This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft File: IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft (raw, json) Hash identifier: XEA2a4U57kRUI6l4DRb73ThIeGbCY7BZbXuy5TGvB+0= Subject key identifier: 5F:76:5A:F7:D4:55:E5:31:67:AA:64:09:74:F0:9B:66:6E:9B:39:73 Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0 Certificate issuer: /CN=2065ced829c011cdb5abb381c164782ded1627e0 Certificate serial: 019BF6BEBF152F910B1D4CCED70F80793D9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft Manifest number: 0502 Signing time: Sun 25 Jan 2026 20:00:54 +0000 Manifest this update: Sun 25 Jan 2026 20:00:54 +0000 Manifest next update: Mon 26 Jan 2026 20:00:54 +0000 Files and hashes: 1: IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl (hash: bY1wmsteRcwdHkcZ54Y9Hv/5iy9BCiJdC1C/xT2J3m8=) 2: fmfMKVUT1v23IOfvxsOu3DSMyz8.roa (hash: u2kyNqDKTbLApMvC0LB9zT5i0g/bvpJwVbX+TwLXl+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:bf:15:2f:91:0b:1d:4c:ce:d7:0f:80:79:3d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0 Validity Not Before: Jan 25 20:00:54 2026 GMT Not After : Jan 26 20:00:54 2026 GMT Subject: CN=5f765af7d455e53167aa640974f09b666e9b3973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b2:b8:07:25:78:e3:91:81:89:11:dd:3e:15: 7d:cf:4d:ac:a6:96:d1:d0:48:79:19:dd:74:45:20: 53:b1:e2:30:b7:9a:cb:6a:6b:2a:76:e4:33:0b:47: a7:6c:dd:96:43:0a:cf:c1:b4:88:d0:79:60:37:eb: 29:a5:9a:d8:79:cb:ce:51:77:1d:93:e2:59:b4:b1: 53:30:b6:b2:72:03:05:63:45:44:77:27:ef:fd:28: 32:50:45:5d:20:97:b5:2f:ba:80:51:17:b9:8b:ea: 61:15:5a:57:3b:45:83:4c:be:41:77:56:6e:84:9a: fc:2d:ba:af:f7:3a:0a:1c:0a:f7:c3:28:3a:4e:d8: 28:12:79:94:9c:91:2d:b0:67:84:fd:59:2d:70:ff: 5c:54:07:98:15:23:a7:a4:3e:24:05:2c:31:ca:52: 90:35:6a:4d:51:7c:03:c7:43:64:e3:42:5d:32:ed: 42:f4:55:e7:b2:f5:ea:56:70:8f:69:d5:7e:b1:b4: c7:ee:c7:40:e6:9a:ae:95:a9:e2:a7:cd:1d:de:2d: 12:18:f5:df:74:56:9e:0a:77:28:04:47:53:ec:09: 9a:45:45:b2:c7:3a:1d:2a:bd:72:99:2c:2a:ca:c4: 52:c5:f8:80:a6:0b:6a:9c:33:e3:6d:59:b0:c2:85: a7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:76:5A:F7:D4:55:E5:31:67:AA:64:09:74:F0:9B:66:6E:9B:39:73 X509v3 Authority Key Identifier: keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:1b:4a:d0:66:23:d3:56:65:a3:e2:a7:95:c2:85:8b:94:fc: 63:c5:07:4f:72:79:fb:48:2b:e2:0f:5f:51:51:2e:81:3d:a1: 10:d9:65:1b:91:00:49:e9:53:ae:53:ff:fb:8b:4a:67:27:3c: f8:3d:8a:f8:79:33:af:13:df:f4:07:d8:33:86:13:0f:0f:92: e2:a7:72:da:5a:a9:0c:e4:3d:57:17:c7:92:24:58:51:f3:76: 4c:1d:f5:52:52:f6:e9:57:0b:55:5e:68:10:bd:07:d5:e7:48: 4e:cb:79:df:83:38:71:44:17:4e:97:40:cf:c2:07:d9:0b:09: 75:fa:48:dc:15:c4:3d:99:a0:c7:f7:ed:e3:24:90:16:6c:e4: e4:c9:8d:e6:2d:46:8a:5d:42:bd:da:b0:30:f3:48:bb:79:58: 5b:da:2e:e3:ea:b2:87:4b:53:26:a2:db:e1:f2:a6:4a:20:04: 94:f4:08:5a:d7:66:48:fd:5d:a8:af:e3:cc:d4:89:5e:14:73: 43:60:ec:e4:21:87:99:36:28:53:bd:33:e5:73:c8:db:78:4e: c8:74:c9:b7:bd:1a:2f:eb:6e:49:7f:1c:1e:79:55:c1:72:fc: d5:e8:24:6e:5a:bb:dd:1f:5a:c9:46:55:22:3a:a4:26:60:f8: c0:1d:15:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vr8VL5ELHUzO1w+AeT2fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNjVjZWQ4MjljMDExY2RiNWFiYjM4MWMxNjQ3ODJkZWQx NjI3ZTAwHhcNMjYwMTI1MjAwMDU0WhcNMjYwMTI2MjAwMDU0WjAzMTEwLwYDVQQD Eyg1Zjc2NWFmN2Q0NTVlNTMxNjdhYTY0MDk3NGYwOWI2NjZlOWIzOTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbK4ByV445GBiRHdPhV9z02sppbR 0Eh5Gd10RSBTseIwt5rLamsqduQzC0enbN2WQwrPwbSI0HlgN+sppZrYecvOUXcd k+JZtLFTMLaycgMFY0VEdyfv/SgyUEVdIJe1L7qAURe5i+phFVpXO0WDTL5Bd1Zu hJr8Lbqv9zoKHAr3wyg6TtgoEnmUnJEtsGeE/VktcP9cVAeYFSOnpD4kBSwxylKQ NWpNUXwDx0Nk40JdMu1C9FXnsvXqVnCPadV+sbTH7sdA5pqulanip80d3i0SGPXf dFaeCncoBEdT7AmaRUWyxzodKr1ymSwqysRSxfiApgtqnDPjbVmwwoWnAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF92WvfUVeUxZ6pkCXTwm2ZumzlzMB8GA1UdIwQY MBaAFCBlztgpwBHNtauzgcFkeC3tFifgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2Qt MzhmOGVkMDAwMWVkLzEvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2QtMzhmOGVkMDAwMWVk LzEvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxtK0GYj 01Zlo+KnlcKFi5T8Y8UHT3J5+0gr4g9fUVEugT2hENllG5EASelTrlP/+4tKZyc8 +D2K+HkzrxPf9AfYM4YTDw+S4qdy2lqpDOQ9VxfHkiRYUfN2TB31UlL26VcLVV5o EL0H1edITst534M4cUQXTpdAz8IH2QsJdfpI3BXEPZmgx/ft4ySQFmzk5MmN5i1G il1CvdqwMPNIu3lYW9ou4+qyh0tTJqLb4fKmSiAElPQIWtdmSP1dqK/jzNSJXhRz Q2Ds5CGHmTYoU70z5XPI23hOyHTJt70aL+tuSX8cHnlVwXL81egkblq73R9ayUZV IjqkJmD4wB0VRQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:06:00 2026 by rpki-client