This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft File: I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json) Hash identifier: nxtbs3vdFJnpcAZIThI3lUA5/QjbPBtmNuj3nVDaaPg= Subject key identifier: DB:F1:4F:1A:83:CD:1A:60:7D:D5:BF:AC:CE:94:44:87:19:A2:73:DA Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e Certificate serial: 019BF61A57ACE741AD54E4562AC33E4B3311 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 17:01:20 +0000 Manifest this update: Sun 25 Jan 2026 17:01:20 +0000 Manifest next update: Mon 26 Jan 2026 17:01:20 +0000 Files and hashes: 1: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: DAOJov7UsRUNOugClRGQEHVAYgJ2nNGQKtOCcnczJsw=) 2: Tfq0-Nhgv3VBbk9n3Vq4GI4iE_0.roa (hash: /bnj20jmvQ1RfURsnTm2hkQVvQm8WHvC5U4MWvcKmj0=) 3: UeUxs8O7BQG0PZAERCcpvW9oGJU.roa (hash: RA/5tda8Js/MvHGINkhN95bDFA6hSRU7RaQvgqea3Ts=) 4: u8pBAQ-Z3p2H9WD6gzLyx7OKtRM.roa (hash: oA/e5+fvQLLxtw5lvTdOJVbmZhfodYNiZ+D6A/AnOCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:57:ac:e7:41:ad:54:e4:56:2a:c3:3e:4b:33:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e Validity Not Before: Jan 25 17:01:20 2026 GMT Not After : Jan 26 17:01:20 2026 GMT Subject: CN=dbf14f1a83cd1a607dd5bfacce94448719a273da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ed:9e:27:2d:58:5f:9e:a7:75:21:c6:18:40: 84:1c:dc:03:f6:10:58:71:e9:f3:e5:ea:6d:cd:84: 92:df:36:bc:f8:5b:8b:27:07:f9:c5:30:06:1d:39: ba:a9:2d:f2:94:5d:18:7d:cd:06:14:a4:92:d3:cb: 1e:83:e5:2c:d9:5c:83:a0:4f:49:2b:93:91:15:0e: 2e:86:17:f5:02:c7:9c:4f:bf:92:90:3f:11:c2:a7: 11:14:e9:8f:41:c8:15:fa:da:c7:56:38:ff:f9:38: 24:15:7b:bd:d8:3d:1b:ff:44:8f:c4:53:24:08:b0: 25:de:fe:94:07:09:94:6e:22:1a:8e:29:1c:a4:60: 9e:69:f5:07:f7:40:1e:f1:fe:d5:35:86:8f:ab:92: 6a:4a:fe:e9:6d:f0:14:7e:1c:c5:89:95:83:42:8f: 7a:c4:3a:97:28:65:de:61:6b:28:b8:62:45:95:ae: d7:46:a1:e5:af:cb:3a:fd:a3:f2:32:59:05:1f:15: 7f:16:a3:56:9b:77:37:ed:a6:dc:69:f9:5b:7f:8f: 45:fc:4f:a1:7e:b8:5f:b5:86:63:a4:1a:41:b6:38: 82:2a:b5:5a:29:77:14:f6:25:c2:91:7b:13:ca:f4: 22:81:2d:18:50:06:02:2f:17:33:2c:52:da:78:95: e1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F1:4F:1A:83:CD:1A:60:7D:D5:BF:AC:CE:94:44:87:19:A2:73:DA X509v3 Authority Key Identifier: keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:23:8d:25:8f:5e:58:39:64:0c:a1:d8:8d:d1:5b:9a:1f:dc: 61:5c:2e:f4:db:85:eb:58:ea:41:28:3a:7c:04:52:dc:3e:7c: 22:51:f9:23:64:fa:ca:77:3b:88:58:63:10:9c:70:8c:d7:6c: 99:d2:fe:54:9b:bd:19:df:ed:06:a7:27:7f:9b:83:e5:17:55: ec:07:e7:dd:c9:63:96:76:f1:81:96:2b:8a:61:7a:d5:14:fd: 9a:ca:53:ec:c6:04:08:f6:58:97:1e:20:90:30:47:95:6f:74: ca:9b:93:a1:14:a7:f1:e2:1c:a5:75:f0:c7:55:37:61:da:40: e3:05:82:dc:12:a3:ec:86:5c:95:ea:d5:88:54:b2:97:b2:14: d5:97:a2:05:8e:b8:dc:f8:88:08:f6:9c:a0:be:e9:9b:c1:31: 5e:7d:83:a4:f7:7a:fe:93:21:45:b1:c1:11:0a:af:de:38:fa: c5:63:9f:27:fd:f4:0d:67:b1:82:a8:11:5d:e9:df:6c:4d:cb: 80:4c:e9:b0:22:a0:6a:72:2e:9d:08:5e:b4:52:92:54:55:b5: 77:18:78:61:76:eb:70:9b:dd:09:80:89:b3:f2:94:c2:97:13: 0c:cc:26:36:df:e9:fd:4c:9e:b5:6d:4d:2d:5a:55:97:82:5c: 80:a2:99:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gles50GtVORWKsM+SzMRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNjYyYzlhOTgwYWQ3NTg0NjUwYWJhYTM1NDViOWVhOTFk M2UzNWUwHhcNMjYwMTI1MTcwMTIwWhcNMjYwMTI2MTcwMTIwWjAzMTEwLwYDVQQD EyhkYmYxNGYxYTgzY2QxYTYwN2RkNWJmYWNjZTk0NDQ4NzE5YTI3M2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu2eJy1YX56ndSHGGECEHNwD9hBY cenz5eptzYSS3za8+FuLJwf5xTAGHTm6qS3ylF0Yfc0GFKSS08seg+Us2VyDoE9J K5ORFQ4uhhf1AsecT7+SkD8RwqcRFOmPQcgV+trHVjj/+TgkFXu92D0b/0SPxFMk CLAl3v6UBwmUbiIajikcpGCeafUH90Ae8f7VNYaPq5JqSv7pbfAUfhzFiZWDQo96 xDqXKGXeYWsouGJFla7XRqHlr8s6/aPyMlkFHxV/FqNWm3c37abcaflbf49F/E+h frhftYZjpBpBtjiCKrVaKXcU9iXCkXsTyvQigS0YUAYCLxczLFLaeJXh7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvxTxqDzRpgfdW/rM6URIcZonPaMB8GA1UdIwQY MBaAFCNmLJqYCtdYRlCrqjVFueqR0+NeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wMTc1ZTYtNDI3Yi00ZWY5LThlYjEt ODIzMmUzNTBkNDU4LzEvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wMTc1ZTYtNDI3Yi00ZWY5LThlYjEtODIzMmUzNTBkNDU4 LzEvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISONJY9e WDlkDKHYjdFbmh/cYVwu9NuF61jqQSg6fARS3D58IlH5I2T6ync7iFhjEJxwjNds mdL+VJu9Gd/tBqcnf5uD5RdV7Afn3cljlnbxgZYrimF61RT9mspT7MYECPZYlx4g kDBHlW90ypuToRSn8eIcpXXwx1U3YdpA4wWC3BKj7IZclerViFSyl7IU1ZeiBY64 3PiICPacoL7pm8ExXn2DpPd6/pMhRbHBEQqv3jj6xWOfJ/30DWexgqgRXenfbE3L gEzpsCKganIunQhetFKSVFW1dxh4YXbrcJvdCYCJs/KUwpcTDMwmNt/p/UyetW1N LVpVl4JcgKKZyg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:45:38 2026 by rpki-client