This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft File: Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft (raw, json) Hash identifier: 2yRkAq5PwVyeEE30V3agHFk5iFlsRUcRr34iHyyaLC0= Subject key identifier: BA:79:C5:21:1C:F5:21:16:D5:AC:FE:8D:83:A2:41:35:E4:FF:19:6E Authority key identifier: 23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D Certificate issuer: /CN=233d23fe2f738e53e7350c27c12e38284bcda87d Certificate serial: 019BF575285292D0696A213B2CCA866E1CA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft Manifest number: 31 Signing time: Sun 25 Jan 2026 14:00:54 +0000 Manifest this update: Sun 25 Jan 2026 14:00:54 +0000 Manifest next update: Mon 26 Jan 2026 14:00:54 +0000 Files and hashes: 1: Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl (hash: xaOFS4QNdp7jdWMykmabh0q2fKMXrcadodOyVgN9rB0=) 2: _xStacbF1--N4qcbHR6hs_B-jRQ.asa (hash: Bb41TH0kMfsyL9851D0f2aPV/w13bPkodpUWRJGMtMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:28:52:92:d0:69:6a:21:3b:2c:ca:86:6e:1c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233d23fe2f738e53e7350c27c12e38284bcda87d Validity Not Before: Jan 25 14:00:54 2026 GMT Not After : Jan 26 14:00:54 2026 GMT Subject: CN=ba79c5211cf52116d5acfe8d83a24135e4ff196e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6e:51:61:4a:f7:62:cd:87:1c:fa:16:34:36: 09:9f:fe:f4:9e:e1:25:c4:9b:8d:ea:7f:97:7e:0b: c1:2c:2d:bd:a9:55:43:bf:e5:d2:08:17:ab:d4:ff: 47:a6:6b:1d:e2:5e:38:e9:36:7e:7a:18:f9:88:7b: 88:3b:4f:b8:9b:17:6b:2c:07:e5:a4:0c:d8:e4:6b: 3f:e4:6e:a1:09:1e:af:1e:b1:7d:46:57:45:52:1a: c6:84:54:96:64:25:c9:83:95:68:9b:40:34:3f:bd: 6b:15:b2:50:d7:52:15:0c:e9:dd:ab:23:80:54:05: db:a0:d0:d8:fd:e3:fb:0a:a4:db:a6:60:0e:e9:2a: 83:48:fe:0d:9d:82:fc:55:04:32:3f:fc:f7:5c:57: 60:d5:7a:f7:2c:80:e9:3c:39:9c:d6:79:32:6d:46: a1:a5:de:e2:db:2f:68:11:9b:f1:90:11:88:5c:e0: ab:6c:00:3b:e8:7a:47:a0:c5:79:5c:78:33:ae:75: c8:26:29:63:65:bf:d6:7e:8f:e5:6b:5d:a5:00:b4: 20:60:f2:e5:19:5e:21:89:cf:6d:52:b5:b8:e9:49: ba:9a:53:17:62:d0:96:f3:bc:1f:85:01:5b:ba:cd: b7:99:4b:0a:fe:c7:65:a4:0e:1f:fe:ef:3f:c4:a4: 9e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:79:C5:21:1C:F5:21:16:D5:AC:FE:8D:83:A2:41:35:E4:FF:19:6E X509v3 Authority Key Identifier: keyid:23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b1:d0:b5:b7:9e:c7:d6:62:60:b7:b5:a3:c9:70:2f:95:e8: