This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: ytAtc6LiNBnIdpxMJ0pg8dPQdValxgUhX7785lTdnC0= Subject key identifier: 07:7A:9B:5B:68:DC:BF:81:C4:46:A4:CA:B2:4B:50:D5:85:5E:09:19 Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 019BF3501EAB1668762454E06722DF5249AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 17DC Signing time: Sun 25 Jan 2026 04:01:12 +0000 Manifest this update: Sun 25 Jan 2026 04:01:12 +0000 Manifest next update: Mon 26 Jan 2026 04:01:12 +0000 Files and hashes: 1: 16Y1yxGLE6UIufa5rH9U3RXAvAs.roa (hash: hVmSptnLaPbenQ9xb8iMn2l1+6sGRbct+J+Pmp6z9tk=) 2: F4LdvSuBLKoy58NMp2qP4-TZx2U.roa (hash: BFVQu+JaHlGGz8F88qjrXCmVUp4qOhDziCZpUN8E7E0=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: 5dGOJ4Jmtv2PHpRiDlTTVmUWM3wET1MjsXBL8pZYkFE=) 4: ODJrKCxhZJXL46-GyJpCGE1A_QM.roa (hash: +3sffUArpiGjIESwpid7XyaHYYYvbrxKYnkoG38bS64=) 5: SX9U68Arj-_uoekiWex6QgdNbwQ.roa (hash: joN8VUGdRybF07eLYHwoTuABQ2kur7JqOJpxlpvlHks=) 6: WjbQcTlDKpaAfqXkZDDiOvmh4dY.roa (hash: BUe0stMaaOWFp6WiIn+aiGaAl/vpI8FjtrNGbrBCxE0=) 7: gEhVWWVbCAuop-zcWZ0zv4pjLxE.roa (hash: xokrZ815d4gYLrLWpgPe6s/SM+gm8TEbsLKu7jgKc28=) 8: gGeNvgahudXxUPNz9yBFk3kYHS4.roa (hash: 8c8Cgq9i3zCtWdYo/SCuVm2tnZ6RLv62A6IykYPbs7Y=) 9: jLaFsD-7kv57uS82Ky9IjH2qI7s.roa (hash: GKSCCv4N+IaXAABFBigYWinS7vfCaNGsxXry11fPlQE=) 10: y1YWxB7Fy5s5YzamhDItkot32uM.roa (hash: 8TggUtk0Rbk0S6hBWI88A8FYg1Cv2yGjFHoHN2htAJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:1e:ab:16:68:76:24:54:e0:67:22:df:52:49:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Jan 25 04:01:12 2026 GMT Not After : Jan 26 04:01:12 2026 GMT Subject: CN=077a9b5b68dcbf81c446a4cab24b50d5855e0919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:09:34:e8:18:6f:a0:86:0d:ca:02:91:52:c7: b3:aa:ed:58:bf:79:fb:5d:a4:32:c7:50:2e:ce:75: ef:53:e5:6e:1b:2e:a2:78:cb:36:ac:ba:7c:96:1b: 09:6f:be:02:f2:98:74:0e:82:75:ef:1d:ec:0b:44: 76:bb:5a:96:04:f4:5e:3c:a9:21:19:e8:11:a8:9d: bb:15:b5:4d:ed:ed:85:b6:de:75:b0:46:c6:e0:48: f4:35:15:8b:3c:a7:40:68:0e:a6:d6:a8:e3:66:a1: 5a:21:b9:4a:d5:7a:b8:8e:1d:38:a9:b1:64:52:0d: 05:26:38:7e:ae:fd:d2:be:aa:35:0b:b7:59:0d:d5: 41:51:5a:ed:f9:53:06:d3:26:7d:94:ee:c6:28:1d: 95:dc:e9:25:07:af:d1:e5:32:2c:8d:0c:44:c2:86: d2:1a:87:a9:94:9b:16:6f:71:76:f7:0b:8b:cf:e2: 2a:d1:d7:f4:f3:65:06:fe:26:dc:bd:d9:c9:34:db: 