This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft File: iDg0C7z4K84GXO6zeMuqR7mjLN0.mft (raw, json) Hash identifier: Yjm4jiZFaLWHNxW3Ot7V0Nw2zuWlInxnfpvEs5qZFSE= Subject key identifier: 69:5D:37:03:6D:59:74:3A:EF:54:4B:4C:59:EB:40:EC:8F:5C:18:0B Authority key identifier: 88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD Certificate issuer: /CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd Certificate serial: 019BDA35B3DA5911C9A84A6BA2544BF09E30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft Manifest number: 26 Signing time: Tue 20 Jan 2026 07:01:50 +0000 Manifest this update: Tue 20 Jan 2026 07:01:50 +0000 Manifest next update: Wed 21 Jan 2026 07:01:50 +0000 Files and hashes: 1: 82yqy0aGJzKzR4R_K7jhO-MXZ48.asa (hash: QLpjtYyVJWNod7Hjm1qgZ6D0o3OhLnBCKHSjT6fQXEI=) 2: iDg0C7z4K84GXO6zeMuqR7mjLN0.crl (hash: j8rMKmNg5b7C9Xcd2GMZ6PBlK1Lv+fjsIxn3YNbIc7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:35:b3:da:59:11:c9:a8:4a:6b:a2:54:4b:f0:9e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd Validity Not Before: Jan 20 07:01:50 2026 GMT Not After : Jan 21 07:01:50 2026 GMT Subject: CN=695d37036d59743aef544b4c59eb40ec8f5c180b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:61:0b:5f:39:09:c4:45:86:15:c3:82:44:01: 83:a4:7b:42:12:dc:3b:b0:d2:a4:6e:cc:90:29:0b: a6:ad:67:44:ec:5b:31:a5:64:9c:6a:ba:f4:41:7d: dc:b1:48:3c:28:79:b3:de:b7:f9:7d:a6:93:33:d8: 7b:e1:c9:2b:b7:95:f2:d2:66:2d:1a:8f:e7:3b:db: dc:31:88:8c:af:a4:99:b1:cd:08:06:00:61:cf:40: 23:a9:60:36:2b:23:e0:c5:f0:4d:74:a4:cf:a6:d1: c9:98:d8:f2:22:c5:97:ff:64:33:15:10:13:0e:a8: 9b:22:e0:25:98:a3:8b:45:8b:07:3b:ed:97:e7:e5: e0:8f:ee:75:71:2b:21:5a:e8:7e:17:09:fe:6d:da: 4e:43:38:62:b1:ab:98:68:3e:b3:d4:4e:02:b0:05: 75:72:3d:42:a8:de:2b:5c:5b:e7:67:c6:4c:5a:67: 58:a8:98:f9:a5:b9:23:d4:aa:85:33:f6:46:ec:07: 90:75:63:12:a7:77:b6:30:7f:ad:42:57:e3:96:03: 3d:6f:19:6e:8e:15:40:ca:a5:b4:62:49:b1:82:9c: a6:3c:b0:c9:5e:20:37:4b:91:26:d7:9c:30:01:6f: 20:13:a4:b7:ba:3f:d9:7c:cb:7f:44:24:68:39:ba: 8e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5D:37:03:6D:59:74:3A:EF:54:4B:4C:59:EB:40:EC:8F:5C:18:0B X509v3 Authority Key Identifier: keyid:88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:6e:3c:bd:82:db:41:17:8a:a4:ea:a8:b6:0b:5f:f3:01:36: 47:e7:49:73:82:0c:4b:c8:53:9a:8a:e1:d7:55:f8:a8:ae:0b: