This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json) Hash identifier: FJP41S+40QLrhfVv5hKI6JmtKUD3OB67Pcfh3gNyMsU= Subject key identifier: 19:2E:77:81:4F:31:3B:1F:21:5F:1A:09:55:FB:32:72:45:FF:60:8E Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f Certificate serial: 019B804C540C6C595C3A785B2D0FD561C2B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft Manifest number: 0FC8 Signing time: Fri 02 Jan 2026 20:00:44 +0000 Manifest this update: Fri 02 Jan 2026 20:00:44 +0000 Manifest next update: Sat 03 Jan 2026 20:00:44 +0000 Files and hashes: 1: 1-lmEP6bvSg72yf_GUeD4MSKNWhk.roa (hash: UZw/L6lxwycncfuJtQDWqM2GbKpxVlPtsRDnOtxZfq4=) 2: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: 1JalaP6a6Axw9ByRBruidDDZdS13Cm5scNqllF83PzM=) 3: uy5YZrZ342ZeZ2NGVVpULZDoPcE.roa (hash: ePYFBpMymgZ8ANPnNiychRqaQ6Srx/8bC1+U5miv+Ng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:4c:54:0c:6c:59:5c:3a:78:5b:2d:0f:d5:61:c2:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f Validity Not Before: Jan 2 20:00:44 2026 GMT Not After : Jan 3 20:00:44 2026 GMT Subject: CN=192e77814f313b1f215f1a0955fb327245ff608e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ce:d0:59:d8:a0:ba:59:c9:fe:d8:24:f7:b8: 13:54:dc:cd:37:d1:8a:69:e4:ad:e0:18:41:64:35: 97:f1:24:1d:7b:4e:52:33:3e:ca:e0:17:a0:db:82: 2b:f0:8a:70:e5:14:b2:39:12:65:53:b7:17:60:73: e7:44:89:95:43:5d:64:e4:08:45:47:32:aa:ff:7a: 0c:41:ea:57:6f:c8:95:86:db:bf:56:85:eb:fd:56: 6f:28:c5:eb:d5:ea:80:79:9d:64:9c:33:ed:65:ac: e7:00:03:0d:65:88:1f:d7:e5:69:ba:86:4e:9b:12: ab:71:37:70:10:d2:89:71:59:d1:db:28:b2:51:91: d8:a5:9d:dd:77:f6:38:28:ca:a5:bb:52:7e:4e:6b: 52:56:93:2a:46:64:53:2f:82:f2:7b:ec:b5:9e:03: 02:d7:a8:32:67:95:1a:1a:0e:c2:56:6a:9e:5d:a8: 67:63:1d:c0:c0:7a:de:65:19:53:71:21:14:09:00: 92:f6:f4:ae:c4:ea:d1:7d:7d:ad:0e:ce:ca:9c:c2: b6:3c:77:60:6f:8f:29:8b:4b:70:d8:5d:03:35:c8: 49:e9:83:35:ea:a9:ca:ea:a0:cd:b5:72:32:8c:77: 39:4d:09:08:fa:d9:a2:21:60:3c:d8:7d:c0:8c:1a: 8f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2E:77:81:4F:31:3B:1F:21:5F:1A:09:55:FB:32:72:45:FF:60:8E X509v3 Authority Key Identifier: keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f2:26:74:65:c0:70:7e:2a:dc:ca:30:d8:ab:70:15:40:0d: a5:2d:56:19:29:7c:ba:4d:19:c0:c7:b7:b7:9c:6b:dd:4a:04: 37:07:01:f5:a8:45:28:c8:9a:06:16:0d:cc:3d:3c:61:aa:cb: ef:a8:43:86:1a:24:d6:6f:5a:f6:e9:d5:30:9f:86:2e:50:61: ea:71:5a:a6:4d:d0:cf:86:c6:6e:e7:a7:32:cf:de:28:12:e6: 05:23:13:ee:e4:dc:5c:8a:38:94:4c:80:9c:85:1c:be:82:6a: 1d:88:61:6e:ba:ef:bf:df:26:39:48:25:a2:37:d5:40:05:97: a2:b7:e4:02:a3:dc:0d:8d:59:5f:b4:e1:3c:57:31:53:67:c0: 1a:b2:70:a9:06:46:50:6a:52:1b:7c:3d:12:b5:1f:2f:2e:84: fd:85:83:40:2e:e9:21:78:05:85:4c:09:c2:5e:a5:16:81:a7: 23:aa:b7:da:36:6d:b4:e9:38:8b:3b:0d:88:01:ae:78:d1:e1: 4e:80:21:29:4e:92:72:80:6c:56:a5:b1:6b:ea:1d:50:68:80: e1:41:46:1b:0b:6f:d5:9c:c0:07:e9:3f:dd:01:43:ce:37:f8: 1d:cc:b4:08:a5:2f:26:16:27:6a:38:61:fb:3f:c8:aa:10:f2: c2:6f:42:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuATFQMbFlcOnhbLQ/VYcKzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYTcxNzM2MTMwOWQyOTM5MzUxYzlkOGJhMjE3M2RiODMx OWE4OGYwHhcNMjYwMTAyMjAwMDQ0WhcNMjYwMTAzMjAwMDQ0WjAzMTEwLwYDVQQD EygxOTJlNzc4MTRmMzEzYjFmMjE1ZjFhMDk1NWZiMzI3MjQ1ZmY2MDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6c7QWdigulnJ/tgk97gTVNzNN9GK aeSt4BhBZDWX8SQde05SMz7K4Beg24Ir8Ipw5RSyORJlU7cXYHPnRImVQ11k5AhF RzKq/3oMQepXb8iVhtu/VoXr/VZvKMXr1eqAeZ1knDPtZaznAAMNZYgf1+VpuoZO mxKrcTdwENKJcVnR2yiyUZHYpZ3dd/Y4KMqlu1J+TmtSVpMqRmRTL4Lye+y1ngMC 16gyZ5UaGg7CVmqeXahnYx3AwHreZRlTcSEUCQCS9vSuxOrRfX2tDs7KnMK2PHdg b48pi0tw2F0DNchJ6YM16qnK6qDNtXIyjHc5TQkI+tmiIWA82H3AjBqPYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkud4FPMTsfIV8aCVX7MnJF/2COMB8GA1UdIwQY MBaAFCGnFzYTCdKTk1HJ2Lohc9uDGaiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUt ZjhhNDY5ZDRlMmIyLzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUtZjhhNDY5ZDRlMmIy LzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfImdGXA cH4q3Mow2KtwFUANpS1WGSl8uk0ZwMe3t5xr3UoENwcB9ahFKMiaBhYNzD08YarL 76hDhhok1m9a9unVMJ+GLlBh6nFapk3Qz4bGbuenMs/eKBLmBSMT7uTcXIo4lEyA nIUcvoJqHYhhbrrvv98mOUglojfVQAWXorfkAqPcDY1ZX7ThPFcxU2fAGrJwqQZG UGpSG3w9ErUfLy6E/YWDQC7pIXgFhUwJwl6lFoGnI6q32jZttOk4izsNiAGueNHh ToAhKU6ScoBsVqWxa+odUGiA4UFGGwtv1ZzAB+k/3QFDzjf4Hcy0CKUvJhYnajhh +z/IqhDywm9CFA== -----END CERTIFICATE-----Generated at Sat Jan 3 06:32:19 2026 by rpki-client