This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft File: iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json) Hash identifier: kphcC7z9QIEwTNKAHewMXZVEQ/FLqMT3yf9ORVax+G4= Subject key identifier: 82:F1:E3:6D:09:59:5D:6C:EF:6E:5E:B4:43:01:56:D5:80:AC:C4:53 Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45 Certificate issuer: /CN=881ab180cb3517186221b3999b08b83af4f66945 Certificate serial: 019BF7D2118AB3FD23C1F849B3927AF8F741 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft Manifest number: 06D7 Signing time: Mon 26 Jan 2026 01:01:37 +0000 Manifest this update: Mon 26 Jan 2026 01:01:37 +0000 Manifest next update: Tue 27 Jan 2026 01:01:37 +0000 Files and hashes: 1: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: vNwiimB+hNdkcORSPDo0FwOrukUNxYDo8H5x0AUBUus=) 2: l3jaT1bSWorYPTAH0tIKpX9ObJ0.roa (hash: Xv2kbEZdjMxUOGqN/7wXLuOx7RktMUlXqMhlKu4Yx9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:11:8a:b3:fd:23:c1:f8:49:b3:92:7a:f8:f7:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945 Validity Not Before: Jan 26 01:01:37 2026 GMT Not After : Jan 27 01:01:37 2026 GMT Subject: CN=82f1e36d09595d6cef6e5eb4430156d580acc453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3c:dc:4e:e5:09:83:6f:5b:48:f2:cc:15:17: 4b:cb:2e:f1:37:25:16:8c:1e:c8:9c:16:a7:03:7b: b8:c5:07:0c:0a:8e:b0:79:87:37:af:4b:2b:c2:51: d3:4d:ff:10:ce:3b:06:19:8c:7d:3f:81:97:a2:77: 55:fa:c7:b8:67:18:74:2b:06:e4:d2:86:04:e5:41: 05:24:fc:9e:00:32:71:7a:25:94:99:25:98:73:41: 6f:95:a9:fe:f2:00:e9:fd:87:be:67:fc:81:54:33: 80:63:38:6b:9d:3f:83:77:65:83:5e:87:1c:b8:32: 5c:ab:0f:52:22:b6:ac:8d:51:0d:62:be:7a:f1:b3: 4e:98:11:49:87:1e:23:36:13:74:b2:3e:ed:ed:3c: 44:91:99:bd:a4:f6:ae:84:d8:65:c8:1d:07:9f:5c: 3c:1e:ff:06:a9:89:dc:74:47:ed:ef:fe:31:61:a1: 65:0e:8b:a4:70:20:af:15:4a:7a:19:ff:d8:e6:e5: e8:b7:bd:92:1f:a7:d0:50:0a:60:d5:2f:9e:92:89: 4f:80:b0:b8:7c:3a:7c:2e:30:f9:ad:61:c8:62:d1: 4f:b9:7b:8b:41:b1:af:84:65:9b:9f:b3:28:b5:9e: d9:d2:15:6f:44:54:f6:d3:91:b8:04:11:25:1e:84: cb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F1:E3:6D:09:59:5D:6C:EF:6E:5E:B4:43:01:56:D5:80:AC:C4:53 X509v3 Authority Key Identifier: keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:47:2e:11:bd:73:23:7f:fa:61:61:b3:7c:c4:dd:c8:b4:78: cf:fd:c4:be:20:65:a7:1a:c3:3e:51:e5:13:d0:95:08:d0:e4: c7:1a:f9:9f:38:61:e4:d9:32:78:89:01:a3:61:f9:fa:f7:b4: a0:34:e4:b8:6d:38:2c:67:14:d8:e3:74:e6:c1:ed:fa:da:3b: 57:90:8c:a0:d8:40:4d:5d:0e:c4:07:7c:fb:bc:1d:0d:36:93: 4d:c8:1f:02:02:b4:85:62:19:6b:b6:f7:76:8d:da:9b:6b:01: 77:2f:45:d7:86:54:6f:7a:70:58:bb:18:5a:8e:73:b4:e9:94: 9f:bd:59:a6:90:14:6c:e9:e5:11:e8:a3:a2:0e:9f:3a:ce:07: 71:d5:f6:47:28:ec:92:88:07:86:29:a0:f6:ab:3b:da:ee:fa: 18:2e:8a:9b:ca:73:04:31:fa:fc:37:4e:fa:de:56:45:12:c3: 03:ae:85:bb:7c:33:59:ff:e3:10:73:44:61:ad:4c:53:dd:f8: ff:6f:ad:94:41:93:b6:d9:3a:fc:e1:8a:9b:25:bc:f6:f2:b6: 43:93:54:23:e5:60:32:b0:ba:24:73:20:c8:11:bc:f8:15:7f: 4b:af:c7:12:79:e1:ec:14:0a:d3:57:bd:0c:93:01:f7:e6:ed: e1:85:36:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30hGKs/0jwfhJs5J6+PdBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MWFiMTgwY2IzNTE3MTg2MjIxYjM5OTliMDhiODNhZjRm NjY5NDUwHhcNMjYwMTI2MDEwMTM3WhcNMjYwMTI3MDEwMTM3WjAzMTEwLwYDVQQD Eyg4MmYxZTM2ZDA5NTk1ZDZjZWY2ZTVlYjQ0MzAxNTZkNTgwYWNjNDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDzcTuUJg29bSPLMFRdLyy7xNyUW jB7InBanA3u4xQcMCo6weYc3r0srwlHTTf8QzjsGGYx9P4GXondV+se4Zxh0Kwbk 0oYE5UEFJPyeADJxeiWUmSWYc0Fvlan+8gDp/Ye+Z/yBVDOAYzhrnT+Dd2WDXocc uDJcqw9SIrasjVENYr568bNOmBFJhx4jNhN0sj7t7TxEkZm9pPauhNhlyB0Hn1w8 Hv8GqYncdEft7/4xYaFlDoukcCCvFUp6Gf/Y5uXot72SH6fQUApg1S+ekolPgLC4 fDp8LjD5rWHIYtFPuXuLQbGvhGWbn7MotZ7Z0hVvRFT205G4BBElHoTLAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILx420JWV1s725etEMBVtWArMRTMB8GA1UdIwQY MBaAFIgasYDLNRcYYiGzmZsIuDr09mlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJxeGdNczFGeGhpSWJPWm13aTRPdlQyYVVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jN2Y2MDEtM2ZhMi00ZGI2LWEwM2Qt M2E2M2JmNzYzMGY1LzEvaUJxeGdNczFGeGhpSWJPWm13aTRPdlQyYVVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jN2Y2MDEtM2ZhMi00ZGI2LWEwM2QtM2E2M2JmNzYzMGY1 LzEvaUJxeGdNczFGeGhpSWJPWm13aTRPdlQyYVVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkcuEb1z I3/6YWGzfMTdyLR4z/3EviBlpxrDPlHlE9CVCNDkxxr5nzhh5NkyeIkBo2H5+ve0 oDTkuG04LGcU2ON05sHt+to7V5CMoNhATV0OxAd8+7wdDTaTTcgfAgK0hWIZa7b3 do3am2sBdy9F14ZUb3pwWLsYWo5ztOmUn71ZppAUbOnlEeijog6fOs4HcdX2Ryjs kogHhimg9qs72u76GC6Km8pzBDH6/DdO+t5WRRLDA66Fu3wzWf/jEHNEYa1MU934 /2+tlEGTttk6/OGKmyW89vK2Q5NUI+VgMrC6JHMgyBG8+BV/S6/HEnnh7BQK01e9 DJMB9+bt4YU2jw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:47:21 2026 by rpki-client