This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json) Hash identifier: R6kMZ8SbyoaB81ALEyC4ZDyfXjPpre4zbcY9S48z+dM= Subject key identifier: 8E:A3:18:AA:ED:BD:AF:C5:9F:40:EA:A6:9F:26:51:42:39:FF:2D:5A Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe Certificate serial: 019BF688181E59263BC595A14306FD9E4655 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft Manifest number: 1334 Signing time: Sun 25 Jan 2026 19:01:12 +0000 Manifest this update: Sun 25 Jan 2026 19:01:12 +0000 Manifest next update: Mon 26 Jan 2026 19:01:12 +0000 Files and hashes: 1: 7YpkD0KfUd6GvtssKEAM5COaSjg.roa (hash: WV0BukIXTVr1fBZ0Z/X4lkuf8IyCGzCcom5E1ZYckgc=) 2: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: OOALreogj3jl9oTwUijdsDU3kgS5NAADvVJo1ECJVvk=) 3: NJVMWOrligqTcr-rcvI2msW0lWg.roa (hash: h/rbFp7XU21SARi1YVpy4hQ7ylKq7LqNyiG5q+Csv/s=) 4: PZ3DvBnBZEzRJV1pn3nJOWDaINo.roa (hash: kJlVCfKZcI1/z1HhlgFzXn1hqpVcX/my4yK+JhAitIM=) 5: RWueY0qSJBqdnyfoUjIKJBQ4tBM.roa (hash: bpFMaHQ2+HH7JzdJGHBSYoDlCYd8W8QG7hNLlWzI4Y4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:18:1e:59:26:3b:c5:95:a1:43:06:fd:9e:46:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213e1d50d52288bee80eea435577018712409bbe Validity Not Before: Jan 25 19:01:12 2026 GMT Not After : Jan 26 19:01:12 2026 GMT Subject: CN=8ea318aaedbdafc59f40eaa69f26514239ff2d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e6:65:6b:b2:71:d1:25:47:12:f9:89:be:13: 3f:2d:4d:2e:08:96:2d:0f:42:d5:e7:9e:04:f2:85: 2e:91:18:02:76:86:6f:6c:00:61:54:fc:a8:23:e7: 3d:d1:a9:1a:ae:32:a1:32:d7:d1:74:6d:f4:07:d5: da:f5:2c:70:71:46:d4:09:26:0e:9a:50:d0:42:e7: 98:e6:37:84:25:be:c9:b3:52:2c:63:d0:5b:dc:90: 57:db:90:02:d0:40:5d:8a:60:d7:78:b9:1b:50:5d: 25:4c:82:f9:ab:07:d4:44:98:4e:3a:c2:ca:4a:04: 95:56:82:6b:bb:a3:d1:90:e9:b7:27:61:59:0e:1e: 69:5f:0a:46:5f:94:14:31:f1:11:c6:51:0d:0f:04: e3:d1:c8:3d:a1:6b:d7:eb:a9:6f:94:5a:07:be:6e: 8d:5c:37:9d:9b:64:4e:26:dc:8a:7d:a0:89:ae:e9: d2:11:90:9f:08:8b:b3:74:02:3f:f1:41:69:1f:6b: a1:b3:5f:e2:5c:e8:ea:d9:eb:0c:14:1c:72:a8:51: 00:e8:0a:1a:62:30:c0:96:10:cb:3c:89:b5:3b:f9: eb:5c:9a:62:ff:c9:37:7b:c4:66:27:c1:b6:48:17: a5:38:85:f0:68:42:c0:cf:96:5c:6a:89:3b:61:bd: 18:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A3:18:AA:ED:BD:AF:C5:9F:40:EA:A6:9F:26:51:42:39:FF:2D:5A X509v3 