This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft File: Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft (raw, json) Hash identifier: S6sYrrOWRuOHlniN/Ah0Dm+7MVafnnAHwsylKk/Bczk= Subject key identifier: DC:0D:9C:3F:86:22:16:2C:63:01:06:29:B6:55:02:73:63:A8:99:6E Authority key identifier: 22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98 Certificate issuer: /CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398 Certificate serial: 019BF53E2BFE05D398F57A99B9E037698BAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft Manifest number: 0ED2 Signing time: Sun 25 Jan 2026 13:00:50 +0000 Manifest this update: Sun 25 Jan 2026 13:00:50 +0000 Manifest next update: Mon 26 Jan 2026 13:00:50 +0000 Files and hashes: 1: Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl (hash: 1jXhLOtx3jYnu89ToIRHmfUWITu45dLCoIORIAG3dao=) 2: R843p-38WteuOkSHzbf3qrehiDw.roa (hash: lL8mH/XViDvpJ3MkMI6sLi0P2Yyq2Vj6DtB1Dgsh4+g=) 3: lz_WC5uJeICfjQzpAPaUtpnLmOE.roa (hash: RYYydhlLpv7/DuyZEPW9/qv3fOSivSmlz/esgSVQG5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:2b:fe:05:d3:98:f5:7a:99:b9:e0:37:69:8b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398 Validity Not Before: Jan 25 13:00:50 2026 GMT Not After : Jan 26 13:00:50 2026 GMT Subject: CN=dc0d9c3f8622162c63010629b655027363a8996e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1e:d5:a5:8e:ea:d4:d4:85:cd:a5:ae:94:d8: 30:e7:8a:cf:32:27:d6:0e:dc:af:51:05:da:90:cf: 5b:33:54:59:7a:c1:39:56:c5:bf:01:61:1b:c1:bf: be:88:f7:03:2c:fc:d6:8a:66:8f:e0:62:ca:0e:79: c4:e0:3e:44:c1:0c:8f:c7:d6:d3:4e:a1:9f:97:3b: 6d:1e:79:70:10:b5:69:3b:36:c2:37:0b:43:ff:4c: 0f:d7:8b:41:fa:8c:95:68:57:43:b1:32:4d:90:9b: 79:53:ad:37:b2:80:b4:00:79:92:47:4d:4c:69:b9: a6:d3:ee:99:5a:00:69:72:08:9d:c4:96:d1:53:37: 4b:2b:32:c9:f8:fd:bc:62:97:76:aa:86:c5:2e:f1: 25:f4:58:e4:c0:11:66:64:03:a4:86:75:3b:17:80: 47:f9:d9:78:14:e6:d4:49:74:cb:09:b1:95:f7:66: 96:b3:9b:62:da:90:37:ae:39:3a:c4:c9:19:7d:1c: 9d:8f:88:ed:fb:7a:43:76:c7:02:ff:34:9a:59:13: 0e:18:19:d8:21:d3:f4:c3:fe:08:7e:16:00:ac:c8: db:9f:5c:92:b3:ac:1c:24:bb:f0:4a:fd:1e:7c:48: 76:6d:cc:a9:47:fb:22:f0:bd:09:4d:7b:7a:1c:1b: 57:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0D:9C:3F:86:22:16:2C:63:01:06:29:B6:55:02:73:63:A8:99:6E X509v3 Authority Key Identifier: keyid:22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:57:c3:5b:80:43:b3:d1:0e:d7:5c:b4:66:f6:b3:e8:57:5e: 