This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft File: iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft (raw, json) Hash identifier: QRwO5IRcJ7NxGAMTExowWXN7LWF//XY1fA5hnS692OQ= Subject key identifier: C5:2F:34:23:07:93:4D:E8:15:2E:2E:52:65:8A:B2:46:FF:84:06:B2 Authority key identifier: 88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5 Certificate issuer: /CN=88987ed4e73d0407483cc224ccf45aedf4969dd5 Certificate serial: 019B77491D53197D56433381107C85D70EC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft Manifest number: 173C Signing time: Thu 01 Jan 2026 02:00:38 +0000 Manifest this update: Thu 01 Jan 2026 02:00:38 +0000 Manifest next update: Fri 02 Jan 2026 02:00:38 +0000 Files and hashes: 1: iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl (hash: AU+PbQMxGKbEpOuVVQqUocy9KzfWeCwZmgKdHpNahOY=) 2: ja_rBF-mVB6I6AG5Sq3U_cQoltk.roa (hash: nVfwFtdg/ueuXQpAAMHTHZq3sXCbrECHNWhALLqW2Vo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:49:1d:53:19:7d:56:43:33:81:10:7c:85:d7:0e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88987ed4e73d0407483cc224ccf45aedf4969dd5 Validity Not Before: Jan 1 02:00:38 2026 GMT Not After : Jan 2 02:00:38 2026 GMT Subject: CN=c52f342307934de8152e2e52658ab246ff8406b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5f:ab:52:69:4c:ca:34:d4:26:48:6e:c5:5c: 62:4a:34:d9:7e:10:71:6b:12:09:b1:0f:fc:20:42: 81:c9:f7:e3:a6:f6:aa:92:2d:d0:81:db:66:b1:89: 92:9a:3a:c4:3f:60:a4:85:fe:ba:e5:52:46:14:99: ae:ed:1a:6a:d8:ab:23:ab:aa:2b:32:07:c3:5c:27: aa:95:d1:c3:21:a9:76:36:4d:1d:60:de:30:37:df: 3e:a6:ff:95:14:e7:db:d8:2f:5b:05:36:48:a6:fd: d1:a4:32:0d:fc:55:24:83:93:0c:e3:8c:c2:83:65: ad:1a:77:b1:78:62:b7:a2:e9:aa:87:20:da:8b:06: b3:7f:94:a2:b3:0c:aa:1f:f4:ee:29:a0:c3:c0:30: d3:bf:01:b9:2b:17:a8:7a:97:99:e5:7e:d1:26:48: 9e:b7:cf:8b:02:56:b4:82:d2:94:4c:27:74:9b:40: ee:5a:16:6d:4c:e0:22:2d:12:fd:c2:4e:4b:e5:fd: b2:df:bb:b4:1a:b0:e4:92:ac:43:fd:24:35:c7:b8: 2d:40:40:21:d1:b0:4c:d9:73:98:a7:ba:3a:f5:0a: 81:e1:a8:0d:e0:5a:a2:23:20:a0:87:0a:91:c0:5a: 7e:8e:e2:12:44:7e:04:d7:61:50:80:45:16:4d:23: 8c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2F:34:23:07:93:4D:E8:15:2E:2E:52:65:8A:B2:46:FF:84:06:B2 X509v3 Authority Key Identifier: keyid:88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c7:20:fd:87:a7:2f:33:c7:3b:31:cf:5a:36:70:5c:32:9c: db:1b:30:43:48:12:39:b5:43:1c:f3:e4:d4:d9:a7:97:96:9c: 3e:b8:bb:64:05:3e:82:53:59:af:44:85:12:3c:00:3b:dc:0b: ed:99:b1:e8:8f:6a:96:79:1e:a6:ff:ce:7d:4c:f6:3d:70:12: eb:9d:8f:6e:37:22:67:0f:12:e2:68:bd:23:d2:5b:74:7c:9e: 6b:d6:b3:b1:32:3d:07:2e:9b:16:ed:6d:6b:a0:48:8a:02:36: 9e:2a:33:13:f4:65:91:f1:ac:7c:f8:9d:64:22:00:3a:e2:c4: 54:eb:61:09:61:a9:20:f9:0e:48:63:8e:81:45:60:2d:da:c6: f9:8b:d7:4e:0f:dd:d8:d1:76:9f:16:8c:a2:5a:3a:65:f3:62: a7:f6:74:69:da:3f:ed:a0:8d:8f:13:b7:e5:b7:b6:4f:aa:c9: db:43:a0:4a:81:1b:1b:4f:17:fa:ac:2d:93:36:bb:92:bc:d1: ae:b0:83:c1:ae:c2:fb:1c:a2:01:e8:a3:4b:44:b8:04:e5:09: 60:a3:ca:ef:8c:f1:92:00:2b:74:f8:bc:0d:2c:a8:9d:b9:1d: 86:64:e8:77:76:64:22:7d:83:43:c7:87:3f:85:b0:16:f7:58: 0e:58:6b:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3SR1TGX1WQzOBEHyF1w7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4OTg3ZWQ0ZTczZDA0MDc0ODNjYzIyNGNjZjQ1YWVkZjQ5 NjlkZDUwHhcNMjYwMTAxMDIwMDM4WhcNMjYwMTAyMDIwMDM4WjAzMTEwLwYDVQQD EyhjNTJmMzQyMzA3OTM0ZGU4MTUyZTJlNTI2NThhYjI0NmZmODQwNmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV+rUmlMyjTUJkhuxVxiSjTZfhBx axIJsQ/8IEKByffjpvaqki3QgdtmsYmSmjrEP2Ckhf665VJGFJmu7Rpq2Ksjq6or MgfDXCeqldHDIal2Nk0dYN4wN98+pv+VFOfb2C9bBTZIpv3RpDIN/FUkg5MM44zC g2WtGnexeGK3oumqhyDaiwazf5SiswyqH/TuKaDDwDDTvwG5KxeoepeZ5X7RJkie t8+LAla0gtKUTCd0m0DuWhZtTOAiLRL9wk5L5f2y37u0GrDkkqxD/SQ1x7gtQEAh 0bBM2XOYp7o69QqB4agN4FqiIyCghwqRwFp+juISRH4E12FQgEUWTSOM7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUvNCMHk03oFS4uUmWKskb/hAayMB8GA1UdIwQY MBaAFIiYftTnPQQHSDzCJMz0Wu30lp3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wNGM0Y2UtYjlmMy00YzZhLWEzZTkt OTFiZjYxZGQ4NTNmLzEvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8wNGM0Y2UtYjlmMy00YzZhLWEzZTktOTFiZjYxZGQ4NTNm LzEvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8cg/Yen LzPHOzHPWjZwXDKc2xswQ0gSObVDHPPk1Nmnl5acPri7ZAU+glNZr0SFEjwAO9wL 7Zmx6I9qlnkepv/OfUz2PXAS652PbjciZw8S4mi9I9JbdHyea9azsTI9By6bFu1t a6BIigI2niozE/RlkfGsfPidZCIAOuLEVOthCWGpIPkOSGOOgUVgLdrG+YvXTg/d 2NF2nxaMolo6ZfNip/Z0ado/7aCNjxO35be2T6rJ20OgSoEbG08X+qwtkza7krzR rrCDwa7C+xyiAeijS0S4BOUJYKPK74zxkgArdPi8DSyonbkdhmTod3ZkIn2DQ8eH P4WwFvdYDlhr2Q== -----END CERTIFICATE-----Generated at Thu Jan 1 11:00:32 2026 by rpki-client