This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json) Hash identifier: 2C+eyJCUYo143oIBotsFndShU16zyu1ne7DVAmNkzsY= Subject key identifier: 8A:65:FB:8A:66:84:BC:68:5E:25:CB:00:E1:25:C3:0A:67:EC:73:E9 Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11 Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11 Certificate serial: 019BF6F59D1DD6FCBB81A9DF8C4C205341F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft Manifest number: 070C Signing time: Sun 25 Jan 2026 21:00:50 +0000 Manifest this update: Sun 25 Jan 2026 21:00:50 +0000 Manifest next update: Mon 26 Jan 2026 21:00:50 +0000 Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: cZWvWLb56UU+6xWqbl622ZMFQG7LNH1vX00wAlDC5Mc=) 2: q4ymNypCeYCDh5Jdw23U-ypzjiE.roa (hash: zp/+BxeAmcCMbS7nT6vnltxLIb38O2i4zuujdCCgNJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:9d:1d:d6:fc:bb:81:a9:df:8c:4c:20:53:41:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11 Validity Not Before: Jan 25 21:00:50 2026 GMT Not After : Jan 26 21:00:50 2026 GMT Subject: CN=8a65fb8a6684bc685e25cb00e125c30a67ec73e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:d7:dd:bd:08:01:0c:77:fe:05:a9:5a:39: b6:8e:16:7d:b8:92:f5:ae:e8:c3:7b:45:4e:ac:e1: 5e:0a:4c:2c:0d:53:ed:75:28:a9:1a:52:c1:f1:4c: 8f:96:c2:85:de:58:95:bd:19:85:98:81:25:91:ff: c2:aa:65:46:9d:52:bb:8c:52:40:18:89:25:25:aa: c7:84:13:6e:a1:35:6a:18:f2:7c:25:1d:23:0a:05: 37:d2:98:8d:72:9b:0c:cb:d3:8f:eb:38:94:98:4c: ef:f9:c4:20:d1:d0:0c:2e:28:09:9d:93:8f:99:b5: 2c:e5:b3:1f:25:b6:01:5a:09:67:40:eb:4f:ef:d2: 84:b3:ba:f8:17:0f:29:f1:d8:eb:f7:7d:dc:d4:3c: 5b:0f:28:e3:e0:57:ee:f8:a9:50:d0:b7:55:d3:a3: f1:bb:a3:47:f5:a8:30:21:51:83:cc:ac:63:1b:28: bb:d3:27:1d:69:bc:49:f3:84:74:df:e9:01:16:93: dd:c9:c4:8c:11:f9:dc:bc:36:c5:67:af:15:5c:5e: 3f:4a:c3:bf:1e:71:c2:e5:0d:22:62:ff:f0:45:c2: ac:22:0a:7b:58:7a:b6:d3:86:ea:4e:95:a3:69:3b: 42:24:f7:13:bb:19:2b:66:73:16:2d:8f:ad:9d:ad: dc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:65:FB:8A:66:84:BC:68:5E:25:CB:00:E1:25:C3:0A:67:EC:73:E9 X509v3 Authority Key Identifier: keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:5d:50:ea:37:15:f5:72:6a:b7:b1:d6:3e:07:fd:91:79:0e: 56:74:f4:b1:53:0e:60:ae:c3:fa:32:79:3f:26:81:a7:f2:04: d3:d1:8f:9e:2a:ee:eb:a6:be:0b:2f:0c:cb:87:10:bc:64:80: 11:a7:bf:ca:39:69:0d:b6:2b:63:46:97:69:52:36:19:6b:9e: f0:99:b7:18:ae:70:c0:99:c9:02:7b:f6:f6:90:62:82:24:50: 96:03:b3:fd:8b:c6:bc:e3:7a:5c:e3:91:ef:87:7e:5c:dc:03: 87:22:bd:96:86:08:ee:59:cb:c6:73:2f:ba:79:dd:d3:b0:6c: c0:35:47:83:06:4c:c8:27:bb:62:cb:7b:5f:72:53:63:37:56: 8b:e0:3f:57:9c:32:bf:f0:e8:7d:aa:12:fe:71:b5:a5:51:02: 8f:2f:6c:a2:23:9c:e6:e7:6a:7f:48:c2:4c:02:5d:68:43:f6: ed:44:ae:e0:76:de:e1:7c:a3:21:4a:af:ab:d6:25:7a:49:45: 4b:e6:b8:9e:cf:6f:71:f2:21:7b:69:e5:74:13:b0:93:d8:d9: 5e:aa:a8:2a:52:15:35:85:28:b4:12:dc:57:97:76:91:de:d6: ac:34:6b:0b:19:19:a3:79:05:d3:aa:a2:1e:d2:16:3e:3f:89: 53:ec:e9:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29Z0d1vy7ganfjEwgU0H4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTE5ZWQ4NWEyYzBjZmM0ZjUwYmVhZDE2ZmM5ZjZmMTQ2 NWFkMTEwHhcNMjYwMTI1MjEwMDUwWhcNMjYwMTI2MjEwMDUwWjAzMTEwLwYDVQQD Eyg4YTY1ZmI4YTY2ODRiYzY4NWUyNWNiMDBlMTI1YzMwYTY3ZWM3M2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSHX3b0IAQx3/gWpWjm2jhZ9uJL1 rujDe0VOrOFeCkwsDVPtdSipGlLB8UyPlsKF3liVvRmFmIElkf/CqmVGnVK7jFJA GIklJarHhBNuoTVqGPJ8JR0jCgU30piNcpsMy9OP6ziUmEzv+cQg0dAMLigJnZOP mbUs5bMfJbYBWglnQOtP79KEs7r4Fw8p8djr933c1DxbDyjj4Ffu+KlQ0LdV06Px u6NH9agwIVGDzKxjGyi70ycdabxJ84R03+kBFpPdycSMEfncvDbFZ68VXF4/SsO/ HnHC5Q0iYv/wRcKsIgp7WHq204bqTpWjaTtCJPcTuxkrZnMWLY+tna3czQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpl+4pmhLxoXiXLAOElwwpn7HPpMB8GA1UdIwQY MBaAFCKhnthaLAz8T1C+rRb8n28UZa0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9lN2VkZmYtODZkYS00NDlmLWI4OWMt ZDdiMmFkMDFhMWQ3LzEvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9lN2VkZmYtODZkYS00NDlmLWI4OWMtZDdiMmFkMDFhMWQ3 LzEvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXV1Q6jcV 9XJqt7HWPgf9kXkOVnT0sVMOYK7D+jJ5PyaBp/IE09GPniru66a+Cy8My4cQvGSA Eae/yjlpDbYrY0aXaVI2GWue8Jm3GK5wwJnJAnv29pBigiRQlgOz/YvGvON6XOOR 74d+XNwDhyK9loYI7lnLxnMvunnd07BswDVHgwZMyCe7Yst7X3JTYzdWi+A/V5wy v/DofaoS/nG1pVECjy9soiOc5udqf0jCTAJdaEP27USu4Hbe4XyjIUqvq9YleklF S+a4ns9vcfIhe2nldBOwk9jZXqqoKlIVNYUotBLcV5d2kd7WrDRrCxkZo3kF06qi HtIWPj+JU+zptA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:27:51 2026 by rpki-client