e2:3e:31:97:f0:f8:d4:58:38:9c:a5:13:e3:3a:7e:48:f0:7e: 43:7d:5b:c1:0a:c9:a1:e0:ee:ea:34:74:06:03:4c:4e:2d:2a: 35:b5:61:d8:84:75:da:3d:8c:8d:b3:a0:73:d9:c6:fc:fe:f4: fa:24:a7:a1:bc:3d:47:cd:0a:99:48:19:2d:7c:ee:c2:d4:c7: ee:fd:3b:10:61:33:8d:c1:a5:df:0c:f1:6c:2e:df:bd:d5:aa: a1:be:bc:f6:a1:ed:6e:25:40:60:ac:bd:85:38:c3:e7:6a:49: c9:be:1c:00:b6:a3:45:95:d6:19:33:a3:13:01:d8:04:55:1b: 05:2d:73:57:38:c6:d9:85:1f:a1:6f:25:53:e9:eb:4a:e7:65: f8:8f:f5:11:95:6e:9c:4a:a5:30:8a:65:cd:23:08:9c:a6:c9: 4f:9f:c7:3a:a0:fe:b6:75:47:08:87:67:5a:b7:c9:7a:30:03: 33:11:77:27:d5:d9:cf:86:a0:65:d8:cf:d9:b9:ec:d3:79:c4: 53:f7:6d:8b:5a:e3:be:52:22:97:a0:69:85:e0:c5:a2:4a:53: b6:44:63:3e:54:6f:18:03:e8:8d:6b:97:bb:ad:0b:3e:3d:77: 69:12:78:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dShSktBpaiE7LMqGbhymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzM2QyM2ZlMmY3MzhlNTNlNzM1MGMyN2MxMmUzODI4NGJj ZGE4N2QwHhcNMjYwMTI1MTQwMDU0WhcNMjYwMTI2MTQwMDU0WjAzMTEwLwYDVQQD EyhiYTc5YzUyMTFjZjUyMTE2ZDVhY2ZlOGQ4M2EyNDEzNWU0ZmYxOTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq25RYUr3Ys2HHPoWNDYJn/70nuEl xJuN6n+XfgvBLC29qVVDv+XSCBer1P9Hpmsd4l446TZ+ehj5iHuIO0+4mxdrLAfl pAzY5Gs/5G6hCR6vHrF9RldFUhrGhFSWZCXJg5Vom0A0P71rFbJQ11IVDOndqyOA VAXboNDY/eP7CqTbpmAO6SqDSP4NnYL8VQQyP/z3XFdg1Xr3LIDpPDmc1nkybUah pd7i2y9oEZvxkBGIXOCrbAA76HpHoMV5XHgzrnXIJiljZb/Wfo/la12lALQgYPLl GV4hic9tUrW46Um6mlMXYtCW87wfhQFbus23mUsK/sdlpA4f/u8/xKSeyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLp5xSEc9SEW1az+jYOiQTXk/xluMB8GA1UdIwQY MBaAFCM9I/4vc45T5zUMJ8EuOChLzah9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXowal9pOXpqbFBuTlF3bndTNDRLRXZOcUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80ZjQ1NGYtMGRlNC00YWM3LWI1Y2Et MmU0MTU0ZjM5NTBkLzEvSXowal9pOXpqbFBuTlF3bndTNDRLRXZOcUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS80ZjQ1NGYtMGRlNC00YWM3LWI1Y2EtMmU0MTU0ZjM5NTBk LzEvSXowal9pOXpqbFBuTlF3bndTNDRLRXZOcUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7HQtbee x9ZiYLe1o8lwL5Xo4j4xl/D41Fg4nKUT4zp+SPB+Q31bwQrJoeDu6jR0BgNMTi0q NbVh2IR12j2MjbOgc9nG/P70+iSnobw9R80KmUgZLXzuwtTH7v07EGEzjcGl3wzx bC7fvdWqob689qHtbiVAYKy9hTjD52pJyb4cALajRZXWGTOjEwHYBFUbBS1zVzjG 2YUfoW8lU+nrSudl+I/1EZVunEqlMIplzSMInKbJT5/HOqD+tnVHCIdnWrfJejAD MxF3J9XZz4agZdjP2bns03nEU/dti1rjvlIil6BpheDFokpTtkRjPlRvGAPojWuX u60LPj13aRJ4Iw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:03 2026 by rpki-client