This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft File: ITyyohgafTb0DkF1jWJ_cBpgIEI.mft (raw, json) Hash identifier: JnD5jBwL/9pK5mc1OyBeKlDtSyp72hGLGJyC+CYU2rQ= Subject key identifier: 9C:8B:88:B0:BE:0D:75:C3:A0:63:ED:43:DC:01:EE:F5:C7:82:99:2C Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42 Certificate issuer: /CN=213cb2a2181a7d36f40e41758d627f701a602042 Certificate serial: 019BF53E8371F619ACEFD35BB2F9D4636FD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft Manifest number: 06E6 Signing time: Sun 25 Jan 2026 13:01:13 +0000 Manifest this update: Sun 25 Jan 2026 13:01:13 +0000 Manifest next update: Mon 26 Jan 2026 13:01:13 +0000 Files and hashes: 1: ITyyohgafTb0DkF1jWJ_cBpgIEI.crl (hash: 9itj0tKuEvGtOWzle5dM1vTRRUfNsxLuEfRN7j8fDD4=) 2: t6rzb9V4CtqE19d3fvrivglZ8JY.roa (hash: 4D9YdlVLAXYceYahdSlYP72+fLVK34lQxVM5oI1tuvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:83:71:f6:19:ac:ef:d3:5b:b2:f9:d4:63:6f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042 Validity Not Before: Jan 25 13:01:13 2026 GMT Not After : Jan 26 13:01:13 2026 GMT Subject: CN=9c8b88b0be0d75c3a063ed43dc01eef5c782992c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0b:12:ec:10:8d:3f:16:f6:f9:fb:1b:92:7a: bf:42:b8:a7:73:76:fc:a6:30:8f:c2:3d:6f:85:0c: be:b9:c4:a2:42:1e:eb:1e:1c:ec:a1:29:05:42:2c: 9d:ff:6f:ac:0f:2b:52:dc:98:ca:a8:16:fc:c4:23: 4d:01:2e:3e:c7:7d:0a:f4:a1:6c:7f:1b:ba:44:a0: 7d:99:94:05:05:51:05:84:3c:e9:6f:5e:59:df:ea: 0d:12:73:70:ed:5a:f1:81:27:fc:ac:3c:32:3f:56: af:13:59:37:ac:a3:89:37:e9:08:8a:bc:68:ec:0b: 30:5c:6e:9b:e2:9d:99:c9:2b:0d:1e:70:63:fa:52: bd:8e:22:7c:d0:78:1b:f6:0a:1d:10:15:60:47:91: 13:e5:eb:8f:d5:b0:7e:81:0b:14:58:6c:a1:10:e7: 9a:f3:4b:6a:37:4b:b9:1f:86:5f:5e:ab:44:e5:d0: e8:80:a3:c5:42:b0:7c:53:26:dd:1d:89:95:c3:ab: 31:25:51:26:0e:58:46:2b:db:27:92:41:82:75:92: a5:ae:0c:8d:2a:66:cb:7b:c4:f9:73:45:6b:83:6c: 41:12:e2:cc:37:2a:52:7d:f4:f9:13:64:0e:0c:6f: 66:1f:9d:f1:62:d0:e9:a0:0d:ad:36:ea:4b:f8:88: 05:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8B:88:B0:BE:0D:75:C3:A0:63:ED:43:DC:01:EE:F5:C7:82:99:2C X509v3 Authority Key Identifier: keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:60:e9:6e:95:e2:ca:a9:0d:1e:dc:6a:24:58:55:1a:5e:f6: 0f:97:27:68:e8:05:7c:87:a7:69:4e:5d:57:89:99:a6:57:35: 