This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft File: I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft (raw, json) Hash identifier: YszCAMOId+oDrKWWcNpTqFGTeD2ZqNHLpZWOUNiC31o= Subject key identifier: 83:8E:E1:8B:5E:D3:E6:32:0A:4E:84:05:F0:78:E6:0D:CF:DD:AC:4A Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A Certificate issuer: /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a Certificate serial: 019BF650AA0748D75B61FB12EF07C475D4CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft Manifest number: 04E2 Signing time: Sun 25 Jan 2026 18:00:39 +0000 Manifest this update: Sun 25 Jan 2026 18:00:39 +0000 Manifest next update: Mon 26 Jan 2026 18:00:39 +0000 Files and hashes: 1: DLPawj2OgKUwkgMYVqxK640ZM5M.roa (hash: j4U5ZtGc0iAMwMjKy2gODe5wP1RecXvOyD9/RnVr/+s=) 2: I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl (hash: U4b94Atl0YJJa6JlzJpjtrR9Bb+0VqZPtOTVgonrqUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:aa:07:48:d7:5b:61:fb:12:ef:07:c4:75:d4:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a Validity Not Before: Jan 25 18:00:39 2026 GMT Not After : Jan 26 18:00:39 2026 GMT Subject: CN=838ee18b5ed3e6320a4e8405f078e60dcfddac4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2e:e0:4b:d7:4d:b3:8a:a8:d0:d4:76:40:de: 65:f6:bc:b4:40:9c:9e:47:47:ae:1c:eb:31:3b:44: 1e:90:71:96:17:e1:e4:73:97:ad:b2:dc:65:09:96: a0:fc:a9:96:2a:18:a7:e8:a7:05:05:08:80:00:f5: 1f:07:df:29:89:df:f4:14:bb:13:b9:ae:1e:61:c9: 32:09:7e:11:74:d9:1e:03:e3:77:01:e8:c1:0d:1a: 3b:91:e4:cd:65:bd:05:d7:3e:9c:62:84:1e:0f:4b: 67:8b:de:8b:38:c1:ba:be:8c:d7:cb:bb:19:74:96: 2a:2d:58:f8:e1:a4:1e:cf:c6:f9:d5:6e:28:eb:e4: 4a:3e:48:ac:4b:5d:70:f5:3b:8f:27:40:84:e1:c6: c9:0d:95:7e:5b:82:aa:e0:ed:a3:f8:e7:d2:82:d0: 0f:f9:05:3d:dc:ac:7c:91:71:1a:79:1b:83:d2:91: fc:ab:73:9d:96:bc:f2:e2:48:60:5a:9a:2c:57:34: 1b:75:3b:bf:e3:7d:b5:ff:8b:bd:a3:cb:3d:d5:48: 9e:d9:b9:a1:08:e7:e4:c9:59:02:77:c7:5f:b4:af: 65:37:3d:47:96:f4:c3:74:c1:83:2b:b4:36:22:7a: 04:06:b6:c7:08:b7:c0:ff:a5:76:2e:0d:43:85:4d: 09:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8E:E1:8B:5E:D3:E6:32:0A:4E:84:05:F0:78:E6:0D:CF:DD:AC:4A X509v3 Authority Key Identifier: keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:de:58:6e:0a:68:f6:f2:aa:77:d3:d5:e7:a9:95:ca:41:2e: de:b8:07:ec:49:66:40:5d:12:77:c8:f0:4c:a3:19:63:51:77: 93:fd:ba:63:66:97:2b:23:6b:cc:ef:7d:47:60:91:5a:73:fc: 6f:8c:ee:41:de:87:60:b9:c5:04:3a:93:76:24:e7:bf:8e:cd: 22:09:71:56:3e:1d:9f:09:59:34:6f:6a:2e:e6:42:21:9e:b1: a1:4d:9b:38:97:7c:65:dc:a0:df:48:11:4a:5b:1e:bc:b4:76: a7:f6:68:4e:ba:39:8b:b2:82:66:bc:db:70:0e:91:57:07:aa: f0:23:96:f6:30:8d:d1:70:a2:53:a4:2b:86:f4:58:27:06:a6: 33:b5:d8:2e:66:16:2c:6b:17:97:79:00:fb:69:c1:4b:69:30: 9b:4b:a7:bc:f1:11:dd:d9:7e:9c:16:28:ef:c4:d1:2c:c0:0a: a2:23:ae:26:69:40:af:16:d7:08:55:7f:25:1a:16:f9:5f:a5: 92:92:d4:c0:45:2b:ae:f8:82:8f:91:e9:d0:67:c9:68:6c:ed: 0e:d8:db:48:75:5b:62:69:0a:42:02:57:4f:ff:b8:9f:75:bc: 50:ba:67:9b:fd:cd:68:ac:f4:b0:0b:a7:3c:77:d7:c0:5a:a6: 24:6b:8d:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UKoHSNdbYfsS7wfEddTNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYTk4NjdlYTYwM2ZjOGNmOTJiYjViYWM2ZjI1NTcxMGUz YmYzNmEwHhcNMjYwMTI1MTgwMDM5WhcNMjYwMTI2MTgwMDM5WjAzMTEwLwYDVQQD Eyg4MzhlZTE4YjVlZDNlNjMyMGE0ZTg0MDVmMDc4ZTYwZGNmZGRhYzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS7gS9dNs4qo0NR2QN5l9ry0QJye R0euHOsxO0QekHGWF+Hkc5etstxlCZag/KmWKhin6KcFBQiAAPUfB98pid/0FLsT ua4eYckyCX4RdNkeA+N3AejBDRo7keTNZb0F1z6cYoQeD0tni96LOMG6vozXy7sZ dJYqLVj44aQez8b51W4o6+RKPkisS11w9TuPJ0CE4cbJDZV+W4Kq4O2j+OfSgtAP +QU93Kx8kXEaeRuD0pH8q3Odlrzy4khgWposVzQbdTu/4321/4u9o8s91Uie2bmh COfkyVkCd8dftK9lNz1HlvTDdMGDK7Q2InoEBrbHCLfA/6V2Lg1DhU0JewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOO4Yte0+YyCk6EBfB45g3P3axKMB8GA1UdIwQY MBaAFCOphn6mA/yM+Su1usbyVXEOO/NqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZWNlNWItMzYwZi00YmU0LWFhNjEt NTk0YTI3ZGIxNDZiLzEvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi82ZWNlNWItMzYwZi00YmU0LWFhNjEtNTk0YTI3ZGIxNDZi LzEvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGt5Ybgpo 9vKqd9PV56mVykEu3rgH7ElmQF0Sd8jwTKMZY1F3k/26Y2aXKyNrzO99R2CRWnP8 b4zuQd6HYLnFBDqTdiTnv47NIglxVj4dnwlZNG9qLuZCIZ6xoU2bOJd8Zdyg30gR SlsevLR2p/ZoTro5i7KCZrzbcA6RVweq8COW9jCN0XCiU6QrhvRYJwamM7XYLmYW LGsXl3kA+2nBS2kwm0unvPER3dl+nBYo78TRLMAKoiOuJmlArxbXCFV/JRoW+V+l kpLUwEUrrviCj5Hp0GfJaGztDtjbSHVbYmkKQgJXT/+4n3W8ULpnm/3NaKz0sAun PHfXwFqmJGuN9A== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:54 2026 by rpki-client