This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft File: jBOLI8HTvcTBqTzpLed7PHyDWD8.mft (raw, json) Hash identifier: WIPbKlXEj7KFCXQsFbVaTFcVcCkXKcXUycaoAnjth5s= Subject key identifier: FB:AD:E8:D5:AE:0C:1C:AA:A8:E9:A1:FE:5C:57:F6:F2:E3:52:99:C1 Authority key identifier: 8C:13:8B:23:C1:D3:BD:C4:C1:A9:3C:E9:2D:E7:7B:3C:7C:83:58:3F Certificate issuer: /CN=8c138b23c1d3bdc4c1a93ce92de77b3c7c83583f Certificate serial: 019BFBAEDC93EB002914399085E1955F5195 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft Manifest number: 03 Signing time: Mon 26 Jan 2026 19:01:39 +0000 Manifest this update: Mon 26 Jan 2026 19:01:39 +0000 Manifest next update: Tue 27 Jan 2026 19:01:39 +0000 Files and hashes: 1: JeyyXekrP9-O0pqFzDG-ct1765w.roa (hash: qFvedgQA7c9tOwxwHABfKyXAuH54pe3nrNIaVSHkgC8=) 2: jBOLI8HTvcTBqTzpLed7PHyDWD8.crl (hash: RgKoiWLx6i7xAIU2ZJX3nMvD/qVt2gms2BLTT5cn7IA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.crl rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:dc:93:eb:00:29:14:39:90:85:e1:95:5f:51:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c138b23c1d3bdc4c1a93ce92de77b3c7c83583f Validity Not Before: Jan 26 19:01:39 2026 GMT Not After : Jan 27 19:01:39 2026 GMT Subject: CN=fbade8d5ae0c1caaa8e9a1fe5c57f6f2e35299c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:4e:80:17:7e:46:6a:e6:26:03:59:dc:98: 72:37:54:c6:3b:d6:b7:a1:fb:2e:2f:7e:b6:a1:9e: f0:cf:8a:55:dc:56:46:b8:d2:c1:a1:27:ad:41:ba: d4:21:96:d7:53:11:0b:11:95:68:5e:b5:a4:5e:9f: 5b:0b:70:c5:58:ff:0b:23:4e:6e:71:75:90:3f:02: 7c:b4:3c:35:7f:ab:fd:16:a2:48:e5:03:7b:51:81: 17:6b:11:7a:b6:07:86:23:fa:d7:04:e7:dd:a8:bc: 05:ce:09:86:45:cd:e6:08:f7:9a:2b:3f:d4:05:a7: b0:ba:30:a4:20:e3:84:5e:b9:c1:02:ae:a4:98:0f: a0:ab:b9:5e:6a:e4:7d:ec:8c:c7:6f:96:31:a9:42: e8:cb:79:f6:03:cb:fb:39:c1:9a:70:9f:e2:89:f7: de:c4:1e:98:1c:51:c1:0c:66:8f:51:47:16:87:3e: 21:ce:00:71:4c:d5:24:f9:e0:2a:35:ea:3a:1c:3f: 6c:76:1d:b7:3d:75:ad:a3:6d:a6:5b:4f:57:93:b0: ec:b9:87:4b:51:c3:47:ab:1b:00:d0:38:97:d0:67: 3b:6c:f1:f3:e9:aa:ea:73:03:70:a0:c2:dc:d2:25: e6:9b:85:67:90:ca:80:91:1e:4f:6d:74:c2:b2:bc: 61:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AD:E8:D5:AE:0C:1C:AA:A8:E9:A1:FE:5C:57:F6:F2:E3:52:99:C1 X509v3 Authority Key Identifier: keyid:8C:13:8B:23:C1:D3:BD:C4:C1:A9:3C:E9:2D:E7:7B:3C:7C:83:58:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBOLI8HTvcTBqTzpLed7PHyDWD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/47ea1d-a828-48d9-b8c8-838307be4faa/1/jBOLI8HTvcTBqTzpLed7PHyDWD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:d3:c9:a1:24:ff:97:a8:ed:a6:2b:fb:9e:f0:10:8e:e3:8d: 