This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: Q6uCWZFbgkPi4c8nOGQaylLWvET0Oy0VTBMrA9JMmuo= Subject key identifier: C6:88:21:19:75:66:38:03:D6:C1:57:44:A6:21:7F:31:44:30:4F:C1 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019BAA924D55CD04FD43C9DC1534094F3525 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1224 Signing time: Sun 11 Jan 2026 01:01:13 +0000 Manifest this update: Sun 11 Jan 2026 01:01:13 +0000 Manifest next update: Mon 12 Jan 2026 01:01:13 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 6r3q3z9OFjrJ9qoUTQKhOroMbaM.roa (hash: 29mycutC5foPo3U8nHm9mrCTYw4984xkZIx+WiI1F9M=) 3: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=) 7: OKCXW7_MWWto3GWe7wi0avKoJxY.roa (hash: WqcSKwFHiTej52k827avLCbdmV9f2szfzxuzHTMps/4=) 8: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 9: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 10: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 11: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 12: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 13: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 14: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: kLraLZS72Bz/JANLc5IMK/c8aILgsP2VvxhwxfTmnA0=) 16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:aa:92:4d:55:cd:04:fd:43:c9:dc:15:34:09:4f:35:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jan 11 01:01:13 2026 GMT Not After : Jan 12 01:01:13 2026 GMT Subject: CN=c688211975663803d6c15744a6217f3144304fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ae:14:5c:d3:d1:54:90:94:1c:87:35:3e:1e: e5:a5:81:6a:c1:9c:85:cb:f7:0e:d3:e6:7d:05:b1: a9:39:5c:00:9f:2b:cf:4a:4d:d0:1e:4c:b3:1b:d3: 8d:fe:c3:7e:0b:69:c7:68:ba:40:c1:96:c9:3d:76: d4:71:78:41:a5:c8:0e:05:9d:46:5f:52:5a:a0:43: 93:69:af:88:0d:17:c6:d6:e2:0d:9c:1c:91:87:e5: ce:12:57:37:a6:5f:eb:f6:07:15:2d:69:43:b2:ac: e9:fe:e2:b7:52:2a:f9:17:31:ce:27:22:8c:12:05: b0:d4:2c:f1:1c:4d:d8:87:3c:9f:83:96:43:14:7e: d2:6a:54:c4:9c:13:e1:60:40:9c:c9:60:b1:07:b6: 03:a7:df:68:bc:64:b5:67:c1:18:fd:eb:d0:78:4d: e6:be:99:f9:f9:99:7d:b1:2c:98:0a:a9:61:8b:67: 36:c1:9a:61:b6:fe:74:02:88:47:db:7b:76:84:8c: cd:23:9a:73:14:55:06:1b:84:74:a3:8e:dc:b5:88: a1:93:1e:48:e7:96:36:5f:86:6b:2d:cf:e1:0c:dc: b4:8b:00:1e:2e:9d:f1:e4:37:3a:13:b9:4d:90:6e: 58:19:0d:07:97:f2:ec:95:64:b6:4a:6f:45:f0:b7: d2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:88:21:19:75:66:38:03:D6:C1:57:44:A6:21:7F:31:44:30:4F:C1 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:9c:c8:53:55:93:e2:d0:bb:dc:0f:4f:24:44:25:44:8e:e9: f2:e7:a6:38:a6:f5:2e:b9:26:14:16:af:a9:91:8f:36:e0:af: 84:fb:03:3c:29:1f:20:de:a0:52:8c:fd:f8:50:ad:04:af:a5: de:d0:76:26:ae:a5:17:8f:9c:c1:e5:33:cc:49:77:46:b8:16: f4:8c:55:c4:8d:02:a0:1e:0a:15:bf:01:ec:2e:65:66:7d:f0: 6b:f2:b1:86:6d:27:9e:48:2d:30:57:3d:49:be:da:a5:1f:13: 3e:ee:fa:e1:2f:ed:b1:a6:3f:39:0f:e8:b9:d0:a0:c8:de:33: 9a:6f:21:3a:f1:5e:38:55:ee:94:33:7d:68:3d:1e:cd:f1:f5: 77:96:6f:6b:38:a6:a0:7e:2e:7f:fc:6d:1e:6d:41:6e:f2:9f: 0f:0c:35:a2:8d:4f:5c:76:70:24:f8:92:a6:cd:09:c6:ee:20: 27:45:93:d5:6b:7c:bb:fa:49:05:58:e6:0e:41:f0:81:8f:91: 91:df:9b:41:24:ec:55:b9:45:fe:63:a4:ff:48:8e:4f:5f:81: a1:30:dd:e7:5f:7c:b3:7d:75:ca:45:a6:63:0a:4f:87:58:ab: fd:1f:1f:70:b0:9c:f1:4a:c6:71:a2:27:be:ec:a2:c3:41:a6: ba:49:24:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuqkk1VzQT9Q8ncFTQJTzUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwMTExMDEwMTEzWhcNMjYwMTEyMDEwMTEzWjAzMTEwLwYDVQQD EyhjNjg4MjExOTc1NjYzODAzZDZjMTU3NDRhNjIxN2YzMTQ0MzA0ZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq4UXNPRVJCUHIc1Ph7lpYFqwZyF y/cO0+Z9BbGpOVwAnyvPSk3QHkyzG9ON/sN+C2nHaLpAwZbJPXbUcXhBpcgOBZ1G X1JaoEOTaa+IDRfG1uINnByRh+XOElc3pl/r9gcVLWlDsqzp/uK3Uir5FzHOJyKM EgWw1CzxHE3Yhzyfg5ZDFH7SalTEnBPhYECcyWCxB7YDp99ovGS1Z8EY/evQeE3m vpn5+Zl9sSyYCqlhi2c2wZphtv50AohH23t2hIzNI5pzFFUGG4R0o47ctYihkx5I 55Y2X4ZrLc/hDNy0iwAeLp3x5Dc6E7lNkG5YGQ0Hl/LslWS2Sm9F8LfSPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaIIRl1ZjgD1sFXRKYhfzFEME/BMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapzIU1WT 4tC73A9PJEQlRI7p8uemOKb1LrkmFBavqZGPNuCvhPsDPCkfIN6gUoz9+FCtBK+l 3tB2Jq6lF4+cweUzzEl3RrgW9IxVxI0CoB4KFb8B7C5lZn3wa/Kxhm0nnkgtMFc9 Sb7apR8TPu764S/tsaY/OQ/oudCgyN4zmm8hOvFeOFXulDN9aD0ezfH1d5Zvazim oH4uf/xtHm1BbvKfDww1oo1PXHZwJPiSps0Jxu4gJ0WT1Wt8u/pJBVjmDkHwgY+R kd+bQSTsVblF/mOk/0iOT1+BoTDd5198s311ykWmYwpPh1ir/R8fcLCc8UrGcaIn vuyiw0GmukkkMQ== -----END CERTIFICATE-----Generated at Sun Jan 11 10:43:11 2026 by rpki-client