This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: 7kbeipM0AFGO9Y8Kpsl5j8jDyQdS/OPQ0QhfnRLMtpI= Subject key identifier: 88:0D:7E:AF:3F:26:34:0F:4B:19:22:84:33:9A:61:1C:A3:68:E4:28 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019C055643B111BCDEEAB5C0B1138A454B91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1253 Signing time: Wed 28 Jan 2026 16:01:05 +0000 Manifest this update: Wed 28 Jan 2026 16:01:05 +0000 Manifest next update: Thu 29 Jan 2026 16:01:05 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 6r3q3z9OFjrJ9qoUTQKhOroMbaM.roa (hash: 29mycutC5foPo3U8nHm9mrCTYw4984xkZIx+WiI1F9M=) 3: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=) 7: OKCXW7_MWWto3GWe7wi0avKoJxY.roa (hash: WqcSKwFHiTej52k827avLCbdmV9f2szfzxuzHTMps/4=) 8: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 9: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 10: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 11: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 12: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 13: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 14: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: /v+J56QLyuZnhE/GRie033ZprBFFIjZQk8XcHvxFFq8=) 16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 16:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:56:43:b1:11:bc:de:ea:b5:c0:b1:13:8a:45:4b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jan 28 16:01:05 2026 GMT Not After : Jan 29 16:01:05 2026 GMT Subject: CN=880d7eaf3f26340f4b192284339a611ca368e428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7e:35:0b:b6:56:f4:ad:35:43:0b:b6:01:b0: 35:f9:7f:ef:c6:01:29:bf:b6:fc:c5:65:0c:e8:26: 92:19:9d:ce:5f:5b:c2:0a:2f:bd:00:5e:5b:9c:f1: 26:61:75:b6:18:7f:80:5e:98:1a:9c:8a:56:1a:9c: 0b:0a:fa:b5:57:c8:83:d1:9c:b9:91:82:35:e6:37: cc:33:b3:33:a9:14:35:08:aa:a1:87:4f:30:99:46: b4:6c:30:f4:07:2e:69:b6:f9:1f:3a:7b:50:6f:20: d8:69:33:3f:61:05:cf:3a:b8:d8:d5:aa:e6:7c:25: 8a:ce:b7:1b:b9:21:c0:8c:76:a6:74:6d:81:3e:c0: 8a:60:6b:54:b8:52:3d:1f:c1:51:e0:96:01:70:cc: 86:de:f7:9b:24:4f:f6:ca:13:38:9e:2b:8f:2e:ec: e8:b5:07:ce:37:86:f9:5d:ae:00:d8:5a:18:ab:90: 2e:2e:b4:d0:25:3e:a9:ee:b7:09:86:c5:26:88:21: ce:00:61:6c:6f:17:19:91:7c:1b:00:d7:bc:9f:d7: c7:97:0e:2f:a0:ca:9e:34:44:fa:79:c5:48:29:c7: c4:a5:5a:59:26:6d:e9:23:0a:66:cd:db:ac:46:ae: 4b:ad:f3:66:fe:28:0b:b0:cd:02:b3:74:a3:6a:f8: 87:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0D:7E:AF:3F:26:34:0F:4B:19:22:84:33:9A:61:1C:A3:68:E4:28 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:5f:47:9b:5c:b9:3d:84:34:31:32:64:67:30:64:7c:26:4b: 94:8e:1d:69:cd:ec:53:12:77:78:98:ab:16:c3:77:3a:12:65: 7f:e6:9d:1b:d0:b7:35:89:73:4d:e9:61:2b:89:ee:6a:c6:b3: ff:43:55:b7:2e:fb:0f:c4:79:e8:db:ed:29:29:db:91:10:c6: 34:a6:cf:c2:25:dd:74:1a:e2:79:4e:95:ba:04:34:4d:b0:4c: 13:4f:68:86:be:45:61:2c:1f:f6:fb:f8:10:40:40:71:99:54: 10:19:2c:9b:4f:a2:63:c1:f0:b3:4a:71:08:5e:f3:e7:c1:05: f3:86:b4:d5:c4:a0:63:42:1e:ea:76:38:f5:3e:71:3a:02:65: 4c:9e:74:3b:6c:1f:25:76:58:69:84:85:36:88:3a:11:64:7e: ff:d0:49:4d:a8:40:b7:be:d9:ea:fb:ae:08:ed:ec:5f:75:7a: 29:f0:07:d3:0b:29:45:70:8d:57:bd:eb:e4:00:b3:62:3e:14: 8e:ee:78:c8:b8:92:dc:86:c5:b7:f3:e3:d4:f0:b2:48:82:e8: f4:a3:ab:ed:0d:b0:f3:47:49:7b:d5:0a:07:e8:a4:b5:ae:f9: fe:46:6b:09:4e:df:f9:ae:91:3e:7e:93:92:2e:be:dd:09:0b: 11:2b:64:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwFVkOxEbze6rXAsROKRUuRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwMTI4MTYwMTA1WhcNMjYwMTI5MTYwMTA1WjAzMTEwLwYDVQQD Eyg4ODBkN2VhZjNmMjYzNDBmNGIxOTIyODQzMzlhNjExY2EzNjhlNDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX41C7ZW9K01Qwu2AbA1+X/vxgEp v7b8xWUM6CaSGZ3OX1vCCi+9AF5bnPEmYXW2GH+AXpganIpWGpwLCvq1V8iD0Zy5 kYI15jfMM7MzqRQ1CKqhh08wmUa0bDD0By5ptvkfOntQbyDYaTM/YQXPOrjY1arm fCWKzrcbuSHAjHamdG2BPsCKYGtUuFI9H8FR4JYBcMyG3vebJE/2yhM4niuPLuzo tQfON4b5Xa4A2FoYq5AuLrTQJT6p7rcJhsUmiCHOAGFsbxcZkXwbANe8n9fHlw4v oMqeNET6ecVIKcfEpVpZJm3pIwpmzdusRq5LrfNm/igLsM0Cs3SjaviH8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgNfq8/JjQPSxkihDOaYRyjaOQoMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgV9Hm1y5 PYQ0MTJkZzBkfCZLlI4dac3sUxJ3eJirFsN3OhJlf+adG9C3NYlzTelhK4nuasaz /0NVty77D8R56NvtKSnbkRDGNKbPwiXddBrieU6VugQ0TbBME09ohr5FYSwf9vv4 EEBAcZlUEBksm0+iY8Hws0pxCF7z58EF84a01cSgY0Ie6nY49T5xOgJlTJ50O2wf JXZYaYSFNog6EWR+/9BJTahAt77Z6vuuCO3sX3V6KfAH0wspRXCNV73r5ACzYj4U ju54yLiS3IbFt/Pj1PCySILo9KOr7Q2w80dJe9UKB+ikta75/kZrCU7f+a6RPn6T ki6+3QkLEStkzw== -----END CERTIFICATE-----Generated at Wed Jan 28 20:15:08 2026 by rpki-client