This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft File: ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json) Hash identifier: /7kSgpE8nwubWodyJ4qiXZ+MMa7cY+mDa/+jQTVL/yA= Subject key identifier: 86:69:6F:A4:81:F4:F5:04:2C:76:A9:4F:E9:39:D0:53:1D:78:4D:9B Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65 Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065 Certificate serial: 019BF650A9C3F1574DAA5EDB9DB385B36A70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft Manifest number: 17F1 Signing time: Sun 25 Jan 2026 18:00:40 +0000 Manifest this update: Sun 25 Jan 2026 18:00:40 +0000 Manifest next update: Mon 26 Jan 2026 18:00:40 +0000 Files and hashes: 1: 30h9dqpO2HTNFcZzXQCxUtNzDC4.roa (hash: 0sA/L/18FE59iFvAgUSimg7slW1i1d3kvvSKOu/WMqs=) 2: DaWre0O30UsHqeSDT6i_4Yq-tic.roa (hash: 9DotK/TTTUTMkn9fIQaKfkaVPPRreV6+27pYcu5DDN0=) 3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: PztPnRkDARYWrbhYGM+sBXsmtAi95J/9D2krh3OBNzI=) 4: MkyGLOUgEm7yWmws0P0WmJhg_og.roa (hash: lImHVfPNO/uEHSArF6tT6T1ccVGKtSX8t+Ym23NvLaU=) 5: Q82JzMQ9fn6zQUYFYzhsa6n8EfA.roa (hash: iRsZadW5zJyTKxF9xF+gVynd1FcJcWOsgkuRoqnlw+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:a9:c3:f1:57:4d:aa:5e:db:9d:b3:85:b3:6a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065 Validity Not Before: Jan 25 18:00:40 2026 GMT Not After : Jan 26 18:00:40 2026 GMT Subject: CN=86696fa481f4f5042c76a94fe939d0531d784d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0c:e7:29:a4:b0:bc:bb:6f:e0:80:57:88:37: 61:22:77:80:06:c5:5a:81:dd:76:87:35:b5:e0:8c: 5c:ae:bc:50:b9:b1:68:40:7f:44:0f:d3:36:24:0e: 5f:6a:73:df:e5:38:cc:53:55:aa:0a:7a:fe:d0:64: 73:6e:c6:1d:5b:bb:22:e7:d5:92:cd:e6:90:af:8a: dc:19:6e:3a:40:c5:ea:dc:c9:40:b7:2d:0a:b6:ae: b5:7e:51:97:b1:74:de:d0:2f:b0:c3:91:6c:8a:51: fb:13:5d:93:40:26:01:25:8e:96:94:64:50:71:76: 96:86:e1:d0:3a:b5:64:a1:7c:67:85:e0:e1:57:36: ca:c9:c9:2b:19:d6:7d:38:2e:4c:6a:ad:2c:31:fa: 47:10:ac:09:68:6c:22:76:45:58:cd:76:00:52:f8: b2:44:40:d1:68:e9:ff:06:2d:a3:2e:08:05:25:b2: 8c:dd:55:86:71:c8:6d:66:3a:fa:8b:50:03:e1:ba: c8:98:37:4c:59:6e:c0:f3:34:49:8b:5c:69:ee:e9: 52:85:b5:0d:97:b0:66:ec:13:d3:07:ee:e0:33:eb: e3:23:57:4f:90:bc:ed:0d:39:2a:c0:ae:0c:c3:6b: 5b:df:fe:69:6d:cc:96:94:a3:9b:40:37:bf:3f:0b: 2c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:69:6F:A4:81:F4:F5:04:2C:76:A9:4F:E9:39:D0:53:1D:78:4D:9B