This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft File: JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft (raw, json) Hash identifier: 7S61jzYdLvqjPdJR2k/yVxIsEI8POArwXHdByuwwJSc= Subject key identifier: B1:D7:4A:A1:9E:D4:D9:43:73:77:F1:4F:5A:82:2E:32:6A:5D:42:12 Authority key identifier: 26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35 Certificate issuer: /CN=261b941dbe59651fafbba9724a12775e07edb635 Certificate serial: 019BFB40914C1C9A6993F18B50F4EF7E9ECC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft Manifest number: 0DD9 Signing time: Mon 26 Jan 2026 17:01:11 +0000 Manifest this update: Mon 26 Jan 2026 17:01:11 +0000 Manifest next update: Tue 27 Jan 2026 17:01:11 +0000 Files and hashes: 1: CBT9EvNLviREuaFnuwBtsjNjvqQ.roa (hash: L5VKNlWuWtfLWO7jL8F9Y4m0nbimopTGF6Y2mOItvHc=) 2: JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl (hash: nEpXKv9ITdX6keLE+pS02TslxwwE5wGj+V39h03/GYk=) 3: T2MyCYDe8ZVj6MHLOpPsRFQaLyc.roa (hash: 2HMXQDaERD47LVw7adtPSZsCeqM+FdyN2voYgfm3nq4=) 4: TrZbLVY0iXqlw78jA1uMduH-vUQ.roa (hash: KRDdhAasvGi+XoVP5w8RcZgsqXheZXBgHtl6x/DPy1c=) 5: WWUJ0b2mKsJU4aWCDcCYWe3B3Q8.roa (hash: OR5UXYV6xuApBIfkbkR4RJywXInN6wryK+o2woE8n2A=) 6: fKuK4GhJoW5W0MgtH6V8djfpAh4.roa (hash: oBGCf3nVEKmFy2gQfXUwhx5LHxw9ggGPk7GHfDrKscM=) 7: zxx_FfKkmmxvyeDvkRu2znFf5T8.roa (hash: MOimrkmJ3AqYEjrbALlR+YXtLYVrKH4fVxKgTuqxIeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:91:4c:1c:9a:69:93:f1:8b:50:f4:ef:7e:9e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=261b941dbe59651fafbba9724a12775e07edb635 Validity Not Before: Jan 26 17:01:11 2026 GMT Not After : Jan 27 17:01:11 2026 GMT Subject: CN=b1d74aa19ed4d9437377f14f5a822e326a5d4212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6a:70:75:fb:e3:42:00:53:b9:da:56:c0:28: 3b:54:a2:19:f6:fa:b9:78:19:55:c0:03:dd:a2:b3: 01:76:d8:cf:38:1d:b8:9c:7b:66:f2:4e:15:6e:a2: 65:a6:70:70:3b:e3:3f:c0:c5:35:b0:3d:00:9c:b5: 24:dd:15:2a:b1:9f:a0:00:6e:95:7e:ec:76:75:cd: ae:45:2b:b2:e1:0a:4a:61:08:b2:56:5a:cd:e3:d6: 64:5f:d3:47:00:e4:a8:9a:c0:35:4c:52:be:95:3d: f7:e6:fc:94:f5:b8:9d:54:b4:4a:fc:22:0b:ab:b6: 3b:04:0d:83:77:22:65:fd:0b:db:b3:25:dc:8e:27: ca:7c:a4:bf:3d:d5:ac:53:a9:36:22:62:1f:10:fc: 6c:fc:1d:4b:ef:1b:62:d0:ed:65:62:e3:e9:5b:23: 44:5b:9e:23:a2:56:57:17:77:71:72:7f:38:ec:52: 0c:84:0b:21:81:ca:94:55:ce:a1:81:1b:a1:30:28: f3:2d:16:9a:9c:f8:1f:e1:6e:f8:5e:d9:dc:c0:35: ae:b5:17:57:a8:dc:8c:6c:83:08:ce:4a:44:ad:3d: a0:4a:be:6b:81:a8:aa:00:f5:ce:38:74:62:c4:3a: 38:44:70:7a:d5:99:e4:f7:01:a2:86:d3:b6:ca:43: 92:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D7:4A:A1:9E:D4:D9:43:73:77:F1:4F:5A:82:2E:32:6A:5D:42:12 