This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json) Hash identifier: ECXI4j2Xr622t8sI652j293ShqRDhfB0s9IQ60s7OWU= Subject key identifier: 34:52:30:10:51:96:31:12:B9:E7:60:50:BB:95:B1:25:FF:4C:EC:A8 Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d Certificate serial: 019BB0CB66FAA4C951E73F3BFBF0B947C492 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft Manifest number: 14C0 Signing time: Mon 12 Jan 2026 06:01:18 +0000 Manifest this update: Mon 12 Jan 2026 06:01:18 +0000 Manifest next update: Tue 13 Jan 2026 06:01:18 +0000 Files and hashes: 1: 96n2FzRjkBX11HWVM9i_vNB-31E.roa (hash: 9OIDnPnlJZEwGjTFAXCdBpYg5ywi9zAXI41Z4fWCG4k=) 2: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: QuRma+KAyzZ43i/Zjq+ToJPO9KbVmXGOu8uFuMuUiPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:cb:66:fa:a4:c9:51:e7:3f:3b:fb:f0:b9:47:c4:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d Validity Not Before: Jan 12 06:01:18 2026 GMT Not After : Jan 13 06:01:18 2026 GMT Subject: CN=3452301051963112b9e76050bb95b125ff4ceca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b4:5c:f9:f6:da:ce:8f:d6:69:02:30:68:13: 36:9b:2f:89:fd:b3:28:a5:6e:39:2d:32:d4:79:51: bb:ce:6b:4b:77:2f:87:27:bb:c0:d9:80:67:af:7d: ac:18:fc:fb:7c:16:04:1b:5d:78:c2:66:69:79:ee: 9c:55:f2:07:4d:a7:b4:9b:11:0c:52:00:bd:18:96: 4b:e6:99:53:d8:9f:16:c2:48:bd:64:b0:e7:af:90: 16:5a:f8:e7:3b:b0:7e:af:78:54:ca:9b:16:33:ff: 1f:52:65:23:5e:8b:05:ad:dd:da:0a:a6:b3:60:ce: 3e:20:ce:e5:15:f3:eb:8a:ec:29:5f:e6:31:c1:89: 98:8b:3a:40:7c:08:b1:61:5e:8d:ac:96:5a:1d:0a: 2d:83:d4:b8:cb:7a:cf:84:94:0a:7d:e6:40:ab:ba: 98:6b:50:f5:b4:e5:27:8a:72:3d:a5:62:b9:37:ba: d4:e8:b4:e1:7a:b7:df:0c:54:9f:6d:07:52:a9:97: 89:88:0b:38:e8:29:6b:86:a2:18:5d:5d:f5:d2:73: b9:52:16:19:72:fe:66:c9:84:70:05:8c:15:58:b5: 1f:cf:57:ef:58:0c:f0:7a:67:c1:64:94:ba:61:23: 2c:0a:19:3a:32:d2:30:e4:d5:54:77:f3:39:35:30: c6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:52:30:10:51:96:31:12:B9:E7:60:50:BB:95:B1:25:FF:4C:EC:A8 X509v3 Authority Key Identifier: keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:f4:ce:48:a1:84:6a:e3:d4:48:73:2b:bc:c6:10:83:58:2b: 32:a3:f3:43:00:87:a1:c9:18:03:81:51:5a:25:c4:f4:08:7b: a2:7d:aa:c3:0e:44:55:e9:92:81:a9:2b:84:eb:77:99:b4:49: 06:e5:59:b0:4e:29:b0:11:c9:49:f4:78:a2:3b:69:d0:f6:01: e2:e7:f5:49:6d:83:1f:ca:f6:64:43:09:56:10:58:8d:28:3a: 69:f6:20:24:c4:16:b5:f0:4f:dd:1d:6c:41:e2:1e:5b:13:13: 8c:97:35:61:3e:27:68:87:20:39:90:2a:e4:27:c9:57:e4:d5: 8f:d2:7b:3e:a4:6a:95:31:b4:f9:88:ed:b1:5f:ba:a8:50:61: 06:36:e2:3b:fe:e2:6f:0b:d8:5c:69:7f:97:49:39:ed:a3:28: 42:8c:64:75:5d:ea:94:6b:bc:09:94:79:2e:7e:27:cc:29:66: 28:f4:ba:1e:f1:c8:f9:d9:44:66:65:dc:ff:9e:eb:01:83:d1: d2:0c:ca:5a:b2:bd:d0:91:95:e5:05:a8:c5:8b:67:0c:b3:e4: 82:bb:5a:61:58:fe:76:25:ba:8c:c0:27:5c:51:b9:8d:bc:05: 1a:fb:91:5e:6f:18:53:f9:68:4d:0f:d0:5c:6a:6c:b7:a3:9b: 4b:9b:46:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwy2b6pMlR5z87+/C5R8SSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzE5NjcxMTBjYWJlZWM0YTY2Yjc4MDM3ZTUyYTg3YjJi YzhmNWQwHhcNMjYwMTEyMDYwMTE4WhcNMjYwMTEzMDYwMTE4WjAzMTEwLwYDVQQD EygzNDUyMzAxMDUxOTYzMTEyYjllNzYwNTBiYjk1YjEyNWZmNGNlY2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLRc+fbazo/WaQIwaBM2my+J/bMo pW45LTLUeVG7zmtLdy+HJ7vA2YBnr32sGPz7fBYEG114wmZpee6cVfIHTae0mxEM UgC9GJZL5plT2J8Wwki9ZLDnr5AWWvjnO7B+r3hUypsWM/8fUmUjXosFrd3aCqaz YM4+IM7lFfPriuwpX+YxwYmYizpAfAixYV6NrJZaHQotg9S4y3rPhJQKfeZAq7qY a1D1tOUninI9pWK5N7rU6LTherffDFSfbQdSqZeJiAs46ClrhqIYXV310nO5UhYZ cv5myYRwBYwVWLUfz1fvWAzwemfBZJS6YSMsChk6MtIw5NVUd/M5NTDGXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRSMBBRljESuedgULuVsSX/TOyoMB8GA1UdIwQY MBaAFIsxlnEQyr7sSma3gDflKoeyvI9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpHV2NSREt2dXhLWnJlQU4tVXFoN0s4ajEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zMWRmMDctZGNiNS00YTUwLWE3MDQt YTAxN2MzNjg0NjZkLzEvaXpHV2NSREt2dXhLWnJlQU4tVXFoN0s4ajEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zMWRmMDctZGNiNS00YTUwLWE3MDQtYTAxN2MzNjg0NjZk LzEvaXpHV2NSREt2dXhLWnJlQU4tVXFoN0s4ajEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvTOSKGE auPUSHMrvMYQg1grMqPzQwCHockYA4FRWiXE9Ah7on2qww5EVemSgakrhOt3mbRJ BuVZsE4psBHJSfR4ojtp0PYB4uf1SW2DH8r2ZEMJVhBYjSg6afYgJMQWtfBP3R1s QeIeWxMTjJc1YT4naIcgOZAq5CfJV+TVj9J7PqRqlTG0+YjtsV+6qFBhBjbiO/7i bwvYXGl/l0k57aMoQoxkdV3qlGu8CZR5Ln4nzClmKPS6HvHI+dlEZmXc/57rAYPR 0gzKWrK90JGV5QWoxYtnDLPkgrtaYVj+diW6jMAnXFG5jbwFGvuRXm8YU/loTQ/Q XGpst6ObS5tG0Q== -----END CERTIFICATE-----Generated at Mon Jan 12 13:36:26 2026 by rpki-client