This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: nbg0Z/viI7sUzman10l/m8QWzptMob68bDisuJZ+7eg= Subject key identifier: 6B:7C:F1:07:95:C3:B4:EF:4C:FE:98:BE:77:31:BC:EA:D4:27:09:3A Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 019BF507B36A2D046AB3F1C4C48F1F4BAB4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 17F6 Signing time: Sun 25 Jan 2026 12:01:21 +0000 Manifest this update: Sun 25 Jan 2026 12:01:21 +0000 Manifest next update: Mon 26 Jan 2026 12:01:21 +0000 Files and hashes: 1: As_pVbbnYy_pmBMm0RcX49iX6nY.roa (hash: qzus9UnBcueHhtxBHMySF8j/gf9sbzuNZT387lhMVtE=) 2: JdqN2WjbVmZSKug3o11pYs17ADY.roa (hash: Zp8UwYZbudARKqe5q46PTE7sayPiCfOzSFSseBsc1yM=) 3: Q7kjVEhiYHEz_AIBuFCX2o6kXpQ.roa (hash: MuV9xof7zxa6mZSUu9k4zgmUqNgq/+xzFvRw2ejciSU=) 4: UhbmNbA2hwd3CclD7uA5e7VB30s.roa (hash: juSkCYLLU3kVaC1Dq0hdQw2DrlMO0olfzSo1w3Y2IAk=) 5: Z2JoyRveJcrOS84W6TpEPChd0u8.roa (hash: aEKu2ZE0v6kUC0OnwN6L0HbgZBJi/Gu9YSjx1j8FGfg=) 6: aC9Q_3qjddY1l6-wNmHh31rhiv4.roa (hash: uKO8uok9xpbvJA3MGYKk7ndaYzKJUW2pxyQNGvBjSDU=) 7: cZkC82-vLrRXW7ttrbp1YPZPpe0.roa (hash: X7Xi6DZVONjtuDM1mnYOVnatQGs+c73Ycapzeqr5W+A=) 8: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: 9uvd23aFYIgltO5kAPeLYwHV3Yw5QyGuoizZBSLC7Sk=) 9: ozLeruCkBhC4yZCUw5lMFfl-TtM.roa (hash: ygWG9N1PXEIgHYpH9dLMI7Qu5ggvIeMB+/+Dm4Mbbz4=) 10: q47qpt1p1Wj02CxPXYgOsikq_GY.roa (hash: RR0Z4b1X2W/yjPPcvR1hUKYG5qy0mYBUJ7YN4lZTqrk=) 11: s0Slj9yVMX7lCq79bqSGCqW6KPg.roa (hash: RaEewhp7TYWAZZHFh2A3/CMtjGLdyIT76c5b57zkYYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:b3:6a:2d:04:6a:b3:f1:c4:c4:8f:1f:4b:ab:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Jan 25 12:01:21 2026 GMT Not After : Jan 26 12:01:21 2026 GMT Subject: CN=6b7cf10795c3b4ef4cfe98be7731bcead427093a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:38:7b:a5:be:93:7f:ca:e4:e4:62:da:81:72: e0:e3:cb:2a:0e:c9:f5:66:43:23:e1:40:10:3c:2a: 7f:97:6b:d2:ff:a3:bd:72:60:5f:d9:5f:3a:21:7a: 97:6e:d5:e0:6c:42:ae:03:5b:4d:b4:d3:11:c6:91: 0f:3c:3b:16:bc:7a:3b:0a:35:0e:13:65:2e:05:4b: df:b2:5d:5f:79:82:49:4d:99:88:49:3e:4b:37:1c: 99:0f:b0:f7:b2:95:81:75:92:fe:49:44:94:1e:11: 79:65:33:03:28:33:3c:74:a3:54:0b:c1:5c:1f:86: fb:ef:7a:36:a1:11:98:be:95:7c:eb:c6:29:79:1d: 68:b4:ec:88:95:f7:71:ae:03:ad:af:cc:f6:ae:10: af:c5:bf:44:ef:16:ed:24:e8:cb:74:3f:ed:0c:e0: df:c8:29:e2:a6:6d:86:05:9e:de:ba:b6:7f:2a:12: e9:bd:8f