This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft File: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json) Hash identifier: +3Y6C1L/DymODz2cUXvnoLWTsp+22tvGM0Y0IOqRL24= Subject key identifier: D8:C2:DE:97:AC:52:5F:46:CE:F5:04:27:23:2D:6A:53:E2:09:4D:80 Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86 Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486 Certificate serial: 019B7D81EB6A786239B265F2FC9C5AD2FF99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft Manifest number: 167F Signing time: Fri 02 Jan 2026 07:00:24 +0000 Manifest this update: Fri 02 Jan 2026 07:00:24 +0000 Manifest next update: Sat 03 Jan 2026 07:00:24 +0000 Files and hashes: 1: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: sE3mbI2K57Lq8TiBA8OC5U8szx2g5Z26OR6hZ5pcu+I=) 2: VND09LSiHkpjSOuhfnkKXr1ycfk.roa (hash: EuKqokjCANLNooQ3HgGRZe/o74jjpFvSm4Mcmm5yRzA=) 3: a8PSnoMbEUhv4Faq7MVolsfXT_Y.roa (hash: BPdIhgn9ulm4J7RgTCmSDSsMLRstDEKHEvI4iWcZR7s=) 4: u26fRlT_magCXskBSsLbW-Zc4HE.roa (hash: 9IYpduU01RzT9y1ftFaznGYathxT6zXqQawir2B1XDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:81:eb:6a:78:62:39:b2:65:f2:fc:9c:5a:d2:ff:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486 Validity Not Before: Jan 2 07:00:24 2026 GMT Not After : Jan 3 07:00:24 2026 GMT Subject: CN=d8c2de97ac525f46cef50427232d6a53e2094d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:0f:07:0f:2a:6b:6a:85:20:8c:ae:b9:99: 53:19:32:61:4b:1d:2f:3f:57:14:4e:99:fd:ac:6c: ee:eb:74:96:29:c3:96:09:7b:f7:03:49:d5:f8:7b: 16:45:f3:57:55:da:b6:1f:7b:ba:5b:90:4a:50:25: 02:23:a4:8b:50:c5:9e:9f:6a:69:cb:14:b9:62:81: a5:1a:24:e5:2d:99:45:50:de:ad:21:e9:27:c1:89: 75:3c:34:5b:27:7d:c0:c0:b9:a1:7a:cc:f1:5b:37: a6:ca:28:56:58:d0:cf:71:08:fa:53:20:61:4b:f0: e1:e3:9d:15:bf:24:5c:98:2d:96:9f:e7:43:c7:bc: 79:b7:ff:91:89:5d:72:ba:0a:fb:9f:17:c0:ff:d0: 7d:ea:97:67:b5:cc:d4:69:ac:86:73:d1:ee:f5:fe: 65:a8:b3:f3:b8:f2:3d:1b:4d:10:db:4b:ba:2c:f7: dd:94:14:8c:51:f0:43:87:a4:e1:2b:d3:2f:b9:81: c8:b7:da:0b:93:f3:95:7a:54:cd:4e:8b:8e:82:6b: 4e:4a:fe:12:b9:5e:16:6c:07:ab:c2:f9:33:4d:0e: 10:7d:a9:e4:7a:e6:a2:a2:4c:44:63:06:86:9d:c3: b3:49:90:c8:8a:b4:52:27:00:50:43:23:97:14:cd: 86:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C2:DE:97:AC:52:5F:46:CE:F5:04:27:23:2D:6A:53:E2:09:4D:80 X509v3 Authority Key Identifier: keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:5c:5a:2e:1b:d8:66:f4:22:41:76:b2:c7:c9:e2:42:a4:13: a7:51:31:5b:53:47:36:35:19:ba:fa:e2:09:a1:fe:0f:72:47: d4:e0:33:36:84:0d:ed:05:24:85:6b:dd:ed:6a:33:c9:94:21: 23:d4:46:e1:4b:c7:e1:b4:71:a0:d8:4e:08:89:43:1a:94:76: 16:58:99:47:f0:91:d0:de:3f:e2:c7:39:a2:38:82:c5:68:b8: aa:9e:47:d0:87:1d:f5:51:de:57:28:92:53:60:e0:ec:be:8a: 74:0c:6d:1c:42:23:3f:d4:92:4e:49:f3:2b:2d:72:f9:15:6c: b4:0d:23:c7:15:33:cd:18:d2:4d:4b:97:d0:9f:82:08:e0:c9: fe:7f:5d:bc:b5:1c:81:71:81:44:ba:a1:82:39:91:dc:f2:96: 15:a6:61:be:57:28:cc:00:2f:f6:40:e4:31:df:8d:ab:b0:71: 50:5c:b4:dc:92:cf:98:d8:1e:e2:a9:00:69:91:9e:86:52:4b: 65:90:a5:28:a6:03:02:83:4a:f1:f1:14:79:02:9b:ba:97:ee: 14:4e:e7:56:f6:85:17:bf:38:e1:fe:f1:cc:0d:b8:30:04:69: 13:3a:d9:6d:99:4b:70:c2:49:b8:c4:4e:c6:12:ed:f6:ca:06: ff:58:1c:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9getqeGI5smXy/Jxa0v+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYTAwMDgwY2QyY2IxYmIwNzM5MDNiMzJiMjVhZDY2MGEz NjY0ODYwHhcNMjYwMTAyMDcwMDI0WhcNMjYwMTAzMDcwMDI0WjAzMTEwLwYDVQQD EyhkOGMyZGU5N2FjNTI1ZjQ2Y2VmNTA0MjcyMzJkNmE1M2UyMDk0ZDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYYPBw8qa2qFIIyuuZlTGTJhSx0v P1cUTpn9rGzu63SWKcOWCXv3A0nV+HsWRfNXVdq2H3u6W5BKUCUCI6SLUMWen2pp yxS5YoGlGiTlLZlFUN6tIeknwYl1PDRbJ33AwLmheszxWzemyihWWNDPcQj6UyBh S/Dh450VvyRcmC2Wn+dDx7x5t/+RiV1yugr7nxfA/9B96pdntczUaayGc9Hu9f5l qLPzuPI9G00Q20u6LPfdlBSMUfBDh6ThK9MvuYHIt9oLk/OVelTNTouOgmtOSv4S uV4WbAerwvkzTQ4QfankeuaiokxEYwaGncOzSZDIirRSJwBQQyOXFM2GSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjC3pesUl9GzvUEJyMtalPiCU2AMB8GA1UdIwQY MBaAFCGgAIDNLLG7BzkDsyslrWYKNmSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1Nzkt ZTkyZWNlNGQzY2IzLzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1NzktZTkyZWNlNGQzY2Iz LzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1xaLhvY ZvQiQXayx8niQqQTp1ExW1NHNjUZuvriCaH+D3JH1OAzNoQN7QUkhWvd7WozyZQh I9RG4UvH4bRxoNhOCIlDGpR2FliZR/CR0N4/4sc5ojiCxWi4qp5H0Icd9VHeVyiS U2Dg7L6KdAxtHEIjP9SSTknzKy1y+RVstA0jxxUzzRjSTUuX0J+CCODJ/n9dvLUc gXGBRLqhgjmR3PKWFaZhvlcozAAv9kDkMd+Nq7BxUFy03JLPmNge4qkAaZGehlJL ZZClKKYDAoNK8fEUeQKbupfuFE7nVvaFF7844f7xzA24MARpEzrZbZlLcMJJuMRO xhLt9soG/1gcvQ== -----END CERTIFICATE-----Generated at Fri Jan 2 11:17:08 2026 by rpki-client