This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: NAR5JIdj8LMd2x2Of4iXAL1rPc8ZPbqVGKNH5Qt0s+Q= Subject key identifier: 55:B0:D1:7D:9C:11:7B:B0:3E:C0:A8:C0:46:C4:D2:82:1B:7F:F0:95 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019BCF431BD6B4ECD4CFCF2F0A0892B268C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1237 Signing time: Sun 18 Jan 2026 04:00:39 +0000 Manifest this update: Sun 18 Jan 2026 04:00:39 +0000 Manifest next update: Mon 19 Jan 2026 04:00:39 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 6r3q3z9OFjrJ9qoUTQKhOroMbaM.roa (hash: 29mycutC5foPo3U8nHm9mrCTYw4984xkZIx+WiI1F9M=) 3: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=) 7: OKCXW7_MWWto3GWe7wi0avKoJxY.roa (hash: WqcSKwFHiTej52k827avLCbdmV9f2szfzxuzHTMps/4=) 8: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 9: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 10: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 11: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 12: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 13: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 14: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: q7LVm/nbSS5t6aesofENmlWdMK+bxHWlWrFvGv51cvo=) 16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cf:43:1b:d6:b4:ec:d4:cf:cf:2f:0a:08:92:b2:68:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jan 18 04:00:39 2026 GMT Not After : Jan 19 04:00:39 2026 GMT Subject: CN=55b0d17d9c117bb03ec0a8c046c4d2821b7ff095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:00:1e:09:1b:6f:ef:05:31:b7:91:7e:62:5d: f7:be:df:0d:06:0f:6c:13:30:e9:c6:9a:a2:e1:42: ea:4c:57:90:cb:c3:99:77:3f:6f:9a:87:b4:78:37: 6a:32:7e:23:e4:6e:4f:f7:c9:47:89:79:1a:42:58: 6c:53:2d:11:1d:5e:51:07:f1:5f:d9:7f:59:53:30: 94:21:87:cf:7f:12:46:c3:ab:2e:21:cf:f5:42:6d: 69:b8:d0:3d:18:23:73:62:1e:d4:32:e2:76:6a:05: b0:51:a3:c6:b4:26:bd:55:32:6b:fc:ae:cd:84:6b: 59:2a:2a:f3:cd:01:93:67:17:af:12:7e:5e:59:91: ad:51:13:66:c8:3c:1d:ab:7b:f4:bd:4e:15:68:90: ec:bb:ed:8b:63:69:ca:76:fb:fc:e1:e6:1f:1d:98: 34:7e:39:54:d7:38:cf:de:72:e2:ed:e2:a5:2b:9f: 85:c5:99:9a:cf:a8:3e:01:76:8f:47:67:7e:0a:6e: 5c:df:f1:28:f4:e3:1b:15:88:02:18:98:a2:b9:ba: 6a:e5:76:e4:72:d8:30:bb:76:95:51:61:df:7b:c5: 0f:14:66:52:fc:f2:06:6b:fe:af:06:4e:8a:cb:a8: a6:02:dc:5c:5c:51:2a:e6:71:6b:4a:7c:a8:73:b8: 00:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B0:D1:7D:9C:11:7B:B0:3E:C0:A8:C0:46:C4:D2:82:1B:7F:F0:95 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5d:54:f3:8f:06:5f:64:d3:58:67:f1:d5:1e:d2:e7:b1:04: 8d:19:d4:87:f9:30:db:0b:1e:a1:90:4c:65:3f:52:c4:23:cd: 80:21:ba:3e:88:15:f1:60:e5:19:4a:5b:a7:79:dc:77:ce:b8: 29:7f:a2:fd:9a:aa:6c:a9:9d:94:eb:9e:b0:d4:30:5a:c5:bb: 4e:94:0d:79:f4:c5:a1:90:be:ed:74:9a:0b:14:f9:2d:2e:c2: ee:93:d6:ca:8e:30:63:d4:1d:7f:ad:7a:e4:e3:e0:5a:b7:68: f1:25:8b:80:8c:60:25:c3:ab:1b:20:f7:3d:c2:48:e5:a5:a4: 61:dd:6d:40:5b:92:65:ac:17:29:dd:30:e8:2c:72:aa:01:79: b6:34:18:1f:ec:84:60:5f:72:86:17:21:36:f8:09:17:45:49: 03:e9:ae:a4:78:2b:93:9e:23:89:cc:85:d9:5a:cf:b8:3d:32: f2:4a:03:81:69:52:a8:2f:ff:5a:01:10:14:c4:3b:f2:97:29: 2d:e3:5e:81:ec:76:7e:fd:65:26:1a:c5:90:ac:f0:53:b3:06: 5e:f1:54:de:0e:7e:83:d4:6e:d6:26:22:3f:8f:03:2f:0f:09: 91:c4:b2:6b:d7:43:6c:42:75:c8:12:43:5d:2f:82:3c:42:4f: 7f:33:48:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvPQxvWtOzUz88vCgiSsmjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwMTE4MDQwMDM5WhcNMjYwMTE5MDQwMDM5WjAzMTEwLwYDVQQD Eyg1NWIwZDE3ZDljMTE3YmIwM2VjMGE4YzA0NmM0ZDI4MjFiN2ZmMDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQAeCRtv7wUxt5F+Yl33vt8NBg9s EzDpxpqi4ULqTFeQy8OZdz9vmoe0eDdqMn4j5G5P98lHiXkaQlhsUy0RHV5RB/Ff 2X9ZUzCUIYfPfxJGw6suIc/1Qm1puNA9GCNzYh7UMuJ2agWwUaPGtCa9VTJr/K7N hGtZKirzzQGTZxevEn5eWZGtURNmyDwdq3v0vU4VaJDsu+2LY2nKdvv84eYfHZg0 fjlU1zjP3nLi7eKlK5+FxZmaz6g+AXaPR2d+Cm5c3/Eo9OMbFYgCGJiiubpq5Xbk ctgwu3aVUWHfe8UPFGZS/PIGa/6vBk6Ky6imAtxcXFEq5nFrSnyoc7gAzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWw0X2cEXuwPsCowEbE0oIbf/CVMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj11U848G X2TTWGfx1R7S57EEjRnUh/kw2wseoZBMZT9SxCPNgCG6PogV8WDlGUpbp3ncd864 KX+i/ZqqbKmdlOuesNQwWsW7TpQNefTFoZC+7XSaCxT5LS7C7pPWyo4wY9Qdf616 5OPgWrdo8SWLgIxgJcOrGyD3PcJI5aWkYd1tQFuSZawXKd0w6CxyqgF5tjQYH+yE YF9yhhchNvgJF0VJA+mupHgrk54jicyF2VrPuD0y8koDgWlSqC//WgEQFMQ78pcp LeNegex2fv1lJhrFkKzwU7MGXvFU3g5+g9Ru1iYiP48DLw8JkcSya9dDbEJ1yBJD XS+CPEJPfzNI4Q== -----END CERTIFICATE-----Generated at Sun Jan 18 10:42:09 2026 by rpki-client