This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft File: ISuozPNF7vDc99AVSSCBjzGcJfg.mft (raw, json) Hash identifier: oqkvKBe9K7dklJM/s2E9XGAB6Eh8M1WPQWHvh3dBmQo= Subject key identifier: FB:67:BA:9E:B6:8C:C1:CB:5C:AF:43:C5:F7:AA:72:9B:3F:C7:22:8A Authority key identifier: 21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8 Certificate issuer: /CN=212ba8ccf345eef0dcf7d0154920818f319c25f8 Certificate serial: 019BABA576D9A95C487033EDF9D5960DD877 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft Manifest number: A8 Signing time: Sun 11 Jan 2026 06:01:46 +0000 Manifest this update: Sun 11 Jan 2026 06:01:46 +0000 Manifest next update: Mon 12 Jan 2026 06:01:46 +0000 Files and hashes: 1: 3JJvvML1uYMrR3S7M7bmAWXvgaI.roa (hash: +mjeAVNswdVhhENYtIQJsSCjLPCHzj5tvLuQ8dLELJA=) 2: AJXkjzoozD2UZ-UGtOvfGHct3rI.roa (hash: TaHdT7ku0QOHwdGlIBgSwO87Zn4JRxw7kaBQIz+nitM=) 3: ISuozPNF7vDc99AVSSCBjzGcJfg.crl (hash: 0lwrc50khh8ZEriLnTtXucPyifHS1NFiWU6h1gBtYMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 06:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ab:a5:76:d9:a9:5c:48:70:33:ed:f9:d5:96:0d:d8:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=212ba8ccf345eef0dcf7d0154920818f319c25f8 Validity Not Before: Jan 11 06:01:46 2026 GMT Not After : Jan 12 06:01:46 2026 GMT Subject: CN=fb67ba9eb68cc1cb5caf43c5f7aa729b3fc7228a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:eb:ba:f6:ca:e0:18:f1:df:68:16:0f:33:5f: 52:29:49:38:5a:45:ab:17:d2:91:96:cc:29:2f:9b: 40:36:67:4d:7f:e8:11:e5:ec:b6:45:f7:b4:a3:93: d6:a4:29:8e:32:78:0f:52:8a:b3:db:85:fa:cd:1d: 0d:ac:0e:98:6f:fe:18:ab:26:ff:4e:2d:b6:10:cd: 5b:2d:07:f4:43:b8:a9:48:a1:33:36:ed:c0:18:28: ef:8f:d9:9e:7d:95:0a:b7:56:37:86:2b:99:ae:ab: 72:f3:fb:13:f2:1c:65:fd:bf:cc:fd:db:0e:e9:db: b2:6f:59:e7:04:f5:28:6c:83:70:b9:a3:1f:b5:4d: 33:00:34:06:00:70:0b:89:13:1d:00:11:11:b8:20: 86:d9:9e:e0:68:d7:0e:68:5f:de:75:cb:8f:73:24: 8c:91:a3:6a:77:22:ae:d6:b7:af:bd:73:9d:fe:e5: 83:e8:a9:e5:7e:69:68:52:f1:cd:90:08:63:a1:76: f9:4c:40:bc:d8:d4:dc:dc:d3:a0:2e:b6:eb:63:f8: df:38:ec:5a:dc:12:eb:73:7e:0a:0b:cb:25:24:a5: 12:56:81:dd:36:d7:1f:e2:e1:e8:45:2d:f3:9d:26: ee:1c:3f:d2:e3:52:a6:55:b5:39:52:5a:c7:bc:35: 38:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:67:BA:9E:B6:8C:C1:CB:5C:AF:43:C5:F7:AA:72:9B:3F:C7:22:8A X509v3 Authority Key Identifier: keyid:21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:ea:5a:c6:35:0d:33:10:38:cd:04:06:6a:2d:a3:a7:62:2d: 