This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft File: iIFmRjoaMByltuuYvd0H45cJGYY.mft (raw, json) Hash identifier: it8CNiueOLB0x4rYJML9k+M0JKzvSOwE+k1nfBZ8WUQ= Subject key identifier: 6C:2F:61:71:2F:45:32:29:86:DB:86:4A:EE:2E:27:37:1D:F1:9A:3C Authority key identifier: 88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86 Certificate issuer: /CN=888166463a1a301ca5b6eb98bddd07e397091986 Certificate serial: 019BF83F5C1A0B2CADA1EBAB0C57B695F550 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft Manifest number: 12C3 Signing time: Mon 26 Jan 2026 03:01:00 +0000 Manifest this update: Mon 26 Jan 2026 03:01:00 +0000 Manifest next update: Tue 27 Jan 2026 03:01:00 +0000 Files and hashes: 1: 19kTeJepP8HkpIg63hHdZMuI5pU.roa (hash: rYKL3pXSi0W4E3AFcHleDUG0Z3vGSYXA5D+E17BmR8U=) 2: iIFmRjoaMByltuuYvd0H45cJGYY.crl (hash: YMBT5A8uEfLeQfgmhK4TuMMJ40ThM26owLeydZdvIB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:5c:1a:0b:2c:ad:a1:eb:ab:0c:57:b6:95:f5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=888166463a1a301ca5b6eb98bddd07e397091986 Validity Not Before: Jan 26 03:01:00 2026 GMT Not After : Jan 27 03:01:00 2026 GMT Subject: CN=6c2f61712f45322986db864aee2e27371df19a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:47:0e:4a:95:e0:16:81:b1:f1:8f:47:e5:e6: cb:92:e7:ab:2f:f2:b0:59:f7:9d:bc:79:d4:2b:54: 34:27:bd:1a:26:43:bc:1a:b4:fc:ae:f5:07:b2:fb: d6:f3:9e:cb:da:01:2e:b0:1a:f2:93:82:ce:c3:cf: 8e:b0:c8:2f:aa:dc:e5:65:f1:c1:9d:df:f9:4a:9b: 44:4f:e3:20:ef:17:68:00:40:3f:26:a7:96:a0:78: 75:95:a4:5c:55:59:25:2e:ce:88:1d:65:65:d5:56: 58:f4:2a:81:6d:d8:58:97:6c:e0:b4:9c:ff:fc:ca: c8:69:b0:98:b1:97:a5:e8:dc:06:c3:75:82:44:1e: 25:2a:83:c7:a4:b6:60:f2:75:57:a9:99:5e:88:37: 6d:bc:a8:98:be:47:c6:05:88:52:de:5c:7c:3e:95: 64:51:b4:4a:2a:1e:04:89:d1:34:50:ed:50:22:b4: 36:f6:e6:d5:d9:f9:00:56:4d:0f:f0:c8:d4:34:e2: 18:ba:d2:47:9d:47:a9:b0:85:09:e0:71:c3:14:65: 5b:41:c7:13:68:c9:30:fe:f9:10:98:6d:10:49:0f: 2f:47:1e:ab:b4:cd:1f:c6:0b:74:c1:9f:3c:05:13: 54:b4:11:d3:a6:b3:24:bf:fa:ec:8e:44:44:bd:f3: 42:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2F:61:71:2F:45:32:29:86:DB:86:4A:EE:2E:27:37:1D:F1:9A:3C X509v3 Authority Key Identifier: keyid:88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:41:cb:2e:8b:a6:80:c7:80:26:37:e3:bb:16:6e:e8:dd:02: c4:94:4d:c4:b6:35:11:1d:de:e1:10:67:c9:72:57:88:3d:02: fe:07:2a:c7:de:d1:10:6e:50:f2:1a:fa:f9:b3:a3:c8:73:3c: 3e:f2:67:16:b2:ce:01:36:50:49:91:9d:bd:e2:09:d4:8b:d4: ec:f6:e2:78:5c:a7:06:ad:b0:a3:ac:12:e4:bc:9d:d8:d7:20: 21:78:9a:c2:98:1d:13:13:8c:85:85:04:f6:40:80:02:93:cf: 61:43:6e:e6:92:ea:aa:83:f5:a1:21:94:5a:96:15:4d:30:0e: 8a:4f:e6:7c:da:a4:9a:0f:e3:19:e4:6f:8e:b2:b7:24:bb:a1: f0:24:fa:0a:66:87:fa:25:74:bb:66:4f:46:d5:23:4a:e2:4a: 1b:33:b8:38:d9:c0:07:78:df:bf:13:f0:0a:72:f2:f8:62:66: 7a:65:55:dd:3d:38:42:97:9a:bf:ed:67:83:50:b6:08:e4:e2: fd:29:4e:1c:d3:bd:33:d1:ed:27:0c:ac:0e:f0:9f:bb:fb:69: 8f:45:32:ac:eb:af:d5:44:ca:61:53:61:f4:db:4c:1e:25:b1: 4f:bf:7a:5b:5d:0e:86:18:a6:d9:dd:86:9a:60:a3:a4:a7:32: f5:0f:77:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P1waCyytoeurDFe2lfVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ODE2NjQ2M2ExYTMwMWNhNWI2ZWI5OGJkZGQwN2UzOTcw OTE5ODYwHhcNMjYwMTI2MDMwMTAwWhcNMjYwMTI3MDMwMTAwWjAzMTEwLwYDVQQD Eyg2YzJmNjE3MTJmNDUzMjI5ODZkYjg2NGFlZTJlMjczNzFkZjE5YTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0cOSpXgFoGx8Y9H5ebLkuerL/Kw WfedvHnUK1Q0J70aJkO8GrT8rvUHsvvW857L2gEusBryk4LOw8+OsMgvqtzlZfHB nd/5SptET+Mg7xdoAEA/JqeWoHh1laRcVVklLs6IHWVl1VZY9CqBbdhYl2zgtJz/ /MrIabCYsZel6NwGw3WCRB4lKoPHpLZg8nVXqZleiDdtvKiYvkfGBYhS3lx8PpVk UbRKKh4EidE0UO1QIrQ29ubV2fkAVk0P8MjUNOIYutJHnUepsIUJ4HHDFGVbQccT aMkw/vkQmG0QSQ8vRx6rtM0fxgt0wZ88BRNUtBHTprMkv/rsjkREvfNCUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwvYXEvRTIphtuGSu4uJzcd8Zo8MB8GA1UdIwQY MBaAFIiBZkY6GjAcpbbrmL3dB+OXCRmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUlGbVJqb2FNQnlsdHV1WXZkMEg0NWNKR1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80NzZmZDAtYjhhNi00NjFmLWI0YzUt MzhjMmMyYTc5YzM1LzEvaUlGbVJqb2FNQnlsdHV1WXZkMEg0NWNKR1lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80NzZmZDAtYjhhNi00NjFmLWI0YzUtMzhjMmMyYTc5YzM1 LzEvaUlGbVJqb2FNQnlsdHV1WXZkMEg0NWNKR1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0HLLoum gMeAJjfjuxZu6N0CxJRNxLY1ER3e4RBnyXJXiD0C/gcqx97REG5Q8hr6+bOjyHM8 PvJnFrLOATZQSZGdveIJ1IvU7PbieFynBq2wo6wS5Lyd2NcgIXiawpgdExOMhYUE 9kCAApPPYUNu5pLqqoP1oSGUWpYVTTAOik/mfNqkmg/jGeRvjrK3JLuh8CT6CmaH +iV0u2ZPRtUjSuJKGzO4ONnAB3jfvxPwCnLy+GJmemVV3T04Qpeav+1ng1C2COTi /SlOHNO9M9HtJwysDvCfu/tpj0UyrOuv1UTKYVNh9NtMHiWxT796W10Ohhim2d2G mmCjpKcy9Q93/g== -----END CERTIFICATE-----Generated at Mon Jan 26 05:09:00 2026 by rpki-client