This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json) Hash identifier: cYsW5tq3GqgbPNbNMO2Am3Gsn4reh9RrUH1Goi4lL3k= Subject key identifier: 41:6E:4A:F7:AB:D6:3C:33:F3:F5:0B:E3:CF:07:06:DE:AA:06:E4:9C Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb Certificate serial: 019BD8EC10EEF7C307080BF9E3B21AB133F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft Manifest number: 08F3 Signing time: Tue 20 Jan 2026 01:01:48 +0000 Manifest this update: Tue 20 Jan 2026 01:01:48 +0000 Manifest next update: Wed 21 Jan 2026 01:01:48 +0000 Files and hashes: 1: AYUN6ILq1JnFNEGuiy9hczdbqfk.asa (hash: bnGV0TOXh2rgHledmfvQi6p7Cgl6Yx1IR8kXhvgGxxg=) 2: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: 0GI5Cl3WoLuSKaa+uFGGuB5HBT1PAKrqU5JybWJb4hY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 01:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:ec:10:ee:f7:c3:07:08:0b:f9:e3:b2:1a:b1:33:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb Validity Not Before: Jan 20 01:01:48 2026 GMT Not After : Jan 21 01:01:48 2026 GMT Subject: CN=416e4af7abd63c33f3f50be3cf0706deaa06e49c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:2e:dc:9e:da:fd:69:42:d7:5e:c4:a1:bb: 9c:c7:8a:be:a1:e3:9d:c6:fb:e5:7c:3c:64:d6:bb: 02:10:d4:1b:b3:b5:00:d1:96:ca:92:0f:bb:d4:47: 4d:c5:66:7f:4f:f6:ca:28:66:b9:90:b3:dd:47:21: bc:b0:12:d5:ca:48:95:50:4e:d4:4f:13:f9:80:fa: 10:03:e1:af:c4:9e:67:49:03:aa:a7:33:68:f5:1c: e2:3f:ed:ec:2b:0c:bd:03:4c:70:01:37:10:b1:42: c3:06:27:45:10:b6:34:10:3d:9b:36:a8:0d:4d:a2: 34:a7:25:7f:2d:5f:71:ff:17:1d:c4:0d:28:ed:40: 46:ce:a9:ac:cc:44:95:84:7b:08:f8:c4:dd:3b:c3: 4c:84:a6:c4:f5:45:24:3f:5f:08:2e:85:0a:59:7e: e7:63:dd:e5:81:70:94:e9:65:a1:12:54:d3:29:9a: 60:6b:2a:dd:19:46:2c:91:0d:b2:94:ba:25:62:7b: 9b:90:e2:2b:4a:37:d7:d8:1d:25:89:3d:68:3f:1e: bd:f2:24:52:29:6d:23:32:6b:84:38:2e:78:ec:3f: 13:05:39:2c:36:9b:ff:4c:07:a2:09:75:14:c3:d5: 82:7c:c2:ff:b5:d1:44:5c:9b:78:c6:1d:32:5e:c4: 90:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6E:4A:F7:AB:D6:3C:33:F3:F5:0B:E3:CF:07:06:DE:AA:06:E4:9C X509v3 Authority Key Identifier: keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:85:84:6d:8a:66:3f:24:c6:47:bd:d8:e9:52:2e:e1:24:7c: 22:ba:2d:fe:5c:13:c7:3f:f8:08:1c:96:62:9c:e3:7a:df:2e: 2c:a8:36:d6:18:e3:3f:95:28:50:ea:41:5e:34:b2:a4:a9:56: ab:db:24:02:07:c8:30:2b:fe:25:23:06:87:9c:22:4f:2e:bf: 43:52:4b:4e:67:e5:34:9d:e3:a6:22:e6:62:6e:ed:f7:38:ce: 30:00:8f:df:d6:4f:e3:7f:c6:ff:9e:09:73:0d:d5:1a:ab:47: ed:b7:67:c3:a9:9a:a3:7c:e1:a4:e7:ff:58:c2:ba:61:28:a5: f3:47:18:d7:f1:81:59:f6:e8:62:50:c3:7c:7e:10:fd:4f:c3: 01:8a:32:d3:5a:f7:d3:97:13:7c:b3:1b:b3:eb:db:4e:4c:8b: 96:45:31:6b:fb:dd:6b:13:34:83:ae:7a:01:c1:8e:67:2e:3d: 1c:b4:4d:19:fd:30:aa:32:0d:04:34:a4:89:23:34:9f:e2:5e: e6:51:1f:1d:b6:20:8d:7d:7f:a2:67:64:5a:01:35:e3:59:4c: 9c:37:a3:33:b4:25:11:e8:8d:81:26:ea:32:43:fa:12:15:6c: 2b:c7:49:2b:9e:96:f4:e1:67:29:34:5a:92:00:55:8d:2c:88: 39:46:37:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvY7BDu98MHCAv547IasTP4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjN2IxODM0NWEzOTM0MWE3MjYyNzc1MTMwOGMxY2UwMmY0 NmEwYmIwHhcNMjYwMTIwMDEwMTQ4WhcNMjYwMTIxMDEwMTQ4WjAzMTEwLwYDVQQD Eyg0MTZlNGFmN2FiZDYzYzMzZjNmNTBiZTNjZjA3MDZkZWFhMDZlNDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNou3J7a/WlC117Eobucx4q+oeOd xvvlfDxk1rsCENQbs7UA0ZbKkg+71EdNxWZ/T/bKKGa5kLPdRyG8sBLVykiVUE7U TxP5gPoQA+GvxJ5nSQOqpzNo9RziP+3sKwy9A0xwATcQsULDBidFELY0ED2bNqgN TaI0pyV/LV9x/xcdxA0o7UBGzqmszESVhHsI+MTdO8NMhKbE9UUkP18ILoUKWX7n Y93lgXCU6WWhElTTKZpgayrdGUYskQ2ylLolYnubkOIrSjfX2B0liT1oPx698iRS KW0jMmuEOC547D8TBTksNpv/TAeiCXUUw9WCfML/tdFEXJt4xh0yXsSQjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFuSver1jwz8/UL488HBt6qBuScMB8GA1UdIwQY MBaAFIx7GDRaOTQacmJ3UTCMHOAvRqC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mZjRmMTItNTI5MC00MzJkLWIxZGIt NTNjYTBkNjVkZDVlLzEvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mZjRmMTItNTI5MC00MzJkLWIxZGItNTNjYTBkNjVkZDVl LzEvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYWEbYpm PyTGR73Y6VIu4SR8Irot/lwTxz/4CByWYpzjet8uLKg21hjjP5UoUOpBXjSypKlW q9skAgfIMCv+JSMGh5wiTy6/Q1JLTmflNJ3jpiLmYm7t9zjOMACP39ZP43/G/54J cw3VGqtH7bdnw6mao3zhpOf/WMK6YSil80cY1/GBWfboYlDDfH4Q/U/DAYoy01r3 05cTfLMbs+vbTkyLlkUxa/vdaxM0g656AcGOZy49HLRNGf0wqjINBDSkiSM0n+Je 5lEfHbYgjX1/omdkWgE141lMnDejM7QlEeiNgSbqMkP6EhVsK8dJK56W9OFnKTRa kgBVjSyIOUY3/A== -----END CERTIFICATE-----Generated at Tue Jan 20 07:37:12 2026 by rpki-client