This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json) Hash identifier: VCmJfykmLScxAPdKvmgRHNNeaXGCPPKFhRliX385Syw= Subject key identifier: B8:12:0C:51:8B:1B:FB:8D:0A:A5:04:06:0A:83:5D:77:7E:F2:14:E2 Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7 Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7 Certificate serial: 019BF2AB8CC12F4C846F11EADD1BA9E1E900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft Manifest number: 1115 Signing time: Sun 25 Jan 2026 01:01:27 +0000 Manifest this update: Sun 25 Jan 2026 01:01:27 +0000 Manifest next update: Mon 26 Jan 2026 01:01:27 +0000 Files and hashes: 1: BGi16pNwivmVyJEm-B_30PHTGJY.roa (hash: VFmTReVIhMEtQ3HwTXqfK+MwS8JAHZ8Wjq1YoMeVEnM=) 2: CRvMm2TI_D-SxIjL6xSVBDeejU8.roa (hash: 9CAsNhDtbLJnTX4b0adoDoZpFQQA2GJIpnAPNWQmo6w=) 3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: bvo9VgjucynwuRyyFPZlcGIRUJjhmajaQGMSfG54cfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:ab:8c:c1:2f:4c:84:6f:11:ea:dd:1b:a9:e1:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7 Validity Not Before: Jan 25 01:01:27 2026 GMT Not After : Jan 26 01:01:27 2026 GMT Subject: CN=b8120c518b1bfb8d0aa504060a835d777ef214e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d5:96:69:65:23:7d:62:57:2b:b0:6a:e0:75: 7c:34:e0:ba:1f:be:41:8a:22:3b:c9:ff:2f:21:66: 0c:dc:66:48:91:f7:a7:b1:ed:2f:9e:42:27:f6:0c: bd:f8:10:53:f7:36:d6:20:ae:a4:5b:d5:fa:63:38: 74:81:58:d5:3d:68:12:a4:98:ae:c1:c7:89:03:74: 19:22:5e:81:1b:6a:44:4d:68:49:55:64:cc:c6:39: e5:31:a8:1b:86:7e:0f:67:60:cf:49:cf:11:53:56: d6:04:67:34:8e:34:ea:32:0a:8e:47:3d:d6:93:c4: a2:09:02:b7:62:f9:46:6f:20:7f:e1:ee:76:e8:28: ca:c9:47:ca:b2:36:38:58:e6:60:26:f9:13:1e:e0: 43:fe:6d:d2:8e:06:79:92:7c:2f:8b:72:c0:45:0d: c9:c1:38:78:7a:a4:44:77:04:c2:45:25:fb:a6:c2: 3e:0f:5e:32:a9:77:b8:dc:65:5e:73:92:84:16:16: cd:d6:03:3a:59:b4:d0:1f:94:6d:5a:b2:5b:dc:ec: db:a1:03:cb:75:2b:37:c4:15:56:ba:27:0d:af:fc: 75:46:2c:77:9f:64:6b:6d:08:bc:b0:79:e9:31:cd: 15:07:0e:30:8d:06:1f:80:7d:1d:9b:45:79:15:45: 30:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:12:0C:51:8B:1B:FB:8D:0A:A5:04:06:0A:83:5D:77:7E:F2:14:E2 X509v3 Authority Key Identifier: keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:35:cd:76:54:8a:12:e4:64:ee:43:ae:f5:f0:b7:c3:fe:26: 38:2a:38:c9:0a:a6:20:71:73:d0:64:c2:3b:e3:6e:e7:63:2f: d9:6f:d0:04:74:eb:1c:85:05:e8:76:b4:25:9a:d2:b7:41:fc: 4a:11:73:63:8b:f7:c2:d0:d3:be:cf:e6:6e:7f:6d:89:dd:9e: c3:16:e8:55:5f:8e:0e:03:85:2f:2b:c1:3c:76:1f:bc:6f:e3: 41:59:da:f2:3b:b6:a5:77:04:bc:d1:35:04:c9:7e:ad:b8:46: db:3b:83:58:60:a3:39:9c:98:07:36:0b:40:e0:42:1c:b0:2d: 4d:ad:7f:7c:e8:9a:43:2e:a0:59:49:d5:af:5d:6b:20:72:b7: 00:77:14:ed:37:b8:f7:80:17:72:9b:48:ce:49:f3:ef:e2:16: ef:a0:7a:dc:c5:82:16:83:92:c8:1d:56:7f:25:26:5b:e4:48: cd:d4:85:64:00:94:b6:31:73:f1:37:a1:ed:54:a0:01:c2:d4: b7:91:60:77:d3:d2:0c:45:6d:0c:a2:58:76:82:e6:4d:58:b7: 48:cb:1e:ed:a0:ac:16:79:7f:5e:fb:f0:c5:eb:db:7c:82:8d: d1:f1:60:7f:28:13:66:a4:75:06:d1:cb:bf:1b:03:ae:49:3c: 44:34:cf:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyq4zBL0yEbxHq3Rup4ekAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZWQwYzA5MDFjNjllNWM1ZDhmNTFhNjc1ZDA1NTk4MmY5 MWQyYTcwHhcNMjYwMTI1MDEwMTI3WhcNMjYwMTI2MDEwMTI3WjAzMTEwLwYDVQQD EyhiODEyMGM1MThiMWJmYjhkMGFhNTA0MDYwYTgzNWQ3NzdlZjIxNGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9WWaWUjfWJXK7Bq4HV8NOC6H75B iiI7yf8vIWYM3GZIkfense0vnkIn9gy9+BBT9zbWIK6kW9X6Yzh0gVjVPWgSpJiu wceJA3QZIl6BG2pETWhJVWTMxjnlMagbhn4PZ2DPSc8RU1bWBGc0jjTqMgqORz3W k8SiCQK3YvlGbyB/4e526CjKyUfKsjY4WOZgJvkTHuBD/m3SjgZ5knwvi3LARQ3J wTh4eqREdwTCRSX7psI+D14yqXe43GVec5KEFhbN1gM6WbTQH5RtWrJb3OzboQPL dSs3xBVWuicNr/x1Rix3n2RrbQi8sHnpMc0VBw4wjQYfgH0dm0V5FUUwHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgSDFGLG/uNCqUEBgqDXXd+8hTiMB8GA1UdIwQY MBaAFIjtDAkBxp5cXY9RpnXQVZgvkdKnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wOTg1ODMtMzZjZS00NjkyLTlkYzMt OWQ5ODhhNjAwNzU3LzEvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8wOTg1ODMtMzZjZS00NjkyLTlkYzMtOWQ5ODhhNjAwNzU3 LzEvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzXNdlSK EuRk7kOu9fC3w/4mOCo4yQqmIHFz0GTCO+Nu52Mv2W/QBHTrHIUF6Ha0JZrSt0H8 ShFzY4v3wtDTvs/mbn9tid2ewxboVV+ODgOFLyvBPHYfvG/jQVna8ju2pXcEvNE1 BMl+rbhG2zuDWGCjOZyYBzYLQOBCHLAtTa1/fOiaQy6gWUnVr11rIHK3AHcU7Te4 94AXcptIzknz7+IW76B63MWCFoOSyB1WfyUmW+RIzdSFZACUtjFz8Teh7VSgAcLU t5Fgd9PSDEVtDKJYdoLmTVi3SMse7aCsFnl/XvvwxevbfIKN0fFgfygTZqR1BtHL vxsDrkk8RDTPZA== -----END CERTIFICATE-----Generated at Sun Jan 25 06:08:28 2026 by rpki-client