This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft File: idvHFWpO58Z9nmhHZ6L0uvijW6s.mft (raw, json) Hash identifier: 450LwQfQfQjlJePP2CZq3Geot4Z2vXKAf5krNZK4q6o= Subject key identifier: 23:15:04:4C:C2:7C:74:E1:87:48:52:FF:98:D4:85:BE:9E:65:AE:99 Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB Certificate issuer: /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab Certificate serial: 019BF3BE22A630F056E1620240599ED2EEDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 06:01:22 +0000 Manifest this update: Sun 25 Jan 2026 06:01:22 +0000 Manifest next update: Mon 26 Jan 2026 06:01:22 +0000 Files and hashes: 1: 0CdqlW01ACbv3EQD2O6eNsK9tUw.asa (hash: 9WhwZoBfEGd5k4zvC4ZA/vr5vp3EXDon/OkKYutAIU0=) 2: GBd4rVL5dJN0-9cuwhBBwNEyoV0.roa (hash: iRjXs3gr4L7byQxpcKRUar4Pisuwylgwnacqi0QdLQQ=) 3: PLZ1UvYELfgIKPLrh6OHNKK9acc.roa (hash: Shni7jpvErA8s5MzWpDHouyJxJ3M6Tbya9IWgb+KMM8=) 4: idvHFWpO58Z9nmhHZ6L0uvijW6s.crl (hash: 7nIZmiDUXzIL7XpMCmHWfrnO7+ay1BerVPvbU4RbDbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:be:22:a6:30:f0:56:e1:62:02:40:59:9e:d2:ee:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab Validity Not Before: Jan 25 06:01:22 2026 GMT Not After : Jan 26 06:01:22 2026 GMT Subject: CN=2315044cc27c74e1874852ff98d485be9e65ae99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d0:80:76:85:4b:38:db:01:be:b8:a8:5c:73: 44:55:c8:26:7f:2d:b7:97:90:56:76:b0:7b:af:7f: e7:cf:c5:0e:58:1e:eb:96:91:f0:85:84:b2:0f:04: 10:5c:5f:91:e7:70:4e:34:5c:b4:b6:aa:b6:05:e0: b0:66:f1:ba:6a:83:0a:9b:83:79:c9:57:b6:df:d1: 24:de:aa:05:2c:9d:30:f4:69:71:85:20:78:15:93: 8e:5c:61:0e:3d:65:9d:61:1f:f0:0b:83:ec:09:e2: e2:c4:f0:cc:ed:e5:0e:83:bf:39:e6:52:9c:a8:6e: 02:a5:3d:90:1c:c9:27:62:f9:82:63:cc:2e:e8:58: a9:35:b0:3c:0b:3e:1a:52:88:b8:d5:39:3c:e3:b1: 81:b3:b4:d1:86:02:e2:b6:55:a0:b2:31:71:55:d4: 2c:ce:4d:ae:ce:02:01:1e:cc:a9:8e:54:22:3f:1c: fd:92:e4:10:fe:2f:45:44:ef:57:7a:13:24:06:a1: 0b:d5:a6:0a:5d:79:4b:8b:42:5b:4e:f7:19:73:b1: 9c:95:ae:f0:f1:8f:85:de:5b:13:ec:f6:7c:f5:62: 7b:cc:11:87:4e:8f:7f:05:95:27:61:b2:1b:fe:75: 5c:a3:d8:b3:49:bb:db:12:fb:d4:c8:de:9e:98:17: 67:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:15:04:4C:C2:7C:74:E1:87:48:52:FF:98:D4:85:BE:9E:65:AE:99 X509v3 Authority Key Identifier: keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:0d:a3:a9:7a:f2:fd:02:ec:f8:fc:95:65:73:9d:ae:dc:e6: 57:68:c6:b9:37:5f:00:69:a6:e5:ab:f6:dc:aa:91:f5:64:0d: 0d:fe:49:93:8a:36:ef:41:64:c5:7e:ab:f6:93:17:db:4c:2c: 92:43:cf:4d:5b:fd:83:29:7a:f8:75:af:f3:2e:43:58:f5:1c: c0:8f:63:6e:95:bf:70:79:d2:2f:9f:8e:22:f9:3e:ad:be:74: 02:a0:4d:29:d7:20:cc:37:07:79:b8:d4:ef:53:7d:6b:df:3e: e0:d1:2d:95:a3:a8:71:0d:9b:86:0e:b8:b3:46:ee:2d:da:87: e6:1a:ea:af:dc:f6:ff:59:c9:92:8d:44:0e:26:52:f1:39:3b: 09:60:2f:0c:60:57:9f:48:a4:c4:8a:05:02:ce:2b:1b:88:43: e8:58:4c:68:56:d7:ee:07:b3:b9:7a:f7:2d:8b:30:39:b9:3e: 06:bc:5f:dc:38:2b:83:ea:a7:48:13:80:18:b5:05:ed:f0:aa: f4:65:db:8b:09:09:66:35:37:4e:1b:49:83:41:44:b0:1b:34: 71:cc:72:ff:51:8a:56:ee:a8:bf:fe:c1:04:d8:05:27:bb:a1: fd:25:e2:58:b9:7c:52:20:ed:9c:bf:52:c8:89:da:b4:a4:f3: 4f:f4:b9:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzviKmMPBW4WICQFme0u7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZGJjNzE1NmE0ZWU3YzY3ZDllNjg0NzY3YTJmNGJhZjhh MzViYWIwHhcNMjYwMTI1MDYwMTIyWhcNMjYwMTI2MDYwMTIyWjAzMTEwLwYDVQQD EygyMzE1MDQ0Y2MyN2M3NGUxODc0ODUyZmY5OGQ0ODViZTllNjVhZTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NCAdoVLONsBvrioXHNEVcgmfy23 l5BWdrB7r3/nz8UOWB7rlpHwhYSyDwQQXF+R53BONFy0tqq2BeCwZvG6aoMKm4N5 yVe239Ek3qoFLJ0w9GlxhSB4FZOOXGEOPWWdYR/wC4PsCeLixPDM7eUOg7855lKc qG4CpT2QHMknYvmCY8wu6FipNbA8Cz4aUoi41Tk847GBs7TRhgLitlWgsjFxVdQs zk2uzgIBHsypjlQiPxz9kuQQ/i9FRO9XehMkBqEL1aYKXXlLi0JbTvcZc7Gcla7w 8Y+F3lsT7PZ89WJ7zBGHTo9/BZUnYbIb/nVco9izSbvbEvvUyN6emBdngwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMVBEzCfHThh0hS/5jUhb6eZa6ZMB8GA1UdIwQY MBaAFInbxxVqTufGfZ5oR2ei9Lr4o1urMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81YTlhOTktNDNjMi00Y2M4LWEzN2It NDk1MDFhNzY5NGM0LzEvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81YTlhOTktNDNjMi00Y2M4LWEzN2ItNDk1MDFhNzY5NGM0 LzEvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQ2jqXry /QLs+PyVZXOdrtzmV2jGuTdfAGmm5av23KqR9WQNDf5Jk4o270FkxX6r9pMX20ws kkPPTVv9gyl6+HWv8y5DWPUcwI9jbpW/cHnSL5+OIvk+rb50AqBNKdcgzDcHebjU 71N9a98+4NEtlaOocQ2bhg64s0buLdqH5hrqr9z2/1nJko1EDiZS8Tk7CWAvDGBX n0ikxIoFAs4rG4hD6FhMaFbX7gezuXr3LYswObk+Brxf3Dgrg+qnSBOAGLUF7fCq 9GXbiwkJZjU3ThtJg0FEsBs0ccxy/1GKVu6ov/7BBNgFJ7uh/SXiWLl8UiDtnL9S yInatKTzT/S5hg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:46:32 2026 by rpki-client