This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft File: Y2O7ZYlfOlSksyShDHmsmO_ioco.mft (raw, json) Hash identifier: kyMz+undf1a8KOmT2GgmNxNIyD/p91CaB2RM2Chk6XU= Subject key identifier: A7:D4:8F:B1:D0:77:8B:ED:A8:5B:08:D5:18:06:02:3B:99:63:CD:10 Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 019BF2E1F3BC9382CBD27DC06CBA77072EA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft Manifest number: 1146 Signing time: Sun 25 Jan 2026 02:00:52 +0000 Manifest this update: Sun 25 Jan 2026 02:00:52 +0000 Manifest next update: Mon 26 Jan 2026 02:00:52 +0000 Files and hashes: 1: 0qcRgVORJ6l9UlTI2CKPLzjbfog.roa (hash: wvJhHDw0n2QTgzGbPUH8xt0FfoOscXlBHhG0tJvFt98=) 2: 2EkuPAqVHEWEKp6ASw2K5zmACQk.roa (hash: n72y5YkbbuFUJAYmxmxnzR7f3ZsUZLnhTxeGIE67Cko=) 3: LKqcV__iHBkuJmHBTgVTMKe7jfs.roa (hash: LzRNG01pbqOOrg9Ke+0IrSjljXKIcSklaBxsB5gc1AU=) 4: PxxNVNL5BOB3QrAZZvS5ahJKLOQ.roa (hash: tFLry/v07lnhSlHBjf2oO0BxwozcI2XhOgOvdmFzcjY=) 5: SsMemxNz7WwrgOi2t4J5keskOjc.roa (hash: 8tN8540PpdeEqrMWMweCLc0iyV0lekQaB3DsFO3PEyM=) 6: U74ViGODTud33ngPAmj4w73NK6o.roa (hash: 8g7ud1guSPB+L+sklXn8DfQQ/RtzcbmpgZcJ8hWX/2M=) 7: Y2O7ZYlfOlSksyShDHmsmO_ioco.crl (hash: unOnDTE6mcLkIfj9RCQ3DVcxjfexQTatS9ICba29bSc=) 8: ajUdjtPuTYK4cJ-GDNgzwU_V7QU.roa (hash: zq0p6TTpyxJr1rlBswAzuDS0To2T7g83akxmSzfwXWY=) 9: esQiMgPaySQVW0k54pO3jc5Zyuc.roa (hash: 2aftWcOZmt2bVeY6qt170y22emZnUo4u4rs+oiqH7rU=) 10: n9NpVtjQ4CgC347DPdZBbkrl1rk.roa (hash: F/VcD/rkVFmMD8EIR8zYpeskYz8L7PTmG19l/6//DPo=) 11: qzDK1lhCM39SxM8PACxbyKkom_M.roa (hash: nfWxgyb2gt4+A8mM3hL0XhTI+0dXdf9+3PuS2IdhMMY=) 12: uDzu64m1ZPD4co3ETwziJWE95lo.roa (hash: xvTvJ4HerqZfilmLig7DuXnycU4OZ2peduUMg7vJfqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e1:f3:bc:93:82:cb:d2:7d:c0:6c:ba:77:07:2e:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: Jan 25 02:00:52 2026 GMT Not After : Jan 26 02:00:52 2026 GMT Subject: CN=a7d48fb1d0778beda85b08d51806023b9963cd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0f:ba:ed:35:88:c8:36:9c:9b:12:50:93:56: e3:88:af:74:e8:9c:ec:d9:66:c4:03:86:35:5b:bf: 06:23:00:45:16:c5:e9:b3:62:4e:37:88:52:be:81: e9:03:a7:d6:30:f5:39:b1:73:92:a8:97:ec:57:64: 46:d4:bf:27:55:1d:b7:83:09:60:a8:00:da:28:cb: 68:f5:0f:48:c0:bb:84:06:67:d9:18:25:ab:1e:fd: 78:ed:2a:9d:78:9d:1f:f2:18:43:04:ff:c7:58:fc: 06:91:30:19:8d:98:66:d2:1b:3d:89:ed:11:16:60: 55:dd:81:af:72:bc:f1:e3:e8:b5:9d:a9:38:d4:df: ab:8e:71:da:07:21:7d:c9:f6:e1:d0:93:51:bf:03: 