This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft File: jispgru9Q4t6sawE42wYgPOMato.mft (raw, json) Hash identifier: INXlGjO+ouWWdXYdUiruY8wO9aG2ejaSN5owmzkpKpQ= Subject key identifier: 94:F8:EF:EF:6D:51:A8:40:AD:3D:BC:D8:EF:25:B0:9F:96:54:81:D8 Authority key identifier: 8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA Certificate issuer: /CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada Certificate serial: 019B94E624F08AF959EF1876DB0482382685 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft Manifest number: 1399 Signing time: Tue 06 Jan 2026 20:01:09 +0000 Manifest this update: Tue 06 Jan 2026 20:01:09 +0000 Manifest next update: Wed 07 Jan 2026 20:01:09 +0000 Files and hashes: 1: jispgru9Q4t6sawE42wYgPOMato.crl (hash: QqxT4+obXZdQsA25KMTNulT26n/OCPpwhfWnUjVr7KQ=) 2: rpLLN-zEc59BcyaW_IW8fwJMCgE.roa (hash: coMYH2LK5We0hlfFCOPDMsdK4brnDNXm6xfRfXEZv9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 20:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:e6:24:f0:8a:f9:59:ef:18:76:db:04:82:38:26:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada Validity Not Before: Jan 6 20:01:09 2026 GMT Not After : Jan 7 20:01:09 2026 GMT Subject: CN=94f8efef6d51a840ad3dbcd8ef25b09f965481d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:72:78:2b:33:27:37:e8:60:fe:c0:a8:d8:a0: 84:68:32:4f:fc:6b:11:ac:02:88:b3:aa:40:3b:cf: 56:64:64:ae:ba:1a:ec:84:f8:79:6e:9c:a4:2c:81: da:36:59:c6:6c:c8:2a:54:64:ae:42:0e:51:af:2c: 49:26:2d:90:e8:bb:a6:87:76:c8:83:d1:eb:82:12: 8a:04:ed:d8:3d:07:de:6a:64:40:07:41:56:66:c6: 10:2a:e4:c2:c9:9d:8c:f7:5c:bd:0e:98:3f:7b:c3: 8a:2b:fb:c9:2f:6f:c5:38:c1:e6:c7:e1:a1:e2:c0: 0b:7e:a7:3a:35:25:f7:20:99:1d:b1:af:50:7f:17: 4e:96:77:ce:4f:e9:e5:4b:74:ba:1a:2d:e8:5b:ee: 63:af:00:25:6d:43:85:f2:95:45:15:14:63:50:ad: e9:8a:82:2a:95:d6:cf:1a:74:0d:73:c9:ab:9b:4a: b3:cb:76:2d:27:7b:c2:af:12:73:95:86:c7:6f:39: 65:0b:9e:1e:db:15:5a:83:9a:ea:74:da:b6:28:5f: 58:7f:dc:4c:95:39:d4:c1:b3:8f:02:01:99:f7:74: 7c:17:b1:c0:bd:0a:92:1b:80:f2:3b:e6:83:f4:b6: 86:63:45:6b:31:5e:1a:17:66:3c:88:26:73:ae:04: 0f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F8:EF:EF:6D:51:A8:40:AD:3D:BC:D8:EF:25:B0:9F:96:54:81:D8 X509v3 Authority Key Identifier: keyid:8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c0:99:48:28:f1:6f:cd:15:95:7e:2c:fb:c3:6e:18:58:d4: 59:e6:5b:f7:d6:dc:23:86:99:a9:f2:25:71:6d:7b:06:60:89: 