This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft File: JoLIFvcmhv967eU1OGGMwuiGEDk.mft (raw, json) Hash identifier: ndbutdmd+IfQZF9TbhU/Ure6VmzglQzkZfUWJcA67ro= Subject key identifier: D8:97:9F:BB:9E:64:C7:94:C3:FF:A6:D4:D1:00:A5:56:55:34:FE:7B Authority key identifier: 26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39 Certificate issuer: /CN=2682c816f72686ff7aede53538618cc2e8861039 Certificate serial: 019BF9BFC90B63B63CD956A6CBCDA108FE3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft Manifest number: 128A Signing time: Mon 26 Jan 2026 10:00:54 +0000 Manifest this update: Mon 26 Jan 2026 10:00:54 +0000 Manifest next update: Tue 27 Jan 2026 10:00:54 +0000 Files and hashes: 1: 1IIEvGygvpoLAGhzsQa0AFiSc6c.roa (hash: IlEP7k2pN5p03aEIwdfyX+8YwJkY7uWP4+Wsd4o4ZfU=) 2: 7dyvMJC9soHwC2C-qKBNN8Swy1E.roa (hash: ThU9QlnbHrk5sj3VeLKsVi1YledN8CGPHeD+PwkC7Pk=) 3: JoLIFvcmhv967eU1OGGMwuiGEDk.crl (hash: CyQ9RCeCPBzKBaNNUWJhegPDCNc7ZHST6iNPuh8GLks=) 4: iAMQWeS9GMw3TAa5hDTAT6s825g.roa (hash: 2q1sFbCAgulgub3q2AGPYNHWFrfFNMkKFSc13dmp7t4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:bf:c9:0b:63:b6:3c:d9:56:a6:cb:cd:a1:08:fe:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2682c816f72686ff7aede53538618cc2e8861039 Validity Not Before: Jan 26 10:00:54 2026 GMT Not After : Jan 27 10:00:54 2026 GMT Subject: CN=d8979fbb9e64c794c3ffa6d4d100a5565534fe7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c6:ae:25:a6:f9:00:fb:e4:2f:fe:e6:1d:2e: c6:20:17:b6:07:4b:32:50:73:8c:18:5b:ee:2c:c3: 43:d7:ea:46:0c:8d:01:7f:87:82:09:77:b2:3e:cd: 4f:16:ad:4f:49:60:b6:c4:a8:0a:7a:8b:fd:b8:9e: a9:58:df:13:4c:94:32:e3:a2:7f:4f:f1:38:66:32: 4f:60:d7:a8:1d:8b:f9:47:91:f2:af:dd:5e:80:bf: 9f:1d:cb:cb:5c:f0:07:e3:4f:8e:89:56:83:e9:d5: 97:5e:03:ab:a5:61:8a:7c:d2:b1:74:67:0e:fe:7d: bc:0c:01:fa:aa:5a:c8:a2:ab:60:a7:3d:3a:bc:28: 83:53:63:aa:6b:14:87:9d:66:50:e7:4d:5b:04:27: e3:0e:91:ed:69:77:7d:6f:30:ba:3a:7a:0b:5f:18: ae:41:e7:73:e7:44:d9:20:98:72:dc:70:1f:93:d6: 95:21:c7:c1:6f:48:1f:8a:80:0e:1e:24:a1:fd:4d: bf:85:a4:6c:f0:3f:3f:68:7f:a2:81:6b:da:5a:ca: 67:5c:c8:27:44:2d:5f:95:1a:36:9c:12:da:ff:ea: cd:27:28:c2:9b:52:16:29:8f:86:dd:5a:21:4f:3a: ba:06:05:a9:a1:e3:4a:49:4a:4f:08:fc:81:24:56: 2e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:97:9F:BB:9E:64:C7:94:C3:FF:A6:D4:D1:00:A5:56:55:34:FE:7B X509v3 Authority Key Identifier: keyid:26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d9:35:0a:42:22:64:7b:5e:ad:fe:76:98:ca:4b:8e:b6:46: 