This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft File: ILgwgzh4tshhJpoOKkWDeqlIW-E.mft (raw, json) Hash identifier: rnwCilw3PmMRUOAkqWW2ZF+qq2JY3m4XUdwROF114d4= Subject key identifier: 05:51:B4:36:20:B6:76:FF:44:3E:E8:9A:27:8C:6D:DD:93:DF:DF:94 Authority key identifier: 20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1 Certificate issuer: /CN=20b830833878b6c861269a0e2a45837aa9485be1 Certificate serial: 019BAD5CBC663271DE63A0370A5B4EF34CC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft Manifest number: 07F3 Signing time: Sun 11 Jan 2026 14:01:34 +0000 Manifest this update: Sun 11 Jan 2026 14:01:34 +0000 Manifest next update: Mon 12 Jan 2026 14:01:34 +0000 Files and hashes: 1: ILgwgzh4tshhJpoOKkWDeqlIW-E.crl (hash: k9+FV03VN9bZqDyXKz00XoBwUCkJKIekzYlWmfqUqDw=) 2: fwTgo1_ZSsz01XhtopC2MwuttNc.roa (hash: 5KHz5CaUn0/i6QAm9Ug8WDFgZfNUDY5Q4CpIUqS1lpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:5c:bc:66:32:71:de:63:a0:37:0a:5b:4e:f3:4c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20b830833878b6c861269a0e2a45837aa9485be1 Validity Not Before: Jan 11 14:01:34 2026 GMT Not After : Jan 12 14:01:34 2026 GMT Subject: CN=0551b43620b676ff443ee89a278c6ddd93dfdf94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e5:bc:69:45:32:82:be:22:b4:ae:d6:f6:d2: 4b:df:e0:22:c7:5b:c1:43:d8:16:01:4f:4d:39:3b: 64:01:5f:51:53:1c:fe:c2:11:6c:3f:8a:c9:9d:9a: 3d:da:64:db:0e:91:2c:37:77:da:7d:78:9f:a4:85: 58:f3:e4:78:c4:a6:05:b3:ba:1d:a3:1b:28:7f:d2: 41:00:dc:da:ab:38:8f:1c:47:23:19:77:8f:b8:3b: f6:8b:c8:1a:c2:2a:8c:d3:2e:d6:f0:f4:78:ef:d2: dd:c4:ba:ec:7d:a8:d2:40:ab:76:c8:7f:d4:f7:00: 3f:0a:cc:d0:9a:e7:b5:cd:01:5b:aa:1c:03:e6:1c: 5f:1a:ff:ef:98:4d:57:02:0d:bf:4f:87:f1:20:11: eb:00:74:07:52:6f:fb:c6:6c:dd:fb:ce:a0:01:7d: 7c:8a:67:80:04:63:32:0e:00:17:b3:75:e2:c9:72: 3b:6a:f3:9d:ef:31:36:a2:bd:cb:0a:80:cd:e8:78: 8d:35:e0:68:83:51:a9:48:fb:d6:a7:fb:bf:f8:ea: bd:14:97:d7:a3:44:e1:f7:47:26:81:00:4c:8e:c5: 85:ad:65:b2:07:5d:4b:7d:4a:f7:57:6d:13:6d:57: ea:e4:9b:ce:7e:4e:f2:38:88:3b:31:24:e5:ec:8e: 73:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:51:B4:36:20:B6:76:FF:44:3E:E8:9A:27:8C:6D:DD:93:DF:DF:94 X509v3 Authority Key Identifier: keyid:20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:6e:11:fc:36:0b:3c:0a:a5:e7:12:c7:db:3c:cc:e6:3a:81: 2c:d7:c5:4c:00:83:15:4b:58:36:4b:1c:50:0a:0d:ba:02:27: 