This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft File: jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json) Hash identifier: xT6RLptPP//bZaRCxOtR6kqjUgpI+0Qju7lwvGD5zwY= Subject key identifier: E6:4B:66:B6:A3:BD:F5:81:3D:2D:56:35:F8:33:6C:BE:70:A5:C4:36 Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93 Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693 Certificate serial: 019BF808A8361DFC039078CF367CD83F9387 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft Manifest number: 10A9 Signing time: Mon 26 Jan 2026 02:01:15 +0000 Manifest this update: Mon 26 Jan 2026 02:01:15 +0000 Manifest next update: Tue 27 Jan 2026 02:01:15 +0000 Files and hashes: 1: CmJCWvc-L5n6ETqB_Y9EebfTgVc.roa (hash: o2Udx+b7zpQWtPDTqUJxGNdjl7Wv2+AvE2gIsIBVVkU=) 2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: PN1RhSCTni8jwmuXgONc33WjV3tjW4w3hqGRB8CQhKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:a8:36:1d:fc:03:90:78:cf:36:7c:d8:3f:93:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693 Validity Not Before: Jan 26 02:01:15 2026 GMT Not After : Jan 27 02:01:15 2026 GMT Subject: CN=e64b66b6a3bdf5813d2d5635f8336cbe70a5c436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:49:46:d2:19:c4:9f:dc:02:ee:c8:af:a7:1c: 71:02:fc:17:32:bf:b1:58:79:8f:8b:1c:5e:2c:ba: 92:bb:b7:1e:b7:0f:af:a9:e9:69:58:e3:f7:94:ff: 88:49:13:3e:5f:64:02:f8:4c:03:8d:74:99:30:08: 18:64:bf:3d:72:73:d0:f5:b8:b3:05:20:63:c7:47: 94:6b:0e:94:c4:d0:8d:d2:69:b6:60:a2:89:d8:d3: a0:46:c8:a5:b5:c2:5b:f7:6d:6a:3f:45:1c:8c:f4: ce:86:13:8b:ce:5c:2c:9e:83:15:58:e0:f8:71:2d: 9b:a9:64:ad:64:7a:0d:50:50:9d:07:9e:12:ec:14: 50:ed:4c:dc:00:d9:1a:4f:bc:a9:72:b8:bb:e6:27: 14:2f:30:e1:06:e2:19:2c:6c:16:51:b3:d7:8a:f5: 5b:12:36:d4:bb:ec:19:41:06:39:83:d3:25:d1:79: a6:d0:42:9f:0d:86:1a:e2:80:37:96:53:9d:1a:fb: 17:76:1b:75:14:84:ed:de:c0:b6:3d:0a:06:6e:d0: 69:60:b7:6e:49:8f:d8:0d:aa:3d:25:06:12:e6:2c: 32:52:1d:b0:ba:e2:b9:b4:e2:ae:9d:e8:a7:5c:16: b7:61:46:f7:82:df:85:6e:0e:c0:7f:56:c7:5d:20: a2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4B:66:B6:A3:BD:F5:81:3D:2D:56:35:F8:33:6C:BE:70:A5:C4:36 X509v3 Authority Key Identifier: keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f8:6f:cc:68:7d:26:6b:6b:ba:c3:32:00:29:5e:96:01:79: 3f:c0:9f:47:df:11:bc:a1:1e:6a:75:a1:0a:ae:cd:9e:3d:d6: 9d:38:41:02:27:37:fb:43:1d:19:7d:e8:0e:40:57:72:9d:aa: c3:74:f4:95:a0:64:aa:6a:34:97:a7:6a:eb:a2:f6:58:c0:dc: 37:e5:c0:3d:e4:b8:30:2e:5e:2a:12:1f:e8:dd:6b:d9:be:da: 34:4b:7a:7b:12:03:73:65:93:9a:0d:45:44:ef:03:4c:ce:f6: 8d:1a:be:14:40:02:6b:cf:52:94:45:61:78:63:97:be:aa:bc: 37:fd:9e:c2:5d:c8:96:73:ed:70:21:eb:a3:67:51:c9:67:b8: fe:db:ad:c6:f0:ef:09:6c:33:c5:0f:03:31:22:60:7a:3c:4e: 9a:7c:02:8f:b2:9f:9d:07:3a:a4:91:e1:10:5a:b2:19:c7:fc: 0e:fc:4c:56:3d:ec:03:e9:90:dd:74:4e:80:12:9c:0d:2e:d9: fd:27:39:08:52:7b:9a:f6:1e:2e:6d:be:69:c2:62:0a:e8:97: fd:37:af:be:8d:95:a7:88:86:41:0a:e7:1c:bd:bd:62:40:10: c8:32:7c:14:bf:ff:b2:83:95:6f:8c:8f:2b:95:9a:c0:b9:b6: 73:95:eb:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CKg2HfwDkHjPNnzYP5OHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWE0ODcyMWZmNDNiMTgwNTdlZjQxNzRhOWQzOTZhOTgx YzY2OTMwHhcNMjYwMTI2MDIwMTE1WhcNMjYwMTI3MDIwMTE1WjAzMTEwLwYDVQQD EyhlNjRiNjZiNmEzYmRmNTgxM2QyZDU2MzVmODMzNmNiZTcwYTVjNDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtElG0hnEn9wC7sivpxxxAvwXMr+x WHmPixxeLLqSu7cetw+vqelpWOP3lP+ISRM+X2QC+EwDjXSZMAgYZL89cnPQ9biz BSBjx0eUaw6UxNCN0mm2YKKJ2NOgRsiltcJb921qP0UcjPTOhhOLzlwsnoMVWOD4 cS2bqWStZHoNUFCdB54S7BRQ7UzcANkaT7ypcri75icULzDhBuIZLGwWUbPXivVb EjbUu+wZQQY5g9Ml0Xmm0EKfDYYa4oA3llOdGvsXdht1FITt3sC2PQoGbtBpYLdu SY/YDao9JQYS5iwyUh2wuuK5tOKuneinXBa3YUb3gt+Fbg7Af1bHXSCi2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZLZrajvfWBPS1WNfgzbL5wpcQ2MB8GA1UdIwQY MBaAFI4aSHIf9DsYBX70F0qdOWqYHGaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMt Y2U0ZTMxY2UxNTE4LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMtY2U0ZTMxY2UxNTE4 LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfhvzGh9 JmtrusMyAClelgF5P8CfR98RvKEeanWhCq7Nnj3WnThBAic3+0MdGX3oDkBXcp2q w3T0laBkqmo0l6dq66L2WMDcN+XAPeS4MC5eKhIf6N1r2b7aNEt6exIDc2WTmg1F RO8DTM72jRq+FEACa89SlEVheGOXvqq8N/2ewl3IlnPtcCHro2dRyWe4/tutxvDv CWwzxQ8DMSJgejxOmnwCj7KfnQc6pJHhEFqyGcf8DvxMVj3sA+mQ3XROgBKcDS7Z /Sc5CFJ7mvYeLm2+acJiCuiX/Tevvo2Vp4iGQQrnHL29YkAQyDJ8FL//soOVb4yP K5WawLm2c5Xr3w== -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:47 2026 by rpki-client