This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft File: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft (raw, json) Hash identifier: FMSQzdnbFCkAbLWTXCCcl5xY93mORHgYh7/92a7gbxM= Subject key identifier: 36:82:F8:5D:38:48:D8:16:9C:4A:85:71:F6:41:E5:EF:E8:7D:A9:09 Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Certificate serial: 019BF7D24412EE1AB9D5E461C62967AE0995 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft Manifest number: 17F3 Signing time: Mon 26 Jan 2026 01:01:50 +0000 Manifest this update: Mon 26 Jan 2026 01:01:50 +0000 Manifest next update: Tue 27 Jan 2026 01:01:50 +0000 Files and hashes: 1: BNGMVvTZ1XawSMPOVaywEKgFz8w.roa (hash: WMt9Jn62xWAvsFJt6BLgLhIXnUKvtSHXK/jsLiQ9wc0=) 2: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl (hash: 9yYoqqUsDiIeOpDKQlQQXeHzFOopdA/PsH5x+fLxquU=) 3: J_k_uJydXhJKkAPBLn_Xr9EpYmw.roa (hash: bMaFsCf1Hj+guhXQdkk7ZJ24ZgANPSnkOncPj3CW1pQ=) 4: S9D_ZvZP7Y2SyyqdAWt1mGxtagE.roa (hash: hH6PHrAp3gX28fWUuJtWpjV+rB9bYio8w3wI6R4XHQI=) 5: YPhzzBUAAD8W6PxdQ8Eo6J_1Xlo.roa (hash: QJjVxTN7Kd8ed1QYD92fFHesTbkRe6gyeZIi3S6D0so=) 6: Z8UyJlJrz_tPx2Lzi2wtF6sRSoY.roa (hash: pZEmU7QBOi+LmI67NMxNilqE5KRHfsee+sRCVmykeWE=) 7: gw26QBwPzQF9bT3yyu20z1tgJyk.roa (hash: iuHp19gpWORmcmt7JfC/koJtOp0jpGQxA/LoBFKsFao=) 8: mdj55pZO6nRDbpPFsXBoK-GkNU8.roa (hash: JU7FZwf7hl0KcJAATQ/by5oF+/xX9ntEZw2LOkX+3S0=) 9: n70k782e6Gxq_-Hc2YO_idjOcAs.roa (hash: 9xPDUcAeeZeb+V1tJdiN4n6+fuVQh1F2hwH4+x4MOiQ=) 10: pX4-zHrOaGGZmLrFodKOqsDRVt8.roa (hash: oNNoPaGL9tiGcsnmh6pVkfSYR8zyTqJrDL9WChZzfdA=) 11: vqLY8AJRdwBNZp1vMAKBzj7hYMk.roa (hash: QScIVVTzvA87+g4pWqcXEROo6Uo1IppOyeJM8oSgj8s=) 12: xgHR7y7J0aGtYD0R9jhr6WJbZm8.roa (hash: CHXV05nQbB5KxwYkctbAeeyJMsjXN6ysG0w+cPnzH+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:44:12:ee:1a:b9:d5:e4:61:c6:29:67:ae:09:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Validity Not Before: Jan 26 01:01:50 2026 GMT Not After : Jan 27 01:01:50 2026 GMT Subject: CN=3682f85d3848d8169c4a8571f641e5efe87da909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:35:cf:83:d7:18:ca:ca:48:06:2a:65:4a:3f: ca:62:7b:7e:91:a9:0a:5b:29:8b:60:e5:65:5d:af: 0d:a4:8c:a0:e2:8d:e6:56:89:bd:16:11:b8:b4:0f: 48:29:6a:15:98:64:78:03:af:04:a1:a8:aa:2a:ea: de:1e:af:34:67:3d:f3:33:1e:77:50:1a:0b:45:f3: dd:20:7a:5d:0b:ed:d5:24:9e:da:b8:98:9d:56:b3: 9e:91:b4:17:8b:36:9b:f7:95:3d:96:1d:b7:21:93: aa:e3:4f:49:01:6f:74:34:73:d4:b8:b2:c0:df:96: 41:ed:15:dc:f8:d8:b1:2d:c5:81:41:2d:64:e7:89: 72:f0:69:80:43:e4:08:c0:bf:a4:f2:63:fe:1b:58: 64:62:55:fa:0b:7c:71:78:d0:37:c0:2e:27:20:47: c3:cb:3f:48:c7:04:6c:70:fd:17:77:fd:84:a3:0e: 