This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft File: Jq19NWATTgqK5G_Fsyxay2Hd45w.mft (raw, json) Hash identifier: Qa8xdEqpUvuuSxN01PyoLWMSJOArHVsfsMcUxyrC4tI= Subject key identifier: 55:9C:73:B5:73:C3:4E:F8:6F:A2:60:D8:7B:05:A0:D5:6E:98:72:5E Authority key identifier: 26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C Certificate issuer: /CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c Certificate serial: 019B7F027136AF71FE0C21CDA4EDCB64901F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft Manifest number: 12D5 Signing time: Fri 02 Jan 2026 14:00:24 +0000 Manifest this update: Fri 02 Jan 2026 14:00:24 +0000 Manifest next update: Sat 03 Jan 2026 14:00:24 +0000 Files and hashes: 1: Jq19NWATTgqK5G_Fsyxay2Hd45w.crl (hash: /AbbujiZoROadsxn35SKG9ChsdObFOdzmbexIiOQ4Bc=) 2: wkHctLvdsJaCxOWaekPpSlsFo1o.roa (hash: 62uOxIFMIJj4gV6OQmk4HcKVN0NAehpTp48LJq+Xir8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:02:71:36:af:71:fe:0c:21:cd:a4:ed:cb:64:90:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c Validity Not Before: Jan 2 14:00:24 2026 GMT Not After : Jan 3 14:00:24 2026 GMT Subject: CN=559c73b573c34ef86fa260d87b05a0d56e98725e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:6c:89:ce:28:2f:40:16:e1:6d:32:9a:3b:1e: b3:b4:de:e1:24:5e:4b:db:f7:a9:77:ac:11:8b:fd: d9:ac:52:9a:e7:bf:89:ad:51:7c:cd:f2:aa:31:2b: b4:86:65:68:0c:3c:25:15:d4:d5:41:67:cd:74:b3: 09:4c:40:64:fb:a1:ed:36:77:e6:ab:ad:43:89:3c: 22:68:6e:ff:db:82:b6:33:54:3a:e7:99:d6:10:77: ae:8a:b5:13:fb:15:ef:83:80:c4:21:96:69:20:3e: c3:67:c7:c1:c9:6c:d4:b3:3f:c9:ff:71:52:6a:67: df:de:50:7c:99:18:66:70:4a:f6:a4:79:6d:97:73: 78:15:99:bd:10:08:e0:38:c6:03:69:a6:a0:d8:c6: 12:d5:99:4e:b5:43:cc:29:0b:e2:33:68:ae:65:14: 8d:98:47:30:99:a7:ce:2a:22:9b:59:43:59:f7:97: b1:aa:59:24:2b:e3:10:44:b2:4c:02:e5:5c:34:66: d6:e8:da:49:6c:8e:af:14:03:d2:b6:66:98:31:58: 6d:10:2b:c9:d3:7a:e4:b3:d1:59:0d:a0:da:02:5d: 64:09:65:16:c6:df:20:47:05:63:cf:7c:14:e5:8a: 8a:08:4a:cb:0a:74:20:de:a3:5a:bc:80:6b:87:a6: 16:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9C:73:B5:73:C3:4E:F8:6F:A2:60:D8:7B:05:A0:D5:6E:98:72:5E X509v3 Authority Key Identifier: keyid:26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:4b:65:43:9e:1b:f8:a5:e8:aa:1f:b9:04:f0:9d:94:ef:a9: fa:9f:f7:e5:93:9f:c5:df:d1:cd:2b:49:29:0e:69:f6:44:af: ce:d8:ea:7c:22:08:35:2e:8d:f0:17:a7:ce:f0:18:66:28:94: 7b:0a:b7:c9:44:77:60:c7:f9:78:50:0a:bd:93:40:15:8f:b7: 5f:e0:c2:24:ba:cf:03:f0:39:70:61:0f:44:40:fa:c1:6c:c3: 1a:d6:bd:5b:da:6d:9c:e9:4f:3c:cf:36:a1:8d:f9:c5:af:fd: 55:aa:43:1f:3b:5d:01:31:d6:82:28:d6:d8:c4:1f:b4:c2:a4: 03:86:a9:98:0f:17:81:1e:fa:94:d9:fb:1f:19:6a:f6:5e:54: 2f:9b:87:a2:e4:ab:68:42:f6:01:4d:c1:85:d2:5f:a7:d9:c0: 39:22:27:ec:ae:be:1c:57:89:95:93:7b:b6:d8:94:87:2d:5e: 6a:6c:d5:8e:ff:ff:fe:57:49:28:92:42:37:b0:55:c4:4d:6b: be:e7:73:39:2c:fe:70:52:d7:d9:63:82:d7:ab:f6:3d:ea:7a: 44:45:81:18:40:9e:a7:65:ae:76:07:55:87:ab:f1:48:25:84: 00:9d:f6:e8:26:e7:a1:a4:15:57:a3:b2:36:ed:a4:27:e9:29: bf:d5:49:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/AnE2r3H+DCHNpO3LZJAfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YWQ3ZDM1NjAxMzRlMGE4YWU0NmZjNWIzMmM1YWNiNjFk ZGUzOWMwHhcNMjYwMTAyMTQwMDI0WhcNMjYwMTAzMTQwMDI0WjAzMTEwLwYDVQQD Eyg1NTljNzNiNTczYzM0ZWY4NmZhMjYwZDg3YjA1YTBkNTZlOTg3MjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+GyJzigvQBbhbTKaOx6ztN7hJF5L 2/epd6wRi/3ZrFKa57+JrVF8zfKqMSu0hmVoDDwlFdTVQWfNdLMJTEBk+6HtNnfm q61DiTwiaG7/24K2M1Q655nWEHeuirUT+xXvg4DEIZZpID7DZ8fByWzUsz/J/3FS amff3lB8mRhmcEr2pHltl3N4FZm9EAjgOMYDaaag2MYS1ZlOtUPMKQviM2iuZRSN mEcwmafOKiKbWUNZ95exqlkkK+MQRLJMAuVcNGbW6NpJbI6vFAPStmaYMVhtECvJ 03rks9FZDaDaAl1kCWUWxt8gRwVjz3wU5YqKCErLCnQg3qNavIBrh6YW8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWcc7Vzw074b6Jg2HsFoNVumHJeMB8GA1UdIwQY MBaAFCatfTVgE04KiuRvxbMsWsth3eOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnExOU5XQVRUZ3FLNUdfRnN5eGF5MkhkNDV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85OGZjYjUtODdhNy00ZmRlLTk4NDct NDkwMmE2NmIyZDk1LzEvSnExOU5XQVRUZ3FLNUdfRnN5eGF5MkhkNDV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85OGZjYjUtODdhNy00ZmRlLTk4NDctNDkwMmE2NmIyZDk1 LzEvSnExOU5XQVRUZ3FLNUdfRnN5eGF5MkhkNDV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjktlQ54b +KXoqh+5BPCdlO+p+p/35ZOfxd/RzStJKQ5p9kSvztjqfCIINS6N8BenzvAYZiiU ewq3yUR3YMf5eFAKvZNAFY+3X+DCJLrPA/A5cGEPRED6wWzDGta9W9ptnOlPPM82 oY35xa/9VapDHztdATHWgijW2MQftMKkA4apmA8XgR76lNn7Hxlq9l5UL5uHouSr aEL2AU3BhdJfp9nAOSIn7K6+HFeJlZN7ttiUhy1eamzVjv///ldJKJJCN7BVxE1r vudzOSz+cFLX2WOC16v2Pep6REWBGECep2WudgdVh6vxSCWEAJ326CbnoaQVV6Oy Nu2kJ+kpv9VJ8A== -----END CERTIFICATE-----Generated at Fri Jan 2 17:06:53 2026 by rpki-client