This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft File: iZJBoANIMVwCwOKpFQuGMIfRyFc.mft (raw, json) Hash identifier: boUhswBzTqM32sCnw74KlbALCNGSpsEs0cWODLXy2qc= Subject key identifier: D6:50:47:C6:2A:FA:7B:8B:E0:B8:51:21:EC:6D:EF:D5:0F:5A:9E:D2 Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57 Certificate issuer: /CN=899241a00348315c02c0e2a9150b863087d1c857 Certificate serial: 019B7937E3C5B02A23E93E239616F3B4F4C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft Manifest number: 05DA Signing time: Thu 01 Jan 2026 11:01:04 +0000 Manifest this update: Thu 01 Jan 2026 11:01:04 +0000 Manifest next update: Fri 02 Jan 2026 11:01:04 +0000 Files and hashes: 1: 4ttxHqG59duZ5ALfvPB_x9iVGCs.roa (hash: fJvQbvQakJgNuM3dzhqnbPVFRMsvp98NzyW7hIi8pio=) 2: NhicUss_-kBiNIFBTBFdbugxZaU.roa (hash: x3eOaLcQnmMrFRkUTb/8DthAE9edvP0YO/DPYux9zTE=) 3: UZiFFztRfeKmfRhqu-DMXiBHSwY.roa (hash: LxeETqbIhKu+XVMzaqPP2mnLDNqdpGhRBtoYHWGJNkY=) 4: WDn1mbHRkiQwKXkGzlfqrEUF0Pw.roa (hash: L1bh3lJQlQbB+0euiek2LnVAf5GTLk4lwBwlyM5cRJ0=) 5: eeMUvhikn7BcQGcUG3J_KumqmI0.roa (hash: rMyPtHGXVd59N7ATnOyDSnVnrrZL6fZtXGf2fhRBUW8=) 6: iZJBoANIMVwCwOKpFQuGMIfRyFc.crl (hash: 4RMRNlNOntRFN/kvYiJarp1J9iurM5r7ehvplhsYlSg=) 7: yHRWciFFOnDT7mIADGdvOTHOJRI.roa (hash: OaAq5TmHl/2ctslO8/QJcZi4nuJ1WFnqWLqN1q7rq1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:37:e3:c5:b0:2a:23:e9:3e:23:96:16:f3:b4:f4:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857 Validity Not Before: Jan 1 11:01:04 2026 GMT Not After : Jan 2 11:01:04 2026 GMT Subject: CN=d65047c62afa7b8be0b85121ec6defd50f5a9ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2a:2b:d4:13:53:c6:94:ee:44:f9:5b:d1:45: 51:6c:f4:06:20:f6:d0:ba:aa:ed:fe:bf:b1:75:6e: 8f:5b:9b:b5:6d:18:23:9c:d7:ac:54:6b:a4:d8:80: 4b:91:3e:72:7b:71:29:f7:2c:ea:1c:11:ca:74:60: fb:ce:78:2a:5c:29:e1:2e:c0:7e:84:b4:cc:b7:53: 88:d3:35:42:20:92:b3:19:11:51:50:bd:1f:3a:21: 66:ae:ef:da:9d:5e:53:77:53:8e:1d:36:4f:a9:af: 1b:1a:4d:42:e9:3a:d1:fb:e3:95:b0:21:28:55:47: 74:54:95:99:8f:e5:c2:f1:fa:e0:09:54:0b:db:60: 4d:19:f8:f3:b1:e3:b1:b2:ae:b1:2b:e9:6a:c5:cd: 17:9f:60:28:2c:18:f5:d8:8f:71:33:aa:93:c7:37: b3:13:1a:08:4c:70:09:cb:e9:60:4f:d0:5e:36:6c: 43:6f:62:04:ed:ac:24:ef:a9:69:32:14:c5:21:4a: 66:2f:5f:4f:b4:2c:81:2a:20:96:1e:81:cf:b7:9c: b9:06:4c:1e:11:e7:f7:ab:9d:68:cb:6a:9b:10:fa: 3d:23:72:08:1c:2d:2b:07:4b:90:9b:88:0c:78:c7: 66:2f:8f:9f:be:71:5c:68:6c:db:83:ae:0b:49:02: 93:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:50:47:C6:2A:FA:7B:8B:E0:B8:51:21:EC:6D:EF:D5:0F:5A:9E:D2 