This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft File: J5YqM_0jSHgawSOhJyKghu6Pun0.mft (raw, json) Hash identifier: RbH+FzJhUbJeCZqu8RWPCZYqTpNh432eu7ptPs58HtI= Subject key identifier: BB:D7:AB:B1:9A:80:58:CE:5D:56:6F:9F:D8:74:CD:7D:9A:94:81:67 Authority key identifier: 27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D Certificate issuer: /CN=27962a33fd2348781ac123a12722a086ee8fba7d Certificate serial: 019BB2828B7730E3001300FE4AF1B40D6C3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft Manifest number: 17C6 Signing time: Mon 12 Jan 2026 14:00:58 +0000 Manifest this update: Mon 12 Jan 2026 14:00:58 +0000 Manifest next update: Tue 13 Jan 2026 14:00:58 +0000 Files and hashes: 1: J5YqM_0jSHgawSOhJyKghu6Pun0.crl (hash: bq+s+RIRDft2JXj1HmpZEIbBknj2y/dXrXX414VGQZA=) 2: aK-KiOW1egsjAqwNXfFKte8mrTM.roa (hash: cMN/aBHsJKW/o3mLC7qajGiwbSYm63ebF4bSsFTDBjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:82:8b:77:30:e3:00:13:00:fe:4a:f1:b4:0d:6c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27962a33fd2348781ac123a12722a086ee8fba7d Validity Not Before: Jan 12 14:00:58 2026 GMT Not After : Jan 13 14:00:58 2026 GMT Subject: CN=bbd7abb19a8058ce5d566f9fd874cd7d9a948167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d3:26:b6:31:44:fa:61:d6:78:e0:a6:b6:d4: be:9f:30:12:9b:33:39:4b:81:ee:00:0d:d5:d9:44: 5f:90:57:ff:22:a5:a1:d7:a6:df:b6:2c:bf:df:c7: 90:1a:53:3c:37:90:47:d8:e0:4b:7a:96:60:89:d7: 9e:87:b2:35:2b:2a:0a:1b:ba:b6:19:7a:04:b6:f8: c4:56:27:2e:e4:b1:cc:87:8f:c3:63:3c:6c:b6:d7: f1:52:fd:70:ee:45:73:67:f8:5c:3b:f3:3a:43:4f: 5b:ce:f2:fa:17:95:1b:81:2a:99:f0:41:c8:d2:74: 8e:29:6f:55:d6:eb:98:fa:31:68:77:94:fa:72:8f: c2:b9:b7:39:1c:41:a5:aa:a6:3c:ac:44:4d:32:38: ef:35:a2:f9:d8:4b:c3:88:f1:2f:16:60:c6:9f:4d: 23:32:7b:e9:15:7d:3f:3e:d1:15:63:30:76:a5:03: be:90:7a:e7:61:b9:20:41:80:cb:3a:cb:e5:99:1f: bd:d2:8e:1f:ba:74:08:8e:76:b3:9e:eb:52:b1:77: 1d:8c:90:be:72:03:49:e1:95:2d:8f:75:9c:0d:40: 20:7c:1d:ce:b4:25:7b:55:a2:59:03:03:1e:56:5b: 10:52:ec:6e:55:d4:cc:b7:96:98:71:a9:98:20:fc: 24:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D7:AB:B1:9A:80:58:CE:5D:56:6F:9F:D8:74:CD:7D:9A:94:81:67 X509v3 Authority Key Identifier: keyid:27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7f:b5:e0:34:ad:2d:0c:32:28:89:af:0c:48:78:28:5a:d3: 09:37:fa:49:20:6c:3b:de:cb:93:f2:d8:c8:da:94:ff:d9:c3: