This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft File: IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json) Hash identifier: 9FMJWPn+emyiNGP9gfYtuHySVXmHJGCZMccbK1Vrylg= Subject key identifier: 88:C3:34:DF:DC:C2:B1:F2:9C:0A:30:A8:C8:3C:82:BC:9F:90:13:2F Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03 Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003 Certificate serial: 019BF3509D3D21B0962BE8FDF390AEC120D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft Manifest number: 0C7E Signing time: Sun 25 Jan 2026 04:01:45 +0000 Manifest this update: Sun 25 Jan 2026 04:01:45 +0000 Manifest next update: Mon 26 Jan 2026 04:01:45 +0000 Files and hashes: 1: 3_EpI3KZKzbfeK2XXEoAgU5pxR8.roa (hash: nhz/XR/19vb+kuAg/iFUKPIFqPbUWtZOaM60Y8UGbXw=) 2: 4Hbh9kgEtk0ETbC9Jsg3Fsu3-DI.roa (hash: qkbQr2FGRu+j6lNNaiItQZd0nGSc0yYN6c1c29qls04=) 3: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: hHg0UDVnUONre+POa8iNDWjb9Ep80TJKGfBCTot9cIE=) 4: oerPqNmEjqxbGPl4Gs_7bUETdN0.roa (hash: EfuWXG0YIgrPAIfQYw0siImFKnCmmDF+zPQxYy5oo28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:9d:3d:21:b0:96:2b:e8:fd:f3:90:ae:c1:20:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003 Validity Not Before: Jan 25 04:01:45 2026 GMT Not After : Jan 26 04:01:45 2026 GMT Subject: CN=88c334dfdcc2b1f29c0a30a8c83c82bc9f90132f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2a:d3:03:91:d9:93:f3:7a:e3:35:d7:8e:61: 8f:8f:fc:8c:d1:ee:fb:3a:10:4b:a7:75:b3:e2:42: 9c:1c:eb:63:3b:63:d4:9d:cc:de:92:05:a6:c2:2d: 7c:de:c1:35:71:30:a4:3c:9c:67:f3:fa:19:45:14: 8d:3f:aa:f9:03:34:dc:7e:fe:b5:4d:6e:da:f6:69: 32:bd:d3:37:eb:28:2d:f2:cf:7f:79:e0:ae:5f:12: dd:2c:1e:a4:b9:36:16:78:b8:0f:b8:01:92:d8:e9: b9:b9:7c:bf:18:ee:32:09:5a:8a:93:f3:74:a1:23: e9:b2:2d:c1:dd:3c:31:8f:39:a1:37:60:9d:32:db: 30:5d:e1:b7:29:5f:68:4d:df:d5:f5:85:dd:21:c6: 52:b8:7e:1c:ff:e7:4d:39:29:1a:8f:60:1d:bb:58: 04:06:c5:c9:ce:c6:04:f3:36:37:17:20:4f:6f:19: a8:91:95:a4:79:56:f0:8f:02:e7:62:89:25:3b:14: 5c:54:7e:7c:1b:fa:ce:77:07:da:38:3d:8a:47:1c: 40:a9:83:06:d1:35:fb:03:ca:93:c4:b7:6f:4d:59: b7:d0:f5:b2:38:4b:c6:10:94:49:48:59:6f:08:e1: 2e:4f:74:78:8b:c3:44:96:16:a2:4f:52:55:e9:92: 98:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C3:34:DF:DC:C2:B1:F2:9C:0A:30:A8:C8:3C:82:BC:9F:90:13:2F X509v3 Authority Key Identifier: keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:06:b9:25:c7:9a:27:85:cc:b6:7d:1f:5b:ee:8d:fd:1b:68: 00:39:0b:d6:f1:15:9f:7f:12:d0:86:27:07:fa:34:a5:64:62: ec:c4:25:74:ee:b0:24:e6:86:4f:03:da:ca:6b:3b:fc:5d:b4: eb:5e:6d:20:8d:8e:9e:9c:98:fe:9b:03:da:7d:21:af:08:95: 39:fb:77:c2:02:b2:7c:9f:db:fa:f6:6c:83:f8:82:6b:fe:c8: 91:02:c0:cf:4c:b0:30:31:45:07:81:9d:3f:a4:c3:f8:54:6c: cf:b4:91:f2:84:1f:d2:2b:e1:89:15:cd:85:45:84:05:7f:45: 7e:e9:2f:3b:a9:43:2d:f5:b5:6a:54:50:87:23:4e:9d:bc:d6: 9f:8a:96:d9:01:2c:29:83:1c:f1:bf:0c:eb:53:a0:ce:7e:2f: be:17:41:70:9f:79:28:5b:d3:e1:05:7d:2b:95:f2:b6:ff:42: 9a:e8:c9:0d:af:56:75:91:33:4d:f9:8f:6f:da:d0:f6:d4:8d: 38:64:74:d2:29:ee:9a:b7:d6:1f:0d:5f:63:22:6d:18:36:77: ed:93:46:cc:fb:35:23:a3:a4:c3:44:68:73:21:09:fe:98:e1: ba:98:c0:66:c7:f7:9b:f1:e8:70:7f:68:0e:13:04:8b:cf:cb: 11:5d:83:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUJ09IbCWK+j985CuwSDWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyOTJkOTZkZmI2NmNiMTgwNjlkOGJkMTVjOWU5MGNkOTEy NGYwMDMwHhcNMjYwMTI1MDQwMTQ1WhcNMjYwMTI2MDQwMTQ1WjAzMTEwLwYDVQQD Eyg4OGMzMzRkZmRjYzJiMWYyOWMwYTMwYThjODNjODJiYzlmOTAxMzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArirTA5HZk/N64zXXjmGPj/yM0e77 OhBLp3Wz4kKcHOtjO2PUnczekgWmwi183sE1cTCkPJxn8/oZRRSNP6r5AzTcfv61 TW7a9mkyvdM36ygt8s9/eeCuXxLdLB6kuTYWeLgPuAGS2Om5uXy/GO4yCVqKk/N0 oSPpsi3B3TwxjzmhN2CdMtswXeG3KV9oTd/V9YXdIcZSuH4c/+dNOSkaj2Adu1gE BsXJzsYE8zY3FyBPbxmokZWkeVbwjwLnYoklOxRcVH58G/rOdwfaOD2KRxxAqYMG 0TX7A8qTxLdvTVm30PWyOEvGEJRJSFlvCOEuT3R4i8NElhaiT1JV6ZKYhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjDNN/cwrHynAowqMg8gryfkBMvMB8GA1UdIwQY MBaAFCKS2W37ZssYBp2L0VyekM2RJPADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lNzc0MTItYjBkNy00MTA0LTkyNmEt OTllZTYxNmNhODViLzEvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9lNzc0MTItYjBkNy00MTA0LTkyNmEtOTllZTYxNmNhODVi LzEvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQa5Jcea J4XMtn0fW+6N/RtoADkL1vEVn38S0IYnB/o0pWRi7MQldO6wJOaGTwPayms7/F20 615tII2OnpyY/psD2n0hrwiVOft3wgKyfJ/b+vZsg/iCa/7IkQLAz0ywMDFFB4Gd P6TD+FRsz7SR8oQf0ivhiRXNhUWEBX9FfukvO6lDLfW1alRQhyNOnbzWn4qW2QEs KYMc8b8M61Ogzn4vvhdBcJ95KFvT4QV9K5Xytv9CmujJDa9WdZEzTfmPb9rQ9tSN OGR00inumrfWHw1fYyJtGDZ37ZNGzPs1I6Okw0RocyEJ/pjhupjAZsf3m/HocH9o DhMEi8/LEV2DIw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:44:45 2026 by rpki-client