This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft File: jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft (raw, json) Hash identifier: LmBjvHSubbPPk1Fa7XzqOKj+jsXqRrzkWhJpHZbBHME= Subject key identifier: AD:E0:20:4E:E5:78:AA:14:BE:BC:03:57:C0:EE:D6:31:0C:3C:81:F0 Authority key identifier: 8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90 Certificate issuer: /CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390 Certificate serial: 019B7F70779CBB3B10885F36486E5B324380 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft Manifest number: 0F94 Signing time: Fri 02 Jan 2026 16:00:35 +0000 Manifest this update: Fri 02 Jan 2026 16:00:35 +0000 Manifest next update: Sat 03 Jan 2026 16:00:35 +0000 Files and hashes: 1: jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl (hash: 7kjj+4TdFhh300uA2szzMzhptcvEBKa2QPCoLzYOybQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:70:77:9c:bb:3b:10:88:5f:36:48:6e:5b:32:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390 Validity Not Before: Jan 2 16:00:35 2026 GMT Not After : Jan 3 16:00:35 2026 GMT Subject: CN=ade0204ee578aa14bebc0357c0eed6310c3c81f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4d:c3:39:1b:ca:88:8b:80:a4:8d:4b:b3:83: 62:48:96:37:90:6e:63:a9:85:87:36:d6:5d:ab:4c: 50:11:d7:ca:bd:21:60:da:50:b9:f2:07:ff:6c:11: 5c:67:c2:49:e2:29:47:b8:f2:37:51:fc:7f:f1:fc: 79:fc:c4:78:e5:3e:e2:b3:bd:6e:f6:0b:5c:77:9e: 92:ac:5d:90:05:24:9b:9a:ef:73:02:14:85:51:c2: 6a:fe:45:f5:bf:78:9d:45:17:11:5d:58:f4:db:8e: 3a:dd:04:09:5f:ac:f0:c6:c7:41:b2:1d:46:96:f4: b4:51:d5:77:24:a4:86:64:ec:63:17:27:8b:10:c9: 0c:db:81:c0:7f:33:e5:bd:69:f4:0e:4a:8a:80:94: 27:b7:6f:d2:68:28:e0:30:0b:d9:76:a0:98:29:53: 08:56:77:14:90:2b:b7:60:b9:0a:fd:75:96:bd:09: cc:36:96:6f:ac:24:62:12:51:51:0b:b1:ef:70:b0: d6:97:9e:76:8c:f9:70:c5:0e:3d:18:0f:29:a0:17: 63:ac:3b:81:80:11:5f:fb:04:a5:8d:cb:d6:ce:2b: 1a:28:93:a7:01:02:0b:ab:a0:52:c0:a7:dc:82:a4: ce:80:8f:25:5c:e1:77:00:36:9c:4e:ca:82:82:1b: 18:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E0:20:4E:E5:78:AA:14:BE:BC:03:57:C0:EE:D6:31:0C:3C:81:F0 X509v3 Authority Key Identifier: keyid:8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:c3:9d:9d:ad:a6:c9:05:6c:83:78:0a:31:82:01:a3:50:dc: 41:80:1a:ad:41:ca:0f:b8:31:50:18:48:24:a5:bf:26:2d:86: cb:92:cc:be:50:b5:dd:32:db:03:c2:7c:06:2a:0a:77:4c:eb: 28:ba:44:60:68:1b:63:8c:c0:1d:e4:cc:94:63:ef:69:b5:4b: 94:79:2a:81:f3:be:3e:22:ad:b0:7d:60:ea:f8:97:73:63:0d: 68:5c:ba:fa:04:f9:67:c2:1e:f4:b2:07:9f:ac:f7:eb:8b:98: 00:20:77:d7:39:4d:f1:29:ab:4f:86:7c:47:44:8c:13:ac:e2: 57:0b:96:aa:37:ad:b4:3c:5b:0e:34:ea:e3:6e:67:6a:f3:42: 89:51:9b:d4:bf:17:9c:d8:43:22:79:5b:5f:27:b8:be:d1:76: 1a:75:d4:25:a5:7b:19:ec:52:db:ce:dc:dd:33:c4:06:86:99: 9f:7a:0e:13:6a:89:b6:e1:fe:f8:21:ca:77:8d:8a:18:fe:eb: 31:4f:3e:3b:27:14:ee:4e:64:85:55:81:47:c5:73:3b:5a:15: b0:ca:82:cf:a0:84:23:9a:04:c1:66:82:8c:03:1f:e8:3e:f0: 16:ca:12:d2:c9:0b:5d:b4:c8:cc:b1:c4:1f:30:b4:5e:8c:07: 66:ef:e6:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/cHecuzsQiF82SG5bMkOAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjYTBmZWMxOGVmMjlmOWFhZGZlOTYyYmNmNzQwODkwZGIw ZjczOTAwHhcNMjYwMTAyMTYwMDM1WhcNMjYwMTAzMTYwMDM1WjAzMTEwLwYDVQQD EyhhZGUwMjA0ZWU1NzhhYTE0YmViYzAzNTdjMGVlZDYzMTBjM2M4MWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k3DORvKiIuApI1Ls4NiSJY3kG5j qYWHNtZdq0xQEdfKvSFg2lC58gf/bBFcZ8JJ4ilHuPI3Ufx/8fx5/MR45T7is71u 9gtcd56SrF2QBSSbmu9zAhSFUcJq/kX1v3idRRcRXVj024463QQJX6zwxsdBsh1G lvS0UdV3JKSGZOxjFyeLEMkM24HAfzPlvWn0DkqKgJQnt2/SaCjgMAvZdqCYKVMI VncUkCu3YLkK/XWWvQnMNpZvrCRiElFRC7HvcLDWl552jPlwxQ49GA8poBdjrDuB gBFf+wSljcvWzisaKJOnAQILq6BSwKfcgqTOgI8lXOF3ADacTsqCghsYcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3gIE7leKoUvrwDV8Du1jEMPIHwMB8GA1UdIwQY MBaAFIyg/sGO8p+arf6WK890CJDbD3OQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaktELXdZN3luNXF0X3BZcnozUUlrTnNQYzVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lYTViNDAtMjg4Ni00YmFmLThlYTAt MTEzZWVmYTUxYWE2LzEvaktELXdZN3luNXF0X3BZcnozUUlrTnNQYzVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9lYTViNDAtMjg4Ni00YmFmLThlYTAtMTEzZWVmYTUxYWE2 LzEvaktELXdZN3luNXF0X3BZcnozUUlrTnNQYzVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxMOdna2m yQVsg3gKMYIBo1DcQYAarUHKD7gxUBhIJKW/Ji2Gy5LMvlC13TLbA8J8BioKd0zr KLpEYGgbY4zAHeTMlGPvabVLlHkqgfO+PiKtsH1g6viXc2MNaFy6+gT5Z8Ie9LIH n6z364uYACB31zlN8SmrT4Z8R0SME6ziVwuWqjettDxbDjTq425navNCiVGb1L8X nNhDInlbXye4vtF2GnXUJaV7GexS287c3TPEBoaZn3oOE2qJtuH++CHKd42KGP7r MU8+OycU7k5khVWBR8VzO1oVsMqCz6CEI5oEwWaCjAMf6D7wFsoS0skLXbTIzLHE HzC0XowHZu/mTg== -----END CERTIFICATE-----Generated at Sat Jan 3 02:21:53 2026 by rpki-client