This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft File: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft (raw, json) Hash identifier: 3kDWvt4yu8s3crRh91PGs7G9PyOCxOAvE3MJtXBqBTM= Subject key identifier: 22:E6:9A:61:FA:FB:25:B9:7D:95:B9:58:80:9C:FE:F6:A2:4C:F5:B4 Authority key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8 Certificate issuer: /CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8 Certificate serial: 019BF3F55CCDFD0E09C29291F4ACE6FF3D19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 07:01:41 +0000 Manifest this update: Sun 25 Jan 2026 07:01:41 +0000 Manifest next update: Mon 26 Jan 2026 07:01:41 +0000 Files and hashes: 1: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl (hash: d+q21IaiynMZgKyB7KeWZSvq+Zc8BUbfWTvbOdvTqOc=) 2: YH3qouyi9uf0Sjp7erwfbtdqIMY.roa (hash: XATxeFAkfU3QrOitUmq9zj3TBTO+Je2+3q8oJUZcsYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:5c:cd:fd:0e:09:c2:92:91:f4:ac:e6:ff:3d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8 Validity Not Before: Jan 25 07:01:41 2026 GMT Not After : Jan 26 07:01:41 2026 GMT Subject: CN=22e69a61fafb25b97d95b958809cfef6a24cf5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:99:b7:ab:5d:f3:02:aa:76:a8:1f:d7:14: 94:6b:ce:e5:80:19:06:62:1b:0f:27:31:61:79:c4: 0c:35:62:0b:be:1e:c5:42:11:f1:0f:04:d1:02:d6: f1:74:14:54:6e:c2:8e:0f:3b:8a:e2:78:a3:89:99: c8:e7:9c:87:93:9b:1f:29:f8:02:23:ad:bb:e9:c2: 73:59:39:11:42:ca:ae:57:25:a6:98:ea:74:31:8d: d5:c4:64:be:07:47:52:74:38:e4:4a:8f:2a:49:b2: 64:75:b5:d9:0a:3f:49:bc:ea:43:ae:ac:5d:66:3c: dc:bb:8d:c9:1e:d1:57:96:e9:02:c2:02:21:c9:00: b2:86:d4:d3:64:30:5b:d3:68:08:cc:b7:56:c2:ff: c1:db:7b:97:c2:9b:14:e9:71:bd:a7:27:73:1d:87: 55:ab:80:09:1a:06:80:a2:21:63:f1:a5:99:25:b1: 1d:c6:47:e0:3b:77:89:ce:32:59:b0:48:76:6c:eb: f7:c7:b7:f2:1b:87:83:1a:f2:c8:32:eb:46:1b:5a: 7c:f2:70:d0:94:1b:dd:e0:f3:0e:05:02:39:51:90: 6b:5e:64:30:95:a1:99:d8:be:f8:ae:23:16:e1:e6: 60:59:ba:66:3f:4e:f2:e3:8f:11:31:33:dd:22:2e: 94:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E6:9A:61:FA:FB:25:B9:7D:95:B9:58:80:9C:FE:F6:A2:4C:F5:B4 X509v3 Authority Key Identifier: keyid:23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:04:47:05:be:3b:9e:9b:5c:03:ab:32:09:08:e5:a7:91:46: 8e:bc:40:c3:be:d0:86:5e:1b:76:90:2a:0f:13:f0:2f:e1:fe: 1c:65:fb:6b:55:5f:6e:dc:60:ea:5d:24:d9:25:19:c7:36:d5: da:05:5c:c5:60:c5:28:84:61:27:c7:22:fb:e4:4b:87:a4:c0: 03:16:98:43:a7:b0:0c:a5:36:91:5b:62:fc:ea:4f:87:10:45: f7:42:17:bd:57:74:1d:51:a1:dd:9c:8a:1f:69:9e:20:3d:40: 3a:99:18:b8:a8:8d:b6:b0:a4:18:22:d0:39:22:06:c7:ba:f1: 5a:de:d3:75:43:14:6b:83:a3:24:e5:8b:09:5b:e9:27:b5:4c: 3f:4f:29:b8:3e:38:f5:76:c1:a7:51:96:45:d0:e9:eb:2d:48: d8:ae:d8:8f:e8:33:5e:ff:c0:e6:41:51:2c:a4:b2:a6:84:10: 2c:53:60:a3:68:52:48:13:f6:72:73:35:69:76:a5:8c:2e:f2: 09:9a:37:ac:2b:86:64:c7:28:56:81:e1:e3:46:50:f7:7b:4c: 1f:ee:be:24:a2:3e:45:5e:e1:e9:36:60:f5:32:1d:c2:3f:6a: 24:84:1e:61:c6:5f:ad:8d:ef:bf:4b:d8:b2:5c:b5:73:b1:c0: d0:79:17:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9VzN/Q4JwpKR9Kzm/z0ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZjFlMDlmMGU2ZWQ4OTFhZDE3ZDZjZTRhM2M3MzI4ZDc1 OWI0YzgwHhcNMjYwMTI1MDcwMTQxWhcNMjYwMTI2MDcwMTQxWjAzMTEwLwYDVQQD EygyMmU2OWE2MWZhZmIyNWI5N2Q5NWI5NTg4MDljZmVmNmEyNGNmNWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ+Zt6td8wKqdqgf1xSUa87lgBkG YhsPJzFhecQMNWILvh7FQhHxDwTRAtbxdBRUbsKODzuK4nijiZnI55yHk5sfKfgC I6276cJzWTkRQsquVyWmmOp0MY3VxGS+B0dSdDjkSo8qSbJkdbXZCj9JvOpDrqxd Zjzcu43JHtFXlukCwgIhyQCyhtTTZDBb02gIzLdWwv/B23uXwpsU6XG9pydzHYdV q4AJGgaAoiFj8aWZJbEdxkfgO3eJzjJZsEh2bOv3x7fyG4eDGvLIMutGG1p88nDQ lBvd4PMOBQI5UZBrXmQwlaGZ2L74riMW4eZgWbpmP07y448RMTPdIi6U1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLmmmH6+yW5fZW5WICc/vaiTPW0MB8GA1UdIwQY MBaAFCPx4J8ObtiRrRfWzko8cyjXWbTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSV9IZ253NXUySkd0RjliT1NqeHpLTmRadE1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC85NTVlZDEtOGI0MC00MTg1LTg0YTkt MmRkY2Y1NmE3NjNlLzEvSV9IZ253NXUySkd0RjliT1NqeHpLTmRadE1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC85NTVlZDEtOGI0MC00MTg1LTg0YTktMmRkY2Y1NmE3NjNl LzEvSV9IZ253NXUySkd0RjliT1NqeHpLTmRadE1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgRHBb47 nptcA6syCQjlp5FGjrxAw77Qhl4bdpAqDxPwL+H+HGX7a1Vfbtxg6l0k2SUZxzbV 2gVcxWDFKIRhJ8ci++RLh6TAAxaYQ6ewDKU2kVti/OpPhxBF90IXvVd0HVGh3ZyK H2meID1AOpkYuKiNtrCkGCLQOSIGx7rxWt7TdUMUa4OjJOWLCVvpJ7VMP08puD44 9XbBp1GWRdDp6y1I2K7Yj+gzXv/A5kFRLKSypoQQLFNgo2hSSBP2cnM1aXaljC7y CZo3rCuGZMcoVoHh40ZQ93tMH+6+JKI+RV7h6TZg9TIdwj9qJIQeYcZfrY3vv0vY sly1c7HA0HkXbA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:07 2026 by rpki-client