This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json) Hash identifier: Z8pOnkTpIruNfZuftXHY0/qumIIZ/DdzGpxmgNREYlo= Subject key identifier: 3D:51:5E:02:9F:92:FC:25:0F:A4:DF:D8:B2:12:95:FB:3C:DC:A8:97 Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4 Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4 Certificate serial: 019BF53EDD3F51FE522A51D134C7DACDF3D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 13:01:36 +0000 Manifest this update: Sun 25 Jan 2026 13:01:36 +0000 Manifest next update: Mon 26 Jan 2026 13:01:36 +0000 Files and hashes: 1: 2vB0H2qYyz6SI0m9_Uc6vD9cNDE.roa (hash: nA5TN8D8VR57ajti92sbOf79Vloshs+N1jBn946xsJk=) 2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: yJjcrkQw5dY1cxR//D5+Qun3Zq1QuEBBEzEOQKHBvaQ=) 3: O_6FFbhc4JZemzwdUopF30jTO70.roa (hash: YpXPwTYN0lUePsEcimr/XTryk56n06KBrcCoSPFO4DM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:dd:3f:51:fe:52:2a:51:d1:34:c7:da:cd:f3:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4 Validity Not Before: Jan 25 13:01:36 2026 GMT Not After : Jan 26 13:01:36 2026 GMT Subject: CN=3d515e029f92fc250fa4dfd8b21295fb3cdca897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a6:fb:fd:75:75:da:29:8a:0a:df:f0:52:17: 58:db:0b:a1:16:c6:d7:a2:6f:f7:6e:e9:07:56:aa: c3:de:5a:67:55:31:f8:cd:c7:31:9a:95:1f:cf:50: 15:97:eb:64:5d:1e:71:35:91:d1:e9:08:b9:cb:81: 3f:74:f3:b6:17:6b:8a:1d:a4:a6:63:56:50:e2:93: ec:8c:6e:8f:15:b8:60:b9:99:84:72:30:89:56:b2: 29:f7:56:ea:8e:c8:12:b8:98:1a:95:68:d4:5b:96: 93:94:ba:39:fa:13:62:97:5b:d7:fa:40:38:6a:28: db:3f:9e:04:6f:b6:f8:cc:f6:c2:a8:f1:20:47:f2: dc:5e:10:81:b8:88:73:f5:88:2d:7b:3d:38:d3:f2: 0e:5b:80:08:fb:30:49:fd:ca:8a:ad:4e:c9:86:eb: 6d:ee:9d:4b:5c:9c:9d:14:8f:20:1a:58:b6:08:9b: 86:34:98:a0:0b:bf:68:de:24:23:d9:3c:fd:02:fa: 49:42:ea:0e:a1:4c:9b:37:6e:ef:79:79:5b:02:18: 47:28:67:2c:52:4d:09:6c:a8:bc:1d:46:67:1f:65: b6:c9:ee:58:9a:8c:d6:21:7b:23:51:c9:44:f4:28: 22:28:9d:6e:97:96:c2:37:38:b1:17:c5:77:8c:72: 50:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:51:5E:02:9F:92:FC:25:0F:A4:DF:D8:B2:12:95:FB:3C:DC:A8:97 X509v3 Authority Key Identifier: keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:1c:49:fa:74:84:2c:3b:bc:40:48:4f:3f:0e:9b:64:f4:70: 46:81:f2:d9:e4:e4:cc:ce:39:95:25:0f:6e:71:fb:03:75:62: 89:1c:82:c5:3c:f0:d3:d9:7c:6f:ce:06:43:1c:d5:6d:ef:63: 92:e2:bc:8c:88:4d:16:bd:e1:ac:3f:a9:3d:c5:80:e0:0d:ae: ca:9d:43:45:5f:d3:58:df:f1:be:ed:5c:3b:7c:30:37:15:e0: b9:f4:7b:5c:7d:ae:8f:03:62:f8:4e:ab:d2:8a:1f:69:07:a1: 49:3f:84:28:4b:c6:6f:b5:a4:4b:ac:9a:2a:42:d7:34:07:a3: 4b:44:00:91:26:70:27:d4:0d:52:75:e9:e9:d7:b6:67:82:44: 50:60:e6:9f:ea:ee:d4:e9:a1:23:67:b6:2d:77:e7:e0:6d:66: 26:c8:f4:c4:7e:20:33:00:f8:7a:f5:14:17:c7:19:0d:e2:2a: 88:d6:13:c6:f5:31:c7:f8:3d:bf:54:08:5d:0e:0e:ca:3a:40: 77:37:48:de:3c:b0:7d:17:15:a0:48:ad:9c:12:12:2e:69:b6: e7:4f:0a:a6:c2:51:d5:8a:62:32:9b:3c:3e:b0:4c:6a:89:7d: e3:b0:7a:aa:19:9b:0a:3c:92:fe:c2:69:c8:5b:73:75:d1:8d: 0a:22:8b:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pt0/Uf5SKlHRNMfazfPWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYzM5NGM5YjNhMzZiNjlmOWVlNWY4OTM2YTJmNTFiOTVl YWNlYjQwHhcNMjYwMTI1MTMwMTM2WhcNMjYwMTI2MTMwMTM2WjAzMTEwLwYDVQQD EygzZDUxNWUwMjlmOTJmYzI1MGZhNGRmZDhiMjEyOTVmYjNjZGNhODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ab7/XV12imKCt/wUhdY2wuhFsbX om/3bukHVqrD3lpnVTH4zccxmpUfz1AVl+tkXR5xNZHR6Qi5y4E/dPO2F2uKHaSm Y1ZQ4pPsjG6PFbhguZmEcjCJVrIp91bqjsgSuJgalWjUW5aTlLo5+hNil1vX+kA4 aijbP54Eb7b4zPbCqPEgR/LcXhCBuIhz9Ygtez040/IOW4AI+zBJ/cqKrU7Jhutt 7p1LXJydFI8gGli2CJuGNJigC79o3iQj2Tz9AvpJQuoOoUybN27veXlbAhhHKGcs Uk0JbKi8HUZnH2W2ye5YmozWIXsjUclE9CgiKJ1ul5bCNzixF8V3jHJQFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1RXgKfkvwlD6Tf2LISlfs83KiXMB8GA1UdIwQY MBaAFCHDlMmzo2tp+e5fiTai9RuV6s60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2Yt MWU0MzZkY2I4NWM1LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2YtMWU0MzZkY2I4NWM1 LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBxJ+nSE LDu8QEhPPw6bZPRwRoHy2eTkzM45lSUPbnH7A3ViiRyCxTzw09l8b84GQxzVbe9j kuK8jIhNFr3hrD+pPcWA4A2uyp1DRV/TWN/xvu1cO3wwNxXgufR7XH2ujwNi+E6r 0oofaQehST+EKEvGb7WkS6yaKkLXNAejS0QAkSZwJ9QNUnXp6de2Z4JEUGDmn+ru 1OmhI2e2LXfn4G1mJsj0xH4gMwD4evUUF8cZDeIqiNYTxvUxx/g9v1QIXQ4OyjpA dzdI3jywfRcVoEitnBISLmm2508KpsJR1YpiMps8PrBMaol947B6qhmbCjyS/sJp yFtzddGNCiKLDw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:54:17 2026 by rpki-client