This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json) Hash identifier: DLCFnSXlpsDkUHdBq5EhiTZbse/4dRRO6hGrA80qxqg= Subject key identifier: B6:AF:20:95:12:AB:CC:99:9E:4D:81:C1:00:5B:9E:56:5B:FC:B1:F2 Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48 Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548 Certificate serial: 019BF72D8BE2AC51B1E03D98EF95A0C5689C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft Manifest number: 12DD Signing time: Sun 25 Jan 2026 22:01:55 +0000 Manifest this update: Sun 25 Jan 2026 22:01:55 +0000 Manifest next update: Mon 26 Jan 2026 22:01:55 +0000 Files and hashes: 1: L24zb2GPwHD-aPGno9VtNYT_9UA.roa (hash: TV8bwr8KXxyIpZ3hz+LfUH4wszhJw0hokfRXNpqsBSk=) 2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: Vg1XALBoNWf9a2f5hL3rD/aZNE13Whh3OyqvvMtmcYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:8b:e2:ac:51:b1:e0:3d:98:ef:95:a0:c5:68:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548 Validity Not Before: Jan 25 22:01:55 2026 GMT Not After : Jan 26 22:01:55 2026 GMT Subject: CN=b6af209512abcc999e4d81c1005b9e565bfcb1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:a4:87:87:34:da:eb:bd:f1:5a:c0:78:9d: 07:dc:65:50:41:3a:4a:a1:96:94:d2:7f:0f:a1:79: cf:e7:87:a4:4a:b6:17:52:48:7a:7b:9a:91:64:75: 41:3b:3e:30:dc:12:95:f7:2d:9f:c1:d0:fa:96:22: 8f:c4:d4:6d:de:7b:56:58:34:83:14:82:e4:6b:b1: da:3c:02:5d:c9:a3:fe:5f:9d:9f:78:b6:37:02:02: 14:63:d6:c3:66:f0:76:18:74:c9:f1:d8:87:bc:c9: 09:8c:a5:b2:d8:21:74:a3:cf:a3:1f:5d:60:1b:71: fd:f3:e9:07:8d:b0:df:ec:99:97:d5:2b:b3:a2:61: 76:7c:44:39:b4:2d:a1:18:ef:e0:2d:00:44:d2:d5: 03:45:1b:87:af:12:ed:fc:07:08:12:e7:be:45:b7: 3a:ad:08:e5:d8:c2:f3:99:94:68:c0:e5:a7:c9:8e: 15:82:d0:07:04:fe:70:17:1c:ac:0c:1d:63:a5:cd: a0:08:ea:7e:df:59:33:39:92:4b:55:80:7c:99:a9: 13:2a:ab:b8:ef:fd:2b:11:07:31:82:c6:26:e2:ec: 01:a9:63:f7:8e:b6:cb:06:f0:65:7c:d6:42:98:dc: 7e:3b:f3:f1:53:1d:0e:8a:a3:61:29:1f:ee:b3:5e: 39:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AF:20:95:12:AB:CC:99:9E:4D:81:C1:00:5B:9E:56:5B:FC:B1:F2 X509v3 Authority Key Identifier: keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3e:85:4f:2c:15:4d:0a:f4:30:5f:00:a6:11:46:e7:44:c1: 9f:09:2e:f6:cf:22:25:05:8c:b5:ae:9e:eb:d0:3f:6f:bf:5a: 33:0a:b3:53:0b:31:27:49:52:0b:fa:8a:67:ee:1e:11:f5:f0: f2:ae:a2:51:44:c5:33:ef:9e:74:c4:ea:b0:fa:9a:c4:7b:0b: 0a:aa:0c:6d:50:d7:ce:d7:58:ad:d9:0a:60:33:e3:f2:f9:3a: 1b:8f:d6:3c:86:53:dc:3f:88:d0:08:2f:76:48:35:c4:c1:23: 52:16:2d:ed:2c:7c:f1:62:4d:eb:8a:19:d5:9c:ec:fc:ab:86: 6c:cc:07:f3:04:ee:f4:a9:42:10:0d:42:06:19:7c:2d:70:e0: 9c:6e:e7:5b:06:fc:00:04:ad:26:e6:b1:8b:e9:e5:e4:50:3e: 7e:61:63:3b:cd:d0:21:07:c1:3e:83:85:49:a5:4c:ef:b9:aa: c6:ef:32:b1:b1:80:db:ac:f7:c0:70:52:ef:be:35:e8:4d:20: a8:61:39:29:44:d7:4b:ab:f0:f3:6f:c9:39:6d:3b:87:71:11: c2:9a:25:48:07:93:49:92:8d:21:f5:31:3d:21:a6:82:e4:4c: 21:a8:a4:ae:4c:bf:91:aa:e9:3e:40:96:17:e8:fd:25:70:de: 2a:cf:76:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LYvirFGx4D2Y75WgxWicMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlODk1ZjFlMjcwYzYzNWVjNjFkZjlhOTdmYzBmNjY4YzBh OGY1NDgwHhcNMjYwMTI1MjIwMTU1WhcNMjYwMTI2MjIwMTU1WjAzMTEwLwYDVQQD EyhiNmFmMjA5NTEyYWJjYzk5OWU0ZDgxYzEwMDViOWU1NjViZmNiMWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI2kh4c02uu98VrAeJ0H3GVQQTpK oZaU0n8PoXnP54ekSrYXUkh6e5qRZHVBOz4w3BKV9y2fwdD6liKPxNRt3ntWWDSD FILka7HaPAJdyaP+X52feLY3AgIUY9bDZvB2GHTJ8diHvMkJjKWy2CF0o8+jH11g G3H98+kHjbDf7JmX1SuzomF2fEQ5tC2hGO/gLQBE0tUDRRuHrxLt/AcIEue+Rbc6 rQjl2MLzmZRowOWnyY4VgtAHBP5wFxysDB1jpc2gCOp+31kzOZJLVYB8makTKqu4 7/0rEQcxgsYm4uwBqWP3jrbLBvBlfNZCmNx+O/PxUx0OiqNhKR/us145HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLavIJUSq8yZnk2BwQBbnlZb/LHyMB8GA1UdIwQY MBaAFI6JXx4nDGNexh35qX/A9mjAqPVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam9sZkhpY01ZMTdHSGZtcGY4RDJhTUNvOVVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iYzUzZDItOTEzNy00Nzk5LTllNDEt ZTY5YTAxNzQ4NWZiLzEvam9sZkhpY01ZMTdHSGZtcGY4RDJhTUNvOVVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9iYzUzZDItOTEzNy00Nzk5LTllNDEtZTY5YTAxNzQ4NWZi LzEvam9sZkhpY01ZMTdHSGZtcGY4RDJhTUNvOVVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKj6FTywV TQr0MF8AphFG50TBnwku9s8iJQWMta6e69A/b79aMwqzUwsxJ0lSC/qKZ+4eEfXw 8q6iUUTFM++edMTqsPqaxHsLCqoMbVDXztdYrdkKYDPj8vk6G4/WPIZT3D+I0Agv dkg1xMEjUhYt7Sx88WJN64oZ1Zzs/KuGbMwH8wTu9KlCEA1CBhl8LXDgnG7nWwb8 AAStJuaxi+nl5FA+fmFjO83QIQfBPoOFSaVM77mqxu8ysbGA26z3wHBS77416E0g qGE5KUTXS6vw82/JOW07h3ERwpolSAeTSZKNIfUxPSGmguRMIaikrky/karpPkCW F+j9JXDeKs92lw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:31:35 2026 by rpki-client