This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json) Hash identifier: i1FUcPN7uNrbabfWbokol8rIbeRym88PUPK6UlAZpok= Subject key identifier: D6:57:9E:48:AA:B9:4F:BD:4E:CB:D5:C8:2A:C4:93:76:47:66:0A:FC Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63 Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863 Certificate serial: 019B97422ED9E772D99CDD5CDAFE807C610D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft Manifest number: 17B4 Signing time: Wed 07 Jan 2026 07:00:55 +0000 Manifest this update: Wed 07 Jan 2026 07:00:55 +0000 Manifest next update: Thu 08 Jan 2026 07:00:55 +0000 Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: 8gHniRd3GBi6OxBPMYAbXI4TXx4YdCDacKBGgWk1LQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:42:2e:d9:e7:72:d9:9c:dd:5c:da:fe:80:7c:61:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863 Validity Not Before: Jan 7 07:00:55 2026 GMT Not After : Jan 8 07:00:55 2026 GMT Subject: CN=d6579e48aab94fbd4ecbd5c82ac4937647660afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a4:18:ef:13:70:d1:dc:41:ba:ac:db:b0:cc: 9e:7c:d1:e0:a7:4d:33:76:9a:c2:28:f4:1b:40:2a: 7b:b5:98:cb:15:8e:04:53:72:bd:7f:e5:8d:c0:e0: b5:75:65:b1:bd:e7:03:7c:bd:93:e3:e6:41:8b:a7: 2b:fa:e7:76:7d:7b:53:d8:9f:82:fa:36:04:c1:e7: 14:c3:32:f3:17:b9:31:e2:43:64:a7:72:8e:b8:37: 06:59:c4:73:ca:39:6f:47:27:6a:df:24:a4:98:6c: e0:1d:93:02:0a:3c:e3:9a:12:2b:44:17:e0:95:6a: 01:9f:5e:87:a1:dd:28:1e:3b:76:3d:97:c7:82:c0: 95:e4:c2:6a:13:91:b8:c7:a0:5f:53:78:bb:cf:76: 34:50:dc:c6:8c:30:04:a2:07:40:1f:30:6f:d4:e8: de:f6:08:f1:dd:2b:8c:6a:27:f8:f9:54:c3:ad:dd: 1a:e5:09:69:5a:11:1c:40:e7:bd:67:c0:ef:8e:91: 83:f6:9a:48:1c:0f:8e:d2:42:76:9d:2a:bc:80:22: 47:b5:43:f9:8d:32:77:91:cc:a2:3b:da:41:76:f7: 40:2c:1a:20:47:1a:df:37:54:20:ac:cc:86:41:38: cb:3b:0b:72:9c:23:66:bc:ad:29:5e:89:fd:da:40: a1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:57:9E:48:AA:B9:4F:BD:4E:CB:D5:C8:2A:C4:93:76:47:66:0A:FC X509v3 Authority Key Identifier: keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:3e:f0:6a:fa:d2:4b:c1:18:43:a2:3c:94:14:7c:3f:26:bb: 66:1f:ce:d8:6d:4f:b0:fa:f9:20:48:8e:43:af:7a:e0:ed:e9: 5b:5d:95:3a:db:15:58:ae:3d:de:1a:f3:75:71:7a:9b:28:6e: 8c:7f:b2:e3:ee:61:14:74:6d:36:9b:0e:78:56:cf:b9:ff:64: ef:e3:e8:e4:ec:25:21:a7:b3:e8:88:ed:af:82:0c:f3:12:cb: 21:cb:2b:76:7b:df:3e:3f:78:4a:64:60:0f:77:ed:29:50:6e: 66:07:9d:49:66:77:ee:49:fe:b0:5d:0f:db:4b:9b:d2:64:62: 0e:8a:ea:63:89:2d:d8:80:01:f2:ae:21:68:51:56:5d:49:11: 74:91:de:4d:06:58:74:ad:9d:ed:ea:3e:a5:d2:69:20:d5:ed: 2b:a0:f5:d2:82:75:f4:29:4a:22:17:b4:d6:5d:9f:a5:6b:8e: a1:0b:86:1a:07:92:9d:7d:c8:74:9d:77:11:3d:d9:2d:d9:94: 1b:ef:2a:c8:94:fb:e2:52:69:4a:1e:dd:d8:b8:bf:6a:c9:0b: c6:d0:b2:5f:1a:a2:c6:43:09:7f:db:dc:6b:c8:2a:b4:cf:e6: 6a:8c:84:8c:1f:63:98:99:cc:ce:68:b6:65:68:10:f5:1e:0c: 00:61:32:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuXQi7Z53LZnN1c2v6AfGENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDI2YWRiNDRmNTRiMDk5MmM3NTNlYjE3YmFiZTgxMmIw NzQ4NjMwHhcNMjYwMTA3MDcwMDU1WhcNMjYwMTA4MDcwMDU1WjAzMTEwLwYDVQQD EyhkNjU3OWU0OGFhYjk0ZmJkNGVjYmQ1YzgyYWM0OTM3NjQ3NjYwYWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16QY7xNw0dxBuqzbsMyefNHgp00z dprCKPQbQCp7tZjLFY4EU3K9f+WNwOC1dWWxvecDfL2T4+ZBi6cr+ud2fXtT2J+C +jYEwecUwzLzF7kx4kNkp3KOuDcGWcRzyjlvRydq3ySkmGzgHZMCCjzjmhIrRBfg lWoBn16Hod0oHjt2PZfHgsCV5MJqE5G4x6BfU3i7z3Y0UNzGjDAEogdAHzBv1Oje 9gjx3SuMaif4+VTDrd0a5QlpWhEcQOe9Z8DvjpGD9ppIHA+O0kJ2nSq8gCJHtUP5 jTJ3kcyiO9pBdvdALBogRxrfN1QgrMyGQTjLOwtynCNmvK0pXon92kChXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZXnkiquU+9TsvVyCrEk3ZHZgr8MB8GA1UdIwQY MBaAFAjSattE9UsJksdT6xe6voErB0hjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hY2U4ZGQtZDNhOC00MmYwLWEzYzMt Y2NlNDlhOTMxYzllLzEvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hY2U4ZGQtZDNhOC00MmYwLWEzYzMtY2NlNDlhOTMxYzll LzEvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARj7wavrS S8EYQ6I8lBR8Pya7Zh/O2G1PsPr5IEiOQ6964O3pW12VOtsVWK493hrzdXF6myhu jH+y4+5hFHRtNpsOeFbPuf9k7+Po5OwlIaez6Ijtr4IM8xLLIcsrdnvfPj94SmRg D3ftKVBuZgedSWZ37kn+sF0P20ub0mRiDorqY4kt2IAB8q4haFFWXUkRdJHeTQZY dK2d7eo+pdJpINXtK6D10oJ19ClKIhe01l2fpWuOoQuGGgeSnX3IdJ13ET3ZLdmU G+8qyJT74lJpSh7d2Li/askLxtCyXxqixkMJf9vca8gqtM/maoyEjB9jmJnMzmi2 ZWgQ9R4MAGEykg== -----END CERTIFICATE-----Generated at Wed Jan 7 10:23:44 2026 by rpki-client