This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft File: iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft (raw, json) Hash identifier: Y+fiMUGsCUvqWvdtnKevt3txJRev/y5EkMstm9Jm/jI= Subject key identifier: 1B:AD:B4:F7:7C:90:03:75:EA:F8:43:DC:BB:7E:5D:09:85:A6:3A:F1 Authority key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE Certificate issuer: /CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae Certificate serial: 019BFD2EA8632D010EC7943F6F1235EC620D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft Manifest number: 075A Signing time: Tue 27 Jan 2026 02:00:51 +0000 Manifest this update: Tue 27 Jan 2026 02:00:51 +0000 Manifest next update: Wed 28 Jan 2026 02:00:51 +0000 Files and hashes: 1: iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl (hash: 2+tKVtDC1F8L3F8v01z1OuaDvoev73ryh95XSjhrlNY=) 2: yAy7dhfnf5ztz8zG2y2BYT0K2Nc.roa (hash: Yhi2sxhWb+ZdylE1qzvoU8mFvZlrRwD3FR8dKXylg+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:a8:63:2d:01:0e:c7:94:3f:6f:12:35:ec:62:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae Validity Not Before: Jan 27 02:00:51 2026 GMT Not After : Jan 28 02:00:51 2026 GMT Subject: CN=1badb4f77c900375eaf843dcbb7e5d0985a63af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:75:ca:aa:2b:21:68:52:f6:9b:ec:a2:b0:4a: 6b:d8:9c:4e:6f:ce:d9:75:3f:64:c6:d9:dc:b0:46: fa:d5:73:ff:9e:5f:a7:a8:86:f5:ac:b4:7d:db:5a: 5f:f8:3e:f2:a3:b0:9a:7f:bb:54:3d:c2:0a:fa:8c: 71:3f:8c:0c:e5:c9:f5:5f:1e:2d:be:be:90:6c:b8: c0:40:b2:9e:7f:c0:91:e3:07:6d:7f:fc:86:af:cc: 21:79:94:0b:22:3a:d8:ef:47:a0:bc:11:c4:f7:77: c0:3f:3d:f3:ed:da:8e:52:84:45:dd:80:a3:04:91: d0:c1:21:29:fc:4f:8c:f9:a6:a3:33:12:9c:e0:b8: 96:c5:c8:56:6c:42:23:3c:59:87:f1:23:8f:09:b3: 33:dd:f4:ae:64:25:b2:fa:57:df:22:a7:17:5d:48: 09:2e:51:e7:8b:0a:2f:36:52:e6:c7:72:1d:f7:c0: d1:13:dc:88:cb:7b:6b:73:4a:36:c7:db:85:50:c8: e0:34:5a:87:ae:e9:ab:66:6e:a0:64:d4:02:aa:cb: 40:65:54:69:7e:c5:5b:58:d0:0a:ab:af:b8:5e:e2: 55:db:9f:54:b9:91:e1:30:71:4b:a3:11:59:61:0c: 73:8d:16:5a:91:14:e1:85:e8:47:ba:4f:58:60:7c: fe:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AD:B4:F7:7C:90:03:75:EA:F8:43:DC:BB:7E:5D:09:85:A6:3A:F1 X509v3 Authority Key Identifier: keyid:88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:10:be:00:5f:f2:5b:9a:5d:24:00:ff:d8:b1:f0:8a:f4:88: 48:f0:18:13:0b:2e:1b:ce:88:eb:66:1a:2a:cb:c6:12:33:2f: 88:66:99:d6:4d:40:14:62:36:65:c1:8c:b2:df:86:6d:73:2c: 28:3f:72:44:f5:cb:b0:76:71:7f:49:b0:7a:ef:78:a0:9a:e8: 65:74:65:97:05:d3:aa:91:d6:a8:5a:7a:4f:c4:a7:40:57:bf: 78:8d:c3:68:5d:46:37:cb:d5:96:9d:08:c5:b5:63:33:c6:01: e7:89:af:75:39:d8:a0:28:46:8e:3d:71:42:1c:32:25:f4:56: 6d:04:6a:2a:20:79:92:2b:5b:b3:be:cf:be:3b:f1:cb:61:bd: f3:b9:59:17:35:40:e1:24:6c:b7:c1:85:5f:c3:e1:4b:88:c7: 5c:47:b7:43:39:68:0c:b4:8c:7d:a3:6a:ed:13:5d:04:99:13: f3:3d:fa:42:9e:1d:14:7b:3b:d9:71:87:e4:6c:73:9f:42:a4: c9:ef:8b:52:ef:9c:03:fa:9e:52:74:a6:dc:ca:aa:75:6b:38: 0d:98:e4:bd:f7:cb:5b:71:a7:10:d3:f4:32:76:92:b7:a5:9e: 83:e7:b9:bd:6d:6e:67:dc:8d:a0:47:26:0a:94:82:ad:79:17: 59:eb:77:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LqhjLQEOx5Q/bxI17GINMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZDVjODBiMzU4NzMyY2YxZWNlZWNmMmY1YmRjOGFiM2Rj MTgxYWUwHhcNMjYwMTI3MDIwMDUxWhcNMjYwMTI4MDIwMDUxWjAzMTEwLwYDVQQD EygxYmFkYjRmNzdjOTAwMzc1ZWFmODQzZGNiYjdlNWQwOTg1YTYzYWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XXKqishaFL2m+yisEpr2JxOb87Z dT9kxtncsEb61XP/nl+nqIb1rLR921pf+D7yo7Caf7tUPcIK+oxxP4wM5cn1Xx4t vr6QbLjAQLKef8CR4wdtf/yGr8wheZQLIjrY70egvBHE93fAPz3z7dqOUoRF3YCj BJHQwSEp/E+M+aajMxKc4LiWxchWbEIjPFmH8SOPCbMz3fSuZCWy+lffIqcXXUgJ LlHniwovNlLmx3Id98DRE9yIy3trc0o2x9uFUMjgNFqHrumrZm6gZNQCqstAZVRp fsVbWNAKq6+4XuJV259UuZHhMHFLoxFZYQxzjRZakRThhehHuk9YYHz+fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFButtPd8kAN16vhD3Lt+XQmFpjrxMB8GA1UdIwQY MBaAFIjVyAs1hzLPHs7s8vW9yKs9wYGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iNzViOTItZjFjNy00YjU2LTlhOWYt OWEyZjc5NmM5NDc3LzEvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9iNzViOTItZjFjNy00YjU2LTlhOWYtOWEyZjc5NmM5NDc3 LzEvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBC+AF/y W5pdJAD/2LHwivSISPAYEwsuG86I62YaKsvGEjMviGaZ1k1AFGI2ZcGMst+GbXMs KD9yRPXLsHZxf0mweu94oJroZXRllwXTqpHWqFp6T8SnQFe/eI3DaF1GN8vVlp0I xbVjM8YB54mvdTnYoChGjj1xQhwyJfRWbQRqKiB5kitbs77Pvjvxy2G987lZFzVA 4SRst8GFX8PhS4jHXEe3QzloDLSMfaNq7RNdBJkT8z36Qp4dFHs72XGH5Gxzn0Kk ye+LUu+cA/qeUnSm3MqqdWs4DZjkvffLW3GnENP0MnaSt6Weg+e5vW1uZ9yNoEcm CpSCrXkXWet38A== -----END CERTIFICATE-----Generated at Tue Jan 27 05:37:35 2026 by rpki-client