This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json) Hash identifier: ZU4T8iZBiqkBZuq4En9kG/yzoypPr3R5Et8+vh6Kuq8= Subject key identifier: 0F:CD:89:50:C3:45:0A:E7:44:A9:80:F4:4B:D2:BF:E2:3F:5C:FC:A1 Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40 Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640 Certificate serial: 019BA1C63DA166292CA86B0D184DB3AA1A4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft Manifest number: 0E78 Signing time: Fri 09 Jan 2026 08:01:22 +0000 Manifest this update: Fri 09 Jan 2026 08:01:22 +0000 Manifest next update: Sat 10 Jan 2026 08:01:22 +0000 Files and hashes: 1: F1IZXSaM0EUoVJYeBekbQHeIDzM.roa (hash: wwBTKYgogZnI9lVmsw1BYLdI24cEQPAqs+GHEd0mVlc=) 2: XRWUGRiRnDftn0w5XsjFN-6BZUA.roa (hash: eD7AmSbdUlIktA8wqOi/TIT8HlO0vCWmUNetc9plP2U=) 3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: T23jCQmt43R/mopmUp2Rq6PeVO+aukQiR0yBs2BUvHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:c6:3d:a1:66:29:2c:a8:6b:0d:18:4d:b3:aa:1a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640 Validity Not Before: Jan 9 08:01:22 2026 GMT Not After : Jan 10 08:01:22 2026 GMT Subject: CN=0fcd8950c3450ae744a980f44bd2bfe23f5cfca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:39:78:b3:ef:ab:37:a2:e0:5b:9d:cf:9c:0f: b9:d8:74:74:98:af:b4:27:40:31:9c:cd:55:6c:ea: a9:39:07:bd:ba:ce:50:b0:ac:16:a9:0b:f9:14:bf: 66:37:58:97:48:8b:22:0b:ed:42:9e:14:0e:15:c5: 3f:e5:20:f6:5d:7a:0b:62:8e:82:2d:67:c9:9a:93: f1:3d:ce:42:0b:ab:97:41:66:6a:cc:71:7b:cd:12: 2e:06:22:6f:34:d2:db:d9:d3:d9:ac:ef:3d:37:45: 46:47:65:1c:98:90:c1:6c:92:eb:c9:cd:fe:3c:21: cf:ce:49:b7:52:5f:32:31:2e:99:77:a3:3c:87:22: 7a:70:64:b5:c4:11:7c:fc:c8:4f:19:d4:bd:3e:49: 0a:1a:54:6e:22:35:03:23:85:d9:a4:d0:cb:2f:93: d8:24:e9:02:57:92:2b:41:08:83:ed:cd:da:ac:1f: 37:86:84:95:66:d1:3b:3d:1d:5a:b7:3c:32:22:5b: 14:69:70:1c:0f:93:86:5c:27:b2:2b:1f:13:da:d8: 51:fd:91:de:15:0e:ae:7e:27:03:60:54:6c:74:9f: fd:79:cd:51:5a:8d:34:c3:34:13:16:05:b5:42:ef: a5:f2:ad:ba:8a:cb:a0:3a:ab:b3:d1:56:f4:d7:1d: 47:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CD:89:50:C3:45:0A:E7:44:A9:80:F4:4B:D2:BF:E2:3F:5C:FC:A1 X509v3 Authority Key Identifier: keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:91:58:a1:2a:f3:67:76:e5:42:d8:5b:1d:2d:37:3e:a1:8e: 9b:8a:71:b0:25:e0:f1:34:49:f7:72:09:a8:3e:19:38:65:78: 4e:d4:c8:e4:84:af:b2:85:55:20:d2:6c:68:17:99:e2:ba:dd: a5:e8:cf:84:63:36:ae:31:e9:2c:bf:9e:42:df:e4:bf:f0:b2: 76:7b:3a:39:0c:fb:10:32:ad:bb:49:6a:65:05:ad:c3:19:f5: c9:19:b2:68:11:4b:f5:9d:d5:81:07:f6:56:64:68:06:44:6a: 67:33:4b:c3:c7:f5:cd:c1:67:2a:07:69:bc:8f:d5:2c:5f:69: cd:7e:db:37:1a:85:55:5d:a5:15:68:9e:db:df:9b:88:c6:44: b9:17:09:3b:51:1d:99:bd:b6:ef:fe:b7:e5:be:b5:0d:5d:8e: c6:1e:7b:2f:ed:76:2a:57:91:2e:7f:be:a2:10:be:3c:c5:d1: bf:80:8b:f5:98:9b:f0:8b:50:73:36:93:2b:dd:50:47:5e:6d: a7:87:ba:c1:74:7f:65:d2:fa:91:05:23:0b:d7:ae:91:d2:8f: a8:9d:19:6c:7e:ec:22:05:89:9d:f2:45:3f:ff:23:c2:02:d9: 33:5e:7c:85:00:e6:6a:41:fe:f2:47:3f:6e:96:46:5e:ac:eb: 80:15:58:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhxj2hZiksqGsNGE2zqhpPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNDIzMmMxOWQwYTdmN2VkNzY5YzQ3MTU0MjFlNmNjMThi ZGI2NDAwHhcNMjYwMTA5MDgwMTIyWhcNMjYwMTEwMDgwMTIyWjAzMTEwLwYDVQQD EygwZmNkODk1MGMzNDUwYWU3NDRhOTgwZjQ0YmQyYmZlMjNmNWNmY2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTl4s++rN6LgW53PnA+52HR0mK+0 J0AxnM1VbOqpOQe9us5QsKwWqQv5FL9mN1iXSIsiC+1CnhQOFcU/5SD2XXoLYo6C LWfJmpPxPc5CC6uXQWZqzHF7zRIuBiJvNNLb2dPZrO89N0VGR2UcmJDBbJLryc3+ PCHPzkm3Ul8yMS6Zd6M8hyJ6cGS1xBF8/MhPGdS9PkkKGlRuIjUDI4XZpNDLL5PY JOkCV5IrQQiD7c3arB83hoSVZtE7PR1atzwyIlsUaXAcD5OGXCeyKx8T2thR/ZHe FQ6uficDYFRsdJ/9ec1RWo00wzQTFgW1Qu+l8q26isugOquz0Vb01x1H5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/NiVDDRQrnRKmA9EvSv+I/XPyhMB8GA1UdIwQY MBaAFG9CMsGdCn9+12nEcVQh5swYvbZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMWQ3MDMtZmY5YS00NGIxLThlNjUt NjZjYTU3Zjc0ZTBkLzEvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mMWQ3MDMtZmY5YS00NGIxLThlNjUtNjZjYTU3Zjc0ZTBk LzEvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5FYoSrz Z3blQthbHS03PqGOm4pxsCXg8TRJ93IJqD4ZOGV4TtTI5ISvsoVVINJsaBeZ4rrd pejPhGM2rjHpLL+eQt/kv/Cydns6OQz7EDKtu0lqZQWtwxn1yRmyaBFL9Z3VgQf2 VmRoBkRqZzNLw8f1zcFnKgdpvI/VLF9pzX7bNxqFVV2lFWie29+biMZEuRcJO1Ed mb227/635b61DV2Oxh57L+12KleRLn++ohC+PMXRv4CL9Zib8ItQczaTK91QR15t p4e6wXR/ZdL6kQUjC9eukdKPqJ0ZbH7sIgWJnfJFP/8jwgLZM158hQDmakH+8kc/ bpZGXqzrgBVY6g== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:59 2026 by rpki-client