2d:5a:da:31:79:f3:2c:07:fe:d1:54:bd:20:a9:96: b1:b0:c3:9e:ed:88:52:79:58:ac:4e:ea:8a:44:a0: ec:e8:f5:ee:be:21:8c:ec:e7:68:df:04:08:75:08: 7a:e3:1f:3b:43:43:1f:2c:7e:f0:c0:2f:27:de:64: 7b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7A:9B:5B:68:DC:BF:81:C4:46:A4:CA:B2:4B:50:D5:85:5E:09:19 X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:dc:d5:06:4f:4f:e6:b8:32:37:fc:7c:17:2b:2f:c0:5a:0e: b6:74:59:53:9a:32:62:5b:96:b2:81:64:2d:b3:78:bd:1f:35: 74:7c:32:f1:bb:0b:93:1c:af:50:16:70:56:31:bc:67:48:80: 2c:94:ea:95:f8:19:db:3b:c6:a1:cc:bd:e3:97:5f:91:6d:9b: 5a:6b:a4:5e:4a:53:48:f1:0b:5f:be:5a:74:ee:93:05:17:ed: e8:2b:8e:3d:83:15:ab:99:05:51:19:93:64:89:fc:92:0c:7b: 19:fc:1d:f7:e7:66:71:76:a3:8b:94:2f:5d:74:66:a1:ed:3e: 13:ba:d7:46:f5:d1:6d:e1:38:98:6e:b8:ad:18:ba:24:89:fa: f7:ae:27:09:1e:df:49:b9:e7:46:8c:57:17:93:07:9d:cf:39: 91:1f:a9:c6:1b:bc:e1:03:cb:0b:26:e4:b1:5f:c7:4c:49:ed: 53:28:f3:40:6e:1a:37:72:d2:c6:64:dd:fa:e3:19:a2:03:df: 2e:73:2a:51:38:65:a2:a9:79:c0:2f:f3:2f:1f:6a:1c:3d:ad: b8:a8:0b:2f:01:65:c2:27:f1:e6:a7:7e:9d:ff:18:6a:45:b7: ac:1f:35:08:99:b2:85:43:9e:e5:dc:7f:3c:5c:c9:dd:ca:b2: 2c:f4:96:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUB6rFmh2JFTgZyLfUkmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjYwMTI1MDQwMTEyWhcNMjYwMTI2MDQwMTEyWjAzMTEwLwYDVQQD EygwNzdhOWI1YjY4ZGNiZjgxYzQ0NmE0Y2FiMjRiNTBkNTg1NWUwOTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQk06BhvoIYNygKRUsezqu1Yv3n7 XaQyx1AuznXvU+VuGy6ieMs2rLp8lhsJb74C8ph0DoJ17x3sC0R2u1qWBPRePKkh GegRqJ27FbVN7e2Ftt51sEbG4Ej0NRWLPKdAaA6m1qjjZqFaIblK1Xq4jh04qbFk Ug0FJjh+rv3Svqo1C7dZDdVBUVrt+VMG0yZ9lO7GKB2V3OklB6/R5TIsjQxEwobS GoeplJsWb3F29wuLz+Iq0df082UG/ibcvdnJNNstWtoxefMsB/7RVL0gqZaxsMOe 7YhSeVisTuqKRKDs6PXuviGM7Odo3wQIdQh64x87Q0MfLH7wwC8n3mR70wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAd6m1to3L+BxEakyrJLUNWFXgkZMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtzVBk9P 5rgyN/x8FysvwFoOtnRZU5oyYluWsoFkLbN4vR81dHwy8bsLkxyvUBZwVjG8Z0iA LJTqlfgZ2zvGocy945dfkW2bWmukXkpTSPELX75adO6TBRft6CuOPYMVq5kFURmT ZIn8kgx7Gfwd9+dmcXaji5QvXXRmoe0+E7rXRvXRbeE4mG64rRi6JIn6964nCR7f SbnnRoxXF5MHnc85kR+pxhu84QPLCybksV/HTEntUyjzQG4aN3LSxmTd+uMZogPf LnMqUThloql5wC/zLx9qHD2tuKgLLwFlwifx5qd+nf8YakW3rB81CJmyhUOe5dx/ PFzJ3cqyLPSWFw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:45:30 2026 by rpki-client