This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json) Hash identifier: 7Snm7tw1FE7YyMTAlyRoNkubtecWNOwDY29O+dGKyqg= Subject key identifier: 93:FF:74:FD:68:98:EF:67:30:8D:85:52:3F:41:B1:13:37:EA:67:37 Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf Certificate serial: 019BF6F5600E6A67B0E686E1E34BC0B6D5E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft Manifest number: 0E56 Signing time: Sun 25 Jan 2026 21:00:34 +0000 Manifest this update: Sun 25 Jan 2026 21:00:34 +0000 Manifest next update: Mon 26 Jan 2026 21:00:34 +0000 Files and hashes: 1: 3WRLx1VuX3gbe6p64zEcEnwmqRA.roa (hash: zZW/QliS8IhUkuGq5vajhjknN/w+jV0LcSSoeJYbhoo=) 2: 9fFw95Cybth4GETJe2yAAXzh3Lg.roa (hash: RFaVbBJ4uRdaLpkejPLIR6g3AGGwcr9EgyJxlcIstBY=) 3: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: 5ajsmNjQUK1rcpxMdA971KAEEX0Aifx2gTnqshJwroY=) 4: wxOuW6uaBSUfZQJAyDa3cXRxGUQ.roa (hash: Pz77EIV3Gj7kY2omUaQaKNw7jVmZkVQ/MftdSPOET0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:60:0e:6a:67:b0:e6:86:e1:e3:4b:c0:b6:d5:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf Validity Not Before: Jan 25 21:00:34 2026 GMT Not After : Jan 26 21:00:34 2026 GMT Subject: CN=93ff74fd6898ef67308d85523f41b11337ea6737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7d:f5:c0:b8:bf:88:a7:e4:cc:c5:94:61:df: 50:9f:48:35:bc:cc:77:96:65:78:3c:8c:19:aa:a5: 7b:68:25:bc:4a:1c:e2:0f:e9:54:62:b4:6e:67:e4: 39:59:0e:d8:1d:0e:06:0d:41:80:43:39:4e:48:61: da:d4:a3:25:2d:3f:5a:b2:80:23:b8:b2:80:63:2c: ff:e1:09:36:bd:bf:d0:56:5c:99:7a:6c:d5:70:fe: 0d:29:95:10:b4:96:aa:b6:f9:70:32:f6:4c:06:3e: 51:9b:2e:ef:f7:b7:38:9d:cc:21:5a:be:8d:e3:1d: 24:80:f7:97:1a:bf:4b:2f:b7:57:8d:d2:11:74:a9: fd:17:b6:1a:1c:c2:33:50:c5:4e:d9:27:58:f9:96: 32:45:8c:22:c4:0d:66:2e:8c:05:5a:87:12:c3:bf: dd:f0:ab:68:d9:bd:d0:28:57:22:8f:18:3f:ad:30: c4:79:53:4a:99:00:7b:40:bc:40:d5:e9:5a:a2:3f: 9e:7d:dd:4a:6b:16:e6:d4:20:2a:5f:7b:79:2c:2b: d2:6b:77:1c:d2:4a:42:27:ab:cf:6a:fc:0b:c6:68: 7f:78:75:3a:1b:00:2b:84:fe:00:4c:d3:51:5e:4b: f2:6e:6f:8f:49:d8:cc:af:9e:9c:d0:56:6d:5c:95: 4a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FF:74:FD:68:98:EF:67:30:8D:85:52:3F:41:B1:13:37:EA:67:37 X509v3 Authority Key Identifier: keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:4f:76:7e:ba:90:c7:46:92:95:ca:76:0d:b9:dd:f8:70:04: 28:e0:87:df:44:6a:29:86:f6:71:8f:d6:cb:9e:85:7d:37:03: fb:6b:8f:b4:be:7f:61:70:8b:19:32:7e:f0:02:54:2b:ca:8d: 41:aa:23:64:62:40:a8:fe:2e:06:7c:f4:27:c3:e8:65:a9:fd: 21:c3:db:74:be:a7:de:63:ee:9a:60:7d:67:ad:de:61:70:fd: f2:48:81:0d:6d:53:9e:75:8e:67:0c:21:2d:23:d6:6e:7e:88: ac:4c:db:0b:25:55:45:98:cc:3c:8e:c5:d6:d7:3f:11:ec:d7: b1:08:c0:96:77:77:cd:b6:41:88:b6:e3:49:0c:a3:59:5c:ed: 6c:e4:2e:74:da:1b:cc:2e:e6:c7:ea:94:84:4a:6b:fe:48:cb: fd:01:60:50:87:ec:8c:33:ae:d8:71:87:1d:01:06:0a:58:a4: fb:8e:53:c9:83:f7:4c:c1:1b:46:b4:01:94:5b:5f:15:80:f5: ea:2a:3a:17:2c:21:e1:8f:79:1e:35:4a:1f:a7:45:99:21:e7: 74:9b:14:a5:78:11:ab:02:de:76:ec:9c:e9:32:d2:ac:16:ce: 57:52:91:e9:f8:be:3c:29:d9:4e:fa:31:30:f9:a2:80:49:92: f9:60:55:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29WAOamew5obh40vAttXoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YTVhYjY2OWZhYmU3MmRlYzJlODM3ODQ3NmE3ZTkxNWMy NGVkY2YwHhcNMjYwMTI1MjEwMDM0WhcNMjYwMTI2MjEwMDM0WjAzMTEwLwYDVQQD Eyg5M2ZmNzRmZDY4OThlZjY3MzA4ZDg1NTIzZjQxYjExMzM3ZWE2NzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX31wLi/iKfkzMWUYd9Qn0g1vMx3 lmV4PIwZqqV7aCW8ShziD+lUYrRuZ+Q5WQ7YHQ4GDUGAQzlOSGHa1KMlLT9asoAj uLKAYyz/4Qk2vb/QVlyZemzVcP4NKZUQtJaqtvlwMvZMBj5Rmy7v97c4ncwhWr6N 4x0kgPeXGr9LL7dXjdIRdKn9F7YaHMIzUMVO2SdY+ZYyRYwixA1mLowFWocSw7/d 8Kto2b3QKFcijxg/rTDEeVNKmQB7QLxA1elaoj+efd1Kaxbm1CAqX3t5LCvSa3cc 0kpCJ6vPavwLxmh/eHU6GwArhP4ATNNRXkvybm+PSdjMr56c0FZtXJVK9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJP/dP1omO9nMI2FUj9BsRM36mc3MB8GA1UdIwQY MBaAFIilq2afq+ct7C6DeEdqfpFcJO3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTkt MTVhMDIwN2Q0NjA5LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTktMTVhMDIwN2Q0NjA5 LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcE92frqQ x0aSlcp2Dbnd+HAEKOCH30RqKYb2cY/Wy56FfTcD+2uPtL5/YXCLGTJ+8AJUK8qN QaojZGJAqP4uBnz0J8PoZan9IcPbdL6n3mPummB9Z63eYXD98kiBDW1TnnWOZwwh LSPWbn6IrEzbCyVVRZjMPI7F1tc/EezXsQjAlnd3zbZBiLbjSQyjWVztbOQudNob zC7mx+qUhEpr/kjL/QFgUIfsjDOu2HGHHQEGClik+45TyYP3TMEbRrQBlFtfFYD1 6io6Fywh4Y95HjVKH6dFmSHndJsUpXgRqwLeduyc6TLSrBbOV1KR6fi+PCnZTvox MPmigEmS+WBVvw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:48 2026 by rpki-client