This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft File: iBD8MZigq5lkeHfb5XJeBc7gE_A.mft (raw, json) Hash identifier: Oferqm8N9T8za0D00Hep5Iy905wN7yINiWn91IQB134= Subject key identifier: 4B:9C:78:B3:CD:02:98:EC:12:00:7A:9A:81:9C:82:BD:A9:B0:D2:2F Authority key identifier: 88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0 Certificate issuer: /CN=8810fc3198a0ab99647877dbe5725e05cee013f0 Certificate serial: 019BFA64B09FE7D5014EC53F4A18D6B7DF3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft Manifest number: 105D Signing time: Mon 26 Jan 2026 13:01:01 +0000 Manifest this update: Mon 26 Jan 2026 13:01:01 +0000 Manifest next update: Tue 27 Jan 2026 13:01:01 +0000 Files and hashes: 1: iBD8MZigq5lkeHfb5XJeBc7gE_A.crl (hash: 7RmLgb8WBfhC3iT+9zSlEsdvxKoV/Xor0CTzcdp8New=) 2: xtriZj0E7B6zsRP9XIkIcFpnrqU.roa (hash: sr6Ahzw03XTlsg1PwbjbJZ0ftk/dptqXUly+PXrigJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:b0:9f:e7:d5:01:4e:c5:3f:4a:18:d6:b7:df:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8810fc3198a0ab99647877dbe5725e05cee013f0 Validity Not Before: Jan 26 13:01:01 2026 GMT Not After : Jan 27 13:01:01 2026 GMT Subject: CN=4b9c78b3cd0298ec12007a9a819c82bda9b0d22f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7b:8d:09:ad:c0:93:1c:e5:89:15:f8:21:ef: 8e:d1:d8:3f:ce:c4:08:05:0e:a4:9d:b4:b3:8f:83: e4:09:b9:79:be:cc:1d:65:48:09:5b:94:b6:e7:c7: d6:3a:ce:56:45:dc:0f:83:f1:a7:82:fb:16:02:8b: ad:ff:42:05:a9:56:c9:7f:c7:d7:b1:78:03:30:af: d0:e9:e9:0a:15:54:0f:40:2f:1d:65:4a:d5:67:06: 15:25:ca:5c:f4:a1:48:76:a4:57:57:85:e3:9c:40: 24:03:19:54:d1:3d:78:08:5e:95:72:52:62:31:cd: c2:bd:3b:b4:54:22:f4:c6:03:ba:f6:0f:3d:18:2a: f0:ad:34:0b:35:2b:32:1c:02:0a:96:86:9f:e8:99: 9d:85:c7:76:d6:4e:48:cf:01:98:9c:c7:ab:ea:78: 20:1a:89:0f:61:f8:06:92:87:d4:e8:b0:b8:88:ee: b0:5f:98:af:c6:88:dd:cd:30:7b:5d:77:75:29:73: 63:42:3f:e3:46:f0:fb:32:e4:6d:c2:c5:ae:32:c1: 6b:d2:91:a1:65:36:db:be:6f:d2:14:97:4a:0f:b2: 39:d6:8e:e9:d0:1e:b7:2f:44:54:51:0a:7f:61:b6: f5:44:12:03:d5:d2:87:88:58:23:08:84:4e:58:d8: de:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9C:78:B3:CD:02:98:EC:12:00:7A:9A:81:9C:82:BD:A9:B0:D2:2F X509v3 Authority Key Identifier: keyid:88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:02:ef:e1:e6:70:15:64:15:26:eb:0f:bb:65:47:8e:3e:cf: 71:ea:41:c2:b6:8d:63:a1:16:cb:61:d2:e6:15:f3:52:c8:13: fb:94:d3:96:4c:36:8b:5a:c4:ab:f1:e3:ef:7d:24:4e:f9:34: 86:f4:4b:e5:2f:de:9f:1a:aa:02:eb:70:34:32:8d:7d:19:83: 9d:ab:db:1a:2f:fa:6e:e1:f2:e0:ac:93:44:77:eb:87:ac:a8: e5:d7:91:51:5d:b5:2d:84:9a:2d:da:38:b7:46:1c:7e:1c:b3: 4f:12:28:d0:1f:fa:25:7e:d3:9c:13:7b:9b:2f:77:7c:d4:85: 1a:e8:11:3e:de:69:9b:90:bd:8f:63:77:7e:7c:45:55:f0:ec: b4:fd:43:d3:a0:d6:85:b7:ae:2d:ac:97:eb:84:3c:27:ff:be: 8c:f4:bc:b5:0c:96:4e:57:2c:78:9c:d5:8f:c7:53:4b:f0:84: 6b:7f:cd:e1:6d:d6:74:1d:1f:0c:52:34:da:54:1d:b1:43:87: fa:9c:8b:89:14:bf:b7:3b:9e:e7:fc:25:d5:ec:ed:a0:34:c3: 3d:29:2e:69:1a:79:de:8e:b7:0e:21:4f:7f:78:61:af:fe:40: 1a:4c:a1:93:8c:19:81:8f:e6:a9:31:5a:2a:6f:01:9e:ad:f6: be:89:87:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZLCf59UBTsU/ShjWt988MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTBmYzMxOThhMGFiOTk2NDc4NzdkYmU1NzI1ZTA1Y2Vl MDEzZjAwHhcNMjYwMTI2MTMwMTAxWhcNMjYwMTI3MTMwMTAxWjAzMTEwLwYDVQQD Eyg0YjljNzhiM2NkMDI5OGVjMTIwMDdhOWE4MTljODJiZGE5YjBkMjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnuNCa3AkxzliRX4Ie+O0dg/zsQI BQ6knbSzj4PkCbl5vswdZUgJW5S258fWOs5WRdwPg/GngvsWAout/0IFqVbJf8fX sXgDMK/Q6ekKFVQPQC8dZUrVZwYVJcpc9KFIdqRXV4XjnEAkAxlU0T14CF6VclJi Mc3CvTu0VCL0xgO69g89GCrwrTQLNSsyHAIKloaf6Jmdhcd21k5IzwGYnMer6ngg GokPYfgGkofU6LC4iO6wX5ivxojdzTB7XXd1KXNjQj/jRvD7MuRtwsWuMsFr0pGh ZTbbvm/SFJdKD7I51o7p0B63L0RUUQp/Ybb1RBID1dKHiFgjCIROWNjepwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuceLPNApjsEgB6moGcgr2psNIvMB8GA1UdIwQY MBaAFIgQ/DGYoKuZZHh32+VyXgXO4BPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJEOE1aaWdxNWxrZUhmYjVYSmVCYzdnRV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jZjFmZmQtMTM0ZC00MzgyLThlNTkt NGEwOGQ1YTFjNzFmLzEvaUJEOE1aaWdxNWxrZUhmYjVYSmVCYzdnRV9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9jZjFmZmQtMTM0ZC00MzgyLThlNTktNGEwOGQ1YTFjNzFm LzEvaUJEOE1aaWdxNWxrZUhmYjVYSmVCYzdnRV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQLv4eZw FWQVJusPu2VHjj7PcepBwraNY6EWy2HS5hXzUsgT+5TTlkw2i1rEq/Hj730kTvk0 hvRL5S/enxqqAutwNDKNfRmDnavbGi/6buHy4KyTRHfrh6yo5deRUV21LYSaLdo4 t0YcfhyzTxIo0B/6JX7TnBN7my93fNSFGugRPt5pm5C9j2N3fnxFVfDstP1D06DW hbeuLayX64Q8J/++jPS8tQyWTlcseJzVj8dTS/CEa3/N4W3WdB0fDFI02lQdsUOH +pyLiRS/tzue5/wl1eztoDTDPSkuaRp53o63DiFPf3hhr/5AGkyhk4wZgY/mqTFa Km8Bnq32vomHsA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:45 2026 by rpki-client