65:e6:a0:a5:aa:fc:ea:32:1a:bb:ab:d1:8b:a6:1a:67:39:cb: 8b:3e:ad:44:e0:e9:db:b0:d0:0d:69:89:b7:45:6b:42:f0:8a: eb:1b:dc:bc:fc:63:db:1e:be:bf:8a:11:0f:5b:1a:18:c4:96: 7e:2d:cc:99:29:c8:8a:d8:b3:cb:1e:0c:b2:f1:22:c0:0f:35: ed:72:b4:fb:9b:e2:a4:1d:b6:9f:5d:13:54:58:a4:cb:bf:2a: 59:91:71:d9:ed:c1:fd:ad:38:3a:7b:af:9e:77:cb:e4:12:89: fe:b0:15:b1:2f:99:45:37:bc:51:96:9a:97:01:74:09:cd:2c: d2:72:96:e8:35:13:bd:52:da:c5:8b:16:59:a5:bf:79:22:dd: 5c:af:a1:97:dd:ca:1d:6a:7b:97:a0:35:2c:7a:d7:4f:d7:eb: 46:39:c1:1e:38:40:7f:49:06:24:80:bc:58:a6:bc:ba:16:7c: 51:42:a2:16:9e:0e:77:42:11:74:b1:8a:d0:9c:7d:de:6a:3e: 6a:08:65:10:af:70:f0:54:f9:6f:c7:2e:35:96:22:ff:9f:66: 0a:f3:cd:62:41:e5:4b:57:44:b6:0c:01:27:c7:cd:87:f7:aa: 69:8b:40:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rtyT6wApFDmQheGVX1GVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMTM4YjIzYzFkM2JkYzRjMWE5M2NlOTJkZTc3YjNjN2M4 MzU4M2YwHhcNMjYwMTI2MTkwMTM5WhcNMjYwMTI3MTkwMTM5WjAzMTEwLwYDVQQD EyhmYmFkZThkNWFlMGMxY2FhYThlOWExZmU1YzU3ZjZmMmUzNTI5OWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9lOgBd+RmrmJgNZ3JhyN1TGO9a3 ofsuL362oZ7wz4pV3FZGuNLBoSetQbrUIZbXUxELEZVoXrWkXp9bC3DFWP8LI05u cXWQPwJ8tDw1f6v9FqJI5QN7UYEXaxF6tgeGI/rXBOfdqLwFzgmGRc3mCPeaKz/U BaewujCkIOOEXrnBAq6kmA+gq7leauR97IzHb5YxqULoy3n2A8v7OcGacJ/iiffe xB6YHFHBDGaPUUcWhz4hzgBxTNUk+eAqNeo6HD9sdh23PXWto22mW09Xk7DsuYdL UcNHqxsA0DiX0Gc7bPHz6arqcwNwoMLc0iXmm4VnkMqAkR5PbXTCsrxhvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPut6NWuDByqqOmh/lxX9vLjUpnBMB8GA1UdIwQY MBaAFIwTiyPB073Ewak86S3nezx8g1g/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakJPTEk4SFR2Y1RCcVR6cExlZDdQSHlEV0Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80N2VhMWQtYTgyOC00OGQ5LWI4Yzgt ODM4MzA3YmU0ZmFhLzEvakJPTEk4SFR2Y1RCcVR6cExlZDdQSHlEV0Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi80N2VhMWQtYTgyOC00OGQ5LWI4YzgtODM4MzA3YmU0ZmFh LzEvakJPTEk4SFR2Y1RCcVR6cExlZDdQSHlEV0Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotPJoST/ l6jtpiv7nvAQjuONZeagpar86jIau6vRi6YaZznLiz6tRODp27DQDWmJt0VrQvCK 6xvcvPxj2x6+v4oRD1saGMSWfi3MmSnIitizyx4MsvEiwA817XK0+5vipB22n10T VFiky78qWZFx2e3B/a04OnuvnnfL5BKJ/rAVsS+ZRTe8UZaalwF0Cc0s0nKW6DUT vVLaxYsWWaW/eSLdXK+hl93KHWp7l6A1LHrXT9frRjnBHjhAf0kGJIC8WKa8uhZ8 UUKiFp4Od0IRdLGK0Jx93mo+aghlEK9w8FT5b8cuNZYi/59mCvPNYkHlS1dEtgwB J8fNh/eqaYtA8Q== -----END CERTIFICATE-----Generated at Mon Jan 26 22:57:25 2026 by rpki-client