This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft File: IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft (raw, json) Hash identifier: sbCprFHcnJhzJsc+ToS+3XYUbSmSBU25c5Jz/U7P96o= Subject key identifier: 6D:CB:AF:FB:59:C3:57:5C:7D:36:BB:24:BD:0A:C2:7E:53:8E:15:5A Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0 Certificate issuer: /CN=2065ced829c011cdb5abb381c164782ded1627e0 Certificate serial: 019B9FD87825E63201DDD408E430E5DCF19C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft Manifest number: 04D5 Signing time: Thu 08 Jan 2026 23:02:02 +0000 Manifest this update: Thu 08 Jan 2026 23:02:02 +0000 Manifest next update: Fri 09 Jan 2026 23:02:02 +0000 Files and hashes: 1: IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl (hash: SWQMl+XRavLa+i4x8EWvk/vZOqaFsN5KxOUnZYDWjS8=) 2: fmfMKVUT1v23IOfvxsOu3DSMyz8.roa (hash: u2kyNqDKTbLApMvC0LB9zT5i0g/bvpJwVbX+TwLXl+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 23:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9f:d8:78:25:e6:32:01:dd:d4:08:e4:30:e5:dc:f1:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0 Validity Not Before: Jan 8 23:02:02 2026 GMT Not After : Jan 9 23:02:02 2026 GMT Subject: CN=6dcbaffb59c3575c7d36bb24bd0ac27e538e155a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:23:aa:5f:4b:be:d9:43:fd:32:16:f6:5d:ec: 4f:3c:5c:52:37:58:2f:7d:da:25:71:f9:98:eb:8c: cf:c0:aa:a8:8d:a8:26:6b:48:fc:fd:39:ee:21:52: fc:50:b3:f3:ea:33:52:a5:ca:e3:bd:af:8d:6b:b6: 9a:9d:88:b1:43:55:c3:90:bd:97:ca:f0:6c:58:06: d1:1d:a3:db:52:19:a4:78:25:3e:8c:d5:39:52:14: bb:68:db:72:3d:04:4f:24:19:90:2d:07:61:de:18: bb:94:a9:14:8f:c6:38:15:e0:68:1f:db:4a:5d:72: e8:06:80:de:5a:34:fb:2e:c5:55:70:bb:9f:f6:70: ce:a2:0a:57:c0:1a:85:29:53:5b:3f:34:4c:df:09: da:86:fc:c3:56:f7:e0:94:a0:6b:68:14:2e:dc:fc: 63:a6:36:39:c2:93:48:83:ea:8c:c1:2c:d4:24:ea: c8:13:bc:6c:8a:1a:9d:cc:a2:ae:90:07:06:cf:f6: d5:d8:22:cf:a1:10:9a:fa:b3:c7:c6:66:16:26:c3: 8b:a1:e2:21:82:29:d6:7d:56:6c:c5:0b:01:31:9f: ad:72:99:b0:b3:23:89:13:41:81:5a:5e:c6:c9:e6: 1c:3f:c4:cc:d1:f7:a0:ee:ce:90:48:8f:2c:f1:09: c4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:CB:AF:FB:59:C3:57:5C:7D:36:BB:24:BD:0A:C2:7E:53:8E:15:5A X509v3 Authority Key Identifier: keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:14:71:2e:d9:63:85:2f:43:94:9d:36:71:fa:db:68:f2:22: 39:1c:6f:8d:f8:fc:6d:af:4f:ea:80:33:ab:6a:b8:bc:af:43: 73:c1:eb:4d:31:f8:5a:52:b8:c8:d7:77:38:00:ce:ba:01:d3: 53:82:6e:1c:22:06:05:61:f6:0f:05:ec:7d:71:17:3c:35:01: 56:32:84:a1:76:f0:e1:9a:31:a4:44:60:82:d9:ac:ad:21:08: 54:67:77:09:42:41:78:76:cd:fa:e1:ab:c3:4a:1e:0a:99:08: 3a:61:6a:ce:cf:bb:a2:cd:3c:18:16:9b:5b:13:80:52:a3:c3: 45:d4:79:44:3a:17:ae:e0:c0:25:64:69:cd:86:c0:9c:5b:c9: aa:3c:b7:78:b4:aa:2b:5e:c7:7c:e1:23:4a:84:2c:ce:ab:b6: 1b:4f:94:20:62:7b:55:f1:29:e7:59:ce:86:ac:7b:a0:7d:a0: 56:51:3b:3b:24:6f:72:00:20:4f:d8:1e:cf:85:15:64:9d:25: e6:f9:6c:b9:ab:e6:1c:73:92:e7:f0:1f:23:66:28:09:1c:2d: 37:17:4a:08:7c:4a:3f:1f:2e:89:98:ad:bb:a9:c8:e8:f7:fc: da:ea:a5:05:2e:27:ec:f2:72:df:52:d0:77:6a:35:08:0e:d6: f5:c6:83:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuf2Hgl5jIB3dQI5DDl3PGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNjVjZWQ4MjljMDExY2RiNWFiYjM4MWMxNjQ3ODJkZWQx NjI3ZTAwHhcNMjYwMTA4MjMwMjAyWhcNMjYwMTA5MjMwMjAyWjAzMTEwLwYDVQQD Eyg2ZGNiYWZmYjU5YzM1NzVjN2QzNmJiMjRiZDBhYzI3ZTUzOGUxNTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCOqX0u+2UP9Mhb2XexPPFxSN1gv fdolcfmY64zPwKqojagma0j8/TnuIVL8ULPz6jNSpcrjva+Na7aanYixQ1XDkL2X yvBsWAbRHaPbUhmkeCU+jNU5UhS7aNtyPQRPJBmQLQdh3hi7lKkUj8Y4FeBoH9tK XXLoBoDeWjT7LsVVcLuf9nDOogpXwBqFKVNbPzRM3wnahvzDVvfglKBraBQu3Pxj pjY5wpNIg+qMwSzUJOrIE7xsihqdzKKukAcGz/bV2CLPoRCa+rPHxmYWJsOLoeIh ginWfVZsxQsBMZ+tcpmwsyOJE0GBWl7GyeYcP8TM0feg7s6QSI8s8QnEhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3Lr/tZw1dcfTa7JL0Kwn5TjhVaMB8GA1UdIwQY MBaAFCBlztgpwBHNtauzgcFkeC3tFifgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2Qt MzhmOGVkMDAwMWVkLzEvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2QtMzhmOGVkMDAwMWVk LzEvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThRxLtlj hS9DlJ02cfrbaPIiORxvjfj8ba9P6oAzq2q4vK9Dc8HrTTH4WlK4yNd3OADOugHT U4JuHCIGBWH2DwXsfXEXPDUBVjKEoXbw4ZoxpERggtmsrSEIVGd3CUJBeHbN+uGr w0oeCpkIOmFqzs+7os08GBabWxOAUqPDRdR5RDoXruDAJWRpzYbAnFvJqjy3eLSq K17HfOEjSoQszqu2G0+UIGJ7VfEp51nOhqx7oH2gVlE7OyRvcgAgT9gez4UVZJ0l 5vlsuavmHHOS5/AfI2YoCRwtNxdKCHxKPx8uiZitu6nI6Pf82uqlBS4n7PJy31LQ d2o1CA7W9caDxw== -----END CERTIFICATE-----Generated at Fri Jan 9 07:30:46 2026 by rpki-client