This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft File: igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json) Hash identifier: PWzIT3N4S1CsQ/vbaiv+5sNhDbpbEflQnQXvu5FCsPk= Subject key identifier: E2:DD:B7:AD:EE:A8:8A:F5:09:3E:AF:CE:3E:CD:B4:FF:80:0A:5E:F7 Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019BF23D9608F2EFA9D84C3ED1EA47628B3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft Manifest number: 1540 Signing time: Sat 24 Jan 2026 23:01:20 +0000 Manifest this update: Sat 24 Jan 2026 23:01:20 +0000 Manifest next update: Sun 25 Jan 2026 23:01:20 +0000 Files and hashes: 1: 1OL-qss1xL-YpeaGHmfjzbs-eBQ.roa (hash: xs10e9jaV604BsV9Pzfe1bmNIH85FVUyiV7iCr1lQcQ=) 2: Ao4tPl0KDOwD2fTQaCXik9Mge2U.roa (hash: 61/JPhEn5agbl9M1kpw2R6W8Sk9wD7VpGF8lP+w7aKs=) 3: K_nPRyyftR4ZBlRYe5o2Y5tUvJI.roa (hash: q4zqaL21M35s9vhO9oi9xK7MF0lYvuEB0k/Aafia0Vg=) 4: Kyf5heLwSi5U3rZkdpAZyV8bXbo.roa (hash: ujg1A0vQ9FG1rTPZa8Vj4tuAeoDxeA7TxCNsFbsOZaw=) 5: MSqEPR2WUFiEn7JZKsTMqQZriJY.roa (hash: 22IegogJDKezdMxL+XtqfpKwUXeeYwZNEyeiXkXVatY=) 6: O0sj8jaNSyJUdTMszyVTwWQYdYc.roa (hash: ooQVZiGPbWLyp8e14BPaFJ5BGA9hgoAsiHuX+p9bq/k=) 7: _z2AETln5h0EJM43e3v3oGPmobw.roa (hash: dTSObFPPNK6gQmE+hkeFVAZehlQ/J5wYJQcm52Y6s9s=) 8: aF7Fo61ARbfY3WCMykxFMZf-unI.roa (hash: mq0b7oZuWEbUNwXpwzKZdx4ZOZCDCH66xKYzqJWE62c=) 9: cAg4nW6T1wQkJA5EumjHt5Qh-aw.roa (hash: wNgufxAnRrwTTymUo0COT/O/AFvOeg2IfduBSOcAOZk=) 10: esDeqCDyoqRbsAQHRMglZbrhqEw.roa (hash: 8qsCJZ3G69ZmXBetACQrczxZCcilKLtmeUcqYta84tw=) 11: hpf_CEMkLorIKvLyN-JcZEe8ptI.roa (hash: 2BuEcKt8pkg3PWstEMN+HFgmR1tbhBkfcpJh+d1wIHc=) 12: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: YAjeHw+myHXiqNBXmftHVGmekirpuLjZGQzpzAbirWI=) 13: kykSkOOcQi8w6pX94b-OlDgXzIQ.roa (hash: 7DW10zeILAQHRoyEHA38RaD/Z6cmAPbbDRRj/nHuYys=) 14: sVnkdz-If3BToP_lR8Kbr7aviEw.roa (hash: Rccu1mXIlX1/SPnYu01bLRxxpECZ4YTVP8mo65xnQx0=) 15: sfRY7oi8Cy67vRa8TsGmyb-biXw.roa (hash: e12FlexHma7yK74h/ZUgXE8E6Z1jM1kIctBTzVSEvaE=) 16: y5RS8HrEJ8kED5BskhLhm_4BWLI.roa (hash: kUt0c51YaiS0sol14q/MFCa1xF2Vh48fis+8qbFBh2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:3d:96:08:f2:ef:a9:d8:4c:3e:d1:ea:47:62:8b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Jan 24 23:01:20 2026 GMT Not After : Jan 25 23:01:20 2026 GMT Subject: CN=e2ddb7adeea88af5093eafce3ecdb4ff800a5ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2b:a3:00:46:a1:92:52:d1:e8:06:6a:7e:71: c7:71:4e:57:75:37:35:39:d8:04:3e:3f:c7:9a:06: c0:e0:a6:b2:13:a9:83:40:73:12:a7:91:e0:15:d7: 86:2e:5c:87:4d:0b:a4:48:54:2d:a8:bf:50:03:73: 23:54:9b:78:74:20:27:79:da:20:40:00:40:42:fe: 29:c0:a4:d5:7d:2c:05:58:92:c5:84:a8:5a:4d:99: 