This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft File: IbnyqCas92elDlmynsH_CSz9PBw.mft (raw, json) Hash identifier: D6rTsV//t+j+aMdLSXpdWW1zb1hmZ+RkSplzve5pjwc= Subject key identifier: D1:D0:F6:E4:57:E8:56:4E:4F:14:4C:E4:0B:81:77:14:BF:CD:6E:5B Authority key identifier: 21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C Certificate issuer: /CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c Certificate serial: 019BF574E314C0597DC8F89F5B23E60E0AB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft Manifest number: 01B5 Signing time: Sun 25 Jan 2026 14:00:36 +0000 Manifest this update: Sun 25 Jan 2026 14:00:36 +0000 Manifest next update: Mon 26 Jan 2026 14:00:36 +0000 Files and hashes: 1: 4WrRqTDFyTm1szKwwV0Xhx_GeNY.roa (hash: UQqbqQfwwezREl+rf3IrXTGH3e9sOiVhZFDwlGOjLvE=) 2: IbnyqCas92elDlmynsH_CSz9PBw.crl (hash: XM/NPzJqLnW00tOAIWoDuQfiKU75wiZm7kGwPsHyYOQ=) 3: VirJ4FMMufMBPFGmLTdS7NiM954.asa (hash: HtijruVhowZabFYLDxbWBFjC7DIj4rAofcdBe14FyKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:e3:14:c0:59:7d:c8:f8:9f:5b:23:e6:0e:0a:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c Validity Not Before: Jan 25 14:00:36 2026 GMT Not After : Jan 26 14:00:36 2026 GMT Subject: CN=d1d0f6e457e8564e4f144ce40b817714bfcd6e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cb:76:47:0f:27:ad:fa:24:9b:a4:62:5a:fc: c5:b9:8a:6f:56:6f:5a:b3:39:d1:b2:84:af:0e:56: 2a:c4:17:39:44:73:1a:3f:45:24:d0:43:52:27:2c: c1:33:83:87:1f:09:57:37:66:43:1e:0e:7a:e7:3e: 50:bf:b7:be:70:ac:88:ea:3e:7b:3a:12:36:ce:96: cd:83:4c:cb:43:82:08:e5:20:1b:ec:2b:e8:ee:1d: 80:84:66:0d:78:80:c9:69:ac:b9:73:0d:65:0b:53: 99:83:91:f9:e8:d7:14:5f:d0:63:f2:5a:75:4d:b7: 7d:04:eb:31:9e:a2:92:4d:79:59:7a:fb:ce:d9:39: 19:73:b3:a8:cb:86:9b:27:51:3a:5f:83:7e:d8:d3: c6:ed:87:1d:56:a8:42:2d:f5:da:82:ac:62:e9:eb: 85:a0:b4:df:2a:c6:25:4b:c0:62:da:95:3a:b3:58: 53:36:8a:96:96:0c:3f:39:8c:aa:2c:fc:8c:cf:80: 85:04:84:5b:62:37:3e:9f:f9:3a:3a:74:37:24:d2: 69:17:30:e2:bc:2e:27:2b:ba:bf:6f:b0:d8:4b:26: a1:2c:ec:c2:c9:df:5b:e2:2f:09:6c:2f:ce:f6:0b: f8:0b:bd:29:de:fe:c4:78:7f:f1:af:3a:62:ba:b7: 35:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D0:F6:E4:57:E8:56:4E:4F:14:4C:E4:0B:81:77:14:BF:CD:6E:5B X509v3 Authority Key Identifier: keyid:21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:c4:bb:19:51:96:a8:3d:0a:83:c3:3a:5d:89:f0:8a:9a:10: 