This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft File: jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json) Hash identifier: FD5arzeHRpkBns2y4xdCQmFFkXpJv0sEonLP1GoRfTo= Subject key identifier: 1A:38:0F:24:4E:6B:F1:91:B6:67:61:59:58:B8:4E:B0:A8:74:6A:F1 Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93 Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693 Certificate serial: 019BFDD3C787AF38CDAD1DC8DA676AB90B54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft Manifest number: 10AC Signing time: Tue 27 Jan 2026 05:01:13 +0000 Manifest this update: Tue 27 Jan 2026 05:01:13 +0000 Manifest next update: Wed 28 Jan 2026 05:01:13 +0000 Files and hashes: 1: CmJCWvc-L5n6ETqB_Y9EebfTgVc.roa (hash: o2Udx+b7zpQWtPDTqUJxGNdjl7Wv2+AvE2gIsIBVVkU=) 2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: VMWMkExw6fUPfrvyv/JhrIHA/o/lR3UmWZWYmanTBVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 05:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:d3:c7:87:af:38:cd:ad:1d:c8:da:67:6a:b9:0b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693 Validity Not Before: Jan 27 05:01:13 2026 GMT Not After : Jan 28 05:01:13 2026 GMT Subject: CN=1a380f244e6bf191b667615958b84eb0a8746af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:45:ab:79:3c:e4:92:44:17:04:76:49:d8: 91:10:de:70:7d:4b:ca:3c:90:ac:a9:0e:87:77:6e: b1:51:14:14:f3:2f:9b:28:55:34:67:21:cf:02:24: c3:27:a0:c4:7c:bf:67:50:92:45:a3:30:52:1d:1b: 59:cb:ec:87:e3:11:d1:23:6d:02:67:b5:69:14:f1: 45:eb:52:08:cc:49:20:33:64:c4:db:b4:46:7d:31: ee:e1:96:c8:1a:68:24:ca:1d:19:b5:5c:55:db:39: c3:cb:88:1e:5e:58:9f:67:4d:67:0b:55:45:18:b8: 88:46:97:3f:41:d2:ce:77:c7:54:14:40:96:8b:93: 5f:20:e9:7a:0a:b3:98:5b:a6:d1:75:7a:91:4d:e4: ff:7e:e3:3f:50:ab:7a:c9:e2:af:fa:2f:34:4f:4c: c2:bd:55:2d:20:50:e7:01:a5:12:9f:63:ed:9b:e1: f9:87:62:e0:76:ef:8f:ef:a2:b7:ef:ce:3e:d9:91: 97:86:a9:64:81:7c:da:3c:b7:39:3c:64:2e:ee:21: 5c:24:6d:6a:b5:42:1d:4d:d7:53:19:9a:a6:22:e8: c7:91:44:7f:99:49:49:14:02:54:6e:b8:85:00:d8: fa:84:fc:9c:1b:2d:99:6a:54:cc:10:8b:1c:1c:d8: dd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:38:0F:24:4E:6B:F1:91:B6:67:61:59:58:B8:4E:B0:A8:74:6A:F1 X509v3 Authority Key Identifier: keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:78:7f:93:89:3f:c3:4f:24:8a:82:21:ec:55:1b:1b:8e:f8: 8e:c1:54:d8:69:4b:9c:f9:18:94:e1:23:ce:87:fb:fa:f7:28: 0e:7c:ed:ad:18:34:2f:2e:65:aa:cc:59:4b:f9:1b:c5:0d:70: 37:50:ab:39:86:bc:7a:92:b0:b0:c8:2a:43:4b:65:3b:99:23: b1:81:f4:a6:62:33:c6:bf:49:0a:2b:a1:74:29:02:fa:ee:ab: 4c:b7:c4:b4:44:6a:6f:98:e5:ef:0d:72:f9:9b:8c:e6:7a:60: d2:f8:ec:10:33:95:ba:01:8b:81:26:67:1f:d7:e4:52:07:fa: 7d:cc:44:3f:7b:01:c1:0a:e4:64:b5:99:54:a0:47:9d:b3:5f: 31:59:61:8e:32:f8:2e:f0:b0:8a:92:f4:ae:e0:57:f9:55:a3: ba:b2:34:68:b8:1e:d7:19:3d:b0:c2:2e:d3:32:66:e1:f6:54: d2:cd:f3:95:de:23:9a:b7:22:0d:ef:2d:9d:e7:02:7d:9c:87: 12:a7:8b:ac:7e:73:7d:08:96:52:c1:1a:7d:d7:5b:d6:dc:92: 3d:8c:aa:3c:7b:0c:6a:1e:9b:06:6e:01:75:1d:ec:96:9d:46: d4:e9:bb:44:c8:68:3a:c8:36:71:01:f9:7d:57:15:7c:a2:2d: 41:70:fc:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv908eHrzjNrR3I2mdquQtUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWE0ODcyMWZmNDNiMTgwNTdlZjQxNzRhOWQzOTZhOTgx YzY2OTMwHhcNMjYwMTI3MDUwMTEzWhcNMjYwMTI4MDUwMTEzWjAzMTEwLwYDVQQD EygxYTM4MGYyNDRlNmJmMTkxYjY2NzYxNTk1OGI4NGViMGE4NzQ2YWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSBFq3k85JJEFwR2SdiREN5wfUvK PJCsqQ6Hd26xURQU8y+bKFU0ZyHPAiTDJ6DEfL9nUJJFozBSHRtZy+yH4xHRI20C Z7VpFPFF61IIzEkgM2TE27RGfTHu4ZbIGmgkyh0ZtVxV2znDy4geXlifZ01nC1VF GLiIRpc/QdLOd8dUFECWi5NfIOl6CrOYW6bRdXqRTeT/fuM/UKt6yeKv+i80T0zC vVUtIFDnAaUSn2Ptm+H5h2Lgdu+P76K3784+2ZGXhqlkgXzaPLc5PGQu7iFcJG1q tUIdTddTGZqmIujHkUR/mUlJFAJUbriFANj6hPycGy2ZalTMEIscHNjdYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBo4DyROa/GRtmdhWVi4TrCodGrxMB8GA1UdIwQY MBaAFI4aSHIf9DsYBX70F0qdOWqYHGaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMt Y2U0ZTMxY2UxNTE4LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMtY2U0ZTMxY2UxNTE4 LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHh/k4k/ w08kioIh7FUbG474jsFU2GlLnPkYlOEjzof7+vcoDnztrRg0Ly5lqsxZS/kbxQ1w N1CrOYa8epKwsMgqQ0tlO5kjsYH0pmIzxr9JCiuhdCkC+u6rTLfEtERqb5jl7w1y +ZuM5npg0vjsEDOVugGLgSZnH9fkUgf6fcxEP3sBwQrkZLWZVKBHnbNfMVlhjjL4 LvCwipL0ruBX+VWjurI0aLge1xk9sMIu0zJm4fZU0s3zld4jmrciDe8tnecCfZyH EqeLrH5zfQiWUsEafddb1tySPYyqPHsMah6bBm4BdR3slp1G1Om7RMhoOsg2cQH5 fVcVfKItQXD8sQ== -----END CERTIFICATE-----Generated at Tue Jan 27 12:44:23 2026 by rpki-client