This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft File: ImTYqhh4-dwUJNL9reQDnhINWxE.mft (raw, json) Hash identifier: KsyIGNAMATYcqP2Yb6obfQZ+pSU+TB3YtzFJV9ArjI4= Subject key identifier: EE:F5:A5:E4:E5:58:E1:AD:27:B7:87:A1:55:70:C6:DB:C6:5D:1A:DD Authority key identifier: 22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11 Certificate issuer: /CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11 Certificate serial: 019BA234A997801651B9DED7E8188B6199D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft Manifest number: 039A Signing time: Fri 09 Jan 2026 10:01:58 +0000 Manifest this update: Fri 09 Jan 2026 10:01:58 +0000 Manifest next update: Sat 10 Jan 2026 10:01:58 +0000 Files and hashes: 1: ImTYqhh4-dwUJNL9reQDnhINWxE.crl (hash: pVEX220PshxUzVHB11fbtQ8SvMYG0dbe51yxqF6YkZk=) 2: iY_NBjZ2wKvEhgTBknWfs0fub4o.roa (hash: MW6tL8GWHpevV/SjR3+AcIiCM8p+f2aCKazHwkxkalU=) 3: ijczCncElROlHI46d-XpTNHadTg.roa (hash: KzZMYnuTUZlqE9+oyNnH3CyhXQ+2YyXZupvfcmp4Fcw=) 4: jRaIj2LT8WIXU3iA4cJ8_db3efw.roa (hash: tCAkC3mU7deWUJjP8Hv0/NGEuNV3/CbI9UawHSvYVy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:34:a9:97:80:16:51:b9:de:d7:e8:18:8b:61:99:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11 Validity Not Before: Jan 9 10:01:58 2026 GMT Not After : Jan 10 10:01:58 2026 GMT Subject: CN=eef5a5e4e558e1ad27b787a15570c6dbc65d1add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:42:ef:45:25:a7:cf:53:5d:90:b6:65:19: 29:cc:a6:0b:00:c3:d4:66:b3:6f:0b:ec:12:8b:e4: b7:3e:54:f9:cd:78:a1:e6:e5:b8:64:2e:3c:66:d9: 02:8a:68:d9:c9:63:52:c2:b9:38:58:1a:d3:ec:42: b1:f4:e9:3f:24:0c:7d:22:c5:6d:01:9a:c3:4c:a5: 15:64:8b:0e:28:48:fd:86:c5:4d:a5:41:cc:3d:9a: 0c:4b:c6:e1:ca:af:88:69:23:d7:0c:9f:bd:64:e9: 4b:c2:eb:fc:b9:8c:cc:94:ca:82:47:1c:c2:c1:76: 76:70:59:11:8f:5b:ad:07:cd:de:89:0b:1d:ca:63: 96:c1:9a:a9:4f:fb:f2:39:38:cb:d9:57:c1:15:eb: d7:7c:62:4f:88:dd:6c:e0:2e:6f:d6:95:48:2c:75: 59:30:eb:d3:b9:a1:d8:e6:5e:52:d8:82:7d:ed:66: 26:d8:98:60:3e:b1:d5:26:a5:d4:91:a3:1e:fc:68: 96:ec:f2:88:e9:c5:e5:d0:d9:bc:12:8a:b2:cf:62: 9b:dd:b8:33:46:e5:54:25:c7:d5:76:5f:81:db:32: 2f:7a:cc:e8:b9:ca:74:2c:ff:61:a0:e4:91:04:16: aa:30:e0:8e:5e:ef:af:21:a5:d7:b4:5b:12:04:a5: 62:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F5:A5:E4:E5:58:E1:AD:27:B7:87:A1:55:70:C6:DB:C6:5D:1A:DD X509v3 Authority Key Identifier: keyid:22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:55:c2:19:c7:9d:da:67:01:4e:3e:8a:3d:fa:46:f7:8e:f8: 