This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json) Hash identifier: k7RNdcv0/ZYv7fcBUit9RHCw7PW1Gug9y7Pnct4gOD4= Subject key identifier: 1D:DD:F2:1C:B9:23:B4:2F:09:9D:4D:04:ED:0D:64:AF:7A:27:B2:72 Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4 Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4 Certificate serial: 019BF34FE2EE10D48522D1F6DF0B2CE68104 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 04:00:57 +0000 Manifest this update: Sun 25 Jan 2026 04:00:57 +0000 Manifest next update: Mon 26 Jan 2026 04:00:57 +0000 Files and hashes: 1: 2vB0H2qYyz6SI0m9_Uc6vD9cNDE.roa (hash: nA5TN8D8VR57ajti92sbOf79Vloshs+N1jBn946xsJk=) 2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: fHwSoKkK5YR7X34zC8rdG06+A8900NxnpJP5Xi1BCHQ=) 3: O_6FFbhc4JZemzwdUopF30jTO70.roa (hash: YpXPwTYN0lUePsEcimr/XTryk56n06KBrcCoSPFO4DM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:e2:ee:10:d4:85:22:d1:f6:df:0b:2c:e6:81:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4 Validity Not Before: Jan 25 04:00:57 2026 GMT Not After : Jan 26 04:00:57 2026 GMT Subject: CN=1dddf21cb923b42f099d4d04ed0d64af7a27b272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7a:16:dc:0e:d5:4e:36:04:38:72:2e:2d:43: bd:e2:51:7d:36:3a:aa:bd:1a:f0:f9:2e:d0:0e:a0: a6:9a:01:29:e6:08:50:7d:31:c5:35:ce:54:56:23: 44:04:d3:54:a8:e7:20:31:36:b5:9d:5e:98:f8:3b: 44:5d:e5:09:a6:67:3c:b6:5c:7f:a8:2f:c2:db:64: e6:b3:a1:ac:df:31:3b:f9:ea:41:c2:eb:10:10:92: 32:6f:10:07:27:e1:a4:11:0f:f9:2a:84:a5:f8:59: 26:9e:f1:91:2e:f7:fa:4f:b4:fc:7b:28:66:ea:5f: 42:f5:bf:1d:c6:2e:12:3f:0d:78:c7:eb:7f:3e:1c: 3d:08:71:a9:74:3b:cd:48:d0:9a:ce:3f:1e:e4:82: 8b:d5:05:01:ae:68:5d:5d:30:fe:80:6a:cd:6c:0a: 7a:49:0b:3e:e1:01:57:75:d8:72:f8:29:7f:ef:31: a0:36:cc:f5:cb:3d:f8:25:ad:ac:b7:4e:ea:23:1f: b5:85:af:56:01:fe:b1:00:e1:99:cc:5f:06:16:8c: 45:91:7b:9c:5e:7e:34:4b:c5:72:45:bb:7b:61:2e: 98:0c:b4:c8:ef:2d:56:0b:a2:d9:bd:82:b7:7b:bf: 1f:98:44:8a:11:e6:33:6f:e4:40:be:fc:ae:cb:c1: 8c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DD:F2:1C:B9:23:B4:2F:09:9D:4D:04:ED:0D:64:AF:7A:27:B2:72 X509v3 Authority Key Identifier: keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:89:d3:75:55:4d:8c:40:b3:88:cb:9b:4f:85:90:71:55:dc: 9f:35:11:33:a7:9d:88:bf:50:3d:0d:91:3c:62:24:c1:ae:98: 61:9c:53:d7:89:ca:c7:5f:15:de:93:ee:0a:5e:62:98:da:d7: c7:fb:57:42:6a:aa:49:af:f4:7e:24:c3:0a:0b:79:c6:ee:e3: d4:22:a2:c9:7b:07:cb:de:2c:fa:1e:98:4a:e3:2d:28:4b:03: cb:bf:5c:7a:c9:63:35:8f:4b:86:a6:ed:18:fb:d5:97:45:3c: a9:a9:7d:80:cf:2c:76:d2:61:8f:e6:2d:a3:a2:08:1a:02:0f: a3:4b:f4:bf:38:80:df:9a:19:6f:f9:9a:4a:98:e9:7a:21:e8: 03:68:55:77:79:73:21:9c:6c:30:05:bc:88:92:ff:73:ca:af: fc:b0:4c:31:13:71:6c:17:f9:7f:a6:f2:13:d8:18:6c:38:b4: 1f:13:73:38:1e:d9:8f:74:a9:57:e5:f1:20:a5:08:57:28:fb: ae:d9:99:2f:50:43:16:a3:11:c8:8b:42:f1:9f:1d:f2:93:d5: 3c:ac:ca:35:2d:33:3a:27:84:76:38:3e:87:1a:35:ac:3e:07: f7:47:f3:24:c2:cf:c5:02:26:60:be:14:32:31:08:7f:cc:34: 7f:9b:3b:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT+LuENSFItH23wss5oEEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYzM5NGM5YjNhMzZiNjlmOWVlNWY4OTM2YTJmNTFiOTVl YWNlYjQwHhcNMjYwMTI1MDQwMDU3WhcNMjYwMTI2MDQwMDU3WjAzMTEwLwYDVQQD EygxZGRkZjIxY2I5MjNiNDJmMDk5ZDRkMDRlZDBkNjRhZjdhMjdiMjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3oW3A7VTjYEOHIuLUO94lF9Njqq vRrw+S7QDqCmmgEp5ghQfTHFNc5UViNEBNNUqOcgMTa1nV6Y+DtEXeUJpmc8tlx/ qC/C22Tms6Gs3zE7+epBwusQEJIybxAHJ+GkEQ/5KoSl+FkmnvGRLvf6T7T8eyhm 6l9C9b8dxi4SPw14x+t/Phw9CHGpdDvNSNCazj8e5IKL1QUBrmhdXTD+gGrNbAp6 SQs+4QFXddhy+Cl/7zGgNsz1yz34Ja2st07qIx+1ha9WAf6xAOGZzF8GFoxFkXuc Xn40S8VyRbt7YS6YDLTI7y1WC6LZvYK3e78fmESKEeYzb+RAvvyuy8GMZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3d8hy5I7QvCZ1NBO0NZK96J7JyMB8GA1UdIwQY MBaAFCHDlMmzo2tp+e5fiTai9RuV6s60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2Yt MWU0MzZkY2I4NWM1LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2YtMWU0MzZkY2I4NWM1 LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAionTdVVN jECziMubT4WQcVXcnzURM6ediL9QPQ2RPGIkwa6YYZxT14nKx18V3pPuCl5imNrX x/tXQmqqSa/0fiTDCgt5xu7j1CKiyXsHy94s+h6YSuMtKEsDy79cesljNY9Lhqbt GPvVl0U8qal9gM8sdtJhj+Yto6IIGgIPo0v0vziA35oZb/maSpjpeiHoA2hVd3lz IZxsMAW8iJL/c8qv/LBMMRNxbBf5f6byE9gYbDi0HxNzOB7Zj3SpV+XxIKUIVyj7 rtmZL1BDFqMRyItC8Z8d8pPVPKzKNS0zOieEdjg+hxo1rD4H90fzJMLPxQImYL4U MjEIf8w0f5s72g== -----END CERTIFICATE-----Generated at Sun Jan 25 14:49:59 2026 by rpki-client