This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft File: IG0YKjtEp74F0-5w3JCoXVer-40.mft (raw, json) Hash identifier: couDZVryM8O3A0jT8C10YxDDXi2yELgwys9kdvNlWHc= Subject key identifier: D0:EC:24:8A:1C:9B:8E:2C:BA:C1:A4:9D:AE:94:05:32:93:BD:49:37 Authority key identifier: 20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D Certificate issuer: /CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d Certificate serial: 019BF8089400919200D42ED063C49F36CF5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft Manifest number: 174B Signing time: Mon 26 Jan 2026 02:01:10 +0000 Manifest this update: Mon 26 Jan 2026 02:01:10 +0000 Manifest next update: Tue 27 Jan 2026 02:01:10 +0000 Files and hashes: 1: IG0YKjtEp74F0-5w3JCoXVer-40.crl (hash: d8UR9f6Dt543HiNXuEoYbXjjyDgso6VOVrOfVx3hOCc=) 2: qSWfUPbdifhrh3aKuAhxxmylP6A.roa (hash: fB+qGwcW2GhnHX2osyvSPDhd9KmuxX/DLSWIY8hF8h8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:94:00:91:92:00:d4:2e:d0:63:c4:9f:36:cf:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d Validity Not Before: Jan 26 02:01:10 2026 GMT Not After : Jan 27 02:01:10 2026 GMT Subject: CN=d0ec248a1c9b8e2cbac1a49dae94053293bd4937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fa:fc:a3:ad:d3:e9:27:08:ea:78:af:e9:dd: 19:10:cd:40:96:53:37:cf:a4:76:72:bd:9f:23:8a: b0:be:18:7c:b5:fd:8d:b5:17:6a:55:9f:83:8f:be: 18:4f:79:15:7a:8e:f8:6b:1c:e7:99:67:2e:97:b9: ff:3a:df:37:d9:3f:7b:99:a3:81:4f:66:a7:58:92: 4c:5c:47:c1:7f:22:26:4c:b9:02:b2:f4:ff:32:26: 31:b9:5f:12:84:4f:6b:1a:6a:3f:62:24:f2:7d:de: 62:fe:3f:d3:7e:06:94:80:6b:6c:2f:14:3e:fe:e1: 73:b7:c9:0e:f8:28:f1:47:b6:93:63:2d:c7:a9:5b: aa:ee:db:93:ea:ac:5b:f7:59:73:57:44:5b:b5:b5: 45:0c:d7:32:4f:30:d7:40:e2:9a:94:e8:23:62:c0: 2b:8d:ce:9a:2d:1d:ca:c3:1c:0e:9e:da:ce:4f:7c: a8:42:02:5c:79:97:93:79:92:58:ec:1e:72:3a:9e: 80:03:8d:9d:35:21:cb:8e:26:03:6e:36:eb:a0:e7: d9:b5:70:f1:69:76:d3:cf:58:64:3f:d7:fe:be:8c: d2:64:a2:2b:f6:36:10:68:a1:6c:b7:f4:49:ff:cb: 78:9a:f6:36:3a:75:c9:39:2f:42:4a:01:37:b5:e2: 82:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EC:24:8A:1C:9B:8E:2C:BA:C1:A4:9D:AE:94:05:32:93:BD:49:37 X509v3 Authority Key Identifier: keyid:20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:57:61:bf:15:fc:18:5b:36:82:81:32:51:65:9a:6e:e2:f7: cd:1c:6e:e9:57:2e:00:70:c4:19:08:74:d7:18:fb:a1:19:58: 93:36:88:a7:96:49:18:b1:39:a7:f7:09:80:f0:3b:21:6c:26: 5d:c7:f4:f7:7e:90:6e:c1:75:31:ac:a8:ed:73:8d:60:95:d2: aa:a8:e4:fe:b0:38:15:ef:2e:62:9c:39:33:53:80:40:1c:b9: db:1f:74:f9:ce:77:e4:84:a7:eb:7c:0f:06:e4:50:05:18:a6: 24:55:62:5f:cc:1d:3c:88:fc:74:cc:93:ca:3a:57:d8:41:50: 08:68:23:03:57:56:95:00:45:3d:5e:f8:e2:ee:6c:d2:84:ec: 01:d2:6d:27:ef:dd:54:02:b6:f7:22:79:af:0b:52:80:60:0f: 7d:e4:d6:9a:f5:b7:dc:2f:eb:39:ff:17:e2:25:74:09:3c:55: b4:42:e0:56:44:e2:c2:4a:6a:4d:b5:57:ee:a8:08:14:19:2a: b0:15:c5:96:eb:2a:57:69:38:cd:b7:96:52:a3:6c:f3:41:34: a5:f4:99:c9:30:71:3f:91:71:94:4a:30:0a:ca:96:13:6f:32: 77:e3:55:db:6f:b4:8e:01:68:21:30:64:98:95:37:0f:0f:10: f0:76:f7:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CJQAkZIA1C7QY8SfNs9eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmQxODJhM2I0NGE3YmUwNWQzZWU3MGRjOTBhODVkNTdh YmZiOGQwHhcNMjYwMTI2MDIwMTEwWhcNMjYwMTI3MDIwMTEwWjAzMTEwLwYDVQQD EyhkMGVjMjQ4YTFjOWI4ZTJjYmFjMWE0OWRhZTk0MDUzMjkzYmQ0OTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vr8o63T6ScI6niv6d0ZEM1AllM3 z6R2cr2fI4qwvhh8tf2NtRdqVZ+Dj74YT3kVeo74axznmWcul7n/Ot832T97maOB T2anWJJMXEfBfyImTLkCsvT/MiYxuV8ShE9rGmo/YiTyfd5i/j/TfgaUgGtsLxQ+ /uFzt8kO+CjxR7aTYy3HqVuq7tuT6qxb91lzV0RbtbVFDNcyTzDXQOKalOgjYsAr jc6aLR3KwxwOntrOT3yoQgJceZeTeZJY7B5yOp6AA42dNSHLjiYDbjbroOfZtXDx aXbTz1hkP9f+vozSZKIr9jYQaKFst/RJ/8t4mvY2OnXJOS9CSgE3teKCawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDsJIocm44susGkna6UBTKTvUk3MB8GA1UdIwQY MBaAFCBtGCo7RKe+BdPucNyQqF1Xq/uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNmYyZWUtMDQ3Ni00MGI0LWJiNmEt NjYwNzc4MDk5YjNkLzEvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9lNmYyZWUtMDQ3Ni00MGI0LWJiNmEtNjYwNzc4MDk5YjNk LzEvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1ldhvxX8 GFs2goEyUWWabuL3zRxu6VcuAHDEGQh01xj7oRlYkzaIp5ZJGLE5p/cJgPA7IWwm Xcf0936QbsF1Mayo7XONYJXSqqjk/rA4Fe8uYpw5M1OAQBy52x90+c535ISn63wP BuRQBRimJFViX8wdPIj8dMyTyjpX2EFQCGgjA1dWlQBFPV744u5s0oTsAdJtJ+/d VAK29yJ5rwtSgGAPfeTWmvW33C/rOf8X4iV0CTxVtELgVkTiwkpqTbVX7qgIFBkq sBXFlusqV2k4zbeWUqNs80E0pfSZyTBxP5FxlEowCsqWE28yd+NV22+0jgFoITBk mJU3Dw8Q8Hb3mQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:01:59 2026 by rpki-client