This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json) Hash identifier: j3bE/pBlIHAG6V65l0AUbxd4T95ZJXVhbJQcgtl1FkY= Subject key identifier: F0:02:22:6A:4D:D2:D5:1D:2D:14:BC:6A:34:02:0C:73:72:1E:E3:C5 Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac Certificate serial: 019BF72CDF604E6F2DB7536438038BB4E095 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 22:01:11 +0000 Manifest this update: Sun 25 Jan 2026 22:01:11 +0000 Manifest next update: Mon 26 Jan 2026 22:01:11 +0000 Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: 3xYu7hLE54DTH1pgnsDTPOKslYNN0jGO3IuI/SVDK1o=) 2: M7U-ppZwsd4Y0hqrg3uFvL3fNF0.roa (hash: V5ZqVNY/FzC23usoRi5oNuuG/BK57r9pMG9x1bcd1BQ=) 3: ZD6ajEH0bv8mrB6nbh6DLa6EVFo.roa (hash: mzlpti+1V/oTEeIRtH/QUHo9IeJTt/iu7YBQ2fE92aA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:df:60:4e:6f:2d:b7:53:64:38:03:8b:b4:e0:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac Validity Not Before: Jan 25 22:01:11 2026 GMT Not After : Jan 26 22:01:11 2026 GMT Subject: CN=f002226a4dd2d51d2d14bc6a34020c73721ee3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:69:d6:c6:63:c5:a7:f3:2e:5a:a3:4b:ff:59: 81:6f:4b:ef:05:6e:d7:d9:37:8b:aa:ed:04:2d:55: 5f:1c:ba:d9:cd:f7:41:df:14:85:ff:e0:bc:2d:e2: 2f:18:b5:52:36:e8:c4:e0:59:2f:42:2c:ec:6e:d1: 77:6b:d3:c4:f8:f5:2f:39:c9:44:11:23:77:30:fc: 00:8e:43:77:07:f2:c4:2e:e5:f8:ba:1b:93:4f:8a: 14:6e:3e:98:94:97:32:01:28:7f:dd:d4:e7:b4:a3: 2b:e9:88:b2:42:e9:52:e7:2a:cc:63:24:7e:78:a4: 38:ad:b3:cd:bc:a7:a4:77:d2:05:95:25:be:8e:b1: a9:80:96:a1:5f:fe:d0:09:f1:49:d2:39:a4:d7:cb: 64:96:24:9f:c5:35:39:ab:12:96:17:ec:39:a8:7f: c8:b0:c1:89:a1:5a:a6:7a:cc:c4:be:33:4e:0b:6f: 7d:d8:13:b5:7d:7e:b9:d7:7d:10:af:6e:6f:e8:de: 02:39:3a:8d:05:c5:db:62:06:ae:b0:93:a3:91:d2: b6:c5:aa:35:ac:61:74:23:9e:59:b3:89:fc:91:02: a6:c7:05:9c:58:0e:9c:36:8c:70:db:e2:6b:33:0e: 7b:e7:50:2e:41:c3:eb:a6:ee:90:5a:59:73:e2:8c: 00:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:02:22:6A:4D:D2:D5:1D:2D:14:BC:6A:34:02:0C:73:72:1E:E3:C5 X509v3 Authority Key Identifier: keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:da:5a:cc:22:a0:ed:99:a9:80:05:e1:eb:18:0d:2f:b2:03: c3:d9:70:5d:86:0e:fb:f9:95:84:27:95:04:ff:70:97:89:e0: b2:7a:9c:7b:83:0f:d3:2c:ea:27:bf:b8:58:ca:5b:c3:e0:7f: e2:5b:bc:ff:30:1e:40:83:ed:ca:46:d1:3b:e7:22:b7:9a:ed: a2:0b:d6:6f:ed:6d:25:7f:20:86:7a:37:66:10:b9:a6:73:5a: f5:2b:ee:ed:cd:8c:58:0d:41:1b:69:a2:7d:c8:60:ab:68:b1: 79:6d:32:e2:97:93:bc:a9:00:58:52:03:10:5e:39:b1:ec:83: c6:a8:47:f0:c9:00:b6:9a:0f:97:25:ad:11:1d:98:1b:fe:4d: 0a:22:24:ed:a4:1e:34:5d:83:ff:7f:b3:f0:68:84:33:4d:52: 9a:26:60:4a:c9:d4:4a:17:07:72:3f:22:48:ed:63:36:21:5a: cf:c3:46:0a:42:cc:5e:5b:b4:ad:b0:35:04:7e:84:cc:6f:27: 02:ba:a8:b0:b8:e9:e3:b5:3d:12:a1:fc:f5:d9:ed:d1:25:29: 9f:71:82:1b:03:04:3c:84:d3:b4:c3:c6:e2:f1:69:82:df:b7: 8e:4e:28:d7:03:d2:8a:25:89:da:a3:42:90:00:b0:22:c3:42: d7:8f:b9:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LN9gTm8tt1NkOAOLtOCVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyODM3MTFiZDdhYjEzZGEzZDExZjI1YmI1N2E0ZjQ4M2Mx Zjk5YWMwHhcNMjYwMTI1MjIwMTExWhcNMjYwMTI2MjIwMTExWjAzMTEwLwYDVQQD EyhmMDAyMjI2YTRkZDJkNTFkMmQxNGJjNmEzNDAyMGM3MzcyMWVlM2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGnWxmPFp/MuWqNL/1mBb0vvBW7X 2TeLqu0ELVVfHLrZzfdB3xSF/+C8LeIvGLVSNujE4FkvQizsbtF3a9PE+PUvOclE ESN3MPwAjkN3B/LELuX4uhuTT4oUbj6YlJcyASh/3dTntKMr6YiyQulS5yrMYyR+ eKQ4rbPNvKekd9IFlSW+jrGpgJahX/7QCfFJ0jmk18tkliSfxTU5qxKWF+w5qH/I sMGJoVqmeszEvjNOC2992BO1fX65130Qr25v6N4COTqNBcXbYgausJOjkdK2xao1 rGF0I55Zs4n8kQKmxwWcWA6cNoxw2+JrMw5751AuQcPrpu6QWllz4owABwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPACImpN0tUdLRS8ajQCDHNyHuPFMB8GA1UdIwQY MBaAFCKDcRvXqxPaPRHyW7V6T0g8H5msMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSW9OeEc5ZXJFOW85RWZKYnRYcFBTRHdmbWF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85Y2JlODgtM2U3NS00MmVmLWI4NzEt NWVlNzZmMGY2NGUyLzEvSW9OeEc5ZXJFOW85RWZKYnRYcFBTRHdmbWF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS85Y2JlODgtM2U3NS00MmVmLWI4NzEtNWVlNzZmMGY2NGUy LzEvSW9OeEc5ZXJFOW85RWZKYnRYcFBTRHdmbWF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9pazCKg 7ZmpgAXh6xgNL7IDw9lwXYYO+/mVhCeVBP9wl4ngsnqce4MP0yzqJ7+4WMpbw+B/ 4lu8/zAeQIPtykbRO+cit5rtogvWb+1tJX8ghno3ZhC5pnNa9Svu7c2MWA1BG2mi fchgq2ixeW0y4peTvKkAWFIDEF45seyDxqhH8MkAtpoPlyWtER2YG/5NCiIk7aQe NF2D/3+z8GiEM01SmiZgSsnUShcHcj8iSO1jNiFaz8NGCkLMXlu0rbA1BH6EzG8n ArqosLjp47U9EqH89dnt0SUpn3GCGwMEPITTtMPG4vFpgt+3jk4o1wPSiiWJ2qNC kACwIsNC14+5Sg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:33 2026 by rpki-client