This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft File: i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft (raw, json) Hash identifier: 1twUHZHndoDJdlpL5sWRGCATqwzqviy2yPUMZedoOWw= Subject key identifier: 74:9B:E5:45:EE:F9:1A:F1:AF:A6:A4:70:34:00:A0:C8:4B:07:7D:10 Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7 Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7 Certificate serial: 019BF42BAEBEEA8667DE6C8652B5F491AD34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 08:01:01 +0000 Manifest this update: Sun 25 Jan 2026 08:01:01 +0000 Manifest next update: Mon 26 Jan 2026 08:01:01 +0000 Files and hashes: 1: BTEAuUNa_YsO4Msc4ADixEUAqHw.roa (hash: RPWke+z8J8p3T5a+cxL5wCmrsKLPXY/+WIucQz9R2x4=) 2: Fdb2MRiz20g2xgX0HTiyiVn6wdM.roa (hash: P7ndLT2N2wnmbFCzRdtX0zBZJo6QlqplqMU+f7R4Fys=) 3: i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl (hash: Ns//FySsfUQkzGej3qTLXDQ6WNewoY1HqLieyqRN0JM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:ae:be:ea:86:67:de:6c:86:52:b5:f4:91:ad:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7 Validity Not Before: Jan 25 08:01:01 2026 GMT Not After : Jan 26 08:01:01 2026 GMT Subject: CN=749be545eef91af1afa6a4703400a0c84b077d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:1b:92:17:bc:c9:30:6c:f8:41:99:74:63: fb:9f:d4:53:a3:48:eb:2a:f9:8c:13:30:02:48:c9: f2:f3:d9:ea:66:41:76:7d:55:0d:b4:c6:1c:2f:f1: 06:47:33:46:9e:f8:d5:07:62:a7:8f:81:c3:be:60: 80:1c:d6:87:7f:15:9c:47:9a:96:96:fb:2d:26:8f: 76:d5:90:53:a3:ca:7d:dc:65:bc:52:03:49:be:6f: 2f:71:08:ab:95:e3:60:fa:d4:23:04:44:8f:b9:ec: e2:6f:f5:c3:d6:26:a1:f6:42:29:62:79:9d:a1:c8: 67:38:1e:6f:50:e7:60:92:77:a6:01:f8:fa:29:d6: 82:9b:31:7b:52:6a:ec:8d:a5:d7:a2:3a:23:12:86: 23:f7:8d:12:08:71:66:39:fe:d5:c6:1c:cf:cd:34: 55:cb:88:c3:9c:b0:b2:a4:ed:1a:12:5c:af:b1:bf: fa:b7:2d:6a:8e:2e:de:ff:13:ee:4c:fd:76:1d:d4: bb:ab:c7:98:f7:8b:33:3c:32:61:b2:7b:a8:d1:af: 1e:c1:6f:77:60:9f:78:91:cd:92:30:9a:4c:63:ad: 4b:b4:a1:be:dc:20:c9:bb:49:5f:e1:4e:83:f7:f0: 29:b2:05:cd:5b:51:19:15:ab:d2:04:6f:60:3d:3c: 40:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9B:E5:45:EE:F9:1A:F1:AF:A6:A4:70:34:00:A0:C8:4B:07:7D:10 X509v3 Authority Key Identifier: keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:0f:1a:56:f5:2c:43:8c:82:3f:2d:ee:a1:74:48:ec:60:f4: bd:38:38:b2:38:af:ce:bc:99:6f:24:3c:3a:fc:3b:87:e8:a5: 