This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft File: iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft (raw, json) Hash identifier: 462/p+VJ189iY42BLdn1pupLxlcAAVoflLurYgGVeic= Subject key identifier: A5:79:7D:7F:73:31:DE:6C:3B:F3:C3:0B:02:12:31:68:49:5D:D6:D1 Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55 Certificate issuer: /CN=8916aaa5d252fd90145fedac683762d6e2074155 Certificate serial: 019BF875DC42D9E9860B936C98CF39F27B14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 04:00:32 +0000 Manifest this update: Mon 26 Jan 2026 04:00:32 +0000 Manifest next update: Tue 27 Jan 2026 04:00:32 +0000 Files and hashes: 1: FjK0gZzIRFGA1r0HMqyZjh1eSaU.roa (hash: 5jTPa/LgCeRZQvqoHjBqfoQDZ2FKgfEuFxlRAqDizkI=) 2: iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl (hash: S7z/JCWzAy9zQ6i1QdjXE4lv98iw/cYrmpOypwk0+W0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:75:dc:42:d9:e9:86:0b:93:6c:98:cf:39:f2:7b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155 Validity Not Before: Jan 26 04:00:32 2026 GMT Not After : Jan 27 04:00:32 2026 GMT Subject: CN=a5797d7f7331de6c3bf3c30b02123168495dd6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:0e:05:e2:03:df:6e:68:de:74:f9:61:02: 1d:a6:35:75:ac:2e:41:b3:5d:a3:8f:64:37:fc:d8: 84:53:68:bc:e9:12:71:1f:17:61:4e:60:80:51:71: 48:ce:27:34:63:22:a2:86:5b:80:67:b2:ad:0e:30: 9b:f0:36:95:b7:42:b1:8b:04:1f:ef:48:39:5c:c5: c9:da:c9:79:ba:d3:f4:5b:df:b8:5c:d2:2c:8d:92: 70:ed:a6:e9:07:1f:75:2a:23:09:dc:09:18:2b:33: 98:7b:8a:e1:8f:d8:c8:92:82:aa:29:52:fe:59:c4: 1e:1c:7d:12:0e:3a:2e:41:b3:0e:87:e7:2b:d3:59: f5:bf:e5:fe:05:12:69:cd:66:f2:fd:e0:c2:23:c7: 30:c6:7a:8b:c3:d1:8e:d5:10:e3:25:02:c7:c8:e7: de:18:7d:bd:3b:eb:22:f6:27:eb:0f:9f:3a:ab:7b: f5:8e:18:64:77:29:5b:ce:d1:cc:a9:a2:b1:09:fc: 4e:03:d1:ee:b3:8a:e6:64:00:c2:1f:89:95:8e:90: e7:2f:a9:54:14:c9:db:dd:6a:ac:43:54:45:7c:28: 40:d6:02:42:c2:dc:b8:18:25:70:5e:f7:48:90:b3: 83:e2:ca:37:c8:13:da:00:3e:58:e0:44:aa:9e:bb: 5a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:79:7D:7F:73:31:DE:6C:3B:F3:C3:0B:02:12:31:68:49:5D:D6:D1 X509v3 Authority Key Identifier: keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:af:2a:16:26:45:94:02:1c:a1:ee:6d:ad:7c:ab:1e:1f:b4: c6:36:74:fc:0a:75:aa:f3:ac:5d:fb:42:21:cb:8d:1b:94:8a: 97:af:19:a2:e9:53:47:6a:6e:88:fa:67:25:11:ee:c9:5a:4a: d3:a3:ea:7b:07:f6:1f:0b:0d:8f:79:69:21:c7:c3:3b:45:58: 45:b3:e2:15:ab:ea:6f:4f:51:77:e5:3c:3a:c6:c5:a1:5b:6f: a1:c7:02:f3:35:49:19:92:b9:ae:36:20:7c:08:76:b8:68:7d: 31:cb:68:38:75:d7:51:41:75:35:1e:af:a1:35:10:95:60:df: 62:1c:eb:1e:d7:68:cc:17:39:1f:62:cd:81:e2:c6:5b:33:16: 55:fe:36:02:9b:12:1c:bf:21:1c:74:31:42:8b:61:38:fa:f0: af:08:ad:be:c2:9f:0d:9c:73:19:ce:cb:9e:76:57:9e:c8:3a: 60:92:06:43:fb:13:3a:8a:0a:7f:76:17:22:4a:50:7a:18:e0: 59:53:95:d9:8c:1d:a9:83:97:ce:77:15:79:24:bd:9a:3a:c8: 30:95:8f:1f:13:23:f5:75:83:87:bb:25:67:96:af:89:05:c5: 86:d1:ea:21:8e:79:cd:bc:19:73:4f:0d:da:54:dc:86:48:62: 41:ae:73:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4ddxC2emGC5NsmM858nsUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MTZhYWE1ZDI1MmZkOTAxNDVmZWRhYzY4Mzc2MmQ2ZTIw NzQxNTUwHhcNMjYwMTI2MDQwMDMyWhcNMjYwMTI3MDQwMDMyWjAzMTEwLwYDVQQD EyhhNTc5N2Q3ZjczMzFkZTZjM2JmM2MzMGIwMjEyMzE2ODQ5NWRkNmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzIOBeID325o3nT5YQIdpjV1rC5B s12jj2Q3/NiEU2i86RJxHxdhTmCAUXFIzic0YyKihluAZ7KtDjCb8DaVt0KxiwQf 70g5XMXJ2sl5utP0W9+4XNIsjZJw7abpBx91KiMJ3AkYKzOYe4rhj9jIkoKqKVL+ WcQeHH0SDjouQbMOh+cr01n1v+X+BRJpzWby/eDCI8cwxnqLw9GO1RDjJQLHyOfe GH29O+si9ifrD586q3v1jhhkdylbztHMqaKxCfxOA9Hus4rmZADCH4mVjpDnL6lU FMnb3WqsQ1RFfChA1gJCwty4GCVwXvdIkLOD4so3yBPaAD5Y4ESqnrtarQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKV5fX9zMd5sO/PDCwISMWhJXdbRMB8GA1UdIwQY MBaAFIkWqqXSUv2QFF/trGg3YtbiB0FVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVJhcXBkSlNfWkFVWC0yc2FEZGkxdUlIUVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85MDc0MDktNWU2MS00YzY2LTk0ZTYt ZDY5ZWE5M2NiYWZiLzEvaVJhcXBkSlNfWkFVWC0yc2FEZGkxdUlIUVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS85MDc0MDktNWU2MS00YzY2LTk0ZTYtZDY5ZWE5M2NiYWZi LzEvaVJhcXBkSlNfWkFVWC0yc2FEZGkxdUlIUVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1K8qFiZF lAIcoe5trXyrHh+0xjZ0/Ap1qvOsXftCIcuNG5SKl68ZoulTR2puiPpnJRHuyVpK 06Pqewf2HwsNj3lpIcfDO0VYRbPiFavqb09Rd+U8OsbFoVtvoccC8zVJGZK5rjYg fAh2uGh9MctoOHXXUUF1NR6voTUQlWDfYhzrHtdozBc5H2LNgeLGWzMWVf42ApsS HL8hHHQxQothOPrwrwitvsKfDZxzGc7LnnZXnsg6YJIGQ/sTOooKf3YXIkpQehjg WVOV2YwdqYOXzncVeSS9mjrIMJWPHxMj9XWDh7slZ5aviQXFhtHqIY55zbwZc08N 2lTchkhiQa5zMA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:10 2026 by rpki-client