52:ac:26:20:f3:91:98:cc:ca:cf:d7:d9:50:34:4e: e5:d7:e2:35:43:34:70:ab:39:fa:4e:f7:88:88:bc: 31:5d:47:98:ea:e4:ea:3c:61:80:8f:7a:0e:5b:d6: 0d:55:62:9a:67:18:0a:15:c7:73:55:0d:fa:62:1a: 91:fe:eb:e3:6b:26:98:db:10:48:dc:25:99:d4:b3: 48:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:82:F8:5D:38:48:D8:16:9C:4A:85:71:F6:41:E5:EF:E8:7D:A9:09 X509v3 Authority Key Identifier: keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:2b:1f:ff:b2:7d:d7:f4:28:ff:6d:6c:55:6b:a1:d3:5c:71: 8e:4e:bb:a9:1e:6d:ca:fc:98:92:0d:cf:c0:60:6d:20:d1:2b: 2c:fc:4e:96:16:65:10:d6:06:16:02:94:d7:a2:dc:0d:a8:62: 96:70:32:1a:a0:a0:c9:6f:27:5d:02:2a:db:e3:cb:d2:08:34: 77:fd:9a:79:ef:69:18:9a:58:8d:64:95:92:16:fa:24:a2:5c: 3c:97:a7:51:b1:cb:21:df:cc:cf:1b:b5:e0:98:89:99:3c:36: c7:a0:e4:af:fb:4d:a2:64:ef:ea:ab:ae:ba:01:03:2c:32:fd: d0:cd:ee:32:24:d2:6d:ab:bd:d2:80:52:a4:ee:e1:1c:4f:da: 63:70:ff:bc:b8:4a:c3:54:86:c3:b6:76:cb:f6:eb:b8:33:7f: 65:d5:db:2b:83:46:a0:b9:6d:24:8a:c8:b1:33:13:19:76:17: 4c:23:89:1e:de:76:a5:93:51:31:b7:25:c9:5a:83:75:4e:67: d6:14:66:28:50:6b:6f:c0:03:0a:ff:79:c5:b4:7a:cf:e8:cd: 54:af:1c:e6:e0:4c:34:aa:4c:18:59:b9:06:71:5f:db:f6:84: 2c:5d:ce:7e:ac:7f:63:cd:03:ac:9b:ce:af:7b:fc:83:b5:cb: b1:33:40:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30kQS7hq51eRhxilnrgmVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj ZmQwNjIwHhcNMjYwMTI2MDEwMTUwWhcNMjYwMTI3MDEwMTUwWjAzMTEwLwYDVQQD EygzNjgyZjg1ZDM4NDhkODE2OWM0YTg1NzFmNjQxZTVlZmU4N2RhOTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDXPg9cYyspIBiplSj/KYnt+kakK WymLYOVlXa8NpIyg4o3mVom9FhG4tA9IKWoVmGR4A68EoaiqKureHq80Zz3zMx53 UBoLRfPdIHpdC+3VJJ7auJidVrOekbQXizab95U9lh23IZOq409JAW90NHPUuLLA 35ZB7RXc+NixLcWBQS1k54ly8GmAQ+QIwL+k8mP+G1hkYlX6C3xxeNA3wC4nIEfD yz9IxwRscP0Xd/2Eow5SrCYg85GYzMrP19lQNE7l1+I1QzRwqzn6TveIiLwxXUeY 6uTqPGGAj3oOW9YNVWKaZxgKFcdzVQ36YhqR/uvjayaY2xBI3CWZ1LNIQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaC+F04SNgWnEqFcfZB5e/ofakJMB8GA1UdIwQY MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt NjU0ZGQ2NDQyY2U0LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0 LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVysf/7J9 1/Qo/21sVWuh01xxjk67qR5tyvyYkg3PwGBtINErLPxOlhZlENYGFgKU16LcDahi lnAyGqCgyW8nXQIq2+PL0gg0d/2aee9pGJpYjWSVkhb6JKJcPJenUbHLId/Mzxu1 4JiJmTw2x6Dkr/tNomTv6quuugEDLDL90M3uMiTSbau90oBSpO7hHE/aY3D/vLhK w1SGw7Z2y/bruDN/ZdXbK4NGoLltJIrIsTMTGXYXTCOJHt52pZNRMbclyVqDdU5n 1hRmKFBrb8ADCv95xbR6z+jNVK8c5uBMNKpMGFm5BnFf2/aELF3Ofqx/Y80DrJvO r3v8g7XLsTNA7w== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:56 2026 by rpki-client