7d:b5:c4:dc:7c:6c:a9:58:21:00:35:2e:b1:4a:f0:25:48:7d: 76:ce:65:72:cd:3f:bf:84:bc:bd:3e:c1:85:76:11:c8:ab:31: 3f:c7:dc:8d:e8:2d:c3:8f:04:4d:99:70:b6:bb:36:9c:a2:4e: f7:06:ed:0e:34:8d:c7:29:bc:76:d7:68:a6:1f:3c:1a:09:9b: d3:d9:9e:01:cb:4a:15:70:dd:cf:8d:e8:0c:55:b1:42:c2:fa: 1c:8b:e9:97:1a:69:1e:7d:ee:05:cc:66:43:ff:46:dd:18:2a: 1e:dc:12:6e:a4:58:94:ae:5f:cc:36:eb:38:ba:04:2d:42:ad: 06:80:ba:e4:e1:55:a9:d1:91:89:dd:79:73:5d:e3:b8:ba:45: 93:86:d6:41:58:d3:93:a0:24:f8:bf:26:c8:99:d7:a0:94:09: c2:f0:0f:b1:bf:f6:4b:2e:51:da:c3:4b:d1:8b:19:1e:1e:97: 54:58:8d:f3:71:97:76:9e:0b:06:f1:a2:db:23:0d:06:a9:c2: bb:6c:3d:2b:a4:1d:51:d7:44:95:1c:3c:bd:6c:1e:07:4d:16: a4:61:28:b4:58:67:fb:58:de:41:cb:f3:5d:20:a2:81:ff:0f: 63:f9:a2:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuiNKmXgBZRud7X6BiLYZnXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNjRkOGFhMTg3OGY5ZGMxNDI0ZDJmZGFkZTQwMzllMTIw ZDViMTEwHhcNMjYwMTA5MTAwMTU4WhcNMjYwMTEwMTAwMTU4WjAzMTEwLwYDVQQD EyhlZWY1YTVlNGU1NThlMWFkMjdiNzg3YTE1NTcwYzZkYmM2NWQxYWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmlC70Ulp89TXZC2ZRkpzKYLAMPU ZrNvC+wSi+S3PlT5zXih5uW4ZC48ZtkCimjZyWNSwrk4WBrT7EKx9Ok/JAx9IsVt AZrDTKUVZIsOKEj9hsVNpUHMPZoMS8bhyq+IaSPXDJ+9ZOlLwuv8uYzMlMqCRxzC wXZ2cFkRj1utB83eiQsdymOWwZqpT/vyOTjL2VfBFevXfGJPiN1s4C5v1pVILHVZ MOvTuaHY5l5S2IJ97WYm2JhgPrHVJqXUkaMe/GiW7PKI6cXl0Nm8Eoqyz2Kb3bgz RuVUJcfVdl+B2zIveszoucp0LP9hoOSRBBaqMOCOXu+vIaXXtFsSBKVi2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO71peTlWOGtJ7eHoVVwxtvGXRrdMB8GA1UdIwQY MBaAFCJk2KoYePncFCTS/a3kA54SDVsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSW1UWXFoaDQtZHdVSk5MOXJlUURuaElOV3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hYzlhNGYtNTc3NC00ZWNjLTljMWQt Yzk5OGYwMjkyMTM1LzEvSW1UWXFoaDQtZHdVSk5MOXJlUURuaElOV3hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9hYzlhNGYtNTc3NC00ZWNjLTljMWQtYzk5OGYwMjkyMTM1 LzEvSW1UWXFoaDQtZHdVSk5MOXJlUURuaElOV3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFXCGced 2mcBTj6KPfpG9474fbXE3HxsqVghADUusUrwJUh9ds5lcs0/v4S8vT7BhXYRyKsx P8fcjegtw48ETZlwtrs2nKJO9wbtDjSNxym8dtdoph88Ggmb09meActKFXDdz43o DFWxQsL6HIvplxppHn3uBcxmQ/9G3RgqHtwSbqRYlK5fzDbrOLoELUKtBoC65OFV qdGRid15c13juLpFk4bWQVjTk6Ak+L8myJnXoJQJwvAPsb/2Sy5R2sNL0YsZHh6X VFiN83GXdp4LBvGi2yMNBqnCu2w9K6QdUddElRw8vWweB00WpGEotFhn+1jeQcvz XSCigf8PY/mi0A== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:30 2026 by rpki-client