This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json) Hash identifier: gxRHITi6bK5nuPvxzAiHk4t9s2h1b8aEp/yDB73qRyw= Subject key identifier: 0B:AC:B6:6A:7C:4F:1A:3E:E9:00:A5:24:38:00:C0:F1:58:2C:B0:C8 Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06 Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06 Certificate serial: 019BFD2E5F13279CCC216861647B1B320F98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft Manifest number: 156F Signing time: Tue 27 Jan 2026 02:00:33 +0000 Manifest this update: Tue 27 Jan 2026 02:00:33 +0000 Manifest next update: Wed 28 Jan 2026 02:00:33 +0000 Files and hashes: 1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: 1RR1aQSiTxCp9bOd6eztlOl95Mm0SaIS0bodm8l4+4k=) 2: yA5b7maJfHU0NcBkIvFx-c8-I54.roa (hash: XFcePeHchpjbLRec04pqboXS3/LtfvbSEVpXlPE0ESo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:5f:13:27:9c:cc:21:68:61:64:7b:1b:32:0f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06 Validity Not Before: Jan 27 02:00:33 2026 GMT Not After : Jan 28 02:00:33 2026 GMT Subject: CN=0bacb66a7c4f1a3ee900a5243800c0f1582cb0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:b1:ab:3a:84:bd:ec:04:8a:71:54:de:ab: 7a:93:a4:d8:50:89:54:09:80:3d:9a:be:28:69:a6: ce:df:d3:14:b1:ac:51:f3:aa:c8:f3:28:44:71:3e: 50:54:a3:89:86:87:33:7a:81:75:65:77:84:53:00: 00:65:0e:3c:d6:59:8c:69:d9:ca:a9:6c:dd:08:78: e6:c8:5b:3e:36:90:12:69:cf:18:5f:2a:26:30:ca: 3e:51:c8:c2:3a:aa:94:ec:9e:b3:62:57:d3:42:b7: f0:e3:81:08:05:32:57:ee:d7:65:03:65:31:d2:03: 37:33:8d:7a:07:e5:9a:19:ad:c8:3a:5c:f8:4b:58: 5a:74:4d:1b:71:82:41:ed:9f:1d:bd:5b:a2:1f:71: a1:df:f0:56:9f:19:3c:43:3a:58:df:c8:fe:e2:d6: b3:5f:65:a2:1b:33:ec:61:c6:ad:ac:5d:e9:f8:2c: d8:42:6e:52:d2:08:3e:74:6f:01:1b:c0:5c:21:59: ce:3c:1e:16:a1:45:d6:f7:f6:86:73:20:6d:a9:e3: 70:09:4f:d7:55:af:4d:e7:5c:3a:60:ea:d8:34:a8: 29:f9:8e:9d:81:03:d0:49:b2:32:ba:50:62:ea:e2: 95:a2:91:cb:14:5c:85:55:36:a4:80:51:e6:f4:52: 58:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AC:B6:6A:7C:4F:1A:3E:E9:00:A5:24:38:00:C0:F1:58:2C:B0:C8 X509v3 Authority Key Identifier: keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:cb:60:31:3d:12:f9:ca:40:de:03:17:64:f4:33:e4:92:7e: 2a:d5:2b:5c:c0:a0:9d:9a:97:fc:63:ea:52:5d:18:a5:7b:24: b9:54:31:2c:4a:54:48:64:10:df:bb:60:2d:01:a4:d8:65:e6: 46:77:5b:c3:96:1a:10:52:f4:79:63:8f:92:96:4c:ee:d4:c7: fd:15:58:6e:67:05:10:dd:0b:9b:0b:26:f4:c0:29:12:cd:19: 4c:63:18:bb:08:56:50:db:73:47:6f:75:33:2e:08:51:a3:ab: 0e:17:3c:32:d4:b0:e1:3e:df:a4:20:ff:49:71:32:9b:bb:70: 2f:c7:b8:5c:fb:a4:de:12:55:cf:23:af:95:34:26:a6:bd:62: 01:11:38:09:89:2c:e2:33:bb:30:6f:d8:26:ff:ad:f6:d1:a4: 42:7e:d9:d7:f6:67:f2:0a:b9:62:83:30:3c:0a:3a:b6:6b:b2: 68:6a:90:7a:46:92:b7:60:ce:f3:c4:00:15:a7:6a:68:6c:53: a0:a1:11:ff:fd:37:3b:a3:dd:51:fd:c7:06:55:bd:d7:43:2b: 7f:9b:72:2f:47:99:0d:e1:e5:9f:7b:73:38:95:57:b8:84:e1: 41:04:39:57:b0:e4:1e:b7:0a:18:93:fe:10:69:62:28:c2:4d: 6c:af:f4:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9Ll8TJ5zMIWhhZHsbMg+YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOTFmZThjNTQwYzQ0ZTIzNGY5YmM2NjhmOGEzYjE2NDdh Y2RiMDYwHhcNMjYwMTI3MDIwMDMzWhcNMjYwMTI4MDIwMDMzWjAzMTEwLwYDVQQD EygwYmFjYjY2YTdjNGYxYTNlZTkwMGE1MjQzODAwYzBmMTU4MmNiMGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuuxqzqEvewEinFU3qt6k6TYUIlU CYA9mr4oaabO39MUsaxR86rI8yhEcT5QVKOJhoczeoF1ZXeEUwAAZQ481lmMadnK qWzdCHjmyFs+NpASac8YXyomMMo+UcjCOqqU7J6zYlfTQrfw44EIBTJX7tdlA2Ux 0gM3M416B+WaGa3IOlz4S1hadE0bcYJB7Z8dvVuiH3Gh3/BWnxk8QzpY38j+4taz X2WiGzPsYcatrF3p+CzYQm5S0gg+dG8BG8BcIVnOPB4WoUXW9/aGcyBtqeNwCU/X Va9N51w6YOrYNKgp+Y6dgQPQSbIyulBi6uKVopHLFFyFVTakgFHm9FJY6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAustmp8Txo+6QClJDgAwPFYLLDIMB8GA1UdIwQY MBaAFNCR/oxUDETiNPm8Zo+KOxZHrNsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85YTNhYWMtMmE0Yy00Mzg3LWFlYTgt MDRlNmY1NzY0YzUyLzEvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS85YTNhYWMtMmE0Yy00Mzg3LWFlYTgtMDRlNmY1NzY0YzUy LzEvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8tgMT0S +cpA3gMXZPQz5JJ+KtUrXMCgnZqX/GPqUl0YpXskuVQxLEpUSGQQ37tgLQGk2GXm Rndbw5YaEFL0eWOPkpZM7tTH/RVYbmcFEN0Lmwsm9MApEs0ZTGMYuwhWUNtzR291 My4IUaOrDhc8MtSw4T7fpCD/SXEym7twL8e4XPuk3hJVzyOvlTQmpr1iARE4CYks 4jO7MG/YJv+t9tGkQn7Z1/Zn8gq5YoMwPAo6tmuyaGqQekaSt2DO88QAFadqaGxT oKER//03O6PdUf3HBlW910Mrf5tyL0eZDeHln3tzOJVXuIThQQQ5V7DkHrcKGJP+ EGliKMJNbK/04A== -----END CERTIFICATE-----Generated at Tue Jan 27 07:41:36 2026 by rpki-client