92:76:f4:d8:f8:dd:66:68:9b:cc:64:0b:24:8c:96:8e:19:8f: 4a:b6:ac:6c:cc:4b:9f:ae:99:ba:68:7b:63:e2:71:5a:eb:27: 65:00:ee:d5:24:99:12:3f:5a:6e:a4:54:d3:69:f9:3b:a0:3b: 42:45:43:07:94:f1:6f:26:42:57:c8:3b:af:12:88:f1:e8:36: cc:87:e9:3a:4f:90:3a:9a:61:67:e9:0f:a5:85:d2:00:5f:bf: 65:0f:f6:bc:5d:c0:84:9a:32:dc:1a:bf:67:69:59:36:8d:74: 90:4e:dc:be:3f:7d:64:c4:2f:03:4b:9b:62:87:1c:c9:47:a4: 3f:70:8a:24:3b:36:b3:dc:99:0a:a3:57:1f:89:ab:d8:17:a9: f5:df:54:f7:c5:4a:ba:db:dc:f5:1d:05:76:47:f3:be:c0:fd: ad:85:d4:70:4d:8f:49:57:f5:13:37:75:5c:19:5b:e6:cb:08: 9e:df:3f:27:e4:4d:dc:0f:41:fa:6f:39:0f:11:e7:56:04:fe: c5:17:17:44:4e:9f:9c:25:68:d2:98:09:f6:54:d8:32:5b:0e: d6:e7:2f:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PoNx9hms79NbsvnUY2/YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxM2NiMmEyMTgxYTdkMzZmNDBlNDE3NThkNjI3ZjcwMWE2 MDIwNDIwHhcNMjYwMTI1MTMwMTEzWhcNMjYwMTI2MTMwMTEzWjAzMTEwLwYDVQQD Eyg5YzhiODhiMGJlMGQ3NWMzYTA2M2VkNDNkYzAxZWVmNWM3ODI5OTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAsS7BCNPxb2+fsbknq/Qrinc3b8 pjCPwj1vhQy+ucSiQh7rHhzsoSkFQiyd/2+sDytS3JjKqBb8xCNNAS4+x30K9KFs fxu6RKB9mZQFBVEFhDzpb15Z3+oNEnNw7VrxgSf8rDwyP1avE1k3rKOJN+kIirxo 7AswXG6b4p2ZySsNHnBj+lK9jiJ80Hgb9godEBVgR5ET5euP1bB+gQsUWGyhEOea 80tqN0u5H4ZfXqtE5dDogKPFQrB8UybdHYmVw6sxJVEmDlhGK9snkkGCdZKlrgyN KmbLe8T5c0Vrg2xBEuLMNypSffT5E2QODG9mH53xYtDpoA2tNupL+IgF6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyLiLC+DXXDoGPtQ9wB7vXHgpksMB8GA1UdIwQY MBaAFCE8sqIYGn029A5BdY1if3AaYCBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVR5eW9oZ2FmVGIwRGtGMWpXSl9jQnBnSUVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kYzExZDYtNGMzNS00ZGFhLWE3ZGUt M2U1MWJjZDE0NzM2LzEvSVR5eW9oZ2FmVGIwRGtGMWpXSl9jQnBnSUVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kYzExZDYtNGMzNS00ZGFhLWE3ZGUtM2U1MWJjZDE0NzM2 LzEvSVR5eW9oZ2FmVGIwRGtGMWpXSl9jQnBnSUVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2DpbpXi yqkNHtxqJFhVGl72D5cnaOgFfIenaU5dV4mZplc1knb02PjdZmibzGQLJIyWjhmP SrasbMxLn66Zumh7Y+JxWusnZQDu1SSZEj9abqRU02n5O6A7QkVDB5TxbyZCV8g7 rxKI8eg2zIfpOk+QOpphZ+kPpYXSAF+/ZQ/2vF3AhJoy3Bq/Z2lZNo10kE7cvj99 ZMQvA0ubYoccyUekP3CKJDs2s9yZCqNXH4mr2Bep9d9U98VKutvc9R0FdkfzvsD9 rYXUcE2PSVf1Ezd1XBlb5ssInt8/J+RN3A9B+m85DxHnVgT+xRcXRE6fnCVo0pgJ 9lTYMlsO1ucvag== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:18 2026 by rpki-client