05:bf:20:32:72:b4:30:26:26:0a:09:b7:9a:10:40:9e:4b:d4: 72:50:8f:45:e8:93:1c:25:5d:a8:c6:4e:02:f4:b1:be:fc:b8: 82:b0:d8:88:f9:98:58:18:c1:72:57:ef:bd:15:79:2e:f1:5e: fa:4f:3d:be:a7:a6:86:dc:34:9f:ea:c9:d3:dc:b6:6f:b1:b6: 41:23:7c:41:b3:5f:df:af:28:1b:44:f4:53:ed:39:b2:95:de: ab:e9:a8:dc:a8:a3:64:78:f4:49:3c:3c:7c:55:04:f0:a9:83: b9:eb:10:11:49:1a:1c:ac:2f:85:b0:5c:be:0c:f3:9c:bf:ad: de:99:59:98:33:59:c0:66:b8:ce:1a:00:cd:92:12:ae:d0:4b: ba:e9:a4:fb:91:95:2e:c2:81:2f:cc:c8:dd:83:3c:b8:ca:bf: e4:a3:1b:d8:4e:3c:e1:24:b6:7e:8b:4f:ce:af:6c:60:9b:ca: 2b:fc:ba:18:c5:88:99:82:fa:37:18:05:24:16:e5:0d:9a:cf: 2f:90:bc:64:89:13:ac:ed:ed:46:2f:77:01:0c:3f:b9:60:d6: 58:42:32:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K66+6oZn3myGUrX0ka00MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNmEyM2EyZmQxYTA5NTYzNzhhMzdkNGZjZTI1OWRmMmJk Nzk0YTcwHhcNMjYwMTI1MDgwMTAxWhcNMjYwMTI2MDgwMTAxWjAzMTEwLwYDVQQD Eyg3NDliZTU0NWVlZjkxYWYxYWZhNmE0NzAzNDAwYTBjODRiMDc3ZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv78bkhe8yTBs+EGZdGP7n9RTo0jr KvmMEzACSMny89nqZkF2fVUNtMYcL/EGRzNGnvjVB2Knj4HDvmCAHNaHfxWcR5qW lvstJo921ZBTo8p93GW8UgNJvm8vcQirleNg+tQjBESPuezib/XD1iah9kIpYnmd ochnOB5vUOdgknemAfj6KdaCmzF7UmrsjaXXojojEoYj940SCHFmOf7VxhzPzTRV y4jDnLCypO0aElyvsb/6ty1qji7e/xPuTP12HdS7q8eY94szPDJhsnuo0a8ewW93 YJ94kc2SMJpMY61LtKG+3CDJu0lf4U6D9/ApsgXNW1EZFavSBG9gPTxAYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSb5UXu+Rrxr6akcDQAoMhLB30QMB8GA1UdIwQY MBaAFItqI6L9GglWN4o31PziWd8r15SnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTJvam92MGFDVlkzaWpmVV9PSlozeXZYbEtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mOTFiMmMtYzVmZS00NjI1LWExODAt OWE0NmVkNWI0MmRiLzEvaTJvam92MGFDVlkzaWpmVV9PSlozeXZYbEtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9mOTFiMmMtYzVmZS00NjI1LWExODAtOWE0NmVkNWI0MmRi LzEvaTJvam92MGFDVlkzaWpmVV9PSlozeXZYbEtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQ8aVvUs Q4yCPy3uoXRI7GD0vTg4sjivzryZbyQ8Ovw7h+ilBb8gMnK0MCYmCgm3mhBAnkvU clCPReiTHCVdqMZOAvSxvvy4grDYiPmYWBjBclfvvRV5LvFe+k89vqemhtw0n+rJ 09y2b7G2QSN8QbNf368oG0T0U+05spXeq+mo3KijZHj0STw8fFUE8KmDuesQEUka HKwvhbBcvgzznL+t3plZmDNZwGa4zhoAzZISrtBLuumk+5GVLsKBL8zI3YM8uMq/ 5KMb2E484SS2fotPzq9sYJvKK/y6GMWImYL6NxgFJBblDZrPL5C8ZIkTrO3tRi93 AQw/uWDWWEIy2g== -----END CERTIFICATE-----Generated at Sun Jan 25 16:23:56 2026 by rpki-client