This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft File: IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json) Hash identifier: mdhcUlIifghidgx7rPTiJjTjVoRnesSxXRnUuxuiCF4= Subject key identifier: A2:C8:4D:D0:8E:51:12:35:0D:EB:D1:A6:49:8C:54:53:C0:5F:22:F3 Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF Certificate issuer: /CN=2101f439debaff5880395d78f0bbfad8ca7608bf Certificate serial: 019BF6517298BB0C2C5EF9223FF3138CA2E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft Manifest number: 0EA5 Signing time: Sun 25 Jan 2026 18:01:31 +0000 Manifest this update: Sun 25 Jan 2026 18:01:31 +0000 Manifest next update: Mon 26 Jan 2026 18:01:31 +0000 Files and hashes: 1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: nzVdhgWj84FUYVkGxVd2yXGA5gAEJjTBLrQG090D6m8=) 2: LIiML1O5GYrYT2OXv04_3crEOSo.roa (hash: GEv40+sowJMzMWvtaNBUTp1Lf4CV4ySJkJ0S9aCKf/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:72:98:bb:0c:2c:5e:f9:22:3f:f3:13:8c:a2:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf Validity Not Before: Jan 25 18:01:31 2026 GMT Not After : Jan 26 18:01:31 2026 GMT Subject: CN=a2c84dd08e5112350debd1a6498c5453c05f22f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b3:41:7d:31:a1:76:26:0b:cd:a9:97:f4:49: 14:c4:99:79:e4:29:90:6c:2d:16:8b:bd:f1:ab:0e: 06:e1:3d:de:22:6c:17:16:9a:a4:9d:c9:ba:b9:5a: 7c:e2:60:78:76:7e:f5:11:f0:7d:72:66:57:53:44: 78:e8:f7:6a:47:72:02:12:e8:0b:c1:e2:45:b8:cf: 86:ce:22:e7:e6:a5:ab:1f:40:8e:cb:2c:b0:e5:25: f0:a0:9b:07:42:17:fd:9d:da:71:5f:33:bf:5c:52: 97:7c:9b:23:7d:fe:dd:5b:9b:26:a7:6a:15:23:07: b2:b4:b8:dd:aa:4a:00:b4:2f:7c:c1:7c:c2:5f:f6: 2f:e8:4a:d4:84:e6:df:56:91:bb:dc:9d:ad:f0:09: 0c:b0:9d:f0:bd:b2:51:82:4d:47:af:37:1a:1d:b7: 70:dd:7d:5d:59:c7:27:b9:e9:ca:2a:37:e4:85:9a: 22:ed:ce:dd:6b:70:75:2b:27:16:23:93:c7:04:56: fa:09:eb:63:29:c8:83:05:ee:1c:ec:74:04:b3:9b: 84:08:f3:61:d0:28:e4:7f:ca:ab:15:86:f7:eb:60: 2c:12:60:4d:d4:e6:33:65:06:50:97:4a:7d:40:90: c5:48:2b:d5:64:d8:06:6a:9b:c3:23:dc:63:26:58: a7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C8:4D:D0:8E:51:12:35:0D:EB:D1:A6:49:8C:54:53:C0:5F:22:F3 X509v3 Authority Key Identifier: keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e0:29:cc:9d:b0:47:9d:49:e4:a2:55:f8:6a:c0:eb:ab:fd: 05:1f:31:e3:34:b4:da:27:f8:7c:70:8c:f7:cd:67:31:cf:1a: 6e:03:60:f7:da:f3:2a:56:e1:44:fa:8f:52:4e:19:13:27:3e: 7a:bb:ba:1d:b7:9a:97:87:ba:3e:d3:b8:24:76:4a:b3:74:5d: a1:3c:f9:0f:fd:fc:d0:0d:ed:73:b6:8d:cc:14:f5:4c:cf:9e: f3:a0:05:4c:35:c1:44:38:94:32:bd:ff:29:1a:15:0d:05:49: 76:b4:11:e7:bd:9c:80:5d:0e:04:bb:2b:24:1e:1c:68:f6:53: c1:6d:79:1b:2a:6b:68:c3:9f:96:6c:85:cd:ae:ed:f1:45:3f: 2c:0e:4c:b5:4e:40:d0:f6:93:2a:cf:aa:a2:c4:9c:6b:66:a2: 99:37:5d:ba:7a:8d:55:c9:13:ee:34:b8:2a:61:6b:ca:ef:09: 89:25:de:9f:55:c7:6b:04:85:5a:5c:48:20:c3:ff:35:bc:04: a5:29:ed:6d:3c:7d:0f:12:f3:f7:be:fd:81:f2:34:d0:61:78: 39:a0:2d:5b:c2:6e:9c:c6:f5:26:b2:7c:b2:b5:8e:e1:fe:5d: 54:b1:6e:7f:c6:3a:27:da:ad:c2:2e:1b:eb:ca:7b:1a:2a:d7: ed:c8:7c:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UXKYuwwsXvkiP/MTjKLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDFmNDM5ZGViYWZmNTg4MDM5NWQ3OGYwYmJmYWQ4Y2E3 NjA4YmYwHhcNMjYwMTI1MTgwMTMxWhcNMjYwMTI2MTgwMTMxWjAzMTEwLwYDVQQD EyhhMmM4NGRkMDhlNTExMjM1MGRlYmQxYTY0OThjNTQ1M2MwNWYyMmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLNBfTGhdiYLzamX9EkUxJl55CmQ bC0Wi73xqw4G4T3eImwXFpqkncm6uVp84mB4dn71EfB9cmZXU0R46PdqR3ICEugL weJFuM+GziLn5qWrH0COyyyw5SXwoJsHQhf9ndpxXzO/XFKXfJsjff7dW5smp2oV IweytLjdqkoAtC98wXzCX/Yv6ErUhObfVpG73J2t8AkMsJ3wvbJRgk1HrzcaHbdw 3X1dWccnuenKKjfkhZoi7c7da3B1KycWI5PHBFb6CetjKciDBe4c7HQEs5uECPNh 0Cjkf8qrFYb362AsEmBN1OYzZQZQl0p9QJDFSCvVZNgGapvDI9xjJlinQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLITdCOURI1DevRpkmMVFPAXyLzMB8GA1UdIwQY MBaAFCEB9Dneuv9YgDldePC7+tjKdgi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFIME9kNjZfMWlBT1YxNDhMdjYyTXAyQ0w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83OGM0MTQtOWIwOS00Nzc1LWE1NTgt ZTNkZWZiN2UyNTE4LzEvSVFIME9kNjZfMWlBT1YxNDhMdjYyTXAyQ0w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83OGM0MTQtOWIwOS00Nzc1LWE1NTgtZTNkZWZiN2UyNTE4 LzEvSVFIME9kNjZfMWlBT1YxNDhMdjYyTXAyQ0w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceApzJ2w R51J5KJV+GrA66v9BR8x4zS02if4fHCM981nMc8abgNg99rzKlbhRPqPUk4ZEyc+ eru6Hbeal4e6PtO4JHZKs3RdoTz5D/380A3tc7aNzBT1TM+e86AFTDXBRDiUMr3/ KRoVDQVJdrQR572cgF0OBLsrJB4caPZTwW15GypraMOflmyFza7t8UU/LA5MtU5A 0PaTKs+qosSca2aimTddunqNVckT7jS4KmFryu8JiSXen1XHawSFWlxIIMP/NbwE pSntbTx9DxLz9779gfI00GF4OaAtW8JunMb1JrJ8srWO4f5dVLFuf8Y6J9qtwi4b 68p7GirX7ch8xg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:29 2026 by rpki-client