4a:71:8b:74:3d:18:02:3f:96:06:af:70:06:c3:ac:6e:29:e8: 2e:85:e3:a7:96:33:ad:bd:82:24:f8:ee:f6:33:d4:7c:ec:17: fd:15:60:4a:66:70:57:fd:24:3f:26:fb:41:0c:56:63:c9:23: 02:5f:7a:6e:33:b8:fc:5c:9b:5f:04:03:e9:2e:19:36:31:39: 61:bd:fc:f1:f4:d0:40:7f:11:a1:a2:35:51:fe:58:05:87:9d: fb:e3:44:b9:91:7a:b9:cd:fe:32:67:79:d1:b0:f5:af:1a:77: c9:62:8c:15:dc:6d:c4:6f:ed:c7:0d:08:57:07:f8:b2:d6:83: 6a:41:6a:40:3c:c5:8c:3e:38:ab:76:a3:79:21:20:55:3f:23: c5:a6:ef:92:d9:a0:ed:8f:d2:ce:2f:85:2c:00:af:57:5b:22: e9:40:07:ff:95:2e:fd:db:13:93:e4:e6:e8:40:51:1a:41:8e: 76:52:8d:0c:e4:fe:00:e7:dd:24:fa:15:e6:e3:6b:82:7b:54: a9:cb:94:df:71:1c:34:a2:5d:ad:7c:62:08:a7:63:7a:ff:74: 66:74:38:46:7f:48:df:1d:7b:4f:05:d9:df:be:81:c1:c3:f3: 6d:fd:48:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dOMUwFl9yPifWyPmDgq5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYjlmMmE4MjZhY2Y3NjdhNTBlNTliMjllYzFmZjA5MmNm ZDNjMWMwHhcNMjYwMTI1MTQwMDM2WhcNMjYwMTI2MTQwMDM2WjAzMTEwLwYDVQQD EyhkMWQwZjZlNDU3ZTg1NjRlNGYxNDRjZTQwYjgxNzcxNGJmY2Q2ZTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Mt2Rw8nrfokm6RiWvzFuYpvVm9a sznRsoSvDlYqxBc5RHMaP0Uk0ENSJyzBM4OHHwlXN2ZDHg565z5Qv7e+cKyI6j57 OhI2zpbNg0zLQ4II5SAb7Cvo7h2AhGYNeIDJaay5cw1lC1OZg5H56NcUX9Bj8lp1 Tbd9BOsxnqKSTXlZevvO2TkZc7Ooy4abJ1E6X4N+2NPG7YcdVqhCLfXagqxi6euF oLTfKsYlS8Bi2pU6s1hTNoqWlgw/OYyqLPyMz4CFBIRbYjc+n/k6OnQ3JNJpFzDi vC4nK7q/b7DYSyahLOzCyd9b4i8JbC/O9gv4C70p3v7EeH/xrzpiurc15QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHQ9uRX6FZOTxRM5AuBdxS/zW5bMB8GA1UdIwQY MBaAFCG58qgmrPdnpQ5Zsp7B/wks/TwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJueXFDYXM5MmVsRGxteW5zSF9DU3o5UEJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kNzBmNzgtMDgyZS00ZWMyLTgxMDAt N2NkY2I1MGVkMGU0LzEvSWJueXFDYXM5MmVsRGxteW5zSF9DU3o5UEJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kNzBmNzgtMDgyZS00ZWMyLTgxMDAtN2NkY2I1MGVkMGU0 LzEvSWJueXFDYXM5MmVsRGxteW5zSF9DU3o5UEJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZcS7GVGW qD0Kg8M6XYnwipoQSnGLdD0YAj+WBq9wBsOsbinoLoXjp5Yzrb2CJPju9jPUfOwX /RVgSmZwV/0kPyb7QQxWY8kjAl96bjO4/FybXwQD6S4ZNjE5Yb388fTQQH8RoaI1 Uf5YBYed++NEuZF6uc3+Mmd50bD1rxp3yWKMFdxtxG/txw0IVwf4staDakFqQDzF jD44q3ajeSEgVT8jxabvktmg7Y/Szi+FLACvV1si6UAH/5Uu/dsTk+Tm6EBRGkGO dlKNDOT+AOfdJPoV5uNrgntUqcuU33EcNKJdrXxiCKdjev90ZnQ4Rn9I3x17TwXZ 376BwcPzbf1IDA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:29:52 2026 by rpki-client