This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft File: idaknSMAf7sSRxkvu3vZgus3M18.mft (raw, json) Hash identifier: JU1JJFqbzjJ9FzcIflih028KWQEMpPvyT88Nt34ghdw= Subject key identifier: B3:D7:27:1A:8A:F5:D2:D9:07:D1:1D:8C:D5:47:E3:25:79:BF:30:0A Authority key identifier: 89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F Certificate issuer: /CN=89d6a49d23007fbb1247192fbb7bd982eb37335f Certificate serial: 019BF6BE62465AF6EA24DACD9CE724A74C1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft Manifest number: 02EE Signing time: Sun 25 Jan 2026 20:00:30 +0000 Manifest this update: Sun 25 Jan 2026 20:00:30 +0000 Manifest next update: Mon 26 Jan 2026 20:00:30 +0000 Files and hashes: 1: Af_5rqEWBhs_t_5t3ubsN4ME7qQ.roa (hash: US3yyitysBySkBj1duM7uaT/kHoh5Ro/nrveWTewP9E=) 2: idaknSMAf7sSRxkvu3vZgus3M18.crl (hash: chkeKgRUFVhrvjeu9cpgayE/WKOCDCr9cY+j9I1KzII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:62:46:5a:f6:ea:24:da:cd:9c:e7:24:a7:4c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89d6a49d23007fbb1247192fbb7bd982eb37335f Validity Not Before: Jan 25 20:00:30 2026 GMT Not After : Jan 26 20:00:30 2026 GMT Subject: CN=b3d7271a8af5d2d907d11d8cd547e32579bf300a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ed:83:87:25:03:f5:b5:e7:a5:ca:e2:58:81: bb:cc:73:07:cc:18:79:92:96:ad:67:91:0d:d7:bd: 53:dd:99:e7:68:4a:bc:f2:23:9a:e2:82:e6:db:0e: f2:65:9b:cf:b5:5c:3d:02:80:47:81:5c:5e:a3:54: fd:ed:8b:64:db:cb:90:32:c6:99:a3:52:3e:67:15: 59:e8:27:14:c6:bd:73:9b:4b:37:71:d7:b8:c0:f6: 77:1c:3e:2f:87:9c:d0:b2:5f:ce:e6:7c:13:ef:a5: d5:d1:8d:f7:96:0c:03:a3:a3:84:3f:88:18:26:77: 43:ba:3d:49:a6:41:b5:14:65:ef:0d:d1:70:63:7d: c3:b9:e6:61:25:aa:ca:b2:e1:72:c9:5b:f7:f6:cb: 74:fe:87:f5:fa:32:3b:b7:a6:16:82:ee:11:b5:8d: d9:b3:e9:2b:94:09:4d:01:87:1a:a9:ae:1d:63:5a: 4c:8d:df:2d:9f:ac:ec:94:25:d3:18:d9:9e:46:06: 30:91:3e:5e:20:06:ed:d7:95:1c:59:2b:fd:4a:ad: 68:dd:e8:eb:e4:59:ab:b3:57:c9:b1:79:dc:8f:3a: ed:3c:c1:94:10:ac:55:c6:1f:d4:50:88:9d:90:72: 9c:7d:c2:a6:18:42:a5:f7:57:c8:0c:ad:76:39:65: 1e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D7:27:1A:8A:F5:D2:D9:07:D1:1D:8C:D5:47:E3:25:79:BF:30:0A X509v3 Authority Key Identifier: keyid:89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:c6:10:9a:91:6f:2e:64:d0:be:e9:7a:7d:90:d8:c1:ff:84: 35:a7:38:41:71:fa:24:cc:cc:70:d4:60:c9:c3:9c:5f:8b:15: