This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft File: Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft (raw, json) Hash identifier: vg18gvNBnDkddcM8z6RAF92HfF6c+5I+z/e5NwPkN3s= Subject key identifier: 74:32:B5:67:EF:EA:B1:BD:87:A5:C5:87:9A:BA:B3:FA:BA:72:F1:30 Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D Certificate issuer: /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d Certificate serial: 019BF49940B8631245034A8C9EE1CB38C714 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft Manifest number: 0F6D Signing time: Sun 25 Jan 2026 10:00:42 +0000 Manifest this update: Sun 25 Jan 2026 10:00:42 +0000 Manifest next update: Mon 26 Jan 2026 10:00:42 +0000 Files and hashes: 1: 1jOzSXBij5_0E-f2suF9FA2ns6E.roa (hash: Nc0F7T+rokFZEGPWl4wCwZ72VzEoKQta+d5LVxuMNuk=) 2: Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl (hash: EWD4kaVAT7uz2CRJzK1psg9HtGdcgNz0ZE1pCFepBt0=) 3: VJzsM7xLy0BvWv62rRogwgx0xmY.roa (hash: r5eVuV7raUZo7rWfONsinf2tvmGiQxP2qwK0CFC96cA=) 4: Y1T4r7Fs3xLnU467yBjXxVxADek.roa (hash: 2REreg0NGysFv7m8SRA6AFjBorpvVS4eSFiK4h3b/NE=) 5: axPxdnGXgCRwQaSqTXZuNt_ZeRQ.roa (hash: 19+634b7ERlCmGPvTLiIQL850moJR3rSQ5I/u031cHQ=) 6: bQ8c-7koeiWAMWWzaWJffyBBvZc.roa (hash: hLJwj4Ja3tdG52rHBUCVD/JD4mLF045qQKob1dFnaXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:40:b8:63:12:45:03:4a:8c:9e:e1:cb:38:c7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d Validity Not Before: Jan 25 10:00:42 2026 GMT Not After : Jan 26 10:00:42 2026 GMT Subject: CN=7432b567efeab1bd87a5c5879abab3faba72f130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c9:61:d4:ad:e0:d5:94:c4:a7:32:4d:b7:cd: 54:14:95:71:be:e0:86:35:7e:14:7f:dc:8a:1b:c5: f4:d9:ab:7d:61:14:9e:cf:d1:b6:ba:8a:3c:01:f7: e5:29:d2:26:fb:f8:8f:57:8d:25:25:0d:b6:80:f7: d1:51:7d:60:d1:7e:72:d0:e8:6f:ca:d6:20:88:2d: 5e:1d:f4:4b:f6:ed:d2:e9:20:ad:bb:00:9a:30:f8: b8:69:f1:86:2a:df:48:00:ce:9b:58:30:a9:d0:cc: 99:78:30:f3:a3:9c:ff:4d:e8:67:b4:69:25:d4:5c: 6d:81:37:d7:40:b4:f9:b9:f3:99:8c:ef:75:5f:d7: 62:bb:31:68:f6:b7:c1:c5:5f:65:62:4e:80:1c:23: b6:1a:e8:8f:b1:7a:40:81:5a:ff:59:fd:f8:2b:8b: 44:58:02:4b:21:e7:cf:2c:7b:2f:65:e9:30:e4:97: 40:b2:1f:da:a7:f5:9e:ff:fb:20:24:7e:4e:db:57: 87:c2:57:d8:f9:ce:30:49:4d:93:93:cd:95:96:9a: c8:68:11:0e:fc:52:5d:8a:0e:6a:ac:8b:17:5a:ae: 99:82:7d:ea:99:4b:40:9f:78:46:da:52:3f:5b:24: cb:75:a3:f4:8c:a0:c7:3b:df:14:12:9b:be:86:a2: f4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:32:B5:67:EF:EA:B1:BD:87:A5:C5:87:9A:BA:B3:FA:BA:72:F1:30 X509v3 Authority Key Identifier: keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:6a:20:ce:2b:0b:c8:9b:1f:c7:6a:08:5c:de:06:ab:45:b7: 30:24:cc:03:6a:86:bc:08:5c:36:9c:f7:82:47:17:ad:0b:b9: bf:fd:18:fd:16:08:f6:5b:0a:cc:43:a8:0c:03:bc:1d:14:9c: 8c:55:c7:24:89:a0:dd:27:54:0c:7e:7e:92:38:ee:0c:6a:a8: ea:24:46:2e:43:2a:d6:85:03:60:45:00:80:5f:3a:5e:25:13: 3f:b0:46:95:a8:50:72:10:a8:dc:0e:69:60:06:f3:26:54:e7: ab:c6:77:46:f9:bc:d7:7d:d0:8d:0a:be:57:32:5b:ca:a9:12: 52:dd:cb:f3:fa:b8:58:18:48:90:1d:a9:49:3d:b4:1a:a4:d1: 5a:71:a4:fd:4f:0a:71:6a:70:d0:db:77:87:a3:d2:a4:23:49: 7e:89:f0:1a:9f:45:3c:a7:78:d7:04:1e:0e:1e:d0:af:c3:cb: 9c:bc:11:96:ca:91:c4:ca:e7:60:e5:73:a4:b3:18:0d:7f:96: dd:8c:0b:01:bb:63:4c:61:33:9e:16:0c:8f:fc:f8:35:cf:7b: e9:74:4b:6d:56:80:fb:48:c6:f4:5b:01:78:e0:bb:65:b8:e7: b2:c0:ba:d2:b0:df:9e:5a:63:1d:81:68:2b:08:cd:9a:cb:00: 90:7b:2c:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mUC4YxJFA0qMnuHLOMcUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxY2IyYWMzNzdmYzYwM2Y5NWZhZWNjNTRhYzdkNTkwZjJj YzMxOWQwHhcNMjYwMTI1MTAwMDQyWhcNMjYwMTI2MTAwMDQyWjAzMTEwLwYDVQQD Eyg3NDMyYjU2N2VmZWFiMWJkODdhNWM1ODc5YWJhYjNmYWJhNzJmMTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8lh1K3g1ZTEpzJNt81UFJVxvuCG NX4Uf9yKG8X02at9YRSez9G2uoo8AfflKdIm+/iPV40lJQ22gPfRUX1g0X5y0Ohv ytYgiC1eHfRL9u3S6SCtuwCaMPi4afGGKt9IAM6bWDCp0MyZeDDzo5z/TehntGkl 1FxtgTfXQLT5ufOZjO91X9diuzFo9rfBxV9lYk6AHCO2GuiPsXpAgVr/Wf34K4tE WAJLIefPLHsvZekw5JdAsh/ap/We//sgJH5O21eHwlfY+c4wSU2Tk82VlprIaBEO /FJdig5qrIsXWq6Zgn3qmUtAn3hG2lI/WyTLdaP0jKDHO98UEpu+hqL0HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQytWfv6rG9h6XFh5q6s/q6cvEwMB8GA1UdIwQY MBaAFCHLKsN3/GA/lfrsxUrH1ZDyzDGdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUt ZmI0MGQ2ZGEyNDY4LzEvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUtZmI0MGQ2ZGEyNDY4 LzEvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWogzisL yJsfx2oIXN4Gq0W3MCTMA2qGvAhcNpz3gkcXrQu5v/0Y/RYI9lsKzEOoDAO8HRSc jFXHJImg3SdUDH5+kjjuDGqo6iRGLkMq1oUDYEUAgF86XiUTP7BGlahQchCo3A5p YAbzJlTnq8Z3Rvm8133QjQq+VzJbyqkSUt3L8/q4WBhIkB2pST20GqTRWnGk/U8K cWpw0Nt3h6PSpCNJfonwGp9FPKd41wQeDh7Qr8PLnLwRlsqRxMrnYOVzpLMYDX+W 3YwLAbtjTGEznhYMj/z4Nc976XRLbVaA+0jG9FsBeOC7ZbjnssC60rDfnlpjHYFo KwjNmssAkHssEQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:21:08 2026 by rpki-client