This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft File: Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft (raw, json) Hash identifier: itF05Ldnm+Jc2HAiSNSbWGfsNazlwA+HjsWPnugwsCg= Subject key identifier: B6:AF:34:86:F8:5A:6E:37:6E:79:DF:23:41:76:3D:43:2B:53:CD:A0 Authority key identifier: 23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D Certificate issuer: /CN=233d23fe2f738e53e7350c27c12e38284bcda87d Certificate serial: 019BAA2436F1951A8BA6FED03520548774C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft Manifest number: 0A Signing time: Sat 10 Jan 2026 23:00:58 +0000 Manifest this update: Sat 10 Jan 2026 23:00:58 +0000 Manifest next update: Sun 11 Jan 2026 23:00:58 +0000 Files and hashes: 1: Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl (hash: cMZiph75iIPmva7DuqsdJUAviCJjOr/cOtU1KfAjUT8=) 2: _xStacbF1--N4qcbHR6hs_B-jRQ.asa (hash: Bb41TH0kMfsyL9851D0f2aPV/w13bPkodpUWRJGMtMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:aa:24:36:f1:95:1a:8b:a6:fe:d0:35:20:54:87:74:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233d23fe2f738e53e7350c27c12e38284bcda87d Validity Not Before: Jan 10 23:00:58 2026 GMT Not After : Jan 11 23:00:58 2026 GMT Subject: CN=b6af3486f85a6e376e79df2341763d432b53cda0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:36:fc:d6:88:c7:38:2f:db:cf:31:75:34:94: 70:3b:b5:db:c4:c4:28:e2:16:99:9d:82:45:c8:78: 82:d7:3f:a6:51:41:0b:36:c5:ac:a8:37:d1:d9:93: 06:40:24:89:a4:af:69:b9:e8:4c:1c:90:79:88:94: 72:fe:fe:b0:06:25:2d:c1:90:55:27:63:8e:0a:01: 3e:6b:2e:8f:ec:d0:11:48:07:cc:3c:ca:d5:e9:d0: b3:a7:1b:b6:b0:f1:35:c2:4a:74:f7:5f:95:a9:e5: 90:9f:c1:55:94:ff:ce:ff:94:81:fe:31:2c:a2:99: 15:69:79:0d:da:aa:40:dc:5e:52:bc:c5:0e:71:c6: 63:df:3b:78:a8:c3:f9:b6:1c:00:90:a3:e1:45:8b: 98:1c:e0:48:c2:ea:dc:1e:ef:8b:32:0a:50:1a:09: 37:d4:e7:89:f4:ea:f9:74:24:c7:d1:be:af:10:c3: ed:20:6e:38:28:a9:c0:ad:08:85:a5:9f:39:11:ab: 12:d6:60:1e:ea:2e:e8:06:1b:f3:95:e8:90:60:02: 3f:3e:75:55:61:4e:fc:b6:12:bb:8a:ec:be:7e:d9: ef:02:a9:8a:70:e7:c5:f8:e6:77:59:f8:95:c8:09: d0:63:c2:70:87:17:08:20:41:2b:0b:87:65:85:e5: 19:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AF:34:86:F8:5A:6E:37:6E:79:DF:23:41:76:3D:43:2B:53:CD:A0 X509v3 Authority Key Identifier: keyid:23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:6a:df:dc:b5:9c:e0:d7:33:96:65:af:75:ce:d2:e1:03:92: f5:04:16:dc:3b:ef:d2:98:04:d3:4a:68:9e:f4:a4:b9:91:56: 83:4f:7f:25:10:62:45:a9:34:86:4d:fa:db:0f:d4:f9:2b:ea: 4b:9d:30:fe:86:da:4e:38:e4:ed:4f:01:ce:f2:e2:0a:02:db: 81:59:ab:3d:dd:b6:e5:cb:08:61:6d:55:32:75:a9:5c:26:fd: 70:1f:69:f1:01:bc:e5:f3:ab:7a:3c:b6:f1:30:78:8c:63:4f: cf:ae:aa:e7:18:3e:68:9f:d4:a5:6c:93:a9:0a:99:db:13:86: 8e:ee:0a:73:e6:4c:e8:b6:81:0e:80:81:9d:2d:72:0d:74:fc: 0c:5f:a8:ab:bc:30:e5:4d:ee:cf:d8:57:43:f8:a4:c2:ba:ca: cb:f4:90:6e:3b:3a:2a:7a:44:20:73:26:d3:63:23:ad:1a:cd: 6c:aa:a2:46:b6:6b:4d:54:c3:f4:e8:cb:39:cb:b8:87:72:ae: 7e:d4:02:c1:32:2c:1e:bc:12:f8:47:f1:22:58:65:b6:7e:d7: ed:15:64:6a:e0:31:fc:bd:b1:b3:e1:6a:14:f3:b8:5f:61:30: 2e:6e:b1:46:90:41:a5:ab:bb:b0:51:f0:98:29:f5:be:f2:34: 3d:94:c6:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuqJDbxlRqLpv7QNSBUh3TBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzM2QyM2ZlMmY3MzhlNTNlNzM1MGMyN2MxMmUzODI4NGJj ZGE4N2QwHhcNMjYwMTEwMjMwMDU4WhcNMjYwMTExMjMwMDU4WjAzMTEwLwYDVQQD EyhiNmFmMzQ4NmY4NWE2ZTM3NmU3OWRmMjM0MTc2M2Q0MzJiNTNjZGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjb81ojHOC/bzzF1NJRwO7XbxMQo 4haZnYJFyHiC1z+mUUELNsWsqDfR2ZMGQCSJpK9puehMHJB5iJRy/v6wBiUtwZBV J2OOCgE+ay6P7NARSAfMPMrV6dCzpxu2sPE1wkp091+VqeWQn8FVlP/O/5SB/jEs opkVaXkN2qpA3F5SvMUOccZj3zt4qMP5thwAkKPhRYuYHOBIwurcHu+LMgpQGgk3 1OeJ9Or5dCTH0b6vEMPtIG44KKnArQiFpZ85EasS1mAe6i7oBhvzleiQYAI/PnVV YU78thK7iuy+ftnvAqmKcOfF+OZ3WfiVyAnQY8JwhxcIIEErC4dlheUZnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLavNIb4Wm43bnnfI0F2PUMrU82gMB8GA1UdIwQY MBaAFCM9I/4vc45T5zUMJ8EuOChLzah9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXowal9pOXpqbFBuTlF3bndTNDRLRXZOcUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80ZjQ1NGYtMGRlNC00YWM3LWI1Y2Et MmU0MTU0ZjM5NTBkLzEvSXowal9pOXpqbFBuTlF3bndTNDRLRXZOcUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS80ZjQ1NGYtMGRlNC00YWM3LWI1Y2EtMmU0MTU0ZjM5NTBk LzEvSXowal9pOXpqbFBuTlF3bndTNDRLRXZOcUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu2rf3LWc 4NczlmWvdc7S4QOS9QQW3Dvv0pgE00ponvSkuZFWg09/JRBiRak0hk362w/U+Svq S50w/obaTjjk7U8BzvLiCgLbgVmrPd225csIYW1VMnWpXCb9cB9p8QG85fOrejy2 8TB4jGNPz66q5xg+aJ/UpWyTqQqZ2xOGju4Kc+ZM6LaBDoCBnS1yDXT8DF+oq7ww 5U3uz9hXQ/ikwrrKy/SQbjs6KnpEIHMm02MjrRrNbKqiRrZrTVTD9OjLOcu4h3Ku ftQCwTIsHrwS+EfxIlhltn7X7RVkauAx/L2xs+FqFPO4X2EwLm6xRpBBpau7sFHw mCn1vvI0PZTG2Q== -----END CERTIFICATE-----Generated at Sun Jan 11 09:13:37 2026 by rpki-client