4c:3c:34:88:1b:92:ee:a3:11:c2:f2:77:fe:50:3f:1e:97:a5: 5e:a9:6a:22:b7:ef:36:6d:33:52:41:85:aa:c5:fb:cd:9e:17: e1:01:e4:cd:2b:c6:69:70:e7:49:35:a8:09:88:74:16:f1:46: d4:b2:2f:60:3c:06:7d:ac:97:bd:15:a9:72:89:e9:86:7d:b7: ec:67:86:a0:a0:47:aa:4c:eb:db:41:48:5c:98:cf:a4:f6:2a: b9:76:35:b1:89:a2:7a:d5:70:35:d6:c2:ad:c0:04:05:06:ad: cf:c5:6e:56:99:c2:74:49:9e:98:76:82:55:bb:fd:7f:8c:79: 65:b2:5f:f6:53:c3:83:ff:a7:32:ce:f3:00:3e:d2:db:d1:cf: 65:7a:99:42:26:e6:9e:8e:28:ae:b2:b2:f4:74:c0:13:ca:7a: 65:01:26:0f:c7:5b:53:9d:fa:9a:c5:08:66:76:5d:3b:8a:23: 4e:c0:7d:48:b5:03:ef:bc:2d:88:b7:06:69:45:58:a6:d1:9d: 00:04:31:14:0f:8c:5e:07:c5:95:0b:d3:76:73:4e:bb:2f:79: ed:2d:1e:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutXLxmMnHeY6A3CltO80zIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYjgzMDgzMzg3OGI2Yzg2MTI2OWEwZTJhNDU4MzdhYTk0 ODViZTEwHhcNMjYwMTExMTQwMTM0WhcNMjYwMTEyMTQwMTM0WjAzMTEwLwYDVQQD EygwNTUxYjQzNjIwYjY3NmZmNDQzZWU4OWEyNzhjNmRkZDkzZGZkZjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOW8aUUygr4itK7W9tJL3+Aix1vB Q9gWAU9NOTtkAV9RUxz+whFsP4rJnZo92mTbDpEsN3fafXifpIVY8+R4xKYFs7od oxsof9JBANzaqziPHEcjGXePuDv2i8gawiqM0y7W8PR479LdxLrsfajSQKt2yH/U 9wA/CszQmue1zQFbqhwD5hxfGv/vmE1XAg2/T4fxIBHrAHQHUm/7xmzd+86gAX18 imeABGMyDgAXs3XiyXI7avOd7zE2or3LCoDN6HiNNeBog1GpSPvWp/u/+Oq9FJfX o0Th90cmgQBMjsWFrWWyB11LfUr3V20TbVfq5JvOfk7yOIg7MSTl7I5z7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVRtDYgtnb/RD7omieMbd2T39+UMB8GA1UdIwQY MBaAFCC4MIM4eLbIYSaaDipFg3qpSFvhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUxnd2d6aDR0c2hoSnBvT0trV0RlcWxJVy1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NGZmMGYtZTM1Ni00OGIzLTgzMGYt MTU2NDk3YmZlOTNmLzEvSUxnd2d6aDR0c2hoSnBvT0trV0RlcWxJVy1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82NGZmMGYtZTM1Ni00OGIzLTgzMGYtMTU2NDk3YmZlOTNm LzEvSUxnd2d6aDR0c2hoSnBvT0trV0RlcWxJVy1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIG4R/DYL PAql5xLH2zzM5jqBLNfFTACDFUtYNkscUAoNugInTDw0iBuS7qMRwvJ3/lA/Hpel XqlqIrfvNm0zUkGFqsX7zZ4X4QHkzSvGaXDnSTWoCYh0FvFG1LIvYDwGfayXvRWp conphn237GeGoKBHqkzr20FIXJjPpPYquXY1sYmietVwNdbCrcAEBQatz8VuVpnC dEmemHaCVbv9f4x5ZbJf9lPDg/+nMs7zAD7S29HPZXqZQibmno4orrKy9HTAE8p6 ZQEmD8dbU536msUIZnZdO4ojTsB9SLUD77wtiLcGaUVYptGdAAQxFA+MXgfFlQvT dnNOuy957S0e/g== -----END CERTIFICATE-----Generated at Sun Jan 11 23:41:12 2026 by rpki-client