This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft File: iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json) Hash identifier: EylSXjDcyueNtEzHyW3rK6HVP87e/qjJzHVXYU6GM9A= Subject key identifier: 9B:7A:CA:0B:0D:AF:1A:35:42:FF:49:DE:2D:69:9C:0B:38:57:07:3F Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e Certificate serial: 019BABDCB315BD8D4DC92C2F484090B03DD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft Manifest number: 102B Signing time: Sun 11 Jan 2026 07:02:06 +0000 Manifest this update: Sun 11 Jan 2026 07:02:06 +0000 Manifest next update: Mon 12 Jan 2026 07:02:06 +0000 Files and hashes: 1: MZaOI67AYigbpIsWpWqOKyUB95k.roa (hash: 28l2earsozG7gOJ16ktFFzzWVz+qyy71L+Rc+YVMUeI=) 2: VWwoGO2sGQjK21cMFf3XwlF6U0E.roa (hash: G+mIqYh3iGFVL9m6/VUywuW90iG64GkP4wAw6JgPgy4=) 3: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: /yWRN37Dor/A7DcohquMW0tsO1MI2q/Q3omp3TFOMzI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ab:dc:b3:15:bd:8d:4d:c9:2c:2f:48:40:90:b0:3d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e Validity Not Before: Jan 11 07:02:06 2026 GMT Not After : Jan 12 07:02:06 2026 GMT Subject: CN=9b7aca0b0daf1a3542ff49de2d699c0b3857073f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0d:0f:cf:f3:8e:1f:7c:fc:80:b8:dd:24:2e: db:73:2b:94:9c:62:6d:81:e3:dd:52:35:a5:1b:da: 51:1d:ef:d8:59:c0:16:1e:39:19:a6:10:d5:60:7e: d1:50:72:1b:dd:b9:f7:34:3d:26:13:80:97:62:e7: b0:ea:38:4f:49:c4:00:22:a8:93:e5:93:ab:4d:d1: 23:20:b9:24:d3:02:a2:55:65:e2:22:db:a0:b8:c5: 43:dc:df:a8:75:29:9f:27:98:b8:b2:50:b9:74:f3: 7c:8d:ce:db:a9:be:14:86:61:d2:22:60:1a:ce:e9: ff:e5:08:4a:9b:5c:50:5a:04:e9:89:21:f4:ee:73: a3:e8:0c:16:34:c5:c3:09:25:53:d5:f0:52:f8:72: 77:f1:0c:e2:b2:27:4c:b0:91:81:0e:74:4a:c1:1e: e2:b2:b7:fe:43:d8:26:d1:e6:17:2e:68:2f:2d:2c: 07:45:d6:2f:36:f7:f3:5a:d7:ca:3c:bb:13:65:18: 98:cd:d7:34:c6:78:72:15:26:fa:d1:05:3e:7a:c8: 61:1e:32:dd:bb:6c:d9:c3:f1:c6:49:78:a0:61:a9: d1:36:0e:89:8d:5b:2d:dd:dc:e1:56:0b:9b:db:1c: 1e:c4:62:31:01:16:6a:ac:12:bf:ca:8b:3d:09:a2: c0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7A:CA:0B:0D:AF:1A:35:42:FF:49:DE:2D:69:9C:0B:38:57:07:3F X509v3 Authority Key Identifier: keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b6:45:16:81:a4:bb:8c:6d:4e:42:f9:62:9a:d9:55:ed:1f: 3d:e0:cb:85:92:6e:7b:19:c4:c3:f2:86:39:c4:51:f5:00:fd: c5:8a:a0:af:1b:26:ba:9c:cf:c9:a6:77:cc:39:02:b5:85:fb: 5f:05:cd:0a:0c:17:0f:97:95:ef:89:99:5b:db:b7:1f:2c:bb: ad:40:15:ba:6a:b2:85:b0:9a:aa:64:c4:c7:64:e0:58:73:34: 55:36:f1:6d:cf:04:a4:fc:71:87:71:59:b9:d5:80:a9:52:30: 40:10:15:52:74:a6:9f:09:23:c7:a3:87:64:14:3a:2c:bf:a0: 36:c7:5a:63:aa:ea:31:41:77:a5:87:5f:cb:bd:6c:b2:76:f5: f7:82:0e:4e:06:fc:a0:1d:cd:37:c3:11:3c:ea:85:b2:f4:c8: 3b:57:34:03:56:c5:1e:63:f3:64:8f:b6:fc:e5:50:6b:8e:c7: 6e:78:5b:51:66:90:53:6b:59:11:b3:66:21:87:3f:c1:a8:47: c3:4d:cb:7a:dd:9c:9c:2a:bd:10:a7:a7:47:65:6c:22:c8:ae: 0a:67:cd:ba:84:07:07:60:af:00:5a:db:48:01:62:66:58:67: 3d:58:5e:a7:99:47:3c:2a:50:2c:fd:03:a9:b4:b5:7b:5b:4f: f2:ff:ab:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZur3LMVvY1NySwvSECQsD3YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5M2E1ODEyNGNlOWNjNDM3ODM5NTUyNTVlN2Y1ODM5MDVj ZGIxNGUwHhcNMjYwMTExMDcwMjA2WhcNMjYwMTEyMDcwMjA2WjAzMTEwLwYDVQQD Eyg5YjdhY2EwYjBkYWYxYTM1NDJmZjQ5ZGUyZDY5OWMwYjM4NTcwNzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw0Pz/OOH3z8gLjdJC7bcyuUnGJt gePdUjWlG9pRHe/YWcAWHjkZphDVYH7RUHIb3bn3ND0mE4CXYuew6jhPScQAIqiT 5ZOrTdEjILkk0wKiVWXiItuguMVD3N+odSmfJ5i4slC5dPN8jc7bqb4UhmHSImAa zun/5QhKm1xQWgTpiSH07nOj6AwWNMXDCSVT1fBS+HJ38QzisidMsJGBDnRKwR7i srf+Q9gm0eYXLmgvLSwHRdYvNvfzWtfKPLsTZRiYzdc0xnhyFSb60QU+eshhHjLd u2zZw/HGSXigYanRNg6JjVst3dzhVgub2xwexGIxARZqrBK/yos9CaLAKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJt6ygsNrxo1Qv9J3i1pnAs4Vwc/MB8GA1UdIwQY MBaAFIk6WBJM6cxDeDlVJV5/WDkFzbFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hMzUyYmEtYzIyOC00YTE1LTkxNjgt MzAzYjhiYzI4YmZhLzEvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hMzUyYmEtYzIyOC00YTE1LTkxNjgtMzAzYjhiYzI4YmZh LzEvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrZFFoGk u4xtTkL5YprZVe0fPeDLhZJuexnEw/KGOcRR9QD9xYqgrxsmupzPyaZ3zDkCtYX7 XwXNCgwXD5eV74mZW9u3Hyy7rUAVumqyhbCaqmTEx2TgWHM0VTbxbc8EpPxxh3FZ udWAqVIwQBAVUnSmnwkjx6OHZBQ6LL+gNsdaY6rqMUF3pYdfy71ssnb194IOTgb8 oB3NN8MRPOqFsvTIO1c0A1bFHmPzZI+2/OVQa47HbnhbUWaQU2tZEbNmIYc/wahH w03Let2cnCq9EKenR2VsIsiuCmfNuoQHB2CvAFrbSAFiZlhnPVhep5lHPCpQLP0D qbS1e1tP8v+rHw== -----END CERTIFICATE-----Generated at Sun Jan 11 12:31:01 2026 by rpki-client