This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json) Hash identifier: o1jbg0GegZLhLNGVuZWev0g4EGWsoE+1r0/iPvZyKGs= Subject key identifier: 5B:08:7A:F0:DE:7F:6A:89:C4:DA:FA:44:C5:02:D8:73:DD:2F:34:7D Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29 Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329 Certificate serial: 019BF4D08191B62FD6911D6317335808BA46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft Manifest number: 07BC Signing time: Sun 25 Jan 2026 11:01:03 +0000 Manifest this update: Sun 25 Jan 2026 11:01:03 +0000 Manifest next update: Mon 26 Jan 2026 11:01:03 +0000 Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: fQXQd5fey2BsESF67q6ZkOZMjoT43jO11S87JW94aHY=) 2: QEMDPwJ2cNS9ewt5zX-nDeHB4lc.roa (hash: ZAZFuVLV8kzOv/LeKj7q3UVNfSHjw6/4Wpf1tRlJMEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:81:91:b6:2f:d6:91:1d:63:17:33:58:08:ba:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329 Validity Not Before: Jan 25 11:01:03 2026 GMT Not After : Jan 26 11:01:03 2026 GMT Subject: CN=5b087af0de7f6a89c4dafa44c502d873dd2f347d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:37:56:ac:e3:98:b1:56:28:8b:44:3b:47: 72:32:21:99:00:11:17:1a:87:af:d5:ef:17:05:b1: 75:b9:3a:1b:df:ee:71:21:5a:0d:9e:0e:7b:ea:b8: 6c:e2:f9:b4:b9:b7:ca:e2:a2:43:63:0e:68:e4:e1: 13:ee:41:8e:c4:e6:3d:66:e4:fa:de:eb:22:be:86: 75:ea:13:bb:31:bf:b8:3e:79:af:b9:d8:df:d5:e5: 51:55:de:ae:49:46:71:c1:d9:4a:b5:8f:70:a0:58: 22:49:17:77:51:0a:bf:54:f4:99:06:6f:57:54:cf: e3:c6:c4:39:59:51:17:5f:62:38:27:7b:c2:10:66: 76:5c:c2:2f:a9:87:c2:1b:33:e2:a7:53:d4:60:9d: c0:59:23:e7:7b:45:65:46:23:a3:7b:1c:3c:30:fd: cb:45:3b:bb:41:68:58:c2:01:af:5f:d1:57:8a:a0: a3:08:d7:cf:8f:09:29:ab:52:c7:c4:85:c5:cd:c3: e1:cf:ac:b1:e1:48:1f:e8:35:ac:c5:45:2c:e9:29: ce:de:66:9f:6d:44:23:c9:f0:11:a1:db:1d:9c:1f: 24:0d:bf:8f:1c:c7:08:a0:5b:9a:20:2b:c1:90:44: d4:e9:fa:2e:61:b4:a9:be:e9:29:3d:0c:df:86:e8: 90:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:08:7A:F0:DE:7F:6A:89:C4:DA:FA:44:C5:02:D8:73:DD:2F:34:7D X509v3 Authority Key Identifier: keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:32:82:67:9c:d9:58:3c:92:8a:35:9f:c3:89:fa:71:1c:e0: dc:56:ab:4d:ef:5a:e1:b9:75:74:f0:43:0f:4d:8f:1d:19:aa: 7c:85:6e:c9:b7:37:bf:5b:38:6a:0f:2f:88:eb:b6:6b:13:08: a2:a5:4a:e9:4e:96:85:10:f2:7a:99:cc:ab:5d:a5:c4:d0:38: 06:a1:dd:37:6b:6a:33:bf:a3:3a:e3:e7:37:ea:5e:81:b6:24: d0:55:3b:98:dd:f7:fb:e6:86:3d:15:6e:c6:20:4c:a4:ab:68: ff:05:6e:7f:41:82:8d:ac:27:7e:cc:ed:e2:4b:36:a2:cc:51: f7:6d:a8:c9:34:c9:c0:6d:2b:43:a8:7c:83:b7:97:a4:d5:bb: 6b:10:ac:90:7f:74:cd:59:83:87:a6:9c:b8:4c:45:2b:44:0a: 39:40:26:88:81:7e:22:6d:2c:55:74:97:07:6a:c6:89:e3:e3: ee:f4:95:23:0e:a2:e8:40:f4:e5:68:e6:ee:0d:40:12:21:17: 82:d6:69:a0:c3:27:e4:80:82:9f:47:62:1a:94:e3:75:73:09: d7:1a:ad:48:4c:37:0c:37:19:41:83:93:24:9c:f7:39:6f:7f: 12:1d:1c:d7:dc:87:f4:55:79:b1:8a:d3:50:97:6f:55:38:71: d3:5a:87:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00IGRti/WkR1jFzNYCLpGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMzI5Y2IzYWJlNGU5NDBjZmM2MmEyMGUyYTZlMmMyOGZj MjgzMjkwHhcNMjYwMTI1MTEwMTAzWhcNMjYwMTI2MTEwMTAzWjAzMTEwLwYDVQQD Eyg1YjA4N2FmMGRlN2Y2YTg5YzRkYWZhNDRjNTAyZDg3M2RkMmYzNDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKQ3VqzjmLFWKItEO0dyMiGZABEX Goev1e8XBbF1uTob3+5xIVoNng576rhs4vm0ubfK4qJDYw5o5OET7kGOxOY9ZuT6 3usivoZ16hO7Mb+4Pnmvudjf1eVRVd6uSUZxwdlKtY9woFgiSRd3UQq/VPSZBm9X VM/jxsQ5WVEXX2I4J3vCEGZ2XMIvqYfCGzPip1PUYJ3AWSPne0VlRiOjexw8MP3L RTu7QWhYwgGvX9FXiqCjCNfPjwkpq1LHxIXFzcPhz6yx4Ugf6DWsxUUs6SnO3maf bUQjyfARodsdnB8kDb+PHMcIoFuaICvBkETU6fouYbSpvukpPQzfhuiQ0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsIevDef2qJxNr6RMUC2HPdLzR9MB8GA1UdIwQY MBaAFCMynLOr5OlAz8YqIOKm4sKPwoMpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZDM5NGItNmJjNC00ZTQ3LWIwMTIt NTE4ZjJjOGY4NDZiLzEvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kZDM5NGItNmJjNC00ZTQ3LWIwMTItNTE4ZjJjOGY4NDZi LzEvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjKCZ5zZ WDySijWfw4n6cRzg3FarTe9a4bl1dPBDD02PHRmqfIVuybc3v1s4ag8viOu2axMI oqVK6U6WhRDyepnMq12lxNA4BqHdN2tqM7+jOuPnN+pegbYk0FU7mN33++aGPRVu xiBMpKto/wVuf0GCjawnfszt4ks2osxR922oyTTJwG0rQ6h8g7eXpNW7axCskH90 zVmDh6acuExFK0QKOUAmiIF+Im0sVXSXB2rGiePj7vSVIw6i6ED05Wjm7g1AEiEX gtZpoMMn5ICCn0diGpTjdXMJ1xqtSEw3DDcZQYOTJJz3OW9/Eh0c19yH9FV5sYrT UJdvVThx01qH0Q== -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:58 2026 by rpki-client