f5:e7:9f:91:36:4f:63:68:65:a3:34:4a:34:d5:1c:07:94:ff: 37:83:e5:3c:b8:d3:e0:ac:e5:38:e2:80:00:b5:6e:0b:cf:e7: 31:4b:96:7a:24:c4:89:b6:3d:b5:ad:a4:52:3c:8b:cd:3c:38: 12:43:7e:b1:b7:c6:5d:d5:1b:57:68:9e:ae:c4:b9:fc:fd:18: fe:39:cc:1b:69:61:fc:03:62:68:e3:3d:95:a8:0d:39:af:f7: 3e:b2:0a:de:f7:b7:9a:ee:0e:2a:95:7b:59:dd:12:ee:2e:c1: 6a:13:ac:db:b8:06:80:cf:01:fa:97:fa:85:42:68:d4:24:f3: 1e:21:67:df:bc:31:12:58:30:58:7c:be:b1:64:ed:81:63:f7: cc:5e:f2:5f:c3:6d:58:5a:7a:66:2e:ce:17:91:96:a2:71:da: 46:eb:78:23:a4:6f:8e:85:51:67:d7:90:a5:1a:6c:e2:66:a5: 90:e7:e5:18:52:d9:f2:40:ac:2b:19:7f:9f:45:94:96:ee:d4: b5:cb:50:e9:53:cd:0e:4b:17:ab:6c:1c:69:c6:cd:d6:7d:9c: d2:68:17:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvaNbPaWRHJqEprolRL8J4wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MzgzNDBiYmNmODJiY2UwNjVjZWViMzc4Y2JhYTQ3Yjlh MzJjZGQwHhcNMjYwMTIwMDcwMTUwWhcNMjYwMTIxMDcwMTUwWjAzMTEwLwYDVQQD Eyg2OTVkMzcwMzZkNTk3NDNhZWY1NDRiNGM1OWViNDBlYzhmNWMxODBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmELXzkJxEWGFcOCRAGDpHtCEtw7 sNKkbsyQKQumrWdE7FsxpWScarr0QX3csUg8KHmz3rf5faaTM9h74ckrt5Xy0mYt Go/nO9vcMYiMr6SZsc0IBgBhz0AjqWA2KyPgxfBNdKTPptHJmNjyIsWX/2QzFRAT DqibIuAlmKOLRYsHO+2X5+Xgj+51cSshWuh+Fwn+bdpOQzhisauYaD6z1E4CsAV1 cj1CqN4rXFvnZ8ZMWmdYqJj5pbkj1KqFM/ZG7AeQdWMSp3e2MH+tQlfjlgM9bxlu jhVAyqW0YkmxgpymPLDJXiA3S5Em15wwAW8gE6S3uj/ZfMt/RCRoObqOyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGldNwNtWXQ671RLTFnrQOyPXBgLMB8GA1UdIwQY MBaAFIg4NAu8+CvOBlzus3jLqke5oyzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaURnMEM3ejRLODRHWE82emVNdXFSN21qTE4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS81NGFmNmMtZGM1YS00MzE2LTkwNTYt MzVlMzk5NjRkZmRjLzEvaURnMEM3ejRLODRHWE82emVNdXFSN21qTE4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS81NGFmNmMtZGM1YS00MzE2LTkwNTYtMzVlMzk5NjRkZmRj LzEvaURnMEM3ejRLODRHWE82emVNdXFSN21qTE4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwG48vYLb QReKpOqotgtf8wE2R+dJc4IMS8hTmorh11X4qK4L9eefkTZPY2hlozRKNNUcB5T/ N4PlPLjT4KzlOOKAALVuC8/nMUuWeiTEibY9ta2kUjyLzTw4EkN+sbfGXdUbV2ie rsS5/P0Y/jnMG2lh/ANiaOM9lagNOa/3PrIK3ve3mu4OKpV7Wd0S7i7BahOs27gG gM8B+pf6hUJo1CTzHiFn37wxElgwWHy+sWTtgWP3zF7yX8NtWFp6Zi7OF5GWonHa Rut4I6RvjoVRZ9eQpRps4malkOflGFLZ8kCsKxl/n0WUlu7UtctQ6VPNDksXq2wc acbN1n2c0mgXOg== -----END CERTIFICATE-----Generated at Tue Jan 20 09:24:26 2026 by rpki-client