This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft File: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft (raw, json) Hash identifier: REFdKowcBZ5CtGzBJVgK2Cv3Y54MGGN2wXV85vIMsis= Subject key identifier: EA:8D:F4:BD:99:29:0A:E4:1D:CF:2A:9A:B6:C4:68:33:35:1D:AC:9A Authority key identifier: 24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE Certificate issuer: /CN=24e1c5110e0e90302e47012ff5c82303a4661ade Certificate serial: 019BA00E8EDA84343B0BA3F8096DE9936B32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft Manifest number: 05BB Signing time: Fri 09 Jan 2026 00:01:07 +0000 Manifest this update: Fri 09 Jan 2026 00:01:07 +0000 Manifest next update: Sat 10 Jan 2026 00:01:07 +0000 Files and hashes: 1: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl (hash: jx1Snc/k7UEX48MMHyN3S8Q946SMUL5sqA6dTUrh39M=) 2: of5fvbBOl_2ZOya6SQ0xsXlOVng.roa (hash: FlPfu4dwMoPwrHiBDoZEfb7scYNLSD/+Wl4U6dL0V+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 00:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a0:0e:8e:da:84:34:3b:0b:a3:f8:09:6d:e9:93:6b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e1c5110e0e90302e47012ff5c82303a4661ade Validity Not Before: Jan 9 00:01:07 2026 GMT Not After : Jan 10 00:01:07 2026 GMT Subject: CN=ea8df4bd99290ae41dcf2a9ab6c46833351dac9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:33:cd:ee:a5:f8:ca:4d:ca:ca:01:17:e8: 3b:e9:12:d5:bf:24:04:29:4c:b8:ae:e4:2c:d9:29: 95:41:2a:99:2f:9e:0c:05:53:fd:44:b9:3a:f7:85: 1d:bc:a3:be:aa:c0:46:50:01:fe:ff:fd:ec:77:7d: 55:35:56:69:88:3a:74:c7:df:f0:5f:a5:7f:9e:77: 41:d8:3b:78:c2:48:18:9b:92:52:d9:43:47:d9:68: 19:90:9f:44:d7:03:3e:31:09:17:a8:74:0a:cd:63: ff:0d:ab:a7:d8:79:09:bb:89:bd:81:3e:3e:de:03: 1d:46:29:42:f6:a1:b7:b8:01:83:10:b8:69:0d:b8: ae:07:94:f0:90:7b:18:d0:ea:98:56:81:2c:72:f9: d0:af:1c:af:28:76:42:ae:09:49:7a:c3:f1:a7:1b: 4b:4a:91:ca:04:f9:36:75:15:8c:cd:93:7d:5d:b3: ce:8f:f1:da:cd:73:4a:58:1b:77:f0:f9:9e:bf:2e: 63:0c:77:75:a9:e8:e2:f3:71:66:b0:14:11:fc:10: 39:f4:ab:c9:14:55:49:6c:db:9f:1e:93:0b:4e:d7: 7e:03:c8:80:97:06:48:a0:26:c4:6f:d9:ec:4e:82: 10:9d:56:39:d3:7d:7a:62:a3:49:a6:ce:d8:89:a0: ba:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8D:F4:BD:99:29:0A:E4:1D:CF:2A:9A:B6:C4:68:33:35:1D:AC:9A X509v3 Authority Key Identifier: keyid:24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c7:ed:1b:5b:e8:29:31:6d:70:30:15:15:80:4f:29:f0:f6: b8:75:38:30:9c:b6:e3:e9:bf:51:f4:a3:3a:68:a6:74:0d:0f: 0d:c6:d4:14:43:71:a5:a8:b7:f8:be:4f:76:fd:01:9d:2b:dd: 0d:e8:e5:a5:10:2b:ce:d6:ef:fe:76:b3:92:32:4e:10:1a:81: f9:6e:76:68:5a:c4:77:45:22:af:d2:6e:5e:dc:a3:c4:f5:27: 47:e9:ec:f8:02:d8:05:2c:98:3f:7f:1c:1c:a3:22:2a:dc:de: 2a:7a:24:53:24:d9:8a:d0:82:23:55:87:5f:f5:7e:4f:6d:f0: b4:56:62:af:e8:38:43:55:0d:fb:a1:e0:3d:0e:fa:4b:b9:88: 5b:b8:82:d7:af:4c:60:30:12:cc:73:2a:17:b2:05:18:b6:78: 94:b6:cd:4d:0e:d3:1d:e4:08:49:41:b7:8e:32:a2:87:5a:72: df:82:91:22:22:48:de:93:36:85:22:21:bc:76:0e:7c:e5:e0: e9:86:b2:d1:fc:a4:61:93:d3:ee:c2:4d:b1:0d:d0:37:be:7f: c3:2a:25:51:2d:51:d4:c8:3d:5b:ba:36:36:68:2b:95:45:88: 6a:37:03:ff:ac:d9:7d:ff:5f:40:d0:58:95:af:49:6e:ce:70: 58:22:52:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZugDo7ahDQ7C6P4CW3pk2syMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZTFjNTExMGUwZTkwMzAyZTQ3MDEyZmY1YzgyMzAzYTQ2 NjFhZGUwHhcNMjYwMTA5MDAwMTA3WhcNMjYwMTEwMDAwMTA3WjAzMTEwLwYDVQQD EyhlYThkZjRiZDk5MjkwYWU0MWRjZjJhOWFiNmM0NjgzMzM1MWRhYzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySUzze6l+MpNysoBF+g76RLVvyQE KUy4ruQs2SmVQSqZL54MBVP9RLk694UdvKO+qsBGUAH+//3sd31VNVZpiDp0x9/w X6V/nndB2Dt4wkgYm5JS2UNH2WgZkJ9E1wM+MQkXqHQKzWP/Daun2HkJu4m9gT4+ 3gMdRilC9qG3uAGDELhpDbiuB5TwkHsY0OqYVoEscvnQrxyvKHZCrglJesPxpxtL SpHKBPk2dRWMzZN9XbPOj/HazXNKWBt38Pmevy5jDHd1qeji83FmsBQR/BA59KvJ FFVJbNufHpMLTtd+A8iAlwZIoCbEb9nsToIQnVY50316YqNJps7YiaC6PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqN9L2ZKQrkHc8qmrbEaDM1HayaMB8GA1UdIwQY MBaAFCThxREODpAwLkcBL/XIIwOkZhreMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk9IRkVRNE9rREF1UndFdjljZ2pBNlJtR3Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9iM2JjNzAtNWRiMC00N2I5LWI2OTYt NjdkYTU0MDkxMTZmLzEvSk9IRkVRNE9rREF1UndFdjljZ2pBNlJtR3Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9iM2JjNzAtNWRiMC00N2I5LWI2OTYtNjdkYTU0MDkxMTZm LzEvSk9IRkVRNE9rREF1UndFdjljZ2pBNlJtR3Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8ftG1vo KTFtcDAVFYBPKfD2uHU4MJy24+m/UfSjOmimdA0PDcbUFENxpai3+L5Pdv0BnSvd DejlpRArztbv/nazkjJOEBqB+W52aFrEd0Uir9JuXtyjxPUnR+ns+ALYBSyYP38c HKMiKtzeKnokUyTZitCCI1WHX/V+T23wtFZir+g4Q1UN+6HgPQ76S7mIW7iC169M YDASzHMqF7IFGLZ4lLbNTQ7THeQISUG3jjKih1py34KRIiJI3pM2hSIhvHYOfOXg 6Yay0fykYZPT7sJNsQ3QN75/wyolUS1R1Mg9W7o2NmgrlUWIajcD/6zZff9fQNBY la9Jbs5wWCJSuQ== -----END CERTIFICATE-----Generated at Fri Jan 9 08:03:13 2026 by rpki-client