X509v3 Authority Key Identifier: keyid:26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:7a:97:2b:98:a1:0a:6d:43:40:c0:e6:03:69:de:1b:80:c2: 17:6d:61:c0:c5:1e:ec:1c:9e:55:61:1b:a9:0f:cd:07:f6:ab: 78:ef:39:ff:18:46:6b:2c:cc:53:bc:94:bd:63:cf:97:c1:5e: 47:ad:55:6e:bd:7d:87:02:9a:c1:27:1a:86:89:19:85:aa:56: 52:c5:a1:7d:16:31:2c:56:66:34:18:ae:61:3d:1f:ad:6e:63: 3a:85:cd:fe:48:1e:8d:96:a9:4b:c9:4a:73:ad:1b:21:93:90: e9:f6:75:ad:8e:f5:95:1d:3e:16:1d:c5:1d:4b:d4:3f:b4:79: 61:a9:94:7b:b3:c1:e2:1d:d0:10:26:80:ed:e6:c4:ef:c4:b6: f3:85:ae:60:b9:d4:28:0d:d7:64:f1:91:74:1a:6d:6a:12:a8: ad:13:59:68:b6:9d:0f:26:f1:a1:82:95:26:2e:a2:b7:b7:9b: 44:03:3d:c3:d3:a0:1b:4d:39:63:da:b1:53:a5:99:20:57:ac: d2:60:66:57:1e:b2:3e:e2:a8:40:cd:87:ac:a5:5c:ac:d3:1c: a6:fe:42:35:63:c0:6d:7d:42:02:e7:52:04:9a:51:98:ac:3c: ce:35:5c:88:53:45:f5:06:f2:cd:9f:83:63:b3:2d:28:e0:f3: 6d:b6:54:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QJFMHJppk/GLUPTvfp7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MWI5NDFkYmU1OTY1MWZhZmJiYTk3MjRhMTI3NzVlMDdl ZGI2MzUwHhcNMjYwMTI2MTcwMTExWhcNMjYwMTI3MTcwMTExWjAzMTEwLwYDVQQD EyhiMWQ3NGFhMTllZDRkOTQzNzM3N2YxNGY1YTgyMmUzMjZhNWQ0MjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2pwdfvjQgBTudpWwCg7VKIZ9vq5 eBlVwAPdorMBdtjPOB24nHtm8k4VbqJlpnBwO+M/wMU1sD0AnLUk3RUqsZ+gAG6V fux2dc2uRSuy4QpKYQiyVlrN49ZkX9NHAOSomsA1TFK+lT335vyU9bidVLRK/CIL q7Y7BA2DdyJl/QvbsyXcjifKfKS/PdWsU6k2ImIfEPxs/B1L7xti0O1lYuPpWyNE W54jolZXF3dxcn847FIMhAshgcqUVc6hgRuhMCjzLRaanPgf4W74XtncwDWutRdX qNyMbIMIzkpErT2gSr5rgaiqAPXOOHRixDo4RHB61Znk9wGihtO2ykOSLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHXSqGe1NlDc3fxT1qCLjJqXUISMB8GA1UdIwQY MBaAFCYblB2+WWUfr7upckoSd14H7bY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmh1VUhiNVpaUi12dTZseVNoSjNYZ2Z0dGpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8yZjgzMGYtYWY0ZC00ZDMzLWEzMDAt Yjk4ZGY1NDRiYzIwLzEvSmh1VUhiNVpaUi12dTZseVNoSjNYZ2Z0dGpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8yZjgzMGYtYWY0ZC00ZDMzLWEzMDAtYjk4ZGY1NDRiYzIw LzEvSmh1VUhiNVpaUi12dTZseVNoSjNYZ2Z0dGpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnqXK5ih Cm1DQMDmA2neG4DCF21hwMUe7ByeVWEbqQ/NB/areO85/xhGayzMU7yUvWPPl8Fe R61Vbr19hwKawScahokZhapWUsWhfRYxLFZmNBiuYT0frW5jOoXN/kgejZapS8lK c60bIZOQ6fZ1rY71lR0+Fh3FHUvUP7R5YamUe7PB4h3QECaA7ebE78S284WuYLnU KA3XZPGRdBptahKorRNZaLadDybxoYKVJi6it7ebRAM9w9OgG005Y9qxU6WZIFes 0mBmVx6yPuKoQM2HrKVcrNMcpv5CNWPAbX1CAudSBJpRmKw8zjVciFNF9QbyzZ+D Y7MtKODzbbZUyQ== -----END CERTIFICATE-----Generated at Tue Jan 27 02:16:17 2026 by rpki-client