67:c1:55:a3:ad:62:f0:53:17:85:4a:d2:09:9d:6c: d5:19:f2:eb:b3:8d:d3:72:11:1a:e8:76:0f:42:bd: e2:0e:03:ee:4b:03:91:10:31:18:51:81:f4:a8:6b: 43:99:e2:8f:da:55:98:d9:26:c7:0a:c6:2a:d3:b8: 1a:03:71:4d:e0:3c:f0:df:b4:69:96:1b:b9:13:b8: 79:27:0b:46:55:60:86:d6:1f:ba:97:16:6c:48:b8: 10:7c:2d:30:16:63:0e:19:d2:d6:1b:69:ec:61:c2: f9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D4:8F:B1:D0:77:8B:ED:A8:5B:08:D5:18:06:02:3B:99:63:CD:10 X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:65:c9:cd:9e:6c:37:55:5c:89:3c:c6:c0:94:b2:28:92:a3: 70:53:67:68:13:1f:69:2d:c8:f0:c2:6d:a3:ac:67:40:4d:99: 7b:ef:13:f7:7e:ba:dd:05:06:10:8d:cd:ba:88:74:35:0c:80: 56:12:c4:15:cf:5a:b8:a5:dc:31:89:20:85:0b:ea:96:32:a3: 0b:bb:9e:64:5b:b8:23:f8:58:38:4f:35:d6:e9:98:8a:2b:b7: c2:0b:c2:42:e3:90:42:72:a7:dd:6e:ab:9d:cd:2d:4d:3e:a1: bd:95:85:f9:00:03:b5:e9:0f:e0:20:8c:24:3f:a0:65:a3:ed: ef:17:9d:e4:2f:49:bf:76:fc:f4:c3:cb:9e:0f:5c:10:82:b1: cc:2c:d2:0d:2c:18:04:40:2e:d2:20:a1:dc:c8:31:f7:a8:c3: 8b:52:8e:c4:12:ad:2f:77:3b:fa:89:d2:34:f6:f4:5c:a3:f4: 10:63:6c:65:bd:af:c6:1f:d2:a3:0a:5f:52:e8:0b:87:47:ff: 91:ce:16:b2:02:e9:1c:39:f9:90:b2:46:7b:15:70:b1:a0:d0: 7c:53:13:2c:d2:a6:f1:f0:57:87:74:87:eb:cf:55:5f:ad:31: 58:32:b2:cc:86:50:70:6f:20:6f:a7:88:01:75:73:25:85:e5: 4b:b7:69:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4fO8k4LL0n3AbLp3By6lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjYwMTI1MDIwMDUyWhcNMjYwMTI2MDIwMDUyWjAzMTEwLwYDVQQD EyhhN2Q0OGZiMWQwNzc4YmVkYTg1YjA4ZDUxODA2MDIzYjk5NjNjZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6A+67TWIyDacmxJQk1bjiK906Jzs 2WbEA4Y1W78GIwBFFsXps2JON4hSvoHpA6fWMPU5sXOSqJfsV2RG1L8nVR23gwlg qADaKMto9Q9IwLuEBmfZGCWrHv147SqdeJ0f8hhDBP/HWPwGkTAZjZhm0hs9ie0R FmBV3YGvcrzx4+i1nak41N+rjnHaByF9yfbh0JNRvwNnwVWjrWLwUxeFStIJnWzV GfLrs43TchEa6HYPQr3iDgPuSwOREDEYUYH0qGtDmeKP2lWY2SbHCsYq07gaA3FN 4Dzw37Rplhu5E7h5JwtGVWCG1h+6lxZsSLgQfC0wFmMOGdLWG2nsYcL5TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfUj7HQd4vtqFsI1RgGAjuZY80QMB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmXJzZ5s N1VciTzGwJSyKJKjcFNnaBMfaS3I8MJto6xnQE2Ze+8T93663QUGEI3Nuoh0NQyA VhLEFc9auKXcMYkghQvqljKjC7ueZFu4I/hYOE811umYiiu3wgvCQuOQQnKn3W6r nc0tTT6hvZWF+QADtekP4CCMJD+gZaPt7xed5C9Jv3b89MPLng9cEIKxzCzSDSwY BEAu0iCh3Mgx96jDi1KOxBKtL3c7+onSNPb0XKP0EGNsZb2vxh/SowpfUugLh0f/ kc4WsgLpHDn5kLJGexVwsaDQfFMTLNKm8fBXh3SH689VX60xWDKyzIZQcG8gb6eI AXVzJYXlS7dpRg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:21 2026 by rpki-client