This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft File: IlS8wDKT460OGaej_Rsc-9NMCZA.mft (raw, json) Hash identifier: Mqg3s4XrrPq4mveM9e4OKmmaOeB2nqT+h31P+19kLRQ= Subject key identifier: 45:FA:FB:8F:D4:7B:E6:16:94:F2:94:0F:06:70:BE:87:97:08:CC:8B Authority key identifier: 22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90 Certificate issuer: /CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990 Certificate serial: 019BA234C353003409FF467445DFA38CE25A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft Manifest number: 155F Signing time: Fri 09 Jan 2026 10:02:05 +0000 Manifest this update: Fri 09 Jan 2026 10:02:05 +0000 Manifest next update: Sat 10 Jan 2026 10:02:05 +0000 Files and hashes: 1: 3umndGzAD5rCZWRXYXf_uY9ZlGQ.roa (hash: +hSbfwDC34My2nrMGTb3S+msbWLWB8nIUFlFpyrQ6XM=) 2: IlS8wDKT460OGaej_Rsc-9NMCZA.crl (hash: B/cTgwDHHUzDviDw0STQNQAhhtAIv2ukJib+wg8HVMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:34:c3:53:00:34:09:ff:46:74:45:df:a3:8c:e2:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990 Validity Not Before: Jan 9 10:02:05 2026 GMT Not After : Jan 10 10:02:05 2026 GMT Subject: CN=45fafb8fd47be61694f2940f0670be879708cc8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8c:db:11:13:79:7c:17:f2:25:e0:81:a5:8b: 75:be:f9:de:48:b5:e8:e1:38:86:9c:d0:b2:1b:cd: 85:80:a8:c8:b9:c7:f4:ed:ad:31:4c:2c:15:ae:64: 64:bb:15:c4:66:3b:29:54:e7:ac:09:0b:d4:24:65: 97:5b:90:d4:41:a1:4a:3f:52:2d:b1:4c:24:fd:97: 6e:4d:ec:5d:bf:c3:1a:37:08:5c:9c:7a:0c:6f:06: e6:94:31:20:56:0f:58:96:47:0c:ae:dd:6c:27:a2: 35:fe:6d:d8:3c:5e:bd:23:d9:2c:5a:ee:d8:1f:2c: ef:33:99:f1:10:a8:3d:83:87:ff:5c:7d:b1:d5:bc: 02:a0:e6:d2:b9:b3:d1:3a:6e:9d:b2:be:45:6e:cd: b1:aa:e8:be:82:67:68:17:74:0e:06:71:a8:14:d0: 7d:81:85:07:12:51:4b:a2:33:57:78:0d:81:e5:db: d6:02:0c:60:53:64:31:e6:61:a0:f7:9a:ec:8a:02: 1c:6d:90:0f:2e:0c:ed:85:77:b6:23:93:84:65:d4: e0:cd:38:65:a1:4b:37:7d:65:aa:e3:63:8c:e0:94: 2d:72:bb:44:b6:49:a8:0a:ff:7f:86:a4:70:99:de: 3d:9c:68:f2:9c:26:c3:2b:d8:7c:9f:61:03:05:50: 87:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FA:FB:8F:D4:7B:E6:16:94:F2:94:0F:06:70:BE:87:97:08:CC:8B X509v3 Authority Key Identifier: keyid:22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:02:04:64:c4:f7:6b:a9:d2:99:a7:88:e2:6f:22:7f:93:bd: e2:36:3a:6b:08:d2:e3:76:37:f7:42:de:87:a5:9b:e3:43:ca: 