This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json) Hash identifier: rvYo5DjtQglw2xt+w6NJ4uj0URUnzvJtok4ZMYykNhY= Subject key identifier: FF:81:61:4C:E2:BE:7E:43:C6:BD:CA:5B:EF:0A:CB:75:DD:3C:77:B1 Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48 Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548 Certificate serial: 019BF91BEAA8C7558D12CD5C1A153248203C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft Manifest number: 12DE Signing time: Mon 26 Jan 2026 07:01:54 +0000 Manifest this update: Mon 26 Jan 2026 07:01:54 +0000 Manifest next update: Tue 27 Jan 2026 07:01:54 +0000 Files and hashes: 1: L24zb2GPwHD-aPGno9VtNYT_9UA.roa (hash: TV8bwr8KXxyIpZ3hz+LfUH4wszhJw0hokfRXNpqsBSk=) 2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: mLtoqk/QbDVM9jz2BLPN6K46i38kNznlHIkUfMM7niU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:ea:a8:c7:55:8d:12:cd:5c:1a:15:32:48:20:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548 Validity Not Before: Jan 26 07:01:54 2026 GMT Not After : Jan 27 07:01:54 2026 GMT Subject: CN=ff81614ce2be7e43c6bdca5bef0acb75dd3c77b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e9:1a:e6:31:1a:7f:6b:fd:d3:07:0c:04:c2: ce:fe:1a:d4:9c:08:1f:b5:d9:1e:c0:df:6a:ff:9f: 5a:b1:1a:87:86:fb:1c:4f:b1:58:21:bb:17:c4:bc: ed:25:13:ba:9f:a2:0e:60:77:ba:00:70:ab:c2:ea: 02:1c:8a:86:15:16:f0:31:5d:07:f7:8f:c3:4b:5f: 3b:b0:f6:4f:c3:63:55:8d:9f:a3:4f:7b:e4:8e:65: f4:f1:02:67:a8:3f:84:c7:e9:82:eb:30:29:cf:72: 0b:9d:88:a3:ba:a4:bc:e7:9e:9d:23:18:6e:f3:a1: 4b:eb:fe:9c:63:af:68:07:b9:76:f6:ae:e8:31:a5: f8:e5:75:e0:a7:4b:f7:ce:8c:b0:f9:79:44:34:07: f7:11:86:45:4c:f1:36:1e:26:ff:a5:39:d3:29:8f: 7b:aa:c9:15:1f:90:2e:c9:22:38:9a:2b:99:7a:11: f8:82:53:9d:12:49:3f:7d:37:7d:ab:3a:43:45:94: 65:d9:42:09:51:53:8f:95:cd:77:6b:09:c1:4d:5e: dc:40:59:d5:ca:bb:dd:4a:c2:7f:a7:85:a5:75:4c: 32:91:3e:f7:ef:c2:c7:d6:0c:8f:56:15:4c:aa:b7: 81:57:f0:36:68:b5:88:ca:d9:2f:a1:cb:7b:84:d1: bc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:81:61:4C:E2:BE:7E:43:C6:BD:CA:5B:EF:0A:CB:75:DD:3C:77:B1 X509v3 Authority Key Identifier: keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:0d:b3:96:22:65:92:20:dd:fd:c6:f9:41:be:60:ab:6b:74: c8:1e:e5:b4:0a:96:c2:64:9b:06:b9:6c:55:90:95:57:1a:90: d0:06:6f:69:21:88:e8:34:4a:1b:61:cd:81:48:b0:0b:e3:a4: b2:4c:78:49:51:92:00:27:7d:01:d7:84:63:3d:88:ca:a1:af: 0e:b1:ae:81:8b:b0:73:04:87:be:4b:9d:78:44:5e:b0:46:98: 61:6a:8c:16:a0:b7:12:a1:10:2c:2d:c6:fa:1a:45:a7:4f:8f: 4e:91:d1:85:1b:68:20:26:82:78:1d:93:73:3d:4c:5c:f0:d2: d4:b9:0d:5e:d3:c5:a4:d0:09:a6:2c:9a:4b:d6:5d:e5:bd:79: 44:0d:8d:bd:16:ee:f6:07:d2:65:a4:29:cf:03:2b:ba:a0:8a: 6b:2f:3e:b9:09:89:f4:c7:a7:03:74:e7:94:78:ec:cf:47:05: a4:c5:bf:ed:2e:30:f2:cf:2f:8c:5e:87:07:00:dc:ca:c2:db: cf:b4:b6:96:7a:b8:d3:c6:0c:a8:9a:ec:8f:08:59:ac:d2:fe: d4:98:fd:21:fb:1f:02:87:69:3a:bd:f7:7c:1c:02:7a:5b:b6: 5f:9e:10:37:2c:69:e1:33:0a:85:62:81:65:d3:e8:a7:2b:ac: 28:3a:6e:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G+qox1WNEs1cGhUySCA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlODk1ZjFlMjcwYzYzNWVjNjFkZjlhOTdmYzBmNjY4YzBh OGY1NDgwHhcNMjYwMTI2MDcwMTU0WhcNMjYwMTI3MDcwMTU0WjAzMTEwLwYDVQQD EyhmZjgxNjE0Y2UyYmU3ZTQzYzZiZGNhNWJlZjBhY2I3NWRkM2M3N2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuka5jEaf2v90wcMBMLO/hrUnAgf tdkewN9q/59asRqHhvscT7FYIbsXxLztJRO6n6IOYHe6AHCrwuoCHIqGFRbwMV0H 94/DS187sPZPw2NVjZ+jT3vkjmX08QJnqD+Ex+mC6zApz3ILnYijuqS8556dIxhu 86FL6/6cY69oB7l29q7oMaX45XXgp0v3zoyw+XlENAf3EYZFTPE2Hib/pTnTKY97 qskVH5AuySI4miuZehH4glOdEkk/fTd9qzpDRZRl2UIJUVOPlc13awnBTV7cQFnV yrvdSsJ/p4WldUwykT7378LH1gyPVhVMqreBV/A2aLWIytkvoct7hNG8swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+BYUzivn5Dxr3KW+8Ky3XdPHexMB8GA1UdIwQY MBaAFI6JXx4nDGNexh35qX/A9mjAqPVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam9sZkhpY01ZMTdHSGZtcGY4RDJhTUNvOVVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iYzUzZDItOTEzNy00Nzk5LTllNDEt ZTY5YTAxNzQ4NWZiLzEvam9sZkhpY01ZMTdHSGZtcGY4RDJhTUNvOVVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9iYzUzZDItOTEzNy00Nzk5LTllNDEtZTY5YTAxNzQ4NWZi LzEvam9sZkhpY01ZMTdHSGZtcGY4RDJhTUNvOVVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPw2zliJl kiDd/cb5Qb5gq2t0yB7ltAqWwmSbBrlsVZCVVxqQ0AZvaSGI6DRKG2HNgUiwC+Ok skx4SVGSACd9AdeEYz2IyqGvDrGugYuwcwSHvkudeEResEaYYWqMFqC3EqEQLC3G +hpFp0+PTpHRhRtoICaCeB2Tcz1MXPDS1LkNXtPFpNAJpiyaS9Zd5b15RA2NvRbu 9gfSZaQpzwMruqCKay8+uQmJ9MenA3TnlHjsz0cFpMW/7S4w8s8vjF6HBwDcysLb z7S2lnq408YMqJrsjwhZrNL+1Jj9IfsfAodpOr33fBwCelu2X54QNyxp4TMKhWKB ZdPopyusKDpuIg== -----END CERTIFICATE-----Generated at Mon Jan 26 13:35:11 2026 by rpki-client