72:9c:17:b6:35:7a:f0:86:56:3d:76:9c:bc:23:00:7d:dd:f3: bd:81:70:ed:49:53:cd:66:8d:d3:56:a8:ee:49:51:de:8f:0f: 3d:b2:49:fb:90:bd:b7:5b:12:47:ae:67:29:a4:33:bb:50:72: 0b:80:3e:68:12:95:21:b5:25:8f:6c:a2:ac:13:ce:69:10:ff: 52:7a:d0:22:bf:de:1b:bc:db:a7:99:8f:57:34:9b:31:74:c5: d7:7a:b8:f4:e0:9a:99:e5:02:cb:30:a6:32:31:33:c0:5c:37: 13:2a:61:b2:37:96:b2:43:6d:05:1b:e4:e3:3a:22:16:2b:87: a8:f4:e3:a7:c5:17:31:e1:c0:ce:94:41:1a:5e:15:cd:b8:b5: 76:f7:f2:d2:62:67:98:b2:b9:ab:48:4f:22:39:ff:43:a3:2f: 7c:f1:d2:da:85:8f:b2:90:24:df:23:e6:2b:77:7d:a5:ef:4c: b1:e8:2b:63:1e:f6:65:c0:21:98:a3:e1:35:d3:bd:a4:7a:79: c6:e7:08:90:36:86:48:38:c0:4b:17:30:97:8b:8a:38:87:45: 9b:f2:55:22:8d:d4:02:f8:77:e7:fb:a2:3c:8a:b2:6e:c6:cb: cc:ab:97:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5v8kLY7Y82Vamy82hCP48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ODJjODE2ZjcyNjg2ZmY3YWVkZTUzNTM4NjE4Y2MyZTg4 NjEwMzkwHhcNMjYwMTI2MTAwMDU0WhcNMjYwMTI3MTAwMDU0WjAzMTEwLwYDVQQD EyhkODk3OWZiYjllNjRjNzk0YzNmZmE2ZDRkMTAwYTU1NjU1MzRmZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cauJab5APvkL/7mHS7GIBe2B0sy UHOMGFvuLMND1+pGDI0Bf4eCCXeyPs1PFq1PSWC2xKgKeov9uJ6pWN8TTJQy46J/ T/E4ZjJPYNeoHYv5R5Hyr91egL+fHcvLXPAH40+OiVaD6dWXXgOrpWGKfNKxdGcO /n28DAH6qlrIoqtgpz06vCiDU2OqaxSHnWZQ501bBCfjDpHtaXd9bzC6OnoLXxiu Qedz50TZIJhy3HAfk9aVIcfBb0gfioAOHiSh/U2/haRs8D8/aH+igWvaWspnXMgn RC1flRo2nBLa/+rNJyjCm1IWKY+G3VohTzq6BgWpoeNKSUpPCPyBJFYuTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiXn7ueZMeUw/+m1NEApVZVNP57MB8GA1UdIwQY MBaAFCaCyBb3Job/eu3lNThhjMLohhA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm9MSUZ2Y21odjk2N2VVMU9HR013dWlHRURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hMDAwOTAtNjY2My00NmExLWE1ZmIt NjYxZThmZTNjMWU5LzEvSm9MSUZ2Y21odjk2N2VVMU9HR013dWlHRURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hMDAwOTAtNjY2My00NmExLWE1ZmItNjYxZThmZTNjMWU5 LzEvSm9MSUZ2Y21odjk2N2VVMU9HR013dWlHRURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9k1CkIi ZHterf52mMpLjrZGcpwXtjV68IZWPXacvCMAfd3zvYFw7UlTzWaN01ao7klR3o8P PbJJ+5C9t1sSR65nKaQzu1ByC4A+aBKVIbUlj2yirBPOaRD/UnrQIr/eG7zbp5mP VzSbMXTF13q49OCameUCyzCmMjEzwFw3EyphsjeWskNtBRvk4zoiFiuHqPTjp8UX MeHAzpRBGl4Vzbi1dvfy0mJnmLK5q0hPIjn/Q6MvfPHS2oWPspAk3yPmK3d9pe9M segrYx72ZcAhmKPhNdO9pHp5xucIkDaGSDjASxcwl4uKOIdFm/JVIo3UAvh35/ui PIqybsbLzKuX9w== -----END CERTIFICATE-----Generated at Mon Jan 26 18:23:16 2026 by rpki-client