This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json) Hash identifier: IrFv6PVhWuhpDQylpsty6Yk2ORjClZe1txaEkhMMWhM= Subject key identifier: 25:AE:7E:84:80:66:54:F5:56:A3:6E:E1:98:C4:E8:30:90:56:7B:31 Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99 Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099 Certificate serial: 019BF875FF31A520D68A888A5EB478684AA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 04:00:41 +0000 Manifest this update: Mon 26 Jan 2026 04:00:41 +0000 Manifest next update: Tue 27 Jan 2026 04:00:41 +0000 Files and hashes: 1: 9Y4Cj1zcNI-OI_G0_326TU47Zk8.roa (hash: 8kLwum3zpuCTGIqKbfHCoFSoW2guHnnrlJufLkIKMM0=) 2: EWWrxrH5yG9JA-CMmsAyyybqtWo.roa (hash: zjv06Y9p4BOJ+3PBVc/FQjpcbBpjrKzxDOHCegcX4Zg=) 3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: vxkYT6PPSSevWoDBnZW7PUesTgBpweXFGvZPiZdCaDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:75:ff:31:a5:20:d6:8a:88:8a:5e:b4:78:68:4a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099 Validity Not Before: Jan 26 04:00:41 2026 GMT Not After : Jan 27 04:00:41 2026 GMT Subject: CN=25ae7e84806654f556a36ee198c4e83090567b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:52:e6:d1:83:20:7b:fe:ab:6e:1a:17:21:ae: cb:17:39:d1:c7:80:85:5a:bd:26:b9:8a:8b:34:ca: 21:69:a2:18:cb:ab:c3:72:eb:b4:fa:cb:4f:63:06: 34:4f:07:31:5b:75:fb:4e:77:72:e0:be:d4:32:8a: f3:4c:d4:e7:25:45:b3:33:ae:f8:c4:d1:17:56:8c: d1:b2:8a:46:2e:b2:5c:51:d8:34:22:ec:68:b5:9b: 43:d8:8b:34:a7:4c:cb:0e:36:47:af:1c:ff:1e:5c: 5d:ab:95:8c:01:8b:7d:95:b2:f5:52:42:07:dc:6f: f8:43:36:66:59:02:d1:04:7e:c7:9e:fa:5f:e3:79: 95:5a:f4:f7:67:98:2d:07:03:ac:4c:4c:46:54:51: 7d:7e:59:dc:34:8e:22:e5:d4:7f:5b:87:2f:ab:e8: a7:b6:2f:c0:71:9d:fe:50:31:1c:0a:5f:66:4d:e3: 6a:d8:93:a2:7f:e8:4a:8a:2c:f2:02:17:06:bd:2a: 96:5c:7f:b5:29:90:9d:b7:28:9f:d2:47:6a:c4:b7: 68:f6:b3:9b:0c:55:0a:7b:5a:47:80:47:b7:ad:b1: 70:2b:f3:9c:7c:b2:05:7a:16:bc:d0:ce:59:04:27: 8f:e0:12:67:83:19:e8:45:87:f9:9a:ec:d4:2e:87: 74:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AE:7E:84:80:66:54:F5:56:A3:6E:E1:98:C4:E8:30:90:56:7B:31 X509v3 Authority Key Identifier: keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:29:98:c4:28:0e:78:d6:1b:b8:45:7b:76:a8:03:96:02:50: 42:e1:05:dd:c0:ce:7a:f1:ab:fa:ad:e7:c3:fa:cc:f1:73:46: f1:7c:52:10:6c:0c:d3:79:f6:41:b3:40:7a:63:40:ce:dd:95: 88:03:46:bb:d5:7c:97:0d:ed:4a:4e:27:ed:7c:bc:fc:75:fa: 68:64:5e:ac:e8:ad:0f:68:ba:a5:ed:61:d2:38:02:03:5c:0f: 51:03:e1:fd:01:fd:1b:5d:9b:db:49:a4:36:be:0d:e5:b6:ff: 9c:f8:22:6c:f6:d2:be:33:a1:8f:ae:ea:4c:df:1f:2e:c5:52: 3b:23:04:b8:a8:34:35:f6:0e:0a:cd:eb:59:b5:f8:07:e6:0e: ab:7f:20:cd:a5:80:3d:c2:a7:a6:b0:86:7a:f0:74:a3:a5:18: de:a1:3d:22:49:8c:1d:62:84:e2:46:0a:94:f3:e3:b2:5d:7e: e6:b1:09:17:53:6b:8e:8c:d9:64:54:0c:0f:83:69:18:aa:e7: 09:86:44:bc:51:37:46:13:bd:20:65:7c:2a:37:5f:e9:72:70: ab:d0:cc:f3:d0:89:50:90:4f:6c:7b:16:80:74:5b:09:09:79: 6b:07:e8:14:f8:06:79:ff:ee:10:4a:9b:ec:75:a0:52:a2:b8: e3:a8:ab:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4df8xpSDWioiKXrR4aEqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZmMzMWYzNmM5Nzc3N2Y5MDZiOTNlODNhZTY1N2YwMGFl YjMwOTkwHhcNMjYwMTI2MDQwMDQxWhcNMjYwMTI3MDQwMDQxWjAzMTEwLwYDVQQD EygyNWFlN2U4NDgwNjY1NGY1NTZhMzZlZTE5OGM0ZTgzMDkwNTY3YjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFLm0YMge/6rbhoXIa7LFznRx4CF Wr0muYqLNMohaaIYy6vDcuu0+stPYwY0TwcxW3X7Tndy4L7UMorzTNTnJUWzM674 xNEXVozRsopGLrJcUdg0IuxotZtD2Is0p0zLDjZHrxz/Hlxdq5WMAYt9lbL1UkIH 3G/4QzZmWQLRBH7Hnvpf43mVWvT3Z5gtBwOsTExGVFF9flncNI4i5dR/W4cvq+in ti/AcZ3+UDEcCl9mTeNq2JOif+hKiizyAhcGvSqWXH+1KZCdtyif0kdqxLdo9rOb DFUKe1pHgEe3rbFwK/OcfLIFeha80M5ZBCeP4BJngxnoRYf5muzULod09wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWufoSAZlT1VqNu4ZjE6DCQVnsxMB8GA1UdIwQY MBaAFIr8MfNsl3d/kGuT6DrmV/AK6zCZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kOWEwMDQtYjk1My00YzczLTgxZTQt MDcxMTY5NDAwMGEwLzEvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9kOWEwMDQtYjk1My00YzczLTgxZTQtMDcxMTY5NDAwMGEw LzEvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwimYxCgO eNYbuEV7dqgDlgJQQuEF3cDOevGr+q3nw/rM8XNG8XxSEGwM03n2QbNAemNAzt2V iANGu9V8lw3tSk4n7Xy8/HX6aGRerOitD2i6pe1h0jgCA1wPUQPh/QH9G12b20mk Nr4N5bb/nPgibPbSvjOhj67qTN8fLsVSOyMEuKg0NfYOCs3rWbX4B+YOq38gzaWA PcKnprCGevB0o6UY3qE9IkmMHWKE4kYKlPPjsl1+5rEJF1NrjozZZFQMD4NpGKrn CYZEvFE3RhO9IGV8Kjdf6XJwq9DM89CJUJBPbHsWgHRbCQl5awfoFPgGef/uEEqb 7HWgUqK446irYA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:48:27 2026 by rpki-client