5d:a1:19:cf:f3:63:f9:bb:2b:31:8b:8d:1e:ce:7c: 72:bb:8e:4b:c0:d0:f2:02:0d:7e:22:fc:20:88:f7: 3d:dc:06:8a:aa:59:75:07:e8:f3:df:58:0b:94:89: 65:06:e3:ee:db:4c:fd:2f:d9:6b:bb:4f:53:3b:9b: e5:53:90:5c:d2:bd:2f:19:8d:d9:1b:86:f6:12:8d: c1:73:7c:e0:7d:9d:7d:29:93:1b:c8:e1:3f:a9:a0: e4:95:0b:ad:90:71:df:35:39:b6:d0:22:dd:a8:ba: dc:82:a3:3e:38:d9:33:a3:25:fd:1e:0b:e5:21:40: b1:03:cc:f3:6e:a7:24:6b:5c:6b:fb:8c:a5:ea:02: d0:e7:8d:81:e9:16:42:e2:18:b4:c7:7d:12:f9:72: 92:ff:ce:82:1b:a2:be:c3:c4:2e:d0:71:84:9f:4f: 84:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DD:B7:AD:EE:A8:8A:F5:09:3E:AF:CE:3E:CD:B4:FF:80:0A:5E:F7 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f9:11:79:6e:07:32:67:0b:57:3b:04:16:12:48:4b:dd:72: 73:71:de:b1:b3:ea:80:34:f3:01:8f:36:b9:55:19:86:79:a0: c5:17:3b:c4:74:ef:7c:13:b0:c3:34:8f:2d:bd:ff:32:68:8f: 66:d6:d7:c5:41:ba:dc:46:c2:32:55:6a:82:f4:e7:2e:dd:bc: d1:40:a1:2c:db:5d:fe:4d:0a:9c:03:9d:36:f2:16:ae:e2:a5: 72:d7:f0:d2:2d:fb:bf:08:a7:54:06:4c:e4:07:88:5d:ac:bf: 1e:7d:ff:79:3c:00:41:e2:e4:d9:6e:8e:2d:8d:d1:20:6a:4e: 29:a4:dd:70:fb:e9:fb:54:2b:cd:6b:70:bb:77:97:a3:ec:3d: e1:0d:26:0e:5b:9b:17:54:00:be:3f:09:09:b0:3a:58:7f:df: 94:33:29:7b:b6:b9:ec:5d:45:2d:9a:69:21:04:57:c1:05:a3: 56:fc:46:fd:1d:17:05:55:57:34:d2:93:4e:ed:e3:c1:bf:08: 96:9b:6b:ce:d4:f5:03:1c:57:3d:b2:f4:92:3d:23:97:b3:48: 3f:e8:e5:a4:91:cd:2c:b5:a2:6b:3f:5e:aa:8e:d5:eb:d3:77: 2e:1c:89:a3:71:23:1c:d2:80:77:23:b2:b1:81:7f:bd:44:28: de:38:68:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyPZYI8u+p2Ew+0epHYos6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjYwMTI0MjMwMTIwWhcNMjYwMTI1MjMwMTIwWjAzMTEwLwYDVQQD EyhlMmRkYjdhZGVlYTg4YWY1MDkzZWFmY2UzZWNkYjRmZjgwMGE1ZWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyujAEahklLR6AZqfnHHcU5XdTc1 OdgEPj/HmgbA4KayE6mDQHMSp5HgFdeGLlyHTQukSFQtqL9QA3MjVJt4dCAnedog QABAQv4pwKTVfSwFWJLFhKhaTZldoRnP82P5uysxi40eznxyu45LwNDyAg1+Ivwg iPc93AaKqll1B+jz31gLlIllBuPu20z9L9lru09TO5vlU5Bc0r0vGY3ZG4b2Eo3B c3zgfZ19KZMbyOE/qaDklQutkHHfNTm20CLdqLrcgqM+ONkzoyX9HgvlIUCxA8zz bqcka1xr+4yl6gLQ542B6RZC4hi0x30S+XKS/86CG6K+w8Qu0HGEn0+EZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLdt63uqIr1CT6vzj7NtP+ACl73MB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/kReW4H MmcLVzsEFhJIS91yc3HesbPqgDTzAY82uVUZhnmgxRc7xHTvfBOwwzSPLb3/MmiP ZtbXxUG63EbCMlVqgvTnLt280UChLNtd/k0KnAOdNvIWruKlctfw0i37vwinVAZM 5AeIXay/Hn3/eTwAQeLk2W6OLY3RIGpOKaTdcPvp+1QrzWtwu3eXo+w94Q0mDlub F1QAvj8JCbA6WH/flDMpe7a57F1FLZppIQRXwQWjVvxG/R0XBVVXNNKTTu3jwb8I lptrztT1AxxXPbL0kj0jl7NIP+jlpJHNLLWiaz9eqo7V69N3LhyJo3EjHNKAdyOy sYF/vUQo3jhoZA== -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:36 2026 by rpki-client