This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft File: iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft (raw, json) Hash identifier: oKkGwkLqYF5+ZMR17fxe0vBNkQh8eMlqStunV/fH1OA= Subject key identifier: 0A:1A:87:04:63:86:53:F8:7D:1A:4A:DC:25:E7:88:E3:C1:6B:8A:22 Authority key identifier: 88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6 Certificate issuer: /CN=88678ca34c3c6365fb616a66077160a494a6e9d6 Certificate serial: 019BF72D97A828BF0414346A25B5A47BBE07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft Manifest number: 07E6 Signing time: Sun 25 Jan 2026 22:01:58 +0000 Manifest this update: Sun 25 Jan 2026 22:01:58 +0000 Manifest next update: Mon 26 Jan 2026 22:01:58 +0000 Files and hashes: 1: Ikq2mGUlslqkD1ZeqGUCsBqCrfo.roa (hash: E6NdR2fVzdULD14RMMCq1nu2I2iubEiAOLLdM23/Ci0=) 2: iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl (hash: rXN2c02kZBMs8GH0T3wt6EsVWoHHmkmj7/z9wxOU60Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:97:a8:28:bf:04:14:34:6a:25:b5:a4:7b:be:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88678ca34c3c6365fb616a66077160a494a6e9d6 Validity Not Before: Jan 25 22:01:58 2026 GMT Not After : Jan 26 22:01:58 2026 GMT Subject: CN=0a1a8704638653f87d1a4adc25e788e3c16b8a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cb:d6:f7:05:a9:a0:fb:cb:09:2f:7c:fd:b5: e8:14:a3:1a:d1:2d:f9:88:7d:34:ba:29:19:04:cb: 88:bb:4d:76:b3:10:63:aa:4f:10:7c:ab:1a:dd:d0: 38:fa:41:bb:b2:ce:ab:b1:61:23:81:bf:20:e5:5d: 7c:30:ee:5c:6a:27:11:07:25:9a:08:88:1b:c3:e8: d9:38:f6:b2:40:79:19:c5:88:82:a5:48:99:37:08: ca:cf:a0:c8:e9:78:0a:15:fa:c5:f5:1d:8d:64:e3: 31:d5:55:e4:a8:d1:25:5d:0a:0b:18:12:c9:92:dc: ed:06:9f:0a:1a:4c:ce:94:55:d3:bb:62:5f:20:cc: 30:be:53:65:7c:23:55:e3:dd:59:e4:48:52:e6:2e: e9:44:3e:08:29:77:ca:a6:a5:9b:39:4e:21:24:46: 88:93:be:56:7c:d0:31:86:19:e2:85:8c:61:37:fb: 4d:e8:48:cd:90:1f:06:89:28:e0:0a:be:be:3e:4f: 10:55:10:e0:4c:52:4f:40:e0:e7:ee:9a:04:19:ce: 7c:15:4c:7e:8a:91:5c:65:a9:81:dd:f6:9f:c1:97: 85:54:0c:e5:eb:4b:24:1f:80:82:ed:10:20:7c:1c: 1a:2e:03:ba:57:51:df:4c:6d:a4:67:f2:b4:fb:f6: 8d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1A:87:04:63:86:53:F8:7D:1A:4A:DC:25:E7:88:E3:C1:6B:8A:22 X509v3 Authority Key Identifier: keyid:88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:14:f8:0a:7e:b1:14:57:eb:21:c6:21:1b:4a:8b:81:f3:c9: 