This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json) Hash identifier: Pjg89boxhlhCei1yIRobidP14PXzaaIObzas7k4XtP4= Subject key identifier: A0:6C:FC:F2:33:2B:03:6F:E5:9F:7C:4D:00:53:28:1E:7C:AA:6C:19 Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7 Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7 Certificate serial: 019BF31920B7DB35CF1FB41CB932112C9F18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft Manifest number: 110E Signing time: Sun 25 Jan 2026 03:01:08 +0000 Manifest this update: Sun 25 Jan 2026 03:01:08 +0000 Manifest next update: Mon 26 Jan 2026 03:01:08 +0000 Files and hashes: 1: AH8BkwVFANpM3D-2UXxmQPvm-gI.roa (hash: 6QRSR3qapkQkS77YuUKuuRiuJc7R5yNd3794dtUPMJs=) 2: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: wHFWjyPNA2cEPAGGTGFKP3/hkE4xZHnwUt7lfp5ySz4=) 3: P3is6hWIutnv3WVE2XVBQR28koo.roa (hash: zNTZY/b8g0CyM9V/gtiEl5HaCGnXYunucSw3v6eVe8o=) 4: p7rkdahFQXPqaYGeqvTzgl8b8gg.roa (hash: D1K5j64bqVkMi5je9WvKCxtYUE9schoY5RKt4Mby4MQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:19:20:b7:db:35:cf:1f:b4:1c:b9:32:11:2c:9f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7 Validity Not Before: Jan 25 03:01:08 2026 GMT Not After : Jan 26 03:01:08 2026 GMT Subject: CN=a06cfcf2332b036fe59f7c4d0053281e7caa6c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:53:69:d0:5f:ab:5b:f1:12:68:3e:11:61:90: 75:27:9e:8a:1c:b3:13:b6:61:e4:ae:30:9d:73:13: 78:8c:9f:f9:49:ed:c8:3e:be:75:a0:38:5d:ce:46: d7:6c:47:0f:b9:0d:29:21:39:97:75:60:ac:12:8f: 6c:f5:dc:d5:b2:83:6a:6f:f4:4c:82:64:04:32:3f: 14:e0:77:7f:2b:3e:7a:e2:ba:8e:f8:1e:08:91:c9: 29:69:9a:1d:e3:ba:39:48:df:17:4b:c3:bc:79:46: a8:7d:a4:3a:2e:d9:7b:8f:6a:2e:9f:37:9f:2b:9d: f0:f8:a6:9c:75:fa:88:0f:f9:d2:fd:66:a9:74:90: 71:3a:1a:f9:ec:a3:ef:4f:9f:b7:15:3b:0d:4a:ad: d5:3b:f7:31:e4:6c:ac:db:1b:b0:fc:88:2e:15:4d: 73:fd:dd:ca:eb:52:eb:d2:38:53:c2:1b:32:20:a8: f9:f6:b2:d5:4f:e3:2c:51:1d:ce:bd:c0:d5:93:6c: 7d:6c:25:0c:0f:75:d1:ea:e0:7b:0e:9f:c0:a0:b8: 3d:36:f1:11:5b:7b:30:92:2c:9e:2a:64:b4:28:9f: 77:ef:95:2b:fe:2c:77:a4:6d:d9:9e:f4:ec:78:d7: e1:f1:ad:27:07:4c:5e:f3:3f:95:d5:73:3a:e0:c4: c1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6C:FC:F2:33:2B:03:6F:E5:9F:7C:4D:00:53:28:1E:7C:AA:6C:19 X509v3 Authority Key Identifier: keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:a6:15:b8:1b:93:9f:fb:c9:93:b3:66:3a:da:5b:52:da:65: dd:53:5c:da:3b:4b:8c:e1:38:27:8f:ba:21:3a:98:e9:7a:ae: 8b:c5:a0:80:fb:b3:9e:4d:24:d5:fc:5c:32:31:26:df:88:a5: a9:ab:97:1d:7c:cc:b4:59:6b:f4:3d:b2:11:95:9c:1b:2a:34: c7:31:5f:b7:fc:6f:df:66:c2:b0:f9:c0:73:d8:fb:7a:e3:eb: bb:15:09:a3:23:e9:b5:9f:8e:31:49:69:35:fd:ab:b3:31:3b: 40:d0:fc:ba:d2:4d:bf:10:cd:09:b9:8e:7c:8e:89:08:76:ce: 26:61:92:92:b5:3c:eb:18:f1:71:e0:d4:7f:36:fc:5c:25:27: 99:d2:ad:ba:5d:88:13:1a:11:d2:7a:b4:1f:16:50:07:d5:71: 2b:fe:de:e7:81:b2:f8:40:35:a9:91:5a:46:5d:1a:24:79:8f: d9:46:6d:66:13:cc:b9:72:2a:0b:88:3f:0a:f7:2f:cc:c7:d0: de:b5:f0:b6:4f:6e:09:67:3d:34:79:fa:e7:21:df:61:f4:0a: ae:9b:e9:ed:6e:55:d3:67:2b:56:a0:ed:35:8c:7a:4c:90:79: a3:a5:c9:b9:a7:35:6d:4f:c1:37:d3:79:9e:89:3e:93:d0:5d: 7d:d0:3d:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGSC32zXPH7QcuTIRLJ8YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYzBiOWIzM2RjZTVlYmEwYWVhNjQ4OTE1OGQzZmIyNzAy MmFjZTcwHhcNMjYwMTI1MDMwMTA4WhcNMjYwMTI2MDMwMTA4WjAzMTEwLwYDVQQD EyhhMDZjZmNmMjMzMmIwMzZmZTU5ZjdjNGQwMDUzMjgxZTdjYWE2YzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVNp0F+rW/ESaD4RYZB1J56KHLMT tmHkrjCdcxN4jJ/5Se3IPr51oDhdzkbXbEcPuQ0pITmXdWCsEo9s9dzVsoNqb/RM gmQEMj8U4Hd/Kz564rqO+B4IkckpaZod47o5SN8XS8O8eUaofaQ6Ltl7j2ounzef K53w+KacdfqID/nS/WapdJBxOhr57KPvT5+3FTsNSq3VO/cx5Gys2xuw/IguFU1z /d3K61Lr0jhTwhsyIKj59rLVT+MsUR3OvcDVk2x9bCUMD3XR6uB7Dp/AoLg9NvER W3swkiyeKmS0KJ9375Ur/ix3pG3ZnvTseNfh8a0nB0xe8z+V1XM64MTBUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBs/PIzKwNv5Z98TQBTKB58qmwZMB8GA1UdIwQY MBaAFCDAubM9zl66CupkiRWNP7JwIqznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEt OGQzZGNjMzNhZDBhLzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEtOGQzZGNjMzNhZDBh LzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqYVuBuT n/vJk7NmOtpbUtpl3VNc2jtLjOE4J4+6ITqY6Xqui8WggPuznk0k1fxcMjEm34il qauXHXzMtFlr9D2yEZWcGyo0xzFft/xv32bCsPnAc9j7euPruxUJoyPptZ+OMUlp Nf2rszE7QND8utJNvxDNCbmOfI6JCHbOJmGSkrU86xjxceDUfzb8XCUnmdKtul2I ExoR0nq0HxZQB9VxK/7e54Gy+EA1qZFaRl0aJHmP2UZtZhPMuXIqC4g/CvcvzMfQ 3rXwtk9uCWc9NHn65yHfYfQKrpvp7W5V02crVqDtNYx6TJB5o6XJuac1bU/BN9N5 nok+k9BdfdA9Ng== -----END CERTIFICATE-----Generated at Sun Jan 25 06:03:05 2026 by rpki-client