This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json) Hash identifier: ggjEtXhVuyJyvLjmd8C3tOscCu/tV2Sab9xO0AmB0vU= Subject key identifier: 86:0A:7C:97:AC:F0:A8:E8:70:A3:A9:2F:47:7C:78:9D:21:FC:26:36 Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e Certificate serial: 019BF91B0EBBB757B03ED07CB181F454E167 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 07:00:58 +0000 Manifest this update: Mon 26 Jan 2026 07:00:58 +0000 Manifest next update: Tue 27 Jan 2026 07:00:58 +0000 Files and hashes: 1: _MjZeflusMJHZIBBhksr7jcA7vw.roa (hash: BrV6MzyjqOEJzPWdJnGrS0VIFNiT/BKP8d1n0zB4odM=) 2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: ey5Y2t3eY1uOe8Kir31aMOKopgnyRq0tczHoGa822p0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:0e:bb:b7:57:b0:3e:d0:7c:b1:81:f4:54:e1:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e Validity Not Before: Jan 26 07:00:58 2026 GMT Not After : Jan 27 07:00:58 2026 GMT Subject: CN=860a7c97acf0a8e870a3a92f477c789d21fc2636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c1:ac:ed:a3:63:06:cf:3e:16:40:0a:ed:f5: 0f:cb:e0:00:05:7f:63:83:40:73:27:d2:89:71:09: a8:65:ce:c6:cc:2a:8d:9e:5a:9f:2d:7c:06:87:e0: 14:c7:e5:49:d4:e9:24:3e:0f:73:e9:ef:40:de:5b: 5a:b4:84:2e:45:e1:66:1a:c3:89:eb:ad:a1:89:ca: bb:ef:0f:a1:f8:3f:f6:c9:d8:d6:55:d0:52:9f:e3: ef:56:72:3a:c5:c6:f4:3d:12:be:24:0b:38:a1:cf: 18:d3:47:42:31:6e:49:bc:b4:50:37:d8:57:6a:86: 90:17:0f:60:9d:6d:f5:6a:52:34:38:d1:98:4d:ab: de:da:d1:c6:92:88:92:42:ca:8c:40:cf:51:7b:b2: 3e:e6:7a:31:60:d0:3f:ea:45:de:cb:d7:ac:66:35: b4:0a:e1:3b:3f:09:4b:66:fa:ed:4c:38:0e:f3:bc: 24:8c:f9:4e:98:b7:38:55:86:a2:5e:47:d7:96:cc: de:f1:00:38:ab:59:6b:f3:5b:e9:e5:ab:88:48:77: a8:76:25:82:31:23:99:df:b2:90:93:90:23:cf:d7: 07:0f:65:25:f3:51:4d:d6:f0:91:49:e4:71:78:ce: d2:b6:da:8a:06:80:59:99:07:4f:ab:b8:d0:27:48: 31:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0A:7C:97:AC:F0:A8:E8:70:A3:A9:2F:47:7C:78:9D:21:FC:26:36 X509v3 Authority Key Identifier: keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a8:f5:6e:bb:d4:73:f1:3b:b4:ec:d8:97:fe:65:25:97:85: 48:53:b9:2e:dd:88:e8:3b:60:ad:e6:3a:53:f6:a7:32:ee:f5: b6:d6:44:8c:47:61:77:76:0f:1f:d1:77:ec:04:21:c9:6c:f5: 7c:dc:87:36:02:6b:a5:60:aa:18:7d:51:28:c4:12:6a:39:44: 4d:0a:b0:17:7f:b2:df:28:af:fb:ca:d6:b9:e5:5a:e0:ab:6e: cb:60:fb:3a:45:c4:ea:aa:08:c6:88:37:15:9b:47:41:d0:ce: 2d:d2:cd:45:1c:03:fa:2e:00:80:f4:12:d5:f8:ef:53:14:a1: 22:3f:80:fe:6d:19:93:4c:73:0a:4a:70:8b:54:5b:a0:4b:d0: 12:99:4e:f2:4d:c3:5a:6b:04:9d:10:db:e6:5b:21:ed:d5:fe: 33:74:06:9c:5e:64:e4:80:00:f4:34:19:83:e4:f1:69:5b:f8: 73:a3:ef:44:97:2d:a6:74:7f:0a:f4:a5:f4:ab:b4:8b:91:b2: 3c:1d:06:0e:b1:08:f1:af:ef:d3:aa:48:df:49:5f:9a:09:b2: ff:07:db:ee:de:70:d2:29:78:a3:32:ba:ca:a0:88:1e:9b:79: 66:f5:20:17:55:3a:7d:8c:16:28:ca:b4:a7:c5:ad:cd:8a:8c: 68:2b:29:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5Gw67t1ewPtB8sYH0VOFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NzdkYTNkNDgzMDI3YTAxZWRkY2QwZTQzNWU4Mjg1ZjFi MWJiOWUwHhcNMjYwMTI2MDcwMDU4WhcNMjYwMTI3MDcwMDU4WjAzMTEwLwYDVQQD Eyg4NjBhN2M5N2FjZjBhOGU4NzBhM2E5MmY0NzdjNzg5ZDIxZmMyNjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMGs7aNjBs8+FkAK7fUPy+AABX9j g0BzJ9KJcQmoZc7GzCqNnlqfLXwGh+AUx+VJ1OkkPg9z6e9A3ltatIQuReFmGsOJ 662hicq77w+h+D/2ydjWVdBSn+PvVnI6xcb0PRK+JAs4oc8Y00dCMW5JvLRQN9hX aoaQFw9gnW31alI0ONGYTave2tHGkoiSQsqMQM9Re7I+5noxYNA/6kXey9esZjW0 CuE7PwlLZvrtTDgO87wkjPlOmLc4VYaiXkfXlsze8QA4q1lr81vp5auISHeodiWC MSOZ37KQk5Ajz9cHD2Ul81FN1vCRSeRxeM7SttqKBoBZmQdPq7jQJ0gxRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYKfJes8KjocKOpL0d8eJ0h/CY2MB8GA1UdIwQY MBaAFIh32j1IMCegHt3NDkNegoXxsbueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEt MmY1ZjRjNTUyNjJmLzEvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEtMmY1ZjRjNTUyNjJm LzEvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqj1brvU c/E7tOzYl/5lJZeFSFO5Lt2I6DtgreY6U/anMu71ttZEjEdhd3YPH9F37AQhyWz1 fNyHNgJrpWCqGH1RKMQSajlETQqwF3+y3yiv+8rWueVa4Ktuy2D7OkXE6qoIxog3 FZtHQdDOLdLNRRwD+i4AgPQS1fjvUxShIj+A/m0Zk0xzCkpwi1RboEvQEplO8k3D WmsEnRDb5lsh7dX+M3QGnF5k5IAA9DQZg+TxaVv4c6PvRJctpnR/CvSl9Ku0i5Gy PB0GDrEI8a/v06pI30lfmgmy/wfb7t5w0il4ozK6yqCIHpt5ZvUgF1U6fYwWKMq0 p8WtzYqMaCspog== -----END CERTIFICATE-----Generated at Mon Jan 26 14:16:35 2026 by rpki-client