9e:c3:71:b5:86:bf:67:4e:44:f4:6c:da:1c:b8:66:3c:ad:55: 2c:d6:5e:df:6b:78:a8:cb:e1:50:0d:24:ba:cf:a0:08:96:e2: f6:50:0c:77:03:ea:3d:70:91:d0:fb:14:a7:18:ad:09:1b:6e: b4:e5:c9:98:ee:bf:48:e2:74:6d:a2:24:29:85:03:eb:e5:09: 93:d0:94:f4:2d:34:8d:af:1c:8b:a1:9a:8d:5f:9c:25:d8:a0: 91:db:f3:48:a0:c5:e3:c1:4b:cb:fc:ff:3e:fa:56:f6:00:38: 85:51:00:b0:4f:90:83:1b:a4:1a:48:01:74:cd:5f:b8:46:08: 5c:07:35:3d:7a:49:77:cf:4c:be:cc:d5:25:a0:43:b3:59:f3: c3:e5:8d:dd:6c:13:1d:0c:eb:d4:a9:df:aa:dd:95:b7:81:51: 3a:05:f4:b6:0b:db:6c:e3:5c:fa:60:42:5d:db:aa:82:ec:46: 5d:93:6f:6a:c3:65:33:2c:a0:b2:65:55:d4:43:11:29:12:78: 09:89:a3:5d:e1:02:ba:6d:41:19:b8:e6:6f:07:30:4b:21:07: 5b:13:53:5a:0d:cf:3f:7a:2e:4e:6d:01:f7:6c:23:4f:62:8e: bc:a3:49:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LZeoKL8EFDRqJbWke74HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4Njc4Y2EzNGMzYzYzNjVmYjYxNmE2NjA3NzE2MGE0OTRh NmU5ZDYwHhcNMjYwMTI1MjIwMTU4WhcNMjYwMTI2MjIwMTU4WjAzMTEwLwYDVQQD EygwYTFhODcwNDYzODY1M2Y4N2QxYTRhZGMyNWU3ODhlM2MxNmI4YTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8vW9wWpoPvLCS98/bXoFKMa0S35 iH00uikZBMuIu012sxBjqk8QfKsa3dA4+kG7ss6rsWEjgb8g5V18MO5caicRByWa CIgbw+jZOPayQHkZxYiCpUiZNwjKz6DI6XgKFfrF9R2NZOMx1VXkqNElXQoLGBLJ ktztBp8KGkzOlFXTu2JfIMwwvlNlfCNV491Z5EhS5i7pRD4IKXfKpqWbOU4hJEaI k75WfNAxhhnihYxhN/tN6EjNkB8GiSjgCr6+Pk8QVRDgTFJPQODn7poEGc58FUx+ ipFcZamB3fafwZeFVAzl60skH4CC7RAgfBwaLgO6V1HfTG2kZ/K0+/aNOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoahwRjhlP4fRpK3CXniOPBa4oiMB8GA1UdIwQY MBaAFIhnjKNMPGNl+2FqZgdxYKSUpunWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUdlTW8wdzhZMlg3WVdwbUIzRmdwSlNtNmRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zYmFhY2MtNDIwMS00OTUxLTgzNTQt Zjg1ZjcyMWZiMWI4LzEvaUdlTW8wdzhZMlg3WVdwbUIzRmdwSlNtNmRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zYmFhY2MtNDIwMS00OTUxLTgzNTQtZjg1ZjcyMWZiMWI4 LzEvaUdlTW8wdzhZMlg3WVdwbUIzRmdwSlNtNmRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsRT4Cn6x FFfrIcYhG0qLgfPJnsNxtYa/Z05E9GzaHLhmPK1VLNZe32t4qMvhUA0kus+gCJbi 9lAMdwPqPXCR0PsUpxitCRtutOXJmO6/SOJ0baIkKYUD6+UJk9CU9C00ja8ci6Ga jV+cJdigkdvzSKDF48FLy/z/PvpW9gA4hVEAsE+QgxukGkgBdM1fuEYIXAc1PXpJ d89MvszVJaBDs1nzw+WN3WwTHQzr1Knfqt2Vt4FROgX0tgvbbONc+mBCXduqguxG XZNvasNlMyygsmVV1EMRKRJ4CYmjXeECum1BGbjmbwcwSyEHWxNTWg3PP3ouTm0B 92wjT2KOvKNJrQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:05 2026 by rpki-client