This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft File: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft (raw, json) Hash identifier: IwITdp4fEeESrptdA+9ozfL/6fPLEK2Xk2BBxQLDyQM= Subject key identifier: C2:1E:CF:0E:8D:A6:DA:05:9A:95:A7:FF:11:DC:07:89:48:52:6E:4E Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45 Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545 Certificate serial: 019BF7D1BE85D2EB00A7D4D2CD82BE786447 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft Manifest number: 13FC Signing time: Mon 26 Jan 2026 01:01:16 +0000 Manifest this update: Mon 26 Jan 2026 01:01:16 +0000 Manifest next update: Tue 27 Jan 2026 01:01:16 +0000 Files and hashes: 1: 0md0kPLpOYmMIz1N6P6G4TqZeLs.roa (hash: rvBtdA8KnIIt37xuYlvd6yy0WsMB150m/8VDiOcY3c8=) 2: WrWBzTjMV8uY49iEsZzDrHnOc2Q.roa (hash: TafmGVewjoUyvD+1TRSWrWYhvrjNRF0jON6ox57CRkw=) 3: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl (hash: 0WSNh6FtwnavuoHL2EDiP8a0DWa3LWIz7oge9Qirt4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:be:85:d2:eb:00:a7:d4:d2:cd:82:be:78:64:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545 Validity Not Before: Jan 26 01:01:16 2026 GMT Not After : Jan 27 01:01:16 2026 GMT Subject: CN=c21ecf0e8da6da059a95a7ff11dc078948526e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:e8:90:73:3a:97:d5:ec:d3:3b:43:39:7a: 34:64:09:2e:dd:20:e4:f9:f4:d3:c6:93:44:bb:34: f3:a4:f7:9f:68:f0:df:9f:21:f6:8e:b8:b9:da:3d: 92:5a:05:99:d9:0f:d7:f6:60:c5:cf:fe:28:cf:b0: ee:75:e3:4c:e0:e8:2c:77:5e:a8:be:f7:70:14:c3: ca:aa:7d:3b:71:17:7b:8a:bc:c4:91:08:b8:7a:88: fb:b5:ff:70:fa:d0:f6:30:ed:fb:2e:0d:02:af:06: 4b:0f:87:1c:63:66:b0:ca:51:4a:3b:d3:91:54:e1: 30:63:e4:a8:c4:7c:7c:a5:ee:23:d5:8e:8b:42:d1: e1:b1:b0:42:42:dd:06:05:d3:e0:6d:36:2b:06:b0: c3:e7:83:fb:af:ed:da:b6:96:be:b8:22:d9:f6:36: 39:ad:7f:2d:0b:a5:38:a2:b8:63:ad:66:cb:fc:d9: 92:fa:0b:c3:9f:a0:a5:41:67:6f:02:9e:84:f0:c0: 11:32:25:66:4e:76:41:be:a5:2a:ee:26:db:bb:81: 80:42:d1:e8:a3:38:e0:95:bf:33:92:00:f5:ec:16: 42:e9:42:15:9c:75:65:c4:16:da:ba:5b:f6:2c:5f: ea:59:1d:45:74:5f:14:1d:44:03:d9:e7:a4:e3:19: 66:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1E:CF:0E:8D:A6:DA:05:9A:95:A7:FF:11:DC:07:89:48:52:6E:4E X509v3 Authority Key Identifier: keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:9f:fe:c2:cd:91:9c:86:4c:c3:09:b1:3a:7b:2a:8e:28:58: da:b7:17:51:0d:53:96:11:fa:91:24:da:2c:a5:b5:f8:4b:f1: 10:c6:bc:bf:7a:df:53:f9:79:af:eb:7b:c6:a9:65:b5:6e:da: ed:2b:4f:ae:d8:09:31:bd:68:c5:56:66:2c:de:bc:b6:06:50: 1e:cc:d5:41:9b:73:b0:05:b4:5a:36:f8:44:51:f3:dc:ac:12: 82:bb:38:d1:08:30:33:35:ef:11:68:f4:29:2c:29:1d:5d:e9: 6b:a4:d2:c4:9e:fc:1c:47:8f:1e:03:7e:82:d9:bb:03:ed:56: ea:ff:e8:2a:2a:5c:70:24:dd:2d:6c:4a:48:0f:81:99:af:c9: 83:38:a0:d5:76:72:dd:80:fa:21:ec:88:d0:9b:95:c2:c4:8a: e4:96:ad:91:55:32:a9:59:45:97:20:9e:aa:06:d7:2c:fa:25: 47:de:f9:e2:ad:b6:64:f9:64:84:d9:01:04:1d:75:6a:26:3b: f6:88:05:36:95:d5:5a:07:08:f0:b0:7c:ee:9d:37:bc:79:a5: e6:0f:84:4b:d7:aa:ac:c4:59:2b:d0:3b:83:f7:ec:db:98:cc: bf:68:82:3a:98:13:43:52:c7:9c:aa:88:f1:39:46:bd:ad:b3: c0:5b:da:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30b6F0usAp9TSzYK+eGRHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ODZlMjU2ODMzMDJjMzgyNzBkMGY5MGM0YWFkMTUxOTM5 M2Q1NDUwHhcNMjYwMTI2MDEwMTE2WhcNMjYwMTI3MDEwMTE2WjAzMTEwLwYDVQQD EyhjMjFlY2YwZThkYTZkYTA1OWE5NWE3ZmYxMWRjMDc4OTQ4NTI2ZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMjokHM6l9Xs0ztDOXo0ZAku3SDk +fTTxpNEuzTzpPefaPDfnyH2jri52j2SWgWZ2Q/X9mDFz/4oz7DudeNM4Ogsd16o vvdwFMPKqn07cRd7irzEkQi4eoj7tf9w+tD2MO37Lg0CrwZLD4ccY2awylFKO9OR VOEwY+SoxHx8pe4j1Y6LQtHhsbBCQt0GBdPgbTYrBrDD54P7r+3atpa+uCLZ9jY5 rX8tC6U4orhjrWbL/NmS+gvDn6ClQWdvAp6E8MARMiVmTnZBvqUq7ibbu4GAQtHo ozjglb8zkgD17BZC6UIVnHVlxBbaulv2LF/qWR1FdF8UHUQD2eek4xlmqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIezw6NptoFmpWn/xHcB4lIUm5OMB8GA1UdIwQY MBaAFImG4laDMCw4Jw0PkMSq0VGTk9VFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUt OTM3ZGNmZjUxZTJkLzEvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUtOTM3ZGNmZjUxZTJk LzEvaVliaVZvTXdMRGduRFEtUXhLclJVWk9UMVVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZ/+ws2R nIZMwwmxOnsqjihY2rcXUQ1TlhH6kSTaLKW1+EvxEMa8v3rfU/l5r+t7xqlltW7a 7StPrtgJMb1oxVZmLN68tgZQHszVQZtzsAW0Wjb4RFHz3KwSgrs40QgwMzXvEWj0 KSwpHV3pa6TSxJ78HEePHgN+gtm7A+1W6v/oKipccCTdLWxKSA+Bma/Jgzig1XZy 3YD6IeyI0JuVwsSK5JatkVUyqVlFlyCeqgbXLPolR9754q22ZPlkhNkBBB11aiY7 9ogFNpXVWgcI8LB87p03vHml5g+ES9eqrMRZK9A7g/fs25jMv2iCOpgTQ1LHnKqI 8TlGva2zwFvaLA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:08:55 2026 by rpki-client