92:a7:fc:59:44:f2:b6:8d:fb:04:53:62:60:e5:31:df:0a:45: 62:be:de:8b:cd:c7:e7:8d:d3:76:8d:fd:e4:0e:ca:a0:45:9b: e4:00:ab:76:6c:e6:87:9e:7a:cb:dd:ba:37:71:ab:f8:eb:47: 33:dc:78:f8:da:a9:ea:b1:36:1b:1e:5f:ab:55:e7:52:25:1f: b8:53:82:0f:b3:84:74:4d:d4:5a:f8:bb:5a:45:e1:ff:c3:63: f1:b1:17:35:9c:ac:bd:12:6b:cc:17:df:f4:94:e4:64:1e:2b: 2a:c0:16:77:b8:92:8e:fb:a7:a8:71:49:66:c0:45:72:32:b5: fe:9a:be:2e:b5:4d:1b:27:00:a9:0b:e0:5c:d8:96:58:a2:6e: 5d:70:e9:0f:1c:f5:27:87:08:db:d3:53:a5:7d:b4:6a:d1:d9: 27:24:ee:ac:52:ba:a1:e8:44:c3:dc:2f:6c:66:31:cb:29:50: 1c:ac:75:11:91:37:5d:b2:02:b8:af:bd:c8:14:4c:a9:11:b8: f6:d5:68:c0:53:4e:78:1b:44:af:b5:9d:02:0d:50:cf:d8:7b: 75:d0:82:69:b4:70:e8:07:2e:4f:66:13:d0:13:9b:e4:84:4a: bb:07:ac:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Piv+BdOY9XqZueA3aYuqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZmQxYjU5ZDVjYWFmNzUwNmJjMGQ1YzM0ZjMwYzIxNTli MDQzOTgwHhcNMjYwMTI1MTMwMDUwWhcNMjYwMTI2MTMwMDUwWjAzMTEwLwYDVQQD EyhkYzBkOWMzZjg2MjIxNjJjNjMwMTA2MjliNjU1MDI3MzYzYTg5OTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R7VpY7q1NSFzaWulNgw54rPMifW DtyvUQXakM9bM1RZesE5VsW/AWEbwb++iPcDLPzWimaP4GLKDnnE4D5EwQyPx9bT TqGflzttHnlwELVpOzbCNwtD/0wP14tB+oyVaFdDsTJNkJt5U603soC0AHmSR01M abmm0+6ZWgBpcgidxJbRUzdLKzLJ+P28Ypd2qobFLvEl9FjkwBFmZAOkhnU7F4BH +dl4FObUSXTLCbGV92aWs5ti2pA3rjk6xMkZfRydj4jt+3pDdscC/zSaWRMOGBnY IdP0w/4IfhYArMjbn1ySs6wcJLvwSv0efEh2bcypR/si8L0JTXt6HBtXFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwNnD+GIhYsYwEGKbZVAnNjqJluMB8GA1UdIwQY MBaAFCL9G1nVyq91BrwNXDTzDCFZsEOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXYwYldkWEtyM1VHdkExY05QTU1JVm13UTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC84NTBlOTYtMTkxZi00ZGNiLTllZGIt Y2Q1OGZhMjAxNGRkLzEvSXYwYldkWEtyM1VHdkExY05QTU1JVm13UTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC84NTBlOTYtMTkxZi00ZGNiLTllZGItY2Q1OGZhMjAxNGRk LzEvSXYwYldkWEtyM1VHdkExY05QTU1JVm13UTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuVfDW4BD s9EO11y0Zvaz6Fdekqf8WUTyto37BFNiYOUx3wpFYr7ei83H543Tdo395A7KoEWb 5ACrdmzmh556y926N3Gr+OtHM9x4+Nqp6rE2Gx5fq1XnUiUfuFOCD7OEdE3UWvi7 WkXh/8Nj8bEXNZysvRJrzBff9JTkZB4rKsAWd7iSjvunqHFJZsBFcjK1/pq+LrVN GycAqQvgXNiWWKJuXXDpDxz1J4cI29NTpX20atHZJyTurFK6oehEw9wvbGYxyylQ HKx1EZE3XbICuK+9yBRMqRG49tVowFNOeBtEr7WdAg1Qz9h7ddCCabRw6AcuT2YT 0BOb5IRKuwesog== -----END CERTIFICATE-----Generated at Sun Jan 25 20:08:28 2026 by rpki-client