This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json) Hash identifier: zkyltkDxnXiUAfHrQobFb8ZQGTfYn/q1JlwdOLVWzUc= Subject key identifier: 42:38:26:08:F8:CC:B3:1F:C7:36:2F:51:20:B4:9D:F6:0B:D1:53:F3 Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d Certificate serial: 019BB05D6D0CCBA8E3B5ECF87992CA4EAE99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft Manifest number: 1755 Signing time: Mon 12 Jan 2026 04:01:11 +0000 Manifest this update: Mon 12 Jan 2026 04:01:11 +0000 Manifest next update: Tue 13 Jan 2026 04:01:11 +0000 Files and hashes: 1: F542RKRQvPrXJffMgDoWUXOCGjM.roa (hash: i0Pd1YsF/0CZkMewWg+RkQERNB+Z6enGZOfMb6J8Sd0=) 2: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: ccItIDNeuV18m7N8qkgJeWFpenufPU0ZURj95b+VfKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:5d:6d:0c:cb:a8:e3:b5:ec:f8:79:92:ca:4e:ae:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d Validity Not Before: Jan 12 04:01:11 2026 GMT Not After : Jan 13 04:01:11 2026 GMT Subject: CN=42382608f8ccb31fc7362f5120b49df60bd153f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:13:21:ec:5b:69:ac:0b:9c:68:ee:60:ac: 82:f0:87:7c:b3:c5:3b:b8:62:a7:cb:d6:1c:d3:62: a9:33:45:bc:80:5b:f7:b3:76:15:97:56:d9:3a:5f: 92:25:c7:56:a6:f1:b3:18:db:fa:f7:52:8b:bd:21: f7:ac:bb:5e:1c:76:67:8d:e5:e5:ba:20:26:c9:52: 20:0a:69:26:4f:76:4a:ec:45:cb:98:9f:ee:6f:72: a5:23:16:03:33:14:10:e5:d9:0f:b6:f0:3e:1f:12: 50:6d:aa:65:ed:f0:97:a9:ab:62:68:9e:7e:a7:03: 06:49:e7:0e:ee:6e:c5:80:93:45:d8:61:8c:2b:81: 98:5e:57:41:1d:d9:02:b0:c7:c5:5a:36:a8:d0:36: 3b:ff:82:2e:45:b5:f3:7f:60:f4:f7:10:7a:04:78: 59:7d:48:7b:2c:34:94:c7:01:d2:44:68:1c:5e:fb: b7:e1:91:ec:1f:9e:06:c4:14:77:b8:b7:52:63:b7: 1f:f0:15:c3:f4:2e:f4:f8:26:5e:19:d9:23:90:b4: a4:e3:5b:13:04:20:ae:d9:6c:55:0f:c6:78:05:cd: 55:6a:ce:5e:bc:ea:70:53:67:97:47:b3:f4:3a:7d: 94:8e:27:70:db:f2:c4:27:95:97:2e:ae:36:08:a5: c7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:38:26:08:F8:CC:B3:1F:C7:36:2F:51:20:B4:9D:F6:0B:D1:53:F3 X509v3 Authority Key Identifier: keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ad:42:70:49:7e:90:c1:5a:df:92:f0:fc:d8:a5:12:c9:53: 91:1e:68:00:12:9b:67:80:3f:b3:57:9e:c0:ba:22:d7:5d:f3: 40:ce:40:fc:c7:b4:a6:e7:b4:71:92:fe:65:5c:08:7f:ba:17: f9:61:ea:61:10:b9:5c:10:d0:f8:d7:1b:d9:78:fe:69:af:cc: 23:29:51:52:e0:3c:8d:c4:de:ac:92:6c:d9:fa:27:65:ad:b7: b4:8a:04:0c:fd:40:1d:a7:e8:d2:a9:33:29:9e:df:ac:8f:66: 4b:41:ca:3b:1f:45:bd:d9:1b:de:d4:25:b5:e7:56:b6:8a:50: 02:7b:4d:83:56:5b:94:0b:be:9e:24:02:6f:56:35:ba:86:07: 66:c5:9d:cb:2f:dc:d4:a6:4b:be:20:23:c9:29:1c:20:89:81: d0:43:23:69:38:61:30:96:43:b7:75:3c:8c:d1:b9:0d:7a:79: 8e:4b:0c:e6:b8:10:e2:68:1e:a2:8b:36:9a:fb:80:2f:6f:a4: 3a:21:47:63:e8:98:6a:72:d3:5e:5a:6d:75:b2:eb:f5:10:ab: 75:b9:b2:7d:a8:a4:15:02:cb:db:8e:52:df:b2:35:35:7c:1c: 63:36:f5:3f:79:3d:30:85:67:29:13:8a:41:2f:5c:04:7e:7c: 35:7e:c2:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwXW0My6jjtez4eZLKTq6ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MGU3NTk0YWFlMjRhNGZkNmMzODU1NDUxN2Q4YjlkNmZh ZTA2MGQwHhcNMjYwMTEyMDQwMTExWhcNMjYwMTEzMDQwMTExWjAzMTEwLwYDVQQD Eyg0MjM4MjYwOGY4Y2NiMzFmYzczNjJmNTEyMGI0OWRmNjBiZDE1M2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz0TIexbaawLnGjuYKyC8Id8s8U7 uGKny9Yc02KpM0W8gFv3s3YVl1bZOl+SJcdWpvGzGNv691KLvSH3rLteHHZnjeXl uiAmyVIgCmkmT3ZK7EXLmJ/ub3KlIxYDMxQQ5dkPtvA+HxJQbapl7fCXqatiaJ5+ pwMGSecO7m7FgJNF2GGMK4GYXldBHdkCsMfFWjao0DY7/4IuRbXzf2D09xB6BHhZ fUh7LDSUxwHSRGgcXvu34ZHsH54GxBR3uLdSY7cf8BXD9C70+CZeGdkjkLSk41sT BCCu2WxVD8Z4Bc1Vas5evOpwU2eXR7P0On2Ujidw2/LEJ5WXLq42CKXHPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEI4Jgj4zLMfxzYvUSC0nfYL0VPzMB8GA1UdIwQY MBaAFCQOdZSq4kpP1sOFVFF9i51vrgYNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkE1MWxLcmlTa19XdzRWVVVYMkxuVy11QmcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81YTI2MGUtYWVjMC00ZTRhLWFhODUt NGI4ZGYwOTg0OTZkLzEvSkE1MWxLcmlTa19XdzRWVVVYMkxuVy11QmcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS81YTI2MGUtYWVjMC00ZTRhLWFhODUtNGI4ZGYwOTg0OTZk LzEvSkE1MWxLcmlTa19XdzRWVVVYMkxuVy11QmcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo61CcEl+ kMFa35Lw/NilEslTkR5oABKbZ4A/s1eewLoi113zQM5A/Me0pue0cZL+ZVwIf7oX +WHqYRC5XBDQ+Ncb2Xj+aa/MIylRUuA8jcTerJJs2fonZa23tIoEDP1AHafo0qkz KZ7frI9mS0HKOx9Fvdkb3tQltedWtopQAntNg1ZblAu+niQCb1Y1uoYHZsWdyy/c 1KZLviAjySkcIImB0EMjaThhMJZDt3U8jNG5DXp5jksM5rgQ4mgeoos2mvuAL2+k OiFHY+iYanLTXlptdbLr9RCrdbmyfaikFQLL245S37I1NXwcYzb1P3k9MIVnKROK QS9cBH58NX7CjA== -----END CERTIFICATE-----Generated at Mon Jan 12 12:54:09 2026 by rpki-client