X509v3 Authority Key Identifier: keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:82:ea:df:fc:18:a3:b4:41:0d:a2:40:14:f1:e7:62:26:d9: 10:ce:59:52:79:ac:a3:d7:66:71:c7:da:1a:d3:d7:40:9d:fb: 48:3d:44:b0:55:cb:13:c7:42:28:73:ef:06:91:c3:10:6f:13: c8:45:5b:01:71:32:8b:aa:10:b2:43:b0:40:1f:b1:c3:f3:57: 33:35:b2:7d:40:03:53:36:c1:a6:09:30:4c:a4:95:f2:e0:ba: 7d:65:69:69:99:83:13:35:f4:a0:f9:d7:20:7b:e4:20:4c:7a: fa:53:97:25:8d:6f:af:5b:7c:67:88:03:8e:5f:c0:82:d7:c6: 89:9a:4e:a5:03:d8:87:84:65:81:ad:7c:a3:b0:a1:d2:8a:fe: 6b:c8:c0:ed:cc:fe:e7:c8:58:45:a2:a1:ed:03:5c:53:bf:77: 4c:2d:58:e9:80:65:e9:3c:4f:3e:df:d4:4d:33:c7:06:51:6a: 5c:b2:33:62:61:32:25:26:f4:95:c2:e3:b2:25:be:fa:d2:91: 4e:0f:b8:fa:3f:bf:3c:ba:4c:ca:c7:1b:47:ae:08:a3:39:81: dd:fa:53:15:f1:0e:1f:66:e2:8c:f2:0d:b8:2b:04:ad:59:7b: cd:aa:3d:0f:21:c4:d2:54:9a:cc:8a:56:31:4a:3f:93:56:0b: 91:e8:57:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UKnD8VdNql7bnbOFs2pwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzUxODY1Yjc2N2RkN2I5YzIyMzE0YmZjODA1NWJkNTdk YjAwNjUwHhcNMjYwMTI1MTgwMDQwWhcNMjYwMTI2MTgwMDQwWjAzMTEwLwYDVQQD Eyg4NjY5NmZhNDgxZjRmNTA0MmM3NmE5NGZlOTM5ZDA1MzFkNzg0ZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgznKaSwvLtv4IBXiDdhIneABsVa gd12hzW14IxcrrxQubFoQH9ED9M2JA5fanPf5TjMU1WqCnr+0GRzbsYdW7si59WS zeaQr4rcGW46QMXq3MlAty0Ktq61flGXsXTe0C+ww5FsilH7E12TQCYBJY6WlGRQ cXaWhuHQOrVkoXxnheDhVzbKyckrGdZ9OC5Maq0sMfpHEKwJaGwidkVYzXYAUviy REDRaOn/Bi2jLggFJbKM3VWGcchtZjr6i1AD4brImDdMWW7A8zRJi1xp7ulShbUN l7Bm7BPTB+7gM+vjI1dPkLztDTkqwK4Mw2tb3/5pbcyWlKObQDe/PwssaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZpb6SB9PUELHapT+k50FMdeE2bMB8GA1UdIwQY MBaAFCE1GGW3Z917nCIxS/yAVb1X2wBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAt MWU0ZTA0MDA4NDRiLzEvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAtMWU0ZTA0MDA4NDRi LzEvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeILq3/wY o7RBDaJAFPHnYibZEM5ZUnmso9dmccfaGtPXQJ37SD1EsFXLE8dCKHPvBpHDEG8T yEVbAXEyi6oQskOwQB+xw/NXMzWyfUADUzbBpgkwTKSV8uC6fWVpaZmDEzX0oPnX IHvkIEx6+lOXJY1vr1t8Z4gDjl/AgtfGiZpOpQPYh4Rlga18o7Ch0or+a8jA7cz+ 58hYRaKh7QNcU793TC1Y6YBl6TxPPt/UTTPHBlFqXLIzYmEyJSb0lcLjsiW++tKR Tg+4+j+/PLpMyscbR64IozmB3fpTFfEOH2bijPINuCsErVl7zao9DyHE0lSazIpW MUo/k1YLkehXlQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:23 2026 by rpki-client