d3:12:e1:3a:64:a9:9d:83:f7:c9:cd:f2:2e:a3:e3:d1:c7:b4: 87:34:e8:5c:27:b8:41:36:e8:58:08:23:ea:95:69:9a:32:14: 86:e5:c0:66:d8:77:ee:e1:d1:1e:21:d4:ae:16:8a:67:b9:f9: 4e:6b:db:bc:8c:07:b7:44:76:3c:dc:75:93:b1:cf:03:8c:dc: a9:e4:80:d3:96:ab:91:d9:04:d7:8a:09:cc:25:25:69:c3:58: fa:e0:92:53:25:05:69:8f:f2:83:1d:3a:3d:cc:87:7d:2a:2a: 99:99:6d:a2:44:1f:04:4d:e0:a6:67:7c:3a:14:95:64:79:0b: 77:66:e6:83:b7:75:25:12:2f:4b:49:e5:43:55:0d:fa:08:f0: ad:45:04:ef:7a:ea:fd:f5:18:f1:88:61:51:8c:03:91:7b:38: 87:0e:52:c8:a9:fd:52:b6:23:2e:fd:48:11:5f:ff:f7:7b:92: 38:22:ae:bf:52:91:47:d3:3e:65:3d:2a:54:f0:23:91:bf:e7: 6a:2a:73:58:b6:74:69:ed:e8:6d:a4:b6:1e:1c:69:72:39:07: 78:b9:70:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuygot3MOMAEwD+SvG0DWw9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTYyYTMzZmQyMzQ4NzgxYWMxMjNhMTI3MjJhMDg2ZWU4 ZmJhN2QwHhcNMjYwMTEyMTQwMDU4WhcNMjYwMTEzMTQwMDU4WjAzMTEwLwYDVQQD EyhiYmQ3YWJiMTlhODA1OGNlNWQ1NjZmOWZkODc0Y2Q3ZDlhOTQ4MTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dMmtjFE+mHWeOCmttS+nzASmzM5 S4HuAA3V2URfkFf/IqWh16bftiy/38eQGlM8N5BH2OBLepZgideeh7I1KyoKG7q2 GXoEtvjEVicu5LHMh4/DYzxsttfxUv1w7kVzZ/hcO/M6Q09bzvL6F5UbgSqZ8EHI 0nSOKW9V1uuY+jFod5T6co/Cubc5HEGlqqY8rERNMjjvNaL52EvDiPEvFmDGn00j MnvpFX0/PtEVYzB2pQO+kHrnYbkgQYDLOsvlmR+90o4funQIjnaznutSsXcdjJC+ cgNJ4ZUtj3WcDUAgfB3OtCV7VaJZAwMeVlsQUuxuVdTMt5aYcamYIPwk4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvXq7GagFjOXVZvn9h0zX2alIFnMB8GA1UdIwQY MBaAFCeWKjP9I0h4GsEjoScioIbuj7p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVZcU1fMGpTSGdhd1NPaEp5S2dodTZQdW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xMTQ1ZDItYjFiZC00YTU3LWE0NGQt YmI2YmZmZTY2ZmYzLzEvSjVZcU1fMGpTSGdhd1NPaEp5S2dodTZQdW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8xMTQ1ZDItYjFiZC00YTU3LWE0NGQtYmI2YmZmZTY2ZmYz LzEvSjVZcU1fMGpTSGdhd1NPaEp5S2dodTZQdW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfX+14DSt LQwyKImvDEh4KFrTCTf6SSBsO97Lk/LYyNqU/9nD0xLhOmSpnYP3yc3yLqPj0ce0 hzToXCe4QTboWAgj6pVpmjIUhuXAZth37uHRHiHUrhaKZ7n5TmvbvIwHt0R2PNx1 k7HPA4zcqeSA05arkdkE14oJzCUlacNY+uCSUyUFaY/ygx06PcyHfSoqmZltokQf BE3gpmd8OhSVZHkLd2bmg7d1JRIvS0nlQ1UN+gjwrUUE73rq/fUY8YhhUYwDkXs4 hw5SyKn9UrYjLv1IEV//93uSOCKuv1KRR9M+ZT0qVPAjkb/naipzWLZ0ae3obaS2 HhxpcjkHeLlwTg== -----END CERTIFICATE-----Generated at Mon Jan 12 17:02:02 2026 by rpki-client