This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft File: iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft (raw, json) Hash identifier: 4ovGWnmXsAY4H1SJwRRgx7bMM6HDVB8EcxQ+KtAsTLQ= Subject key identifier: 19:8E:91:88:EC:D8:05:65:89:8D:52:18:C5:CB:F2:A9:BE:50:9B:FE Authority key identifier: 88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5 Certificate issuer: /CN=88987ed4e73d0407483cc224ccf45aedf4969dd5 Certificate serial: 019BD20D7300180CC6FF3FA96D236352CF2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft Manifest number: 176C Signing time: Sun 18 Jan 2026 17:00:55 +0000 Manifest this update: Sun 18 Jan 2026 17:00:55 +0000 Manifest next update: Mon 19 Jan 2026 17:00:55 +0000 Files and hashes: 1: iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl (hash: D+PWk6qZegcJ2m3JLBNsAP2akMdWrc+TYRgy8f59whQ=) 2: iojxs-4stuh5VLOzZynsjkM6c0E.roa (hash: UEmjKKCU8lRCDvcwWsLDPsTENcP/mGR9V70rcXozZ0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 15:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d2:0d:73:00:18:0c:c6:ff:3f:a9:6d:23:63:52:cf:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88987ed4e73d0407483cc224ccf45aedf4969dd5 Validity Not Before: Jan 18 17:00:55 2026 GMT Not After : Jan 19 17:00:55 2026 GMT Subject: CN=198e9188ecd80565898d5218c5cbf2a9be509bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:87:18:fc:15:95:86:8d:0b:01:dc:5c:fa:b7: 23:86:48:69:60:97:c4:3a:fd:e7:a8:96:eb:3d:38: 6e:39:76:92:b0:99:31:6a:3f:9e:2e:54:cd:3b:ae: c6:ce:9d:79:16:43:c4:3b:e5:5b:82:e0:80:6c:65: 37:f9:6a:55:14:a0:45:1b:ba:a6:89:6c:23:c0:da: 43:ae:5b:8e:67:70:6d:96:f6:30:71:79:42:3a:64: e8:ee:3f:3b:52:fa:86:c0:5e:e9:00:e9:d1:7d:1e: 2b:e3:72:be:5b:11:98:b7:a0:a5:ea:61:5d:13:e2: c5:99:11:da:f6:4f:a7:d9:89:5e:07:a9:9e:d5:52: 5f:bb:a9:74:70:73:c8:e7:ae:17:8f:f9:09:a3:3c: 7c:0c:b4:ef:a5:a4:16:de:c2:a4:04:25:d7:a5:56: b3:9c:04:09:48:93:c1:22:96:5c:43:91:99:55:c8: e0:0c:0d:54:9e:2f:a5:82:4e:33:24:15:6e:ab:97: 34:b6:9c:44:0e:d1:ad:2f:b3:09:20:1d:0d:15:28: bc:2e:d6:82:0c:c6:bf:1d:2a:6a:a2:70:f9:f3:78: be:3b:a7:de:a9:80:ba:0e:3f:dc:2d:3b:02:ff:e0: 8d:87:f3:cf:ea:13:62:65:8c:ac:fb:ab:b4:12:d6: 64:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8E:91:88:EC:D8:05:65:89:8D:52:18:C5:CB:F2:A9:BE:50:9B:FE X509v3 Authority Key Identifier: keyid:88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:41:93:17:30:71:39:e5:bf:9b:cb:39:69:78:63:67:0f:87: fc:a5:a2:09:5f:ea:76:71:e2:a5:6d:5d:db:ef:d8:ad:c8:d3: b8:80:29:39:db:b9:dd:01:23:e2:df:4d:88:b7:47:2f:f5:52: 50:46:ab:a7:c2:8c:7c:f2:07:bb:0c:5f:c5:a9:d7:1a:0c:5c: 3e:7a:33:6b:a0:11:0d:e2:18:65:0c:b3:33:c5:a5:3d:78:8a: 54:e8:0a:5d:a1:57:ca:8f:91:34:ad:f2:0a:50:2d:2f:90:5f: 29:e6:54:cb:da:a4:5a:de:c0:ad:31:23:21:ae:fd:61:f3:91: 8f:a2:eb:cb:ec:8a:1b:4c:a0:da:fb:3b:da:e9:1c:44:4a:3f: 31:f5:84:15:31:bd:f9:50:29:70:6d:5e:12:bc:11:a0:52:fc: 9a:2d:68:53:16:a8:57:4c:66:1f:d3:03:29:da:52:5b:18:07: 67:37:35:d6:92:2c:36:53:71:b5:c2:4f:45:cd:37:a0:48:03: ff:ca:07:9b:f4:56:74:aa:a3:6a:ab:3c:39:81:be:b5:bc:36: 09:55:0b:63:ca:97:15:de:1d:60:69:cf:e7:46:2f:27:03:9f: 97:12:50:98:98:db:7a:0d:c1:d8:19:55:cb:10:28:36:f0:fd: 5c:30:8d:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvSDXMAGAzG/z+pbSNjUs8uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4OTg3ZWQ0ZTczZDA0MDc0ODNjYzIyNGNjZjQ1YWVkZjQ5 NjlkZDUwHhcNMjYwMTE4MTcwMDU1WhcNMjYwMTE5MTcwMDU1WjAzMTEwLwYDVQQD EygxOThlOTE4OGVjZDgwNTY1ODk4ZDUyMThjNWNiZjJhOWJlNTA5YmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44cY/BWVho0LAdxc+rcjhkhpYJfE Ov3nqJbrPThuOXaSsJkxaj+eLlTNO67Gzp15FkPEO+VbguCAbGU3+WpVFKBFG7qm iWwjwNpDrluOZ3BtlvYwcXlCOmTo7j87UvqGwF7pAOnRfR4r43K+WxGYt6Cl6mFd E+LFmRHa9k+n2YleB6me1VJfu6l0cHPI564Xj/kJozx8DLTvpaQW3sKkBCXXpVaz nAQJSJPBIpZcQ5GZVcjgDA1Uni+lgk4zJBVuq5c0tpxEDtGtL7MJIB0NFSi8LtaC DMa/HSpqonD583i+O6feqYC6Dj/cLTsC/+CNh/PP6hNiZYys+6u0EtZkCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmOkYjs2AVliY1SGMXL8qm+UJv+MB8GA1UdIwQY MBaAFIiYftTnPQQHSDzCJMz0Wu30lp3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wNGM0Y2UtYjlmMy00YzZhLWEzZTkt OTFiZjYxZGQ4NTNmLzEvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8wNGM0Y2UtYjlmMy00YzZhLWEzZTktOTFiZjYxZGQ4NTNm LzEvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEGTFzBx OeW/m8s5aXhjZw+H/KWiCV/qdnHipW1d2+/YrcjTuIApOdu53QEj4t9NiLdHL/VS UEarp8KMfPIHuwxfxanXGgxcPnoza6ARDeIYZQyzM8WlPXiKVOgKXaFXyo+RNK3y ClAtL5BfKeZUy9qkWt7ArTEjIa79YfORj6Lry+yKG0yg2vs72ukcREo/MfWEFTG9 +VApcG1eErwRoFL8mi1oUxaoV0xmH9MDKdpSWxgHZzc11pIsNlNxtcJPRc03oEgD /8oHm/RWdKqjaqs8OYG+tbw2CVULY8qXFd4dYGnP50YvJwOflxJQmJjbeg3B2BlV yxAoNvD9XDCNjQ== -----END CERTIFICATE-----Generated at Sun Jan 18 22:17:25 2026 by rpki-client