This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft File: 1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json) Hash identifier: NhUFBpbIYLJq5BfERUeE6V3d7I+fgkdeECEqmJLSXPA= Subject key identifier: 6D:31:8D:E3:0F:6F:8F:AF:30:3E:29:7B:15:26:70:85:DE:6A:1F:2C Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0 Certificate issuer: /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0 Certificate serial: 019BF7D202827EFB151A3F3187B5C8FE9FB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft Manifest number: 0A3B Signing time: Mon 26 Jan 2026 01:01:34 +0000 Manifest this update: Mon 26 Jan 2026 01:01:34 +0000 Manifest next update: Tue 27 Jan 2026 01:01:34 +0000 Files and hashes: 1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: 3eLXJcHm/Xz1dn5WZorzd8wTroqXZByWLMc2G/DI08M=) 2: 3_W7wx2-fypI1zi7oF8Q3NS1T7k.roa (hash: R18F2OZx+pMzaBIwLtZY9ZTcDCGHNNWTIHQDPwa2kWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:02:82:7e:fb:15:1a:3f:31:87:b5:c8:fe:9f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0 Validity Not Before: Jan 26 01:01:34 2026 GMT Not After : Jan 27 01:01:34 2026 GMT Subject: CN=6d318de30f6f8faf303e297b15267085de6a1f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:53:a8:22:10:a7:b2:07:c3:0f:a6:3e:95: cd:06:bc:a0:cc:da:84:f1:9a:97:a5:53:78:6e:c3: fc:54:74:ed:f6:81:d7:0a:17:34:93:27:dd:59:0e: 19:82:51:67:2e:b1:db:4f:99:54:72:7d:89:57:32: 9c:52:4c:ea:c6:56:93:47:f2:ea:89:d6:62:94:bb: e4:3e:40:f4:46:01:9e:14:87:c8:8d:26:3b:12:f8: a3:bf:fb:ef:8f:e0:78:b6:34:41:25:a1:74:3b:98: 64:ad:ec:8d:4e:5f:4b:cd:29:02:d2:26:88:ab:6b: 0a:e4:bf:5b:10:1d:15:01:bb:4c:04:ec:1d:31:8c: 46:11:4d:de:73:ef:24:b4:05:85:f6:f5:b1:16:24: a8:17:8b:49:3d:84:32:c7:e3:bc:55:bc:10:92:ad: c3:db:8f:78:ff:82:bc:04:a1:68:3b:9c:32:fe:97: 03:42:50:57:c0:a5:ce:24:c8:15:05:01:66:15:a8: d7:94:5a:ca:49:68:e1:6e:be:c4:25:7e:f0:f8:d9: f3:78:7e:a6:9c:82:85:85:b3:63:ec:6f:3b:85:77: f6:a5:57:db:35:98:d3:5a:22:1c:3b:3e:ff:69:63: 32:1f:e4:83:48:fc:e9:c2:33:1a:17:ce:c9:1d:69: f2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:31:8D:E3:0F:6F:8F:AF:30:3E:29:7B:15:26:70:85:DE:6A:1F:2C X509v3 Authority Key Identifier: keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c3:2b:63:41:32:38:14:07:59:5b:25:f0:57:d3:d1:38:50: 9a:93:da:d0:9d:c2:f4:ec:53:c1:6f:e7:08:00:70:02:11:a6: e5:44:21:07:af:c1:1b:c6:8d:d2:f9:45:4c:30:b5:fa:1f:84: 9f:e5:db:cb:16:c0:8a:49:ae:6d:e1:8f:da:39:9f:4c:68:a7: a4:cd:0b:84:1a:89:d9:03:0c:26:7e:df:7d:a3:36:8e:19:d3: ca:bc:4b:0c:7c:a7:b1:1b:bb:45:55:96:28:b9:6a:af:f5:03: 93:d1:36:d3:80:fc:77:cb:6a:ea:08:a1:44:49:da:9a:fb:f9: ee:25:5d:bb:4d:c2:9e:f5:88:9f:a3:a0:5d:4d:49:f6:2e:e7: 30:c1:6b:2a:2d:ff:9c:d0:23:ce:5c:07:bd:ab:7b:35:1a:16: 86:ab:22:8c:90:d2:e9:17:71:e0:48:34:f0:1b:95:48:98:4a: 4c:67:64:74:93:7f:1b:1a:de:d2:6c:14:0c:be:ee:58:10:ec: 03:9e:6e:df:1b:25:21:97:e1:b4:30:1b:4b:40:45:dc:df:bb: 4c:c2:84:ab:ef:46:c9:c3:dd:02:24:8c:e7:5e:db:ed:eb:3f: ac:4b:62:c7:57:bc:94:3e:27:31:de:c1:20:cf:19:70:ea:69: 22:f0:41:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30gKCfvsVGj8xh7XI/p+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGIyOTFiMTZmNmQ5NmM4MGFkN2QzMTI5MmY1NjBkNGZh YWViZjAwHhcNMjYwMTI2MDEwMTM0WhcNMjYwMTI3MDEwMTM0WjAzMTEwLwYDVQQD Eyg2ZDMxOGRlMzBmNmY4ZmFmMzAzZTI5N2IxNTI2NzA4NWRlNmExZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1BTqCIQp7IHww+mPpXNBrygzNqE 8ZqXpVN4bsP8VHTt9oHXChc0kyfdWQ4ZglFnLrHbT5lUcn2JVzKcUkzqxlaTR/Lq idZilLvkPkD0RgGeFIfIjSY7Evijv/vvj+B4tjRBJaF0O5hkreyNTl9LzSkC0iaI q2sK5L9bEB0VAbtMBOwdMYxGEU3ec+8ktAWF9vWxFiSoF4tJPYQyx+O8VbwQkq3D 2494/4K8BKFoO5wy/pcDQlBXwKXOJMgVBQFmFajXlFrKSWjhbr7EJX7w+NnzeH6m nIKFhbNj7G87hXf2pVfbNZjTWiIcOz7/aWMyH+SDSPzpwjMaF87JHWnynwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0xjeMPb4+vMD4pexUmcIXeah8sMB8GA1UdIwQY MBaAFNSLKRsW9tlsgK19MSkvVg1PquvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xMDgzZTktYjlkZC00YzgyLTk4Nzgt N2Y4YmZhYzczOTc3LzEvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8xMDgzZTktYjlkZC00YzgyLTk4NzgtN2Y4YmZhYzczOTc3 LzEvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMMrY0Ey OBQHWVsl8FfT0ThQmpPa0J3C9OxTwW/nCABwAhGm5UQhB6/BG8aN0vlFTDC1+h+E n+XbyxbAikmubeGP2jmfTGinpM0LhBqJ2QMMJn7ffaM2jhnTyrxLDHynsRu7RVWW KLlqr/UDk9E204D8d8tq6gihREnamvv57iVdu03CnvWIn6OgXU1J9i7nMMFrKi3/ nNAjzlwHvat7NRoWhqsijJDS6Rdx4Eg08BuVSJhKTGdkdJN/Gxre0mwUDL7uWBDs A55u3xslIZfhtDAbS0BF3N+7TMKEq+9GycPdAiSM517b7es/rEtix1e8lD4nMd7B IM8ZcOppIvBBow== -----END CERTIFICATE-----Generated at Mon Jan 26 02:38:14 2026 by rpki-client