3c:15:73:23:57:d4:67:d2:dc:c2:4d:29:75:16:b8:be:3b:1a: ca:e8:69:54:28:da:c6:66:56:f6:99:1a:1a:30:ad:37:59:92: 35:24:7b:7e:1d:f7:3c:28:b9:0f:a8:b9:4b:89:8c:92:84:d2: b3:22:b5:f3:f6:3f:8e:3d:74:ec:b1:28:5b:97:f1:33:da:5f: 7c:00:9d:04:bd:5c:2e:9a:db:b1:9f:1e:c3:36:be:5a:b1:74: ce:f3:d1:78:31:33:ea:13:3d:70:1a:05:93:5b:2f:f4:99:b1: 15:cb:37:fd:7a:2a:bb:a8:a3:40:e1:07:1f:69:61:3b:89:aa: 54:25:12:c9:3b:1d:cf:da:1d:5a:d6:34:ad:2e:41:74:f2:6f: 72:28:78:75:4a:ab:02:60:8c:29:59:c1:92:df:c4:b7:5e:d3: 2e:63:92:da:a3:cd:4f:e3:f3:cb:35:65:a7:ec:fc:ab:27:e7: ea:52:99:03:db:f8:35:d9:38:cb:a6:1b:65:fd:db:94:7f:dc: 1b:fd:aa:73:a4:c2:5f:15:da:6b:91:8f:06:09:d1:82:87:e7: 96:62:74:4f:30:2e:d6:22:31:00:2f:e0:c3:41:e1:b0:50:66: 24:87:a7:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZurpXbZqVxIcDPt+dWWDdh3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMmJhOGNjZjM0NWVlZjBkY2Y3ZDAxNTQ5MjA4MThmMzE5 YzI1ZjgwHhcNMjYwMTExMDYwMTQ2WhcNMjYwMTEyMDYwMTQ2WjAzMTEwLwYDVQQD EyhmYjY3YmE5ZWI2OGNjMWNiNWNhZjQzYzVmN2FhNzI5YjNmYzcyMjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+u69srgGPHfaBYPM19SKUk4WkWr F9KRlswpL5tANmdNf+gR5ey2Rfe0o5PWpCmOMngPUoqz24X6zR0NrA6Yb/4Yqyb/ Ti22EM1bLQf0Q7ipSKEzNu3AGCjvj9mefZUKt1Y3hiuZrqty8/sT8hxl/b/M/dsO 6duyb1nnBPUobINwuaMftU0zADQGAHALiRMdABERuCCG2Z7gaNcOaF/edcuPcySM kaNqdyKu1revvXOd/uWD6KnlfmloUvHNkAhjoXb5TEC82NTc3NOgLrbrY/jfOOxa 3BLrc34KC8slJKUSVoHdNtcf4uHoRS3znSbuHD/S41KmVbU5UlrHvDU4mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtnup62jMHLXK9Dxfeqcps/xyKKMB8GA1UdIwQY MBaAFCErqMzzRe7w3PfQFUkggY8xnCX4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVN1b3pQTkY3dkRjOTlBVlNTQ0JqekdjSmZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84MzQyOTgtMzdmNy00ODMwLTg5NDMt ZTA2NmUwMDQxYTA1LzEvSVN1b3pQTkY3dkRjOTlBVlNTQ0JqekdjSmZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84MzQyOTgtMzdmNy00ODMwLTg5NDMtZTA2NmUwMDQxYTA1 LzEvSVN1b3pQTkY3dkRjOTlBVlNTQ0JqekdjSmZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtOpaxjUN MxA4zQQGai2jp2ItPBVzI1fUZ9Lcwk0pdRa4vjsayuhpVCjaxmZW9pkaGjCtN1mS NSR7fh33PCi5D6i5S4mMkoTSsyK18/Y/jj107LEoW5fxM9pffACdBL1cLprbsZ8e wza+WrF0zvPReDEz6hM9cBoFk1sv9JmxFcs3/Xoqu6ijQOEHH2lhO4mqVCUSyTsd z9odWtY0rS5BdPJvcih4dUqrAmCMKVnBkt/Et17TLmOS2qPNT+PzyzVlp+z8qyfn 6lKZA9v4Ndk4y6YbZf3blH/cG/2qc6TCXxXaa5GPBgnRgofnlmJ0TzAu1iIxAC/g w0HhsFBmJIenRw== -----END CERTIFICATE-----Generated at Sun Jan 11 15:13:43 2026 by rpki-client