This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft File: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft (raw, json) Hash identifier: i8mPvJul6BLzbZF0pkKnzslZWJ6sdVxHo4EruqJhEog= Subject key identifier: 86:2D:4D:88:A2:1A:BB:BB:B3:63:35:BF:15:46:62:B3:D1:F7:8B:A9 Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32 Certificate issuer: /CN=225cf0d31704b59d7eeb018548202d3a570da932 Certificate serial: 019BF91BD0D82CE55FDC388374982A05C3C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft Manifest number: 16BF Signing time: Mon 26 Jan 2026 07:01:48 +0000 Manifest this update: Mon 26 Jan 2026 07:01:48 +0000 Manifest next update: Tue 27 Jan 2026 07:01:48 +0000 Files and hashes: 1: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl (hash: vIcTRWwLNFuW80BCkqg3cN9fjsx/V8Wkx+JPHTLBMrU=) 2: gDJ4Lp76yXybVk_hOXjmjT2yA0Y.roa (hash: TNUN3ffkTS+jn16rGNGRBs19tZhvUdCtK4/zEyf8nb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:d0:d8:2c:e5:5f:dc:38:83:74:98:2a:05:c3:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932 Validity Not Before: Jan 26 07:01:48 2026 GMT Not After : Jan 27 07:01:48 2026 GMT Subject: CN=862d4d88a21abbbbb36335bf154662b3d1f78ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0b:c4:3f:32:39:8e:36:da:3d:b5:21:76:38: d2:7e:65:2b:95:3a:65:75:8a:72:52:36:cb:e7:51: 8b:14:65:94:ef:99:d7:c7:19:63:37:a4:3e:dd:3b: f4:14:2d:48:4a:e7:38:19:5a:5f:13:df:2e:b5:e2: bb:2a:9e:d5:1b:4c:99:bb:7a:17:90:7f:b6:8a:14: 5a:e0:69:49:85:cb:8c:86:97:fc:39:0f:8e:c4:31: 5a:fb:d8:54:53:16:69:8e:43:ab:c2:c4:b1:9e:0d: 03:ab:78:b8:2d:da:23:53:37:be:bc:21:74:f2:20: f7:e9:d4:77:81:29:14:58:af:0b:f6:0e:2b:31:b7: ce:d0:09:25:87:35:ed:c7:a6:1f:e4:25:7a:11:c6: d1:5c:ef:d7:8f:54:fd:ce:cc:47:bd:ba:18:23:d6: f1:16:74:1e:fb:b8:d9:d6:0f:d2:3e:a2:ab:34:c7: 9a:c7:ae:20:1b:20:8f:fa:23:88:ee:d2:5a:31:8f: 67:13:c0:a0:18:2f:47:67:f1:19:97:09:fe:f9:af: 86:6c:4d:24:26:7a:5a:b8:02:42:c7:e3:3f:15:68: 9f:a8:d4:1d:9b:1d:5b:d9:ee:e2:47:17:32:8f:f1: 90:d5:77:cf:72:55:05:7f:44:ec:98:e2:59:dd:89: 5c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2D:4D:88:A2:1A:BB:BB:B3:63:35:BF:15:46:62:B3:D1:F7:8B:A9 X509v3 Authority Key Identifier: keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:64:bc:c4:7e:d4:e0:a5:41:3d:97:e9:e7:a4:16:2a:a8:14: e4:cb:7f:ce:68:6d:c9:5b:e2:18:f4:70:18:fe:76:0a:81:db: cc:5a:2d:0e:8c:18:47:cd:30:42:be:11:e4:96:72:cd:aa:6e: 4f:b2:1e:73:1a:f9:fc:a0:3d:09:bc:c7:36:25:99:d4:67:b8: 0e:40:50:c1:49:b2:b7:0f:bb:be:c7:d9:43:0a:22:c9:9e:da: 46:68:2d:15:85:bb:91:dc:13:85:86:0c:24:dc:77:7a:4a:a2: 5f:98:81:6a:1f:7e:4d:68:10:ab:e4:d0:de:a4:ca:61:4c:c6: ef:99:d4:f3:ee:e8:da:b2:5d:9e:81:00:85:50:6e:f9:8a:f2: 4a:b0:65:3a:d2:fb:85:f7:18:1d:fb:cd:ea:8a:cf:4d:d7:06: 1e:15:3d:9a:17:b2:b6:96:13:60:86:08:80:7b:8b:62:82:a3: 01:7d:54:81:33:6b:71:5d:f8:5c:56:b7:c1:aa:1b:a0:95:2a: 7e:1c:29:06:01:74:33:8b:5a:0e:6b:ea:c5:bc:e1:10:98:64: 01:b6:b9:02:91:6b:ad:6d:e0:00:9d:c8:3b:80:2f:f1:26:47: 4a:d6:2f:2f:0b:d7:e6:2b:47:31:dc:05:d6:1a:f4:36:76:a0: 87:da:46:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G9DYLOVf3DiDdJgqBcPEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNWNmMGQzMTcwNGI1OWQ3ZWViMDE4NTQ4MjAyZDNhNTcw ZGE5MzIwHhcNMjYwMTI2MDcwMTQ4WhcNMjYwMTI3MDcwMTQ4WjAzMTEwLwYDVQQD Eyg4NjJkNGQ4OGEyMWFiYmJiYjM2MzM1YmYxNTQ2NjJiM2QxZjc4YmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wvEPzI5jjbaPbUhdjjSfmUrlTpl dYpyUjbL51GLFGWU75nXxxljN6Q+3Tv0FC1ISuc4GVpfE98uteK7Kp7VG0yZu3oX kH+2ihRa4GlJhcuMhpf8OQ+OxDFa+9hUUxZpjkOrwsSxng0Dq3i4LdojUze+vCF0 8iD36dR3gSkUWK8L9g4rMbfO0AklhzXtx6Yf5CV6EcbRXO/Xj1T9zsxHvboYI9bx FnQe+7jZ1g/SPqKrNMeax64gGyCP+iOI7tJaMY9nE8CgGC9HZ/EZlwn++a+GbE0k JnpauAJCx+M/FWifqNQdmx1b2e7iRxcyj/GQ1XfPclUFf0TsmOJZ3YlcvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYtTYiiGru7s2M1vxVGYrPR94upMB8GA1UdIwQY MBaAFCJc8NMXBLWdfusBhUggLTpXDakyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80ZGY0MjktZjc3Ni00ZmQzLThkZTQt MDBiYzkwM2QyNjIxLzEvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80ZGY0MjktZjc3Ni00ZmQzLThkZTQtMDBiYzkwM2QyNjIx LzEvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmS8xH7U 4KVBPZfp56QWKqgU5Mt/zmhtyVviGPRwGP52CoHbzFotDowYR80wQr4R5JZyzapu T7Iecxr5/KA9CbzHNiWZ1Ge4DkBQwUmytw+7vsfZQwoiyZ7aRmgtFYW7kdwThYYM JNx3ekqiX5iBah9+TWgQq+TQ3qTKYUzG75nU8+7o2rJdnoEAhVBu+YrySrBlOtL7 hfcYHfvN6orPTdcGHhU9mheytpYTYIYIgHuLYoKjAX1UgTNrcV34XFa3waoboJUq fhwpBgF0M4taDmvqxbzhEJhkAba5ApFrrW3gAJ3IO4Av8SZHStYvLwvX5itHMdwF 1hr0Nnagh9pGlQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:36:39 2026 by rpki-client