This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json) Hash identifier: AfsskdiOABKV1C4lHF0Kul9d6fH5bqbpjhOjRskCqU4= Subject key identifier: BA:5F:5A:7C:2D:71:F9:34:D7:F2:C9:09:53:58:3E:58:FB:29:D2:99 Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06 Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06 Certificate serial: 019BF951A56557BEAEADEDD9B1BF6C3C2812 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft Manifest number: 156D Signing time: Mon 26 Jan 2026 08:00:36 +0000 Manifest this update: Mon 26 Jan 2026 08:00:36 +0000 Manifest next update: Tue 27 Jan 2026 08:00:36 +0000 Files and hashes: 1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: fxZrYc56u90BKD+HxtQuNFcVb9BtZkriNF/QYm3QjrE=) 2: yA5b7maJfHU0NcBkIvFx-c8-I54.roa (hash: XFcePeHchpjbLRec04pqboXS3/LtfvbSEVpXlPE0ESo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:a5:65:57:be:ae:ad:ed:d9:b1:bf:6c:3c:28:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06 Validity Not Before: Jan 26 08:00:36 2026 GMT Not After : Jan 27 08:00:36 2026 GMT Subject: CN=ba5f5a7c2d71f934d7f2c90953583e58fb29d299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b4:b6:db:c7:ab:4c:ef:16:62:29:22:31:39: 37:3c:cd:76:2f:9b:f8:fb:41:60:75:f3:ed:28:fb: d4:ce:e0:d4:60:25:c6:05:39:6d:6b:48:10:f9:3f: 4a:2b:35:04:88:30:5a:36:a2:a0:38:10:2c:04:5b: 38:bb:56:c4:6b:84:af:d4:a1:68:b9:4e:0f:45:91: d4:48:f8:c1:25:f7:ae:90:7a:76:04:64:89:64:d3: 89:8c:a5:c3:cd:f1:e5:c6:ba:23:f8:6c:14:ff:9d: 67:ab:09:08:1d:71:00:39:d6:53:05:b3:25:f5:c9: d3:2a:20:10:57:de:44:65:5b:57:0f:ce:f0:25:ee: 06:87:2d:ca:70:40:70:bf:1b:69:b8:3e:6c:4b:92: be:b4:41:e2:c6:6d:81:93:37:e7:f0:9f:f4:cf:40: 53:58:3e:d4:95:eb:bd:21:0c:31:81:d9:11:0a:5a: 10:83:a7:0e:96:6e:c8:37:42:d8:10:e1:6f:e3:58: 26:91:b3:cb:83:3d:5e:ed:cf:27:4f:35:56:ec:97: 42:f4:5a:a7:dc:e5:ce:4f:24:3f:49:b6:b7:d9:05: 40:18:05:3f:d4:af:e4:31:c1:c4:f1:ed:a8:84:92: 57:4b:7f:a1:0d:83:31:72:fe:61:3b:56:85:24:fb: af:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5F:5A:7C:2D:71:F9:34:D7:F2:C9:09:53:58:3E:58:FB:29:D2:99 X509v3 Authority Key Identifier: keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c7:d7:3e:b7:55:31:67:ac:33:70:6d:f2:79:f5:d6:47:68: 5f:e1:8b:48:6c:74:39:0a:12:45:ac:ad:26:ce:de:94:34:d2: 81:dc:8e:06:fa:8a:b1:e4:8f:23:bd:84:dc:a3:e1:e9:f4:65: d4:ba:81:cd:41:a9:4d:c4:ce:02:b4:22:01:fb:d2:25:56:c1: ba:db:c7:9f:94:aa:69:ad:d8:73:2f:69:68:26:f3:58:5e:dc: 20:06:ed:f0:1f:af:15:b0:ae:c5:b3:dc:8c:80:f5:4a:04:8a: 8f:0e:37:3a:ea:06:c9:18:63:dc:76:3a:4e:47:9c:f8:f9:8c: 6f:3f:66:37:42:36:e7:ea:a2:a9:28:3a:0d:9a:be:d9:5e:f1: 92:86:80:f8:43:5c:25:d8:5f:4a:b9:91:9b:f9:16:e5:aa:be: ff:03:53:56:09:b6:3d:ba:89:c8:bd:60:76:f7:ec:68:0e:29: 89:cf:02:18:3c:a0:c5:fa:17:0e:69:b2:01:de:4c:2c:60:d7: e4:0f:58:48:86:75:96:d0:3b:c0:9d:fc:2c:59:c9:a6:a6:10: 11:0b:f5:98:30:c1:ef:4e:11:57:52:c8:d2:63:a0:42:7e:f9: 48:d8:c7:ba:8d:6f:8a:0d:6d:e2:41:f5:46:e2:13:da:64:fc: 55:03:52:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UaVlV76ure3Zsb9sPCgSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOTFmZThjNTQwYzQ0ZTIzNGY5YmM2NjhmOGEzYjE2NDdh Y2RiMDYwHhcNMjYwMTI2MDgwMDM2WhcNMjYwMTI3MDgwMDM2WjAzMTEwLwYDVQQD EyhiYTVmNWE3YzJkNzFmOTM0ZDdmMmM5MDk1MzU4M2U1OGZiMjlkMjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbS228erTO8WYikiMTk3PM12L5v4 +0FgdfPtKPvUzuDUYCXGBTlta0gQ+T9KKzUEiDBaNqKgOBAsBFs4u1bEa4Sv1KFo uU4PRZHUSPjBJfeukHp2BGSJZNOJjKXDzfHlxroj+GwU/51nqwkIHXEAOdZTBbMl 9cnTKiAQV95EZVtXD87wJe4Ghy3KcEBwvxtpuD5sS5K+tEHixm2Bkzfn8J/0z0BT WD7Uleu9IQwxgdkRCloQg6cOlm7IN0LYEOFv41gmkbPLgz1e7c8nTzVW7JdC9Fqn 3OXOTyQ/Sba32QVAGAU/1K/kMcHE8e2ohJJXS3+hDYMxcv5hO1aFJPuveQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpfWnwtcfk01/LJCVNYPlj7KdKZMB8GA1UdIwQY MBaAFNCR/oxUDETiNPm8Zo+KOxZHrNsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85YTNhYWMtMmE0Yy00Mzg3LWFlYTgt MDRlNmY1NzY0YzUyLzEvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS85YTNhYWMtMmE0Yy00Mzg3LWFlYTgtMDRlNmY1NzY0YzUy LzEvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsfXPrdV MWesM3Bt8nn11kdoX+GLSGx0OQoSRaytJs7elDTSgdyOBvqKseSPI72E3KPh6fRl 1LqBzUGpTcTOArQiAfvSJVbButvHn5Sqaa3Ycy9paCbzWF7cIAbt8B+vFbCuxbPc jID1SgSKjw43OuoGyRhj3HY6Tkec+PmMbz9mN0I25+qiqSg6DZq+2V7xkoaA+ENc JdhfSrmRm/kW5aq+/wNTVgm2PbqJyL1gdvfsaA4pic8CGDygxfoXDmmyAd5MLGDX 5A9YSIZ1ltA7wJ38LFnJpqYQEQv1mDDB704RV1LI0mOgQn75SNjHuo1vig1t4kH1 RuIT2mT8VQNSRA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:25:38 2026 by rpki-client