This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft File: JHQF6c7jnXGUTV4xSesBth-a2x4.mft (raw, json) Hash identifier: gxHDspeqDf85Ih6kzMNUYzGlaIaFAkOGjnDdaVzbfhQ= Subject key identifier: 10:3B:20:CC:2A:4B:E7:CA:3A:0C:E7:BF:1C:27:53:F2:51:65:A7:A5 Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e Certificate serial: 019BF5756A9A0F2D7C4380FC5973BCF2742E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft Manifest number: 12F5 Signing time: Sun 25 Jan 2026 14:01:11 +0000 Manifest this update: Sun 25 Jan 2026 14:01:11 +0000 Manifest next update: Mon 26 Jan 2026 14:01:11 +0000 Files and hashes: 1: JHQF6c7jnXGUTV4xSesBth-a2x4.crl (hash: K0HGQwsBHO0YxWDLAwthNiLigjPk3zPAEWrlshvPhT8=) 2: KcpUiO15Gzl7SK9StcczqpLi6i8.roa (hash: f2aZlDMUXJuXCv7f53eZgqwP78Uz9MlJPKMYPdzciVo=) 3: RHgj94s99yLOm8jJoah9M5rvNqY.roa (hash: 52fyve7WO1cwkbeeuvWUD7YyeD7rPI2Crc9dE/2ZkFM=) 4: Udssf4fE6o3QNpke-lB6PuA0Uo0.roa (hash: 9+ibfBkyOgj0hAuo5PA4Hd1TB41jIqZV5+PkUc7DWA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:6a:9a:0f:2d:7c:43:80:fc:59:73:bc:f2:74:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e Validity Not Before: Jan 25 14:01:11 2026 GMT Not After : Jan 26 14:01:11 2026 GMT Subject: CN=103b20cc2a4be7ca3a0ce7bf1c2753f25165a7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:2d:bb:8b:4c:51:8c:d9:36:bd:11:60:c9: 65:75:95:3d:e9:0e:b3:ba:65:86:a5:62:d8:93:70: a0:0e:16:b9:3d:5a:a2:e9:e6:0b:cc:2e:ec:25:de: f8:94:59:cf:7f:7d:f1:ba:6c:c4:f7:55:e3:b3:7f: 17:0f:98:ff:86:5c:ca:71:18:97:40:f0:60:19:42: 0a:83:d4:cb:df:fd:50:65:79:aa:17:62:25:cb:82: 8f:60:a4:f7:40:81:10:c7:be:94:f0:55:61:5d:d8: 1e:63:63:d9:92:3c:e2:22:96:e6:94:b8:a3:56:f7: e3:e9:37:31:82:e4:f6:87:f6:70:3d:53:dc:00:9c: 2d:da:79:f5:1e:bc:fe:be:ef:f3:ca:77:a4:63:e8: 48:49:21:3d:a0:56:09:d3:6e:b5:f8:14:97:1f:6b: b2:2a:34:cc:5d:a5:eb:e4:85:f9:04:fe:4b:8a:66: b0:7d:9a:dd:2c:3b:49:f2:37:96:0e:02:85:b3:24: eb:62:5f:3f:0d:2e:ae:b0:ff:54:1c:19:80:67:d9: 07:f5:bd:9f:65:98:b7:79:da:82:55:79:70:94:32: 96:41:75:48:35:d1:7d:45:86:d6:e9:33:86:29:f6: ba:bf:24:a0:6c:08:98:be:1c:74:99:8d:ef:53:8d: 71:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3B:20:CC:2A:4B:E7:CA:3A:0C:E7:BF:1C:27:53:F2:51:65:A7:A5 X509v3 Authority Key Identifier: keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:43:d9:6e:13:eb:b6:cb:21:b0:ce:8f:83:5c:6e:4d:04:2f: b5:77:a9:d6:0d:44:94:04:5d:27:7c:e1:c3:98:83:f5:f0:e9: ee:9e:37:ef:57:ce:90:db:8b:aa:6e:f3:a3:af:cc:dd:1c:0b: 5c:ce:68:6a:5d:0b:19:13:d1:0b:a8:85:9c:51:ab:ce:f8:e1: 1b:8c:85:28:21:c3:75:1c:15:57:67:b3:7f:18:8c:4c:fd:25: 81:63:6e:72:41:f5:b5:ab:dd:ee:11:fd:0c:6c:11:10:79:35: 2b:b8:12:33:84:32:9d:d0:2b:92:dc:3a:9e:00:cd:a0:a0:d5: 45:80:8c:bc:80:e0:ea:97:05:a0:c9:58:c1:f0:72:9f:58:a5: b3:c6:4c:59:3d:7a:68:a8:28:8a:4a:44:2b:b1:f6:e1:99:d5: c1:6e:18:ce:28:4f:f2:44:bd:64:92:b1:6d:84:97:a8:3d:d9: e0:2e:b3:af:29:01:34:2f:ba:35:35:cd:48:ed:41:3a:22:92: 25:5d:16:7b:6d:40:3c:12:2b:f9:57:4c:59:b3:1c:ff:26:52: 5e:03:30:6f:47:20:78:27:b5:3e:65:08:5c:b9:62:a1:e8:14: 6e:d5:20:e7:d6:83:70:e4:d3:9a:82:73:a4:25:e1:23:9f:e1: 3b:68:63:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dWqaDy18Q4D8WXO88nQuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NzQwNWU5Y2VlMzlkNzE5NDRkNWUzMTQ5ZWIwMWI2MWY5 YWRiMWUwHhcNMjYwMTI1MTQwMTExWhcNMjYwMTI2MTQwMTExWjAzMTEwLwYDVQQD EygxMDNiMjBjYzJhNGJlN2NhM2EwY2U3YmYxYzI3NTNmMjUxNjVhN2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptQtu4tMUYzZNr0RYMlldZU96Q6z umWGpWLYk3CgDha5PVqi6eYLzC7sJd74lFnPf33xumzE91Xjs38XD5j/hlzKcRiX QPBgGUIKg9TL3/1QZXmqF2Ily4KPYKT3QIEQx76U8FVhXdgeY2PZkjziIpbmlLij Vvfj6TcxguT2h/ZwPVPcAJwt2nn1Hrz+vu/zynekY+hISSE9oFYJ0261+BSXH2uy KjTMXaXr5IX5BP5LimawfZrdLDtJ8jeWDgKFsyTrYl8/DS6usP9UHBmAZ9kH9b2f ZZi3edqCVXlwlDKWQXVINdF9RYbW6TOGKfa6vySgbAiYvhx0mY3vU41xHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBA7IMwqS+fKOgznvxwnU/JRZaelMB8GA1UdIwQY MBaAFCR0BenO451xlE1eMUnrAbYfmtseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkhRRjZjN2puWEdVVFY0eFNlc0J0aC1hMng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85YTNhOTgtZDY3MC00MzQzLTkyMDYt NDdiYmFjYTA3OGZmLzEvSkhRRjZjN2puWEdVVFY0eFNlc0J0aC1hMng0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC85YTNhOTgtZDY3MC00MzQzLTkyMDYtNDdiYmFjYTA3OGZm LzEvSkhRRjZjN2puWEdVVFY0eFNlc0J0aC1hMng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0PZbhPr tsshsM6Pg1xuTQQvtXep1g1ElARdJ3zhw5iD9fDp7p4371fOkNuLqm7zo6/M3RwL XM5oal0LGRPRC6iFnFGrzvjhG4yFKCHDdRwVV2ezfxiMTP0lgWNuckH1tavd7hH9 DGwREHk1K7gSM4QyndArktw6ngDNoKDVRYCMvIDg6pcFoMlYwfByn1ils8ZMWT16 aKgoikpEK7H24ZnVwW4YzihP8kS9ZJKxbYSXqD3Z4C6zrykBNC+6NTXNSO1BOiKS JV0We21APBIr+VdMWbMc/yZSXgMwb0cgeCe1PmUIXLlioegUbtUg59aDcOTTmoJz pCXhI5/hO2hjFg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:19:46 2026 by rpki-client