This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft File: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft (raw, json) Hash identifier: aFsYjev5kspEodkvGHPJxNDqFP0aIso8H3PAt2rEXLc= Subject key identifier: C6:46:E3:D5:AA:A2:63:A9:72:63:F2:A4:91:16:47:B5:65:DD:72:B8 Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2 Certificate issuer: /CN=d223093ce150874016d793f439f43d2e6440c3f2 Certificate serial: 019BA2D8B1962646A659FC2C106355B9BF54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft Manifest number: 17BB Signing time: Fri 09 Jan 2026 13:01:08 +0000 Manifest this update: Fri 09 Jan 2026 13:01:08 +0000 Manifest next update: Sat 10 Jan 2026 13:01:08 +0000 Files and hashes: 1: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl (hash: fz09gyFJ+wpFU+X4T8atBB/tK61ZykdrIwJkKd5qfdc=) 2: dIQUiyCohK8UIKP3Wc_vpehQ9jQ.roa (hash: 4z4Cff5T7C1kMcuabXqlqC9vzDBKDpLEEFDPaDQ1Shs=) 3: lU-M6Rbwn_sYPtT01bjpJTpzM_c.roa (hash: aE61BcYLJ+s8wneEHCKlvN2g4ojZACwiHGtJ3iEG3YI=) 4: qgZQRIByCSALcE73ENt-q4UPqdY.roa (hash: GR9g1THKzvFcNqQhXU+wmTdELTKbBSkjvvOetVfO1p8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:d8:b1:96:26:46:a6:59:fc:2c:10:63:55:b9:bf:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2 Validity Not Before: Jan 9 13:01:08 2026 GMT Not After : Jan 10 13:01:08 2026 GMT Subject: CN=c646e3d5aaa263a97263f2a4911647b565dd72b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fd:25:cd:67:44:28:5d:c5:fe:5c:30:0a:86: 06:37:32:3c:1d:3d:7c:7b:40:30:05:4e:c3:f6:9a: 82:2f:e9:bc:cf:0f:f9:0b:df:9f:73:3d:ab:9e:29: 21:b6:c1:53:e0:6e:11:9e:99:be:6d:fe:6e:12:9a: a2:fa:2a:42:37:09:38:e5:7d:43:db:f6:79:93:fd: bb:cc:8f:bb:31:ed:42:d2:d8:97:c2:c7:38:05:82: bb:64:fc:3d:29:9c:b1:90:66:25:6a:59:da:14:b3: 85:b6:cb:0f:1b:e5:4a:39:04:b3:a6:b7:46:f3:91: de:e5:dc:7e:2b:c7:fa:16:f6:57:ed:54:6b:47:94: 64:e2:09:92:f5:89:21:f1:19:e2:84:9b:5a:04:52: 85:58:1b:9c:05:f0:0c:a9:20:41:44:de:29:3a:97: cc:fe:84:28:6b:b7:93:fb:0c:b3:44:6c:ae:c1:aa: 26:0b:1b:60:91:1b:ad:1f:5e:e7:79:58:12:1b:76: 3b:bb:4c:3d:80:45:d8:f1:8f:72:dd:b8:9d:fb:83: 81:f5:4b:0c:e4:89:d6:29:24:b2:d7:32:7c:d1:56: ad:c2:8c:e3:d9:35:a5:d6:2e:46:c0:cf:65:4d:b1: 9a:e9:b8:65:f1:9f:8b:d1:3d:cd:76:a2:cb:ae:06: 5b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:46:E3:D5:AA:A2:63:A9:72:63:F2:A4:91:16:47:B5:65:DD:72:B8 X509v3 Authority Key Identifier: keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c2:43:94:1b:4a:52:23:e1:e1:25:63:fc:46:d7:87:7b:2a: 37:19:d3:4c:a8:ee:39:87:95:23:90:75:49:64:c0:dd:2a:b9: d6:e4:96:b1:19:8f:91:fe:71:8d:ad:70:b0:9e:81:69:01:0d: 2c:33:22:0a:ed:99:dd:96:85:70:b4:64:ed:c7:58:47:f5:f1: 19:db:34:10:f9:0d:da:3c:b4:18:26:01:87:6c:bd:4f:e9:f9: 7b:f5:eb:cf:03:8b:bf:26:0a:3e:5a:c7:17:34:8e:66:50:25: 45:8f:f6:68:1e:df:59:4b:1e:6d:eb:51:54:df:50:39:b5:14: 88:f9:ee:fb:92:f4:81:c6:b7:c3:0e:fd:f5:24:87:f3:9e:8f: 2d:f1:a8:1d:77:f5:89:33:61:dd:24:b6:b7:3a:44:60:af:ad: e1:a9:c9:43:61:07:8d:ba:83:7a:d6:7b:36:6c:41:e3:d3:26: 63:2b:74:ac:46:03:d8:a6:8d:9c:bb:75:74:70:40:1d:b2:cf: 41:ff:58:1e:59:86:67:8f:41:8e:3d:81:6f:3b:15:f4:ec:0e: d9:49:72:dd:8a:88:73:c0:fb:d1:7f:cb:a3:ca:09:06:f7:5f: 14:34:3f:e7:44:fc:7f:4b:e2:ac:8c:a9:0f:78:92:ba:5c:73: 13:0f:19:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZui2LGWJkamWfwsEGNVub9UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMjMwOTNjZTE1MDg3NDAxNmQ3OTNmNDM5ZjQzZDJlNjQ0 MGMzZjIwHhcNMjYwMTA5MTMwMTA4WhcNMjYwMTEwMTMwMTA4WjAzMTEwLwYDVQQD EyhjNjQ2ZTNkNWFhYTI2M2E5NzI2M2YyYTQ5MTE2NDdiNTY1ZGQ3MmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv0lzWdEKF3F/lwwCoYGNzI8HT18 e0AwBU7D9pqCL+m8zw/5C9+fcz2rnikhtsFT4G4Rnpm+bf5uEpqi+ipCNwk45X1D 2/Z5k/27zI+7Me1C0tiXwsc4BYK7ZPw9KZyxkGYlalnaFLOFtssPG+VKOQSzprdG 85He5dx+K8f6FvZX7VRrR5Rk4gmS9Ykh8RnihJtaBFKFWBucBfAMqSBBRN4pOpfM /oQoa7eT+wyzRGyuwaomCxtgkRutH17neVgSG3Y7u0w9gEXY8Y9y3bid+4OB9UsM 5InWKSSy1zJ80Vatwozj2TWl1i5GwM9lTbGa6bhl8Z+L0T3NdqLLrgZbsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZG49WqomOpcmPypJEWR7Vl3XK4MB8GA1UdIwQY MBaAFNIjCTzhUIdAFteT9Dn0PS5kQMPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mOWEzZGQtNWE2MS00NzI0LWE1YTMt NWIwYjA1MDkzZTBjLzEvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mOWEzZGQtNWE2MS00NzI0LWE1YTMtNWIwYjA1MDkzZTBj LzEvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8JDlBtK UiPh4SVj/EbXh3sqNxnTTKjuOYeVI5B1SWTA3Sq51uSWsRmPkf5xja1wsJ6BaQEN LDMiCu2Z3ZaFcLRk7cdYR/XxGds0EPkN2jy0GCYBh2y9T+n5e/XrzwOLvyYKPlrH FzSOZlAlRY/2aB7fWUsebetRVN9QObUUiPnu+5L0gca3ww799SSH856PLfGoHXf1 iTNh3SS2tzpEYK+t4anJQ2EHjbqDetZ7NmxB49MmYyt0rEYD2KaNnLt1dHBAHbLP Qf9YHlmGZ49Bjj2BbzsV9OwO2Uly3YqIc8D70X/Lo8oJBvdfFDQ/50T8f0virIyp D3iSulxzEw8Zug== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:33 2026 by rpki-client