dc:65:e7:4f:de:43:89:46:a3:cf:5d:09:55:a6:20:fa:2a:c5: d5:2b:46:fa:6f:f3:84:78:24:75:66:7e:41:1c:a4:08:9a:32: 5c:e5:f3:00:f1:60:0d:40:3b:f1:72:67:81:6a:78:2d:3b:25: 48:b9:7d:5d:c0:07:29:f2:78:ae:a8:dd:df:13:ba:2d:c0:9b: 82:62:b3:64:73:6a:41:21:d0:7c:e9:5e:67:19:ec:08:86:f1: f0:29:a4:89:c6:d8:11:eb:82:98:fc:d4:fd:38:2d:d2:51:b8: df:51:ee:e2:58:80:52:2b:8d:7d:76:56:55:38:bc:9e:b0:16: 4e:aa:85:30:33:12:df:0c:03:6c:d8:78:70:1f:5c:0c:83:7d: ae:5d:59:11:78:d8:dc:6c:93:2f:a1:11:ab:90:67:4f:bd:fe: 0c:63:95:b4:79:a4:9e:fc:c1:24:0b:e2:c3:69:86:9e:90:54: 50:35:d8:ff:24:91:ef:b4:2b:91:15:7c:e5:67:02:b8:f4:99: 70:61:e7:1c:b1:bf:45:32:74:5f:c3:24:3d:17:e2:62:63:2f: 62:57:e4:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vmJGWvbqJNrNnOckp0wbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZDZhNDlkMjMwMDdmYmIxMjQ3MTkyZmJiN2JkOTgyZWIz NzMzNWYwHhcNMjYwMTI1MjAwMDMwWhcNMjYwMTI2MjAwMDMwWjAzMTEwLwYDVQQD EyhiM2Q3MjcxYThhZjVkMmQ5MDdkMTFkOGNkNTQ3ZTMyNTc5YmYzMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru2DhyUD9bXnpcriWIG7zHMHzBh5 kpatZ5EN171T3ZnnaEq88iOa4oLm2w7yZZvPtVw9AoBHgVxeo1T97Ytk28uQMsaZ o1I+ZxVZ6CcUxr1zm0s3cde4wPZ3HD4vh5zQsl/O5nwT76XV0Y33lgwDo6OEP4gY JndDuj1JpkG1FGXvDdFwY33DueZhJarKsuFyyVv39st0/of1+jI7t6YWgu4RtY3Z s+krlAlNAYcaqa4dY1pMjd8tn6zslCXTGNmeRgYwkT5eIAbt15UcWSv9Sq1o3ejr 5Fmrs1fJsXncjzrtPMGUEKxVxh/UUIidkHKcfcKmGEKl91fIDK12OWUebQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPXJxqK9dLZB9EdjNVH4yV5vzAKMB8GA1UdIwQY MBaAFInWpJ0jAH+7EkcZL7t72YLrNzNfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWRha25TTUFmN3NTUnhrdnUzdlpndXMzTTE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xNDA5OWEtZTJkYS00ZjZhLWI1YzQt NmZkNzUxZGU3MTdhLzEvaWRha25TTUFmN3NTUnhrdnUzdlpndXMzTTE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xNDA5OWEtZTJkYS00ZjZhLWI1YzQtNmZkNzUxZGU3MTdh LzEvaWRha25TTUFmN3NTUnhrdnUzdlpndXMzTTE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr8YQmpFv LmTQvul6fZDYwf+ENac4QXH6JMzMcNRgycOcX4sV3GXnT95DiUajz10JVaYg+irF 1StG+m/zhHgkdWZ+QRykCJoyXOXzAPFgDUA78XJngWp4LTslSLl9XcAHKfJ4rqjd 3xO6LcCbgmKzZHNqQSHQfOleZxnsCIbx8CmkicbYEeuCmPzU/Tgt0lG431Hu4liA UiuNfXZWVTi8nrAWTqqFMDMS3wwDbNh4cB9cDIN9rl1ZEXjY3GyTL6ERq5BnT73+ DGOVtHmknvzBJAviw2mGnpBUUDXY/ySR77QrkRV85WcCuPSZcGHnHLG/RTJ0X8Mk PRfiYmMvYlfkiw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:31 2026 by rpki-client