This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft File: JHQF6c7jnXGUTV4xSesBth-a2x4.mft (raw, json) Hash identifier: xUEdzGpzchcz8Mji7AUP/Ysl2oAsC1JbiVuAaJbQRI0= Subject key identifier: 9A:B6:89:E8:75:07:70:41:DE:36:C1:FC:B8:F1:F4:98:96:C0:B1:32 Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e Certificate serial: 019BF7639A1539706B356DB1887ED63A324F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft Manifest number: 12F6 Signing time: Sun 25 Jan 2026 23:00:58 +0000 Manifest this update: Sun 25 Jan 2026 23:00:58 +0000 Manifest next update: Mon 26 Jan 2026 23:00:58 +0000 Files and hashes: 1: JHQF6c7jnXGUTV4xSesBth-a2x4.crl (hash: d2rOdv44AB/Gv5//Dp88z0aZz+kIAQyFayZVSV/Wkx4=) 2: KcpUiO15Gzl7SK9StcczqpLi6i8.roa (hash: f2aZlDMUXJuXCv7f53eZgqwP78Uz9MlJPKMYPdzciVo=) 3: RHgj94s99yLOm8jJoah9M5rvNqY.roa (hash: 52fyve7WO1cwkbeeuvWUD7YyeD7rPI2Crc9dE/2ZkFM=) 4: Udssf4fE6o3QNpke-lB6PuA0Uo0.roa (hash: 9+ibfBkyOgj0hAuo5PA4Hd1TB41jIqZV5+PkUc7DWA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:9a:15:39:70:6b:35:6d:b1:88:7e:d6:3a:32:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e Validity Not Before: Jan 25 23:00:58 2026 GMT Not After : Jan 26 23:00:58 2026 GMT Subject: CN=9ab689e875077041de36c1fcb8f1f49896c0b132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c6:04:c8:08:ee:90:ea:cd:f6:f3:00:c9:23: 5e:ae:01:16:46:b9:37:95:0b:e2:f3:07:c2:62:4c: b5:3b:d8:f3:7d:d6:91:64:0c:7a:b0:7d:a9:f3:55: ef:d4:77:ed:5f:2c:86:67:ea:f1:bc:7c:53:29:70: ad:02:05:e2:6c:0b:a8:08:77:69:06:51:64:30:21: b4:0e:e8:1d:29:8f:4c:d6:4d:2f:6d:59:23:87:fd: 54:7a:c3:97:78:75:70:fc:c6:14:e9:f6:86:e4:42: 69:87:48:78:7a:dd:e7:1a:10:e0:e6:de:7f:ef:82: 56:a9:3e:8a:9c:c9:a8:50:cb:9d:04:6d:8c:d8:f9: ef:d1:96:44:d3:7b:51:e9:67:c6:9e:ba:23:6f:d4: 03:70:a1:0a:85:14:fd:f6:43:cc:7d:2f:2d:bd:27: 5f:4d:ee:47:60:d2:4d:16:60:c4:86:cb:eb:81:aa: c4:9b:7e:27:5d:09:c4:93:13:1a:b4:cd:6c:d2:be: 60:fe:58:7b:24:d0:b3:78:ac:e9:3e:e7:4c:3b:81: cd:ae:e3:b6:20:35:4b:db:c5:f1:fa:51:c1:a1:5d: e5:a9:48:79:ba:91:14:40:dc:48:5a:50:34:f4:ff: b4:9d:27:28:bc:6e:9f:53:8f:49:31:39:b3:44:77: f3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B6:89:E8:75:07:70:41:DE:36:C1:FC:B8:F1:F4:98:96:C0:B1:32 X509v3 Authority Key Identifier: keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:97:64:23:d3:17:33:d0:dc:c2:6b:eb:09:26:43:a0:e4:33: c5:2f:58:da:fc:48:4b:63:83:ad:3c:91:79:67:62:5c:b1:58: ec:97:2e:aa:2d:20:a0:af:f2:fd:ee:7a:4e:16:b0:08:d4:35: 40:33:f1:f7:49:9e:e1:76:55:27:44:dd:01:40:89:45:cc:fc: 59:16:f9:5e:7a:c0:99:d3:75:a3:d8:f8:83:25:08:d6:b5:82: 1d:7f:09:39:80:3d:9b:75:cb:c1:db:65:ec:5f:3a:6f:30:4c: 38:c9:53:12:9b:23:71:7a:84:ea:a0:ab:e3:02:56:70:27:2c: 5a:ac:e4:4e:8b:f8:d2:c1:a0:ce:9f:cb:8b:0b:c0:6e:1d:09: 45:1a:96:7c:48:d2:08:a1:ac:f8:01:cd:6e:9b:3c:7e:77:92: a9:b5:39:ec:ca:49:b4:ed:db:0e:3e:9b:4c:bc:1c:94:6e:44: 73:3b:84:c2:35:17:4c:0a:b9:cc:9d:db:d6:23:b5:bd:0e:b4: a4:e9:fb:aa:88:92:3b:4f:54:d7:0f:94:ad:d4:6e:f1:b2:4d: 47:c2:4c:e6:18:55:58:39:4f:77:a4:a1:cd:09:9d:71:a0:d6: fe:50:bf:70:13:cb:34:6c:74:58:f4:7c:10:b4:8d:03:9f:c0: f8:b9:58:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y5oVOXBrNW2xiH7WOjJPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NzQwNWU5Y2VlMzlkNzE5NDRkNWUzMTQ5ZWIwMWI2MWY5 YWRiMWUwHhcNMjYwMTI1MjMwMDU4WhcNMjYwMTI2MjMwMDU4WjAzMTEwLwYDVQQD Eyg5YWI2ODllODc1MDc3MDQxZGUzNmMxZmNiOGYxZjQ5ODk2YzBiMTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscYEyAjukOrN9vMAySNergEWRrk3 lQvi8wfCYky1O9jzfdaRZAx6sH2p81Xv1HftXyyGZ+rxvHxTKXCtAgXibAuoCHdp BlFkMCG0DugdKY9M1k0vbVkjh/1UesOXeHVw/MYU6faG5EJph0h4et3nGhDg5t5/ 74JWqT6KnMmoUMudBG2M2Pnv0ZZE03tR6WfGnrojb9QDcKEKhRT99kPMfS8tvSdf Te5HYNJNFmDEhsvrgarEm34nXQnEkxMatM1s0r5g/lh7JNCzeKzpPudMO4HNruO2 IDVL28Xx+lHBoV3lqUh5upEUQNxIWlA09P+0nScovG6fU49JMTmzRHfzEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJq2ieh1B3BB3jbB/Ljx9JiWwLEyMB8GA1UdIwQY MBaAFCR0BenO451xlE1eMUnrAbYfmtseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkhRRjZjN2puWEdVVFY0eFNlc0J0aC1hMng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85YTNhOTgtZDY3MC00MzQzLTkyMDYt NDdiYmFjYTA3OGZmLzEvSkhRRjZjN2puWEdVVFY0eFNlc0J0aC1hMng0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC85YTNhOTgtZDY3MC00MzQzLTkyMDYtNDdiYmFjYTA3OGZm LzEvSkhRRjZjN2puWEdVVFY0eFNlc0J0aC1hMng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA35dkI9MX M9DcwmvrCSZDoOQzxS9Y2vxIS2ODrTyReWdiXLFY7Jcuqi0goK/y/e56ThawCNQ1 QDPx90me4XZVJ0TdAUCJRcz8WRb5XnrAmdN1o9j4gyUI1rWCHX8JOYA9m3XLwdtl 7F86bzBMOMlTEpsjcXqE6qCr4wJWcCcsWqzkTov40sGgzp/LiwvAbh0JRRqWfEjS CKGs+AHNbps8fneSqbU57MpJtO3bDj6bTLwclG5EczuEwjUXTAq5zJ3b1iO1vQ60 pOn7qoiSO09U1w+UrdRu8bJNR8JM5hhVWDlPd6ShzQmdcaDW/lC/cBPLNGx0WPR8 ELSNA5/A+LlYPA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:26:54 2026 by rpki-client