This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json) Hash identifier: 9PKcp0uyTYJIP77i4pBTIewUdxPTcn/RlyoRDwLiLsw= Subject key identifier: 0E:06:A4:44:13:0A:29:30:76:28:B1:FF:79:15:11:F2:85:5F:F1:1D Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0 Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0 Certificate serial: 019BF5ABE2F55E8E31E2137B198A9B0F3BC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft Manifest number: 1525 Signing time: Sun 25 Jan 2026 15:00:41 +0000 Manifest this update: Sun 25 Jan 2026 15:00:41 +0000 Manifest next update: Mon 26 Jan 2026 15:00:41 +0000 Files and hashes: 1: CFgzsXECwMiDOwIfWrN0I3tIDWI.roa (hash: 4jxaJz34clPFCvVztYmXdTaBL83us4edb+/DIMlX2XY=) 2: FaUuFS6TDX1zSostpasPm7Qvifc.roa (hash: AQyo3IRzMcTTKX0sekpJskKYPPvY2FFoOC49QHNt62o=) 3: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: qNgCzEotsGmHOiUHlVkk/MYiU/XpTMOgffsvvkwkF58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:e2:f5:5e:8e:31:e2:13:7b:19:8a:9b:0f:3b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0 Validity Not Before: Jan 25 15:00:41 2026 GMT Not After : Jan 26 15:00:41 2026 GMT Subject: CN=0e06a444130a29307628b1ff791511f2855ff11d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6c:a5:56:4a:91:91:fa:51:42:b3:5e:e8:7e: be:05:41:cb:48:6d:b3:ff:0e:de:22:07:47:6c:84: 93:6a:d0:63:a8:79:26:d9:8c:9e:1e:ea:05:87:84: 46:79:06:68:03:f0:43:4c:ca:bf:c2:22:56:cc:02: 1f:0e:c4:b0:df:9a:2e:63:65:fb:d0:ec:13:23:cb: 95:fb:84:de:14:a7:da:4b:7b:db:dd:cb:0b:b6:c4: 09:8c:b1:5f:1e:1d:f1:e8:ec:9f:39:69:66:42:de: f5:ac:57:95:3d:b9:1c:91:bb:60:db:fc:4e:35:94: 56:3c:b7:85:0b:ec:71:55:07:20:54:18:a4:1b:7d: 00:41:e5:61:d4:15:b0:6f:a1:69:22:49:86:83:5f: 6d:25:62:be:e9:03:f3:07:53:3e:67:0d:bc:12:71: ba:f5:5a:d7:a8:e6:00:6f:16:99:d6:06:60:b9:91: ea:8e:84:4f:5d:5b:ab:75:2f:be:cd:87:23:83:6d: 90:5a:bd:81:66:a1:7a:f5:02:ee:a8:94:57:a7:d0: 58:0b:9d:55:44:3e:72:8c:6a:bd:7d:06:e1:b3:97: 48:01:36:a7:d8:ca:29:4f:53:8e:a5:5b:99:e6:2c: 0b:ce:74:11:70:01:c7:cc:8b:e6:90:6d:64:19:34: fe:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:06:A4:44:13:0A:29:30:76:28:B1:FF:79:15:11:F2:85:5F:F1:1D X509v3 Authority Key Identifier: keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:61:a3:8c:58:8c:4a:39:20:da:63:29:4e:16:7a:6b:6a:b3: 31:95:fb:9f:50:1b:ff:5c:b8:1b:9d:5d:c8:3e:30:51:aa:f7: d6:af:a5:95:55:db:e2:fc:18:32:12:33:1d:ec:52:54:5d:69: 25:ad:05:c7:b5:96:ca:1a:d4:88:45:a9:6d:25:e2:d3:10:a2: d5:c7:5a:bc:ed:f9:fe:37:15:a2:60:0b:68:ba:67:84:63:96: 11:32:f8:f3:e4:3d:d7:9d:3b:ae:74:75:97:6f:8b:7d:ee:00: d4:4d:20:89:4f:0a:92:37:43:ed:cc:c6:18:02:27:f1:93:d3: 92:c4:c2:49:0f:c0:32:13:9a:6c:f0:14:25:a0:47:7c:2d:fa: 60:1a:a6:6c:65:d8:44:c3:ac:0a:79:12:7b:3d:9e:b2:58:25: 84:06:10:e9:eb:65:18:e4:5b:b7:b7:10:23:d4:ed:8c:20:52: 36:61:20:01:9a:79:3f:48:09:9a:a0:6b:0c:5d:64:bb:98:1a: e0:d9:e6:b7:63:d8:a3:02:a9:06:0a:44:51:8c:fc:b2:68:f8: b6:79:f7:4d:ac:b0:06:88:b4:4c:a1:6e:51:20:1c:9d:0d:64: d3:34:d4:80:ec:0a:97:78:8a:30:cc:67:16:0d:b7:d8:f0:7b: 2f:1e:8a:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q+L1Xo4x4hN7GYqbDzvIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOGY4YmY4ZDAxMmEyNWNjY2VlMjEwNjgwM2Q3MDY0MzIw ZWQwZjAwHhcNMjYwMTI1MTUwMDQxWhcNMjYwMTI2MTUwMDQxWjAzMTEwLwYDVQQD EygwZTA2YTQ0NDEzMGEyOTMwNzYyOGIxZmY3OTE1MTFmMjg1NWZmMTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mylVkqRkfpRQrNe6H6+BUHLSG2z /w7eIgdHbISTatBjqHkm2YyeHuoFh4RGeQZoA/BDTMq/wiJWzAIfDsSw35ouY2X7 0OwTI8uV+4TeFKfaS3vb3csLtsQJjLFfHh3x6OyfOWlmQt71rFeVPbkckbtg2/xO NZRWPLeFC+xxVQcgVBikG30AQeVh1BWwb6FpIkmGg19tJWK+6QPzB1M+Zw28EnG6 9VrXqOYAbxaZ1gZguZHqjoRPXVurdS++zYcjg22QWr2BZqF69QLuqJRXp9BYC51V RD5yjGq9fQbhs5dIATan2MopT1OOpVuZ5iwLznQRcAHHzIvmkG1kGTT+gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4GpEQTCikwdiix/3kVEfKFX/EdMB8GA1UdIwQY MBaAFCCPi/jQEqJczO4hBoA9cGQyDtDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wZWY1OGEtNTY2Zi00OGJjLWI3ZGEt ODA1NWVjMTBmZjBhLzEvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wZWY1OGEtNTY2Zi00OGJjLWI3ZGEtODA1NWVjMTBmZjBh LzEvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs2GjjFiM Sjkg2mMpThZ6a2qzMZX7n1Ab/1y4G51dyD4wUar31q+llVXb4vwYMhIzHexSVF1p Ja0Fx7WWyhrUiEWpbSXi0xCi1cdavO35/jcVomALaLpnhGOWETL48+Q91507rnR1 l2+Lfe4A1E0giU8KkjdD7czGGAIn8ZPTksTCSQ/AMhOabPAUJaBHfC36YBqmbGXY RMOsCnkSez2eslglhAYQ6etlGORbt7cQI9TtjCBSNmEgAZp5P0gJmqBrDF1ku5ga 4Nnmt2PYowKpBgpEUYz8smj4tnn3TaywBoi0TKFuUSAcnQ1k0zTUgOwKl3iKMMxn Fg232PB7Lx6KmA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:02 2026 by rpki-client