85:36:26:b8:92:17:81:ea:df:9d:f7:37:4f:57:e7:f0:0f:c8: 01:b4:8b:9d:5f:68:98:61:67:71:21:94:24:b5:f8:31:24:43: 98:d1:d3:78:e2:a9:7a:7a:96:ad:38:bd:14:38:dc:a5:34:e8: 76:e2:72:ab:71:0e:de:a2:8b:c8:d0:6e:49:4e:86:37:0f:d7: 88:28:69:82:46:6e:64:89:7a:41:d8:30:1b:81:6e:81:70:d5: f7:ec:20:1f:6b:66:ce:49:5f:ae:48:c9:78:b6:b8:c8:2c:9e: 8a:e5:3a:ac:58:cc:8f:b0:54:75:d3:c0:ce:e9:98:1d:67:9f: 77:99:71:75:b6:3f:1e:0a:f4:d8:06:f9:a3:e4:4e:1e:9f:ea: 49:c4:2c:8f:13:ff:e8:5f:f0:e5:ed:7e:27:b4:16:ee:62:06: 44:7a:0d:08:35:93:8c:1f:31:b4:0d:50:90:00:51:67:23:15: 3a:b6:ea:f5:69:6e:21:8b:d0:d3:fc:0a:1e:de:39:77:df:08: 7e:4f:95:0b:1c:7d:11:9a:9c:11:23:36:bb:b6:08:56:b5:23: f1:cf:52:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuiNMNTADQJ/0Z0Rd+jjOJaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNTRiY2MwMzI5M2UzYWQwZTE5YTdhM2ZkMWIxY2ZiZDM0 YzA5OTAwHhcNMjYwMTA5MTAwMjA1WhcNMjYwMTEwMTAwMjA1WjAzMTEwLwYDVQQD Eyg0NWZhZmI4ZmQ0N2JlNjE2OTRmMjk0MGYwNjcwYmU4Nzk3MDhjYzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4zbERN5fBfyJeCBpYt1vvneSLXo 4TiGnNCyG82FgKjIucf07a0xTCwVrmRkuxXEZjspVOesCQvUJGWXW5DUQaFKP1It sUwk/ZduTexdv8MaNwhcnHoMbwbmlDEgVg9YlkcMrt1sJ6I1/m3YPF69I9ksWu7Y HyzvM5nxEKg9g4f/XH2x1bwCoObSubPROm6dsr5Fbs2xqui+gmdoF3QOBnGoFNB9 gYUHElFLojNXeA2B5dvWAgxgU2Qx5mGg95rsigIcbZAPLgzthXe2I5OEZdTgzThl oUs3fWWq42OM4JQtcrtEtkmoCv9/hqRwmd49nGjynCbDK9h8n2EDBVCHHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEX6+4/Ue+YWlPKUDwZwvoeXCMyLMB8GA1UdIwQY MBaAFCJUvMAyk+OtDhmno/0bHPvTTAmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWxTOHdES1Q0NjBPR2Flal9Sc2MtOU5NQ1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hM2E1MzAtMjVhYS00MDIzLTlhODAt NGUzNDdkNTUxYzNmLzEvSWxTOHdES1Q0NjBPR2Flal9Sc2MtOU5NQ1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9hM2E1MzAtMjVhYS00MDIzLTlhODAtNGUzNDdkNTUxYzNm LzEvSWxTOHdES1Q0NjBPR2Flal9Sc2MtOU5NQ1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQIEZMT3 a6nSmaeI4m8if5O94jY6awjS43Y390Leh6Wb40PKhTYmuJIXgerfnfc3T1fn8A/I AbSLnV9omGFncSGUJLX4MSRDmNHTeOKpenqWrTi9FDjcpTToduJyq3EO3qKLyNBu SU6GNw/XiChpgkZuZIl6QdgwG4FugXDV9+wgH2tmzklfrkjJeLa4yCyeiuU6rFjM j7BUddPAzumYHWefd5lxdbY/Hgr02Ab5o+ROHp/qScQsjxP/6F/w5e1+J7QW7mIG RHoNCDWTjB8xtA1QkABRZyMVOrbq9WluIYvQ0/wKHt45d98Ifk+VCxx9EZqcESM2 u7YIVrUj8c9SAA== -----END CERTIFICATE-----Generated at Fri Jan 9 15:59:53 2026 by rpki-client