4P6Hn2lRwUTOq7HTmsFnzSCH+3cELqRcXg04Qzw6W/Ui6IFeCd5w7+J3VZUgh3Ci z4Alq+iwlOsrCfDuZgV4OU0j6V/23ps6ux0vAQXyN3hJYh7KleKN32fVjFXwc0YQ zllOiXUx2PwulP87bTLaYsVfIgIqELtBEJjA8jm4+ypmnQNXGd3nGp0XUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFMAadNW+iTB7cSGp9VjVWiq7KTMB8GA1UdIwQY MBaAFCXSXfxlJIPMe//WE29Hc1vRkNWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmRKZF9HVWtnOHg3XzlZVGIwZHpXOUdRMWFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lODVhZGMtOWU2Mi00NjA5LWFkMmQt MDAyYTEyYzI0MjQ4LzEvSmRKZF9HVWtnOHg3XzlZVGIwZHpXOUdRMWFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9lODVhZGMtOWU2Mi00NjA5LWFkMmQtMDAyYTEyYzI0MjQ4 LzEvSmRKZF9HVWtnOHg3XzlZVGIwZHpXOUdRMWFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpPwQBMu cTeWBm90AAi0zp21dmXKNbGSJ0Sn6WJJitmy7Sh1txDpwo7/meDJ6lmPclh3Ku2k S4ZBnBRCdA9sVN77bdzkuOiGwbsFwg3IelLIWdl0zUO+eLc7CKLULjvO/ZZO5I2z DvbAYpQL0/dfquLcBczOS8iMdvtiBebgRZQvAuAEjgLVOFbZGjbQpHr6VeyYeg/d 2hIOvHjJNK2hFVNNlX00Y52wED+2KU+AouLs+Eg52M7+jI8nevJ4Ctl3MD5axcpn D9WZWZVYUFcSLe+9uiZq4nhoisDV97D9kOOZbXJOzTs5gqfk68icjCVqzsoZW9Bb GOhLWpd660omzw== -----END CERTIFICATE-----Generated at Fri Jan 9 16:30:00 2026 by rpki-client