Authority Key Identifier: keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:d4:e6:c1:2a:dd:d3:0f:e2:19:fe:7d:13:a7:d9:6f:6e:12: 64:2e:b9:3b:7a:17:ce:6b:92:d0:87:8e:45:df:51:ee:0c:60: 87:e1:d7:38:d3:47:ea:b5:9a:a2:c4:3b:ed:95:02:2c:88:39: 90:62:0b:b3:08:e6:00:23:85:1d:9e:52:ae:a3:ca:1a:38:4a: 39:fe:5b:5d:f2:3a:a6:5c:61:36:31:56:c5:b1:06:3e:c4:1a: aa:64:7b:ab:87:1e:3a:40:09:61:33:d7:8a:8a:86:bc:ae:52: a2:bc:f7:10:bd:46:5b:5a:cc:6e:83:da:fb:6d:26:4f:ad:ec: 29:77:71:0f:d6:b6:74:10:87:38:f2:7e:50:e4:98:01:13:ae: 95:fd:b6:1e:4a:a3:4d:2e:0c:b4:82:08:20:44:f2:16:87:00: c0:0d:6d:a0:72:7e:ff:d4:ee:51:76:25:bc:4e:93:d7:d9:b1: 5b:46:d6:8c:ba:2b:31:44:1b:10:dc:e5:3a:80:da:fc:0e:19: ed:ef:a9:db:fb:74:b0:70:d8:ea:12:05:12:41:08:b4:54:e7: 25:52:6b:fc:ec:b0:d8:c8:1a:3c:47:97:f3:a6:67:82:f4:18: d3:7d:dc:5c:ad:9d:3b:c1:b9:25:48:5a:e3:3d:5a:66:48:e6: 45:b6:dd:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iBgeWSY7xZWhQwb9nkZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxM2UxZDUwZDUyMjg4YmVlODBlZWE0MzU1NzcwMTg3MTI0 MDliYmUwHhcNMjYwMTI1MTkwMTEyWhcNMjYwMTI2MTkwMTEyWjAzMTEwLwYDVQQD Eyg4ZWEzMThhYWVkYmRhZmM1OWY0MGVhYTY5ZjI2NTE0MjM5ZmYyZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+Zla7Jx0SVHEvmJvhM/LU0uCJYt D0LV554E8oUukRgCdoZvbABhVPyoI+c90akarjKhMtfRdG30B9Xa9SxwcUbUCSYO mlDQQueY5jeEJb7Js1IsY9Bb3JBX25AC0EBdimDXeLkbUF0lTIL5qwfURJhOOsLK SgSVVoJru6PRkOm3J2FZDh5pXwpGX5QUMfERxlENDwTj0cg9oWvX66lvlFoHvm6N XDedm2ROJtyKfaCJrunSEZCfCIuzdAI/8UFpH2uhs1/iXOjq2esMFBxyqFEA6Aoa YjDAlhDLPIm1O/nrXJpi/8k3e8RmJ8G2SBelOIXwaELAz5Zcaok7Yb0YRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6jGKrtva/Fn0Dqpp8mUUI5/y1aMB8GA1UdIwQY MBaAFCE+HVDVIoi+6A7qQ1V3AYcSQJu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYt MzE2ZWYyNjFmNGE1LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYtMzE2ZWYyNjFmNGE1 LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNTmwSrd 0w/iGf59E6fZb24SZC65O3oXzmuS0IeORd9R7gxgh+HXONNH6rWaosQ77ZUCLIg5 kGILswjmACOFHZ5SrqPKGjhKOf5bXfI6plxhNjFWxbEGPsQaqmR7q4ceOkAJYTPX ioqGvK5Sorz3EL1GW1rMboPa+20mT63sKXdxD9a2dBCHOPJ+UOSYAROulf22Hkqj TS4MtIIIIETyFocAwA1toHJ+/9TuUXYlvE6T19mxW0bWjLorMUQbENzlOoDa/A4Z 7e+p2/t0sHDY6hIFEkEItFTnJVJr/Oyw2MgaPEeX86ZngvQY033cXK2dO8G5JUha 4z1aZkjmRbbd7g== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:41 2026 by rpki-client