This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft File: m-Io1xO-xtTJq87C8Aoo6CH8J78.mft (raw, json) Hash identifier: CZzKcHM/NI+Kbf+RrohvzoOM0IF1PWWX/3F1YEHRsA0= Subject key identifier: 9B:88:C9:EC:11:AE:16:C8:80:43:8B:55:C9:02:AD:25:2D:8D:C4:7D Authority key identifier: 9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF Certificate issuer: /CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf Certificate serial: 019BF462E7A6410DA610EB88973619C9D96C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft Manifest number: 177A Signing time: Sun 25 Jan 2026 09:01:20 +0000 Manifest this update: Sun 25 Jan 2026 09:01:20 +0000 Manifest next update: Mon 26 Jan 2026 09:01:20 +0000 Files and hashes: 1: 0ZGTFrZyUevTua2zs9Lh9hQNybY.roa (hash: zKYr5PtkQA7YlTYVOh/meKgufXnFJ/zrbKe55i+T7vI=) 2: m-Io1xO-xtTJq87C8Aoo6CH8J78.crl (hash: JsZjuTcUGxR7Ef3ggtwR0VFfvCxuSCxuWPge6O7H+NQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:e7:a6:41:0d:a6:10:eb:88:97:36:19:c9:d9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf Validity Not Before: Jan 25 09:01:20 2026 GMT Not After : Jan 26 09:01:20 2026 GMT Subject: CN=9b88c9ec11ae16c880438b55c902ad252d8dc47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4f:ad:d1:67:ab:39:c7:f8:f9:63:2e:f2:ea: e8:79:88:84:9b:ed:e9:86:57:23:06:48:39:ef:36: 38:04:8e:ab:8e:e5:0b:4c:6a:b5:90:50:7d:93:9a: b5:f4:fe:a6:b8:ca:3a:9f:e5:f3:9c:69:ba:2b:07: 95:8c:ab:a4:c3:af:80:0e:81:ad:0e:32:1e:ed:4a: 85:76:aa:ee:97:23:ed:b7:d9:84:b9:90:0d:d8:da: 50:a1:e7:9e:f0:e2:92:aa:b8:27:e6:2c:8e:95:e0: 86:22:b5:40:06:b1:7b:1e:37:03:ad:4b:fd:92:e2: f2:1d:38:c6:87:a5:18:67:ca:7e:b0:4c:5d:3c:c1: 9e:b4:93:b7:40:23:ca:05:25:cd:b6:63:af:82:18: 1c:41:1b:02:7f:b8:65:b8:cb:5c:24:93:ff:30:91: 63:2a:c8:ac:5e:b1:ee:20:7a:f1:32:82:53:0b:dc: f6:a0:32:6d:19:99:f6:2b:87:11:2d:bd:b4:75:e1: 6d:73:e7:1f:e9:44:e3:1b:cb:74:53:91:d4:fb:6b: 2a:22:7a:1c:8b:f0:ab:ab:f7:4c:99:b1:26:d0:ee: 85:ac:e5:20:88:4f:bb:69:9d:f7:72:f5:ca:54:4a: 44:d6:e9:42:41:29:19:a7:cc:22:0a:44:88:81:ee: 9b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:88:C9:EC:11:AE:16:C8:80:43:8B:55:C9:02:AD:25:2D:8D:C4:7D X509v3 Authority Key Identifier: keyid:9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:cd:c2:3e:a4:65:a8:a8:7e:a9:14:28:09:b7:d3:bc:3b:11: 14:3c:c9:19:9f:0f:9d:3f:46:92:c2:e7:54:29:79:86:59:e0: e9:26:08:e8:d5:db:af:5b:12:77:2a:9e:cf:41:da:0f:ab:81: 1a:70:b8:d3:1b:74:e8:9b:3e:32:0f:9c:51:42:42:cc:05:a2: 2d:69:66:06:98:ef:49:bd:a8:96:2e:6c:60:8c:5b:89:35:91: ec:7c:f6:1a:50:17:57:bd:cb:cc:a7:72:4e:29:ca:90:a7:d9: ac:59:aa:7d:d2:4e:06:24:b3:0e:2e:c1:60:d1:07:a2:63:d6: 90:29:db:2c:52:db:06:ed:c1:90:19:55:3c:aa:42:33:ef:19: be:f0:78:8a:df:52:d7:1d:a8:fe:4a:8f:ca:7c:8e:09:ed:44: 1f:b8:6f:90:6e:f0:98:74:38:99:18:9b:27:86:97:25:1a:bf: d0:cd:a8:f7:fd:bc:0f:61:90:2b:6b:f2:a5:7b:1d:4d:1b:4a: f8:fd:ad:f4:5b:ce:55:fe:d7:29:4a:69:9c:c6:dd:9a:e2:41: 8c:79:58:b5:f8:3e:28:86:f0:2d:7d:88:cf:3e:a7:d4:16:72: d4:5c:55:7f:c4:05:f0:d4:66:d9:fd:da:16:ca:c8:1b:a3:46: 75:f3:aa:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YuemQQ2mEOuIlzYZydlsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTIyOGQ3MTNiZWM2ZDRjOWFiY2VjMmYwMGEyOGU4MjFm YzI3YmYwHhcNMjYwMTI1MDkwMTIwWhcNMjYwMTI2MDkwMTIwWjAzMTEwLwYDVQQD Eyg5Yjg4YzllYzExYWUxNmM4ODA0MzhiNTVjOTAyYWQyNTJkOGRjNDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE+t0WerOcf4+WMu8uroeYiEm+3p hlcjBkg57zY4BI6rjuULTGq1kFB9k5q19P6muMo6n+XznGm6KweVjKukw6+ADoGt DjIe7UqFdqrulyPtt9mEuZAN2NpQoeee8OKSqrgn5iyOleCGIrVABrF7HjcDrUv9 kuLyHTjGh6UYZ8p+sExdPMGetJO3QCPKBSXNtmOvghgcQRsCf7hluMtcJJP/MJFj KsisXrHuIHrxMoJTC9z2oDJtGZn2K4cRLb20deFtc+cf6UTjG8t0U5HU+2sqInoc i/Crq/dMmbEm0O6FrOUgiE+7aZ33cvXKVEpE1ulCQSkZp8wiCkSIge6bfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuIyewRrhbIgEOLVckCrSUtjcR9MB8GA1UdIwQY MBaAFJviKNcTvsbUyavOwvAKKOgh/Ce/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1JbzF4Ty14dFRKcTg3QzhBb282Q0g4Sjc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83OWYxNWEtNWNiYS00ZDQwLWIzMGIt ZTM1YTIyM2I0OWM3LzEvbS1JbzF4Ty14dFRKcTg3QzhBb282Q0g4Sjc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS83OWYxNWEtNWNiYS00ZDQwLWIzMGItZTM1YTIyM2I0OWM3 LzEvbS1JbzF4Ty14dFRKcTg3QzhBb282Q0g4Sjc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd83CPqRl qKh+qRQoCbfTvDsRFDzJGZ8PnT9GksLnVCl5hlng6SYI6NXbr1sSdyqez0HaD6uB GnC40xt06Js+Mg+cUUJCzAWiLWlmBpjvSb2oli5sYIxbiTWR7Hz2GlAXV73LzKdy TinKkKfZrFmqfdJOBiSzDi7BYNEHomPWkCnbLFLbBu3BkBlVPKpCM+8ZvvB4it9S 1x2o/kqPynyOCe1EH7hvkG7wmHQ4mRibJ4aXJRq/0M2o9/28D2GQK2vypXsdTRtK +P2t9FvOVf7XKUppnMbdmuJBjHlYtfg+KIbwLX2Izz6n1BZy1FxVf8QF8NRm2f3a FsrIG6NGdfOqzw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:24:04 2026 by rpki-client