54:fb:cb:61:d1:87:bb:04:58:64:79:09:ba:ac:ec:93:d0:34: 55:24:f7:66:0e:63:76:2a:6f:b4:bf:81:b2:45:dc:d5:de:25: ea:8e:79:fd:76:66:c8:45:f6:2e:dc:d1:5a:ef:7c:c0:95:e3: 5b:08:a3:bd:17:5c:93:0d:ed:5a:3b:76:9b:c2:fd:69:10:b7: fc:99:e3:11:05:46:a0:f2:55:ba:d5:cd:dc:ea:6a:e8:b5:9e: a0:6d:2b:57:e9:86:dd:34:fb:9e:4b:28:f7:5f:98:43:b0:ab: 8c:37:f3:8c:6b:b1:a8:36:12:ac:6d:a1:b8:f0:3c:f3:7e:cb: 36:29:98:75:96:94:bb:4a:e6:f3:25:b6:ad:42:6c:18:56:b3: 6e:08:4d:15:28:f0:3e:d9:bd:89:2a:99:b7:2a:bc:54:73:b9: 47:4b:57:e6:d7:d7:16:5c:7c:6a:82:91:55:43:b8:8b:2b:34: 1e:19:51:bb:bd:ea:8f:62:ff:18:69:d8:61:6c:35:8a:85:65: 00:85:ae:36:4c:f4:9b:25:1a:02:c0:31:a1:e8:ec:23:94:9c: 66:ad:72:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuU5iTwivlZ7xh22wSCOCaFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMmIyOTgyYmJiZDQzOGI3YWIxYWMwNGUzNmMxODgwZjM4 YzZhZGEwHhcNMjYwMTA2MjAwMTA5WhcNMjYwMTA3MjAwMTA5WjAzMTEwLwYDVQQD Eyg5NGY4ZWZlZjZkNTFhODQwYWQzZGJjZDhlZjI1YjA5Zjk2NTQ4MWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnJ4KzMnN+hg/sCo2KCEaDJP/GsR rAKIs6pAO89WZGSuuhrshPh5bpykLIHaNlnGbMgqVGSuQg5RryxJJi2Q6Lumh3bI g9HrghKKBO3YPQfeamRAB0FWZsYQKuTCyZ2M91y9Dpg/e8OKK/vJL2/FOMHmx+Gh 4sALfqc6NSX3IJkdsa9QfxdOlnfOT+nlS3S6Gi3oW+5jrwAlbUOF8pVFFRRjUK3p ioIqldbPGnQNc8mrm0qzy3YtJ3vCrxJzlYbHbzllC54e2xVag5rqdNq2KF9Yf9xM lTnUwbOPAgGZ93R8F7HAvQqSG4DyO+aD9LaGY0VrMV4aF2Y8iCZzrgQP3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJT47+9tUahArT282O8lsJ+WVIHYMB8GA1UdIwQY MBaAFI4rKYK7vUOLerGsBONsGIDzjGraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamlzcGdydTlRNHQ2c2F3RTQyd1lnUE9NYXRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83MDNkZjItYjhiNC00OGY3LTkzMDEt ZGU4MWM3YzFlNzU0LzEvamlzcGdydTlRNHQ2c2F3RTQyd1lnUE9NYXRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS83MDNkZjItYjhiNC00OGY3LTkzMDEtZGU4MWM3YzFlNzU0 LzEvamlzcGdydTlRNHQ2c2F3RTQyd1lnUE9NYXRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8CZSCjx b80VlX4s+8NuGFjUWeZb99bcI4aZqfIlcW17BmCJVPvLYdGHuwRYZHkJuqzsk9A0 VST3Zg5jdipvtL+BskXc1d4l6o55/XZmyEX2LtzRWu98wJXjWwijvRdckw3tWjt2 m8L9aRC3/JnjEQVGoPJVutXN3Opq6LWeoG0rV+mG3TT7nkso91+YQ7CrjDfzjGux qDYSrG2huPA8837LNimYdZaUu0rm8yW2rUJsGFazbghNFSjwPtm9iSqZtyq8VHO5 R0tX5tfXFlx8aoKRVUO4iys0HhlRu73qj2L/GGnYYWw1ioVlAIWuNkz0myUaAsAx oejsI5ScZq1yKg== -----END CERTIFICATE-----Generated at Wed Jan 7 07:00:16 2026 by rpki-client