This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json) Hash identifier: yA56DZ02UeEY+Tcoii3FMtHYNrC9X7i+u3IHf87+s4U= Subject key identifier: 06:5B:90:CA:85:55:62:6E:30:0A:4C:8A:72:50:F3:0B:8D:D8:93:F9 Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb Certificate serial: 019BF7D23F3627C302FBB392DEC5518EBC8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft Manifest number: 0903 Signing time: Mon 26 Jan 2026 01:01:49 +0000 Manifest this update: Mon 26 Jan 2026 01:01:49 +0000 Manifest next update: Tue 27 Jan 2026 01:01:49 +0000 Files and hashes: 1: AYUN6ILq1JnFNEGuiy9hczdbqfk.asa (hash: bnGV0TOXh2rgHledmfvQi6p7Cgl6Yx1IR8kXhvgGxxg=) 2: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: JejtfJmue9QP4Z1NIjlRzYWX8pYFFtpwfC3ExxphQno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:3f:36:27:c3:02:fb:b3:92:de:c5:51:8e:bc:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb Validity Not Before: Jan 26 01:01:49 2026 GMT Not After : Jan 27 01:01:49 2026 GMT Subject: CN=065b90ca8555626e300a4c8a7250f30b8dd893f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3e:52:48:82:16:80:76:27:db:1d:e5:40:8c: 4b:86:a3:cc:6e:4e:50:5b:7a:40:ed:b4:80:eb:54: 66:6e:3c:40:f7:4f:01:92:27:47:99:72:f5:02:80: 22:8e:9c:a2:00:f8:69:25:2e:b6:6a:0b:e9:90:06: 3e:2b:4f:27:81:4f:11:e8:88:0e:0f:58:1f:cc:c0: 2a:1c:c8:57:69:86:65:93:a9:9e:f6:1f:b4:b5:8b: 6f:50:6c:01:9f:2c:62:3d:5d:34:e0:f2:7b:e0:14: 5b:18:c8:54:e1:a6:f8:c8:f5:73:0a:a6:a5:66:e3: 0b:4a:f2:ee:94:04:bd:90:c0:21:6f:61:96:19:6e: 8f:d6:61:ed:a8:ff:9b:5e:1a:0d:8f:e1:98:90:f7: c5:53:9b:45:87:2e:d2:5b:20:90:f3:86:da:d2:62: ee:aa:e4:0f:9e:90:48:5e:bd:bd:76:76:90:73:d0: 3a:8c:b3:79:cb:d9:05:18:1a:87:b8:8b:ee:b5:49: ba:7a:9d:d5:ef:9e:9f:aa:b4:f5:3f:00:b2:e2:90: 1b:8f:3c:1d:42:c3:3a:f7:28:9d:04:d2:5a:07:7b: 7c:fb:26:38:3b:4a:58:fb:38:f3:a1:ae:20:ed:8b: 60:a5:6e:77:d1:25:c9:eb:d7:1e:f2:2b:bc:11:8d: 36:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5B:90:CA:85:55:62:6E:30:0A:4C:8A:72:50:F3:0B:8D:D8:93:F9 X509v3 Authority Key Identifier: keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:01:6d:80:58:9d:a0:4e:25:53:c2:6d:16:55:72:63:c0:3d: 75:98:f4:e9:e7:49:9c:0e:16:6c:3a:2c:86:f6:d9:81:1b:1a: 01:e2:aa:44:80:7d:ab:51:90:f7:d2:f7:43:4a:5b:dc:85:0a: 58:ee:8c:05:08:95:58:dc:bb:f6:24:8f:ff:2c:4c:cc:90:d3: 10:ad:1a:a4:82:59:8b:06:32:b4:d6:7b:9c:dd:28:02:8a:0d: 97:15:c5:81:63:ad:46:86:28:7f:d6:f0:e3:a7:9c:e1:3d:1a: 18:19:80:ae:76:51:b7:37:b3:8c:e0:a6:bf:2e:87:cc:79:07: 61:63:f8:df:e4:66:04:cd:ce:d8:99:ed:88:c8:47:4f:23:cf: 63:c5:85:b0:3a:77:7c:e9:03:ca:8f:83:6a:95:5f:37:1a:cb: a7:9f:85:d0:ef:ff:49:6c:7c:e1:f3:66:32:99:22:56:6e:14: b7:23:03:17:67:4b:14:07:b0:01:12:c5:84:1e:c9:b9:c2:90: cc:31:ab:b7:1e:18:2d:8e:71:46:24:3d:c2:a9:41:a6:ec:8f: c6:44:d5:eb:61:e2:a7:46:f5:1f:35:92:63:f7:86:ca:a1:bb: 44:5f:5c:c2:31:1a:ce:49:96:3d:c8:ad:5a:6a:5b:d9:fa:f0: 18:6f:0a:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30j82J8MC+7OS3sVRjryLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjN2IxODM0NWEzOTM0MWE3MjYyNzc1MTMwOGMxY2UwMmY0 NmEwYmIwHhcNMjYwMTI2MDEwMTQ5WhcNMjYwMTI3MDEwMTQ5WjAzMTEwLwYDVQQD EygwNjViOTBjYTg1NTU2MjZlMzAwYTRjOGE3MjUwZjMwYjhkZDg5M2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D5SSIIWgHYn2x3lQIxLhqPMbk5Q W3pA7bSA61RmbjxA908BkidHmXL1AoAijpyiAPhpJS62agvpkAY+K08ngU8R6IgO D1gfzMAqHMhXaYZlk6me9h+0tYtvUGwBnyxiPV004PJ74BRbGMhU4ab4yPVzCqal ZuMLSvLulAS9kMAhb2GWGW6P1mHtqP+bXhoNj+GYkPfFU5tFhy7SWyCQ84ba0mLu quQPnpBIXr29dnaQc9A6jLN5y9kFGBqHuIvutUm6ep3V756fqrT1PwCy4pAbjzwd QsM69yidBNJaB3t8+yY4O0pY+zjzoa4g7YtgpW530SXJ69ce8iu8EY02OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZbkMqFVWJuMApMinJQ8wuN2JP5MB8GA1UdIwQY MBaAFIx7GDRaOTQacmJ3UTCMHOAvRqC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mZjRmMTItNTI5MC00MzJkLWIxZGIt NTNjYTBkNjVkZDVlLzEvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mZjRmMTItNTI5MC00MzJkLWIxZGItNTNjYTBkNjVkZDVl LzEvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwFtgFid oE4lU8JtFlVyY8A9dZj06edJnA4WbDoshvbZgRsaAeKqRIB9q1GQ99L3Q0pb3IUK WO6MBQiVWNy79iSP/yxMzJDTEK0apIJZiwYytNZ7nN0oAooNlxXFgWOtRoYof9bw 46ec4T0aGBmArnZRtzezjOCmvy6HzHkHYWP43+RmBM3O2JntiMhHTyPPY8WFsDp3 fOkDyo+DapVfNxrLp5+F0O//SWx84fNmMpkiVm4UtyMDF2dLFAewARLFhB7JucKQ zDGrtx4YLY5xRiQ9wqlBpuyPxkTV62Hip0b1HzWSY/eGyqG7RF9cwjEazkmWPcit Wmpb2frwGG8Kqg== -----END CERTIFICATE-----Generated at Mon Jan 26 06:36:43 2026 by rpki-client