This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json) Hash identifier: mKBEn4wzQ3KgWpsd6jrue/K1Fm+XzLZ0n7MEIf89ICY= Subject key identifier: 82:2C:28:04:04:A8:68:C1:5E:48:FD:C1:5E:86:62:D0:EE:A8:F4:CA Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e Certificate serial: 019BF8AD34C6A6CB33E3310E1DAA8735D8ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft Manifest number: 0F99 Signing time: Mon 26 Jan 2026 05:00:59 +0000 Manifest this update: Mon 26 Jan 2026 05:00:59 +0000 Manifest next update: Tue 27 Jan 2026 05:00:59 +0000 Files and hashes: 1: NX-OMXODzLQyOfb1Q9wNeEL2PHA.roa (hash: Nw9r5+ly9YVKF96b5YkLYTcBHlD+SxK/rgNTOl03LpU=) 2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: ygsfjHqqAvza0Ujp1kvaPJgmYsCBPixOrUB8wq6JL6o=) 3: jKKjoO8JUGIlXn-UDp4x0csWoxs.roa (hash: 2ucN/qfe/CRMX/0orfTwnBgNQjP1scKADHH1SlqlwH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:34:c6:a6:cb:33:e3:31:0e:1d:aa:87:35:d8:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e Validity Not Before: Jan 26 05:00:59 2026 GMT Not After : Jan 27 05:00:59 2026 GMT Subject: CN=822c280404a868c15e48fdc15e8662d0eea8f4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:53:b7:f5:af:47:5d:e0:07:f5:ab:b8:97:66: 1b:b1:83:65:11:be:f1:5f:b4:38:a9:88:40:dc:3b: 8a:e2:98:2c:b9:48:e9:15:13:89:58:20:77:61:9f: ce:38:7d:87:99:a8:fb:ff:5f:0e:e3:31:7c:ba:0e: 7f:44:35:20:4f:24:cd:3e:28:f4:90:a1:49:79:2f: 94:5b:a5:17:d8:e8:73:e6:70:62:3c:c3:94:a2:7c: 9b:32:8c:86:12:6e:67:ff:41:b5:04:35:78:63:d0: c2:bc:ca:c0:53:ed:6a:03:f0:df:a2:6a:34:75:fe: f2:ee:29:4d:4d:35:d4:c2:26:cf:b0:dc:52:eb:2d: 1a:db:84:ec:73:1c:ab:15:ca:7a:f7:8a:de:8b:11: 9e:6d:bd:f2:74:6d:2a:de:94:63:77:15:6d:9a:79: 90:ba:5a:3b:e9:90:f2:5a:d5:bd:c9:96:af:48:15: 79:1a:32:a4:7c:95:5c:92:20:13:68:5c:56:3f:9b: d4:94:6f:18:ce:dd:74:7a:d5:4b:b5:9c:4f:ac:39: 20:14:05:19:28:8d:8f:27:be:d3:93:ae:4e:74:55: 08:17:60:29:e2:da:dd:1e:aa:af:98:ce:f4:1f:48: 68:12:c1:23:88:0f:7d:c4:31:61:0b:1d:26:28:24: 19:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2C:28:04:04:A8:68:C1:5E:48:FD:C1:5E:86:62:D0:EE:A8:F4:CA X509v3 Authority Key Identifier: keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:a0:bd:12:4b:a9:a5:2a:67:f5:21:20:03:5d:be:97:c9:60: 3b:78:27:ff:d4:9e:4f:d1:8f:88:0f:c8:1b:15:f4:dd:8a:62: 68:48:a5:05:85:40:8f:eb:5b:4e:93:f5:79:1a:fe:16:a7:40: c9:18:6f:a3:92:2b:10:ab:bd:07:54:5d:37:df:fa:a3:6e:56: dc:35:87:a6:70:ea:9a:35:f8:9b:75:01:25:3b:1f:20:5f:13: c5:62:62:76:78:40:ad:90:ee:54:af:c2:83:20:74:c8:42:3d: 80:7d:a3:42:5c:76:13:84:f6:8f:c1:40:39:c8:26:2b:1d:03: 18:37:f2:61:85:e9:a3:69:1d:c7:c3:a3:b3:ca:fb:35:04:4a: d6:f5:ff:53:28:ca:0f:cd:b3:97:9f:3c:52:d3:d9:07:f6:31: 99:18:44:ef:48:b4:24:bf:2f:cd:fb:7f:f6:44:33:f3:06:56: 73:5b:a0:48:1e:63:62:57:78:3c:e2:1d:a1:8b:a3:62:3b:a6: 73:3d:00:86:87:a6:00:59:c3:91:68:05:4f:7e:19:34:9b:95: 0a:c4:00:f2:0e:8b:de:81:8e:d7:df:7e:8b:5b:10:54:db:4e: 79:74:9b:95:7f:94:82:42:f0:f5:da:7f:58:98:a9:79:0e:3b: 04:e8:6c:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rTTGpssz4zEOHaqHNdjtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4N2E1ZjA0ODZiMThhMjQ0OGYyMzU4YTI3NDZjMWFiZDlm YjJlNWUwHhcNMjYwMTI2MDUwMDU5WhcNMjYwMTI3MDUwMDU5WjAzMTEwLwYDVQQD Eyg4MjJjMjgwNDA0YTg2OGMxNWU0OGZkYzE1ZTg2NjJkMGVlYThmNGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVO39a9HXeAH9au4l2YbsYNlEb7x X7Q4qYhA3DuK4pgsuUjpFROJWCB3YZ/OOH2Hmaj7/18O4zF8ug5/RDUgTyTNPij0 kKFJeS+UW6UX2Ohz5nBiPMOUonybMoyGEm5n/0G1BDV4Y9DCvMrAU+1qA/Dfomo0 df7y7ilNTTXUwibPsNxS6y0a24TscxyrFcp694reixGebb3ydG0q3pRjdxVtmnmQ ulo76ZDyWtW9yZavSBV5GjKkfJVckiATaFxWP5vUlG8Yzt10etVLtZxPrDkgFAUZ KI2PJ77Tk65OdFUIF2Ap4trdHqqvmM70H0hoEsEjiA99xDFhCx0mKCQZtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIsKAQEqGjBXkj9wV6GYtDuqPTKMB8GA1UdIwQY MBaAFIh6XwSGsYokSPI1iidGwavZ+y5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjct MzNhYmM1M2MwZTc5LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjctMzNhYmM1M2MwZTc5 LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6C9Ekup pSpn9SEgA12+l8lgO3gn/9SeT9GPiA/IGxX03YpiaEilBYVAj+tbTpP1eRr+FqdA yRhvo5IrEKu9B1RdN9/6o25W3DWHpnDqmjX4m3UBJTsfIF8TxWJidnhArZDuVK/C gyB0yEI9gH2jQlx2E4T2j8FAOcgmKx0DGDfyYYXpo2kdx8Ojs8r7NQRK1vX/UyjK D82zl588UtPZB/YxmRhE70i0JL8vzft/9kQz8wZWc1ugSB5jYld4POIdoYujYjum cz0AhoemAFnDkWgFT34ZNJuVCsQA8g6L3oGO199+i1sQVNtOeXSblX+UgkLw9dp/ WJipeQ47BOhs9Q== -----END CERTIFICATE-----Generated at Mon Jan 26 12:13:51 2026 by rpki-client