This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json) Hash identifier: se3dj0Hjd34MGkL8VAV49Y2lKWSUCQ2haldeYmIxqDU= Subject key identifier: 6E:8D:9A:43:B5:A3:41:DB:85:FC:9D:DA:9F:07:76:BF:0F:88:ED:E3 Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e Certificate serial: 019BF687EA818982306E13730130A0321AA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft Manifest number: 0FCF Signing time: Sun 25 Jan 2026 19:01:00 +0000 Manifest this update: Sun 25 Jan 2026 19:01:00 +0000 Manifest next update: Mon 26 Jan 2026 19:01:00 +0000 Files and hashes: 1: CPndinjPYr6tuDu76KQaJ-aGMwI.roa (hash: nrsdPAkRRrAV3pIEBSnHKX1eqjnFVOeohTv704UK0JA=) 2: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: UURO24RIHbYeHtFkOCXGVJuRgWr3eDHPUkj8QxDHYQ4=) 3: RoT_BRy5K5T_EFywyXjf2sUOgfA.roa (hash: 3g9pqCZcoGTGtwQJjCoF4vdhAm5IX+/HPg+Sn5/5ZvI=) 4: b9-WVQZEPxKTQu4HO3vpyGGIgyM.roa (hash: zJruMssE6fAWn+HUVB4+RJJ7aVS5WNO5nmK7xyX8S+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:ea:81:89:82:30:6e:13:73:01:30:a0:32:1a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e Validity Not Before: Jan 25 19:01:00 2026 GMT Not After : Jan 26 19:01:00 2026 GMT Subject: CN=6e8d9a43b5a341db85fc9dda9f0776bf0f88ede3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:57:f3:4b:ff:3e:00:e6:7f:37:95:6e:19:1c: 90:e6:2c:7d:ca:b9:eb:03:9b:93:16:f2:f0:22:c5: 67:58:c5:71:d8:25:11:29:d8:52:64:9d:9c:de:22: 16:ec:23:5f:af:71:e1:c7:72:7c:19:6c:55:8e:85: 7d:82:3b:c8:79:e4:ce:11:c7:79:3a:80:9e:31:5f: c9:bf:2b:9a:35:09:1e:73:4b:36:5d:e0:32:94:94: de:6a:a4:06:06:66:34:f7:bc:90:94:c8:14:8e:42: cf:2f:2d:08:06:63:97:ea:27:4e:37:4b:56:d9:58: e3:66:1f:f1:25:4a:c0:14:b7:5d:84:26:f8:f2:5b: 94:7f:f7:b5:9d:20:93:73:fa:bc:80:93:ce:f9:9a: 67:43:58:d0:39:42:26:17:4a:cc:3c:51:af:89:1b: 4c:0e:bb:cb:23:71:63:a1:34:46:3f:6e:9c:d6:9e: 55:6f:3a:fa:a8:0a:5e:62:0d:7c:fd:e2:ea:fb:7d: fe:e0:0f:91:7a:9f:45:b5:0c:6e:cb:65:9f:1e:03: 89:58:b8:7b:7b:03:ad:57:60:70:82:b9:06:2e:3e: 0c:f1:66:11:a7:c3:17:c8:8f:da:d2:8d:90:99:22: 91:69:13:1a:d8:52:94:e2:77:54:36:b3:81:d2:ae: 15:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8D:9A:43:B5:A3:41:DB:85:FC:9D:DA:9F:07:76:BF:0F:88:ED:E3 X509v3 Authority Key Identifier: keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:82:5a:50:d5:7d:e5:fd:92:cb:fd:7c:44:01:c5:49:a5:89: f8:37:62:be:d4:ea:96:86:7b:ff:72:0b:e0:1a:79:92:a4:d6: 7e:93:96:18:3a:97:c2:0c:23:1f:3b:90:7a:59:9e:0a:ef:7a: 1c:45:83:49:ea:88:d3:83:ae:5d:d6:4c:2e:95:f0:90:c1:c9: a8:39:41:89:b5:5d:ab:67:42:10:32:8d:f6:8b:fe:0f:d8:29: c6:ef:3a:45:3f:ad:0c:db:f1:a3:0f:f2:2f:2e:86:e4:d8:5a: 29:ae:d6:29:aa:52:5a:4a:5c:b2:23:75:7f:7d:9c:f7:4d:59: c1:df:0f:7c:19:72:17:1f:72:42:89:49:7a:84:ee:48:ee:8e: 1c:94:77:f3:82:e9:fd:0f:01:96:d4:7c:7f:57:b6:55:5c:62: 13:87:47:44:84:2f:ab:26:83:e1:12:9d:07:3b:0f:c7:1b:6a: a4:da:95:c8:36:cb:36:bc:d2:58:1c:21:8c:cb:bb:83:f1:6d: 6a:86:03:38:a8:24:3f:82:90:83:8b:92:53:70:43:db:3f:35: 02:7d:8d:3d:45:6d:76:5d:6b:10:40:40:01:25:fc:06:e7:10: 5e:c5:ac:68:b8:59:7e:60:8d:d2:55:51:c2:07:f7:09:46:60: b9:e0:86:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h+qBiYIwbhNzATCgMhqlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzZlZDVmNTYyM2VkZWI3OTEwYWNkMzFkNWY2ZWU4MWU1 Y2IxN2UwHhcNMjYwMTI1MTkwMTAwWhcNMjYwMTI2MTkwMTAwWjAzMTEwLwYDVQQD Eyg2ZThkOWE0M2I1YTM0MWRiODVmYzlkZGE5ZjA3NzZiZjBmODhlZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFfzS/8+AOZ/N5VuGRyQ5ix9yrnr A5uTFvLwIsVnWMVx2CURKdhSZJ2c3iIW7CNfr3Hhx3J8GWxVjoV9gjvIeeTOEcd5 OoCeMV/JvyuaNQkec0s2XeAylJTeaqQGBmY097yQlMgUjkLPLy0IBmOX6idON0tW 2VjjZh/xJUrAFLddhCb48luUf/e1nSCTc/q8gJPO+ZpnQ1jQOUImF0rMPFGviRtM DrvLI3FjoTRGP26c1p5Vbzr6qApeYg18/eLq+33+4A+Rep9FtQxuy2WfHgOJWLh7 ewOtV2BwgrkGLj4M8WYRp8MXyI/a0o2QmSKRaRMa2FKU4ndUNrOB0q4V8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6NmkO1o0Hbhfyd2p8Hdr8PiO3jMB8GA1UdIwQY MBaAFCI27V9WI+3reRCs0x1fbugeXLF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xZDlkZGEtMmFkZi00NmJkLThhZjct NGQxNmJlOWJhMTMyLzEvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8xZDlkZGEtMmFkZi00NmJkLThhZjctNGQxNmJlOWJhMTMy LzEvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzoJaUNV9 5f2Sy/18RAHFSaWJ+DdivtTqloZ7/3IL4Bp5kqTWfpOWGDqXwgwjHzuQelmeCu96 HEWDSeqI04OuXdZMLpXwkMHJqDlBibVdq2dCEDKN9ov+D9gpxu86RT+tDNvxow/y Ly6G5NhaKa7WKapSWkpcsiN1f32c901Zwd8PfBlyFx9yQolJeoTuSO6OHJR384Lp /Q8BltR8f1e2VVxiE4dHRIQvqyaD4RKdBzsPxxtqpNqVyDbLNrzSWBwhjMu7g/Ft aoYDOKgkP4KQg4uSU3BD2z81An2NPUVtdl1rEEBAASX8BucQXsWsaLhZfmCN0lVR wgf3CUZgueCGGA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:56 2026 by rpki-client