This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json) Hash identifier: Y1PyWQZnrbU1TuXZDQvHUYsktE6xdNcEbnNa9GjbeP4= Subject key identifier: 5E:E1:53:4D:A7:2F:FE:C5:56:07:2B:45:28:0F:82:75:39:49:4F:7F Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8 Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8 Certificate serial: 019BF72CC2D2D4EB053EABF1E74331752332 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 22:01:04 +0000 Manifest this update: Sun 25 Jan 2026 22:01:04 +0000 Manifest next update: Mon 26 Jan 2026 22:01:04 +0000 Files and hashes: 1: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: J+7/3JjULIJdPfd1bY5ofWINg/Ip/yUKGwbM8ygKbHU=) 2: tsdEYosuda0mGshkl10-Ftg6W4Y.roa (hash: a/sn0U4F/EkCXhkwAu+cTtnXnfLtOqn3iL2j2IEJCMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:c2:d2:d4:eb:05:3e:ab:f1:e7:43:31:75:23:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8 Validity Not Before: Jan 25 22:01:04 2026 GMT Not After : Jan 26 22:01:04 2026 GMT Subject: CN=5ee1534da72ffec556072b45280f827539494f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:ed:bb:82:e8:6c:f2:12:b3:30:ab:80:c4: 9d:bf:2b:9c:8e:c0:23:12:74:22:21:f3:d7:3a:45: c4:7a:f2:5f:2c:bd:50:6f:8f:55:22:d7:35:6a:cb: bf:cc:8b:d7:e3:61:ba:7c:cd:45:23:ca:51:97:6d: 8d:43:72:7e:76:93:c4:1e:2f:5c:ed:95:9b:07:c0: 01:0a:26:de:b9:0e:5c:b9:23:75:72:ba:8a:fa:1f: e7:f9:0c:7e:bf:93:32:c5:d5:d6:43:ae:c2:aa:02: 00:b8:a7:47:3c:fc:da:e6:1a:68:4c:80:2a:54:be: de:b3:dc:94:36:e7:26:f3:a6:19:0c:97:65:34:57: fa:c5:23:68:14:0a:fb:92:07:ca:41:70:51:6d:c5: ce:48:87:7f:ac:86:03:e4:af:59:0f:d6:db:31:73: 29:03:9e:bf:5f:7d:d2:a3:d8:c5:c7:2b:a9:ae:40: 97:67:48:3b:3f:2a:eb:cf:1c:af:51:c1:16:88:14: e6:fd:0c:56:15:9a:c7:e4:da:b9:7f:a8:06:2a:0c: 3c:51:8d:72:ab:6b:d7:34:e0:cf:b2:d8:38:48:3b: b8:d4:bb:eb:52:97:ab:8f:a6:4d:2d:82:ed:6d:92: f6:91:ca:b8:90:bb:7b:cb:ae:ed:b3:6d:70:46:bb: 3d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E1:53:4D:A7:2F:FE:C5:56:07:2B:45:28:0F:82:75:39:49:4F:7F X509v3 Authority Key Identifier: keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:73:e4:91:a9:ed:bf:33:4a:61:4c:d2:6f:db:c8:c8:ab:a1: dd:3a:65:74:51:e3:9d:cc:27:10:7e:26:c7:f6:ee:b3:cb:d0: 89:0b:c0:fd:0d:ea:2b:55:e5:58:74:8b:1f:9b:41:b4:6c:14: 3e:1d:54:84:f7:4c:c2:d3:9e:f5:de:b1:c3:f6:2e:f2:87:af: 4b:ec:e9:c3:bf:bc:e8:f0:42:c8:11:b3:09:b6:ad:2b:43:69: 07:ec:17:a2:58:f6:45:58:c4:af:82:9d:09:39:e0:3f:fd:e4: 97:c7:09:50:62:8b:1a:f9:ca:9b:d0:cf:e7:8b:ef:cc:56:f2: da:9f:0c:a8:65:9f:4e:77:a0:08:b2:e1:8e:9d:d5:c5:66:11: eb:62:dc:38:3f:43:d8:98:4f:da:f9:dd:6a:d1:da:d6:a7:4a: ff:d3:51:f5:8b:b8:f1:7a:1b:9e:a4:35:95:41:68:82:af:fb: f5:57:6b:67:af:2e:16:4e:62:46:a8:6f:41:83:b5:99:f0:45: 00:91:5e:08:4e:49:ec:38:7c:d0:bc:b7:e7:a4:80:45:fa:71: 1a:d9:7b:b2:41:58:b9:5d:dc:18:e6:65:77:b0:12:d5:05:d3: 2b:d1:07:59:c0:46:f1:a8:84:0f:76:ac:82:a0:eb:5f:25:e3: d2:67:b5:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LMLS1OsFPqvx50MxdSMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZjM0MmRkMTEyN2M2N2FmMTExNmFiMWY5OTdlMjdjYjRj ODg0ZTgwHhcNMjYwMTI1MjIwMTA0WhcNMjYwMTI2MjIwMTA0WjAzMTEwLwYDVQQD Eyg1ZWUxNTM0ZGE3MmZmZWM1NTYwNzJiNDUyODBmODI3NTM5NDk0ZjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqbtu4LobPISszCrgMSdvyucjsAj EnQiIfPXOkXEevJfLL1Qb49VItc1asu/zIvX42G6fM1FI8pRl22NQ3J+dpPEHi9c 7ZWbB8ABCibeuQ5cuSN1crqK+h/n+Qx+v5MyxdXWQ67CqgIAuKdHPPza5hpoTIAq VL7es9yUNucm86YZDJdlNFf6xSNoFAr7kgfKQXBRbcXOSId/rIYD5K9ZD9bbMXMp A56/X33So9jFxyuprkCXZ0g7PyrrzxyvUcEWiBTm/QxWFZrH5Nq5f6gGKgw8UY1y q2vXNODPstg4SDu41LvrUperj6ZNLYLtbZL2kcq4kLt7y67ts21wRrs9twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7hU02nL/7FVgcrRSgPgnU5SU9/MB8GA1UdIwQY MBaAFIjzQt0RJ8Z68RFqsfmX4ny0yIToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzIt OGIzNmU5ZDA2M2ExLzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzItOGIzNmU5ZDA2M2Ex LzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHPkkant vzNKYUzSb9vIyKuh3TpldFHjncwnEH4mx/bus8vQiQvA/Q3qK1XlWHSLH5tBtGwU Ph1UhPdMwtOe9d6xw/Yu8oevS+zpw7+86PBCyBGzCbatK0NpB+wXolj2RVjEr4Kd CTngP/3kl8cJUGKLGvnKm9DP54vvzFby2p8MqGWfTnegCLLhjp3VxWYR62LcOD9D 2JhP2vndatHa1qdK/9NR9Yu48XobnqQ1lUFogq/79VdrZ68uFk5iRqhvQYO1mfBF AJFeCE5J7Dh80Ly356SARfpxGtl7skFYuV3cGOZld7AS1QXTK9EHWcBG8aiED3as gqDrXyXj0me1Ew== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:20 2026 by rpki-client