X509v3 Authority Key Identifier: keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d2:79:d4:c7:0e:1e:6a:68:29:81:d7:37:c0:23:8c:ae:ea: 63:8d:7a:1f:4c:fd:b8:3b:21:95:dd:ba:95:8d:cf:d8:54:b6: 72:81:73:10:af:9e:09:2e:d4:5d:15:93:fa:5d:68:54:26:f6: 00:a0:57:53:da:54:02:49:6d:e1:cf:d9:1c:ef:f3:be:ff:ba: 10:4f:31:ee:b1:b1:af:e0:b6:f5:6b:b7:63:b7:3b:4f:89:7f: e3:82:69:e4:46:10:35:45:35:0f:46:87:02:11:7b:7b:ef:3b: eb:4c:d8:57:3c:fd:33:4b:8c:a3:55:04:ba:b2:3d:f7:56:ba: ee:fc:ba:13:6c:1a:e8:02:c3:3b:28:38:0f:76:c9:cb:c6:4f: 94:27:ba:75:3d:67:6a:8d:3f:5f:eb:de:9b:d0:fb:85:0f:cd: 44:d5:89:e5:fc:c1:cb:ff:88:8b:9b:63:28:2a:be:2c:ff:66: d9:69:2e:79:11:5d:a8:5d:5d:f3:fb:f6:49:bf:95:9d:2f:15: c2:1a:fd:51:c1:b4:dc:23:7d:e3:26:83:84:87:dd:44:a0:c1: a8:e5:bb:a7:a2:bd:dc:83:f4:89:97:e8:2a:e1:74:dc:28:02: 6f:39:83:9d:6c:04:98:c7:97:89:fc:07:53:1b:87:00:26:91: e2:aa:a9:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5N+PFsCoj6T4jlhbztPTFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5OTI0MWEwMDM0ODMxNWMwMmMwZTJhOTE1MGI4NjMwODdk MWM4NTcwHhcNMjYwMTAxMTEwMTA0WhcNMjYwMTAyMTEwMTA0WjAzMTEwLwYDVQQD EyhkNjUwNDdjNjJhZmE3YjhiZTBiODUxMjFlYzZkZWZkNTBmNWE5ZWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSor1BNTxpTuRPlb0UVRbPQGIPbQ uqrt/r+xdW6PW5u1bRgjnNesVGuk2IBLkT5ye3Ep9yzqHBHKdGD7zngqXCnhLsB+ hLTMt1OI0zVCIJKzGRFRUL0fOiFmru/anV5Td1OOHTZPqa8bGk1C6TrR++OVsCEo VUd0VJWZj+XC8frgCVQL22BNGfjzseOxsq6xK+lqxc0Xn2AoLBj12I9xM6qTxzez ExoITHAJy+lgT9BeNmxDb2IE7awk76lpMhTFIUpmL19PtCyBKiCWHoHPt5y5Bkwe Eef3q51oy2qbEPo9I3IIHC0rB0uQm4gMeMdmL4+fvnFcaGzbg64LSQKTBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZQR8Yq+nuL4LhRIext79UPWp7SMB8GA1UdIwQY MBaAFImSQaADSDFcAsDiqRULhjCH0chXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVpKQm9BTklNVndDd09LcEZRdUdNSWZSeUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lNzliODctZDUxYi00ZjE1LThhMzIt OTllNzgwYmYzYjk4LzEvaVpKQm9BTklNVndDd09LcEZRdUdNSWZSeUZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9lNzliODctZDUxYi00ZjE1LThhMzItOTllNzgwYmYzYjk4 LzEvaVpKQm9BTklNVndDd09LcEZRdUdNSWZSeUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALdJ51McO HmpoKYHXN8AjjK7qY416H0z9uDshld26lY3P2FS2coFzEK+eCS7UXRWT+l1oVCb2 AKBXU9pUAklt4c/ZHO/zvv+6EE8x7rGxr+C29Wu3Y7c7T4l/44Jp5EYQNUU1D0aH AhF7e+8760zYVzz9M0uMo1UEurI991a67vy6E2wa6ALDOyg4D3bJy8ZPlCe6dT1n ao0/X+vem9D7hQ/NRNWJ5fzBy/+Ii5tjKCq+LP9m2WkueRFdqF1d8/v2Sb+VnS8V whr9UcG03CN94yaDhIfdRKDBqOW7p6K93IP0iZfoKuF03CgCbzmDnWwEmMeXifwH UxuHACaR4qqpQw== -----END CERTIFICATE-----Generated at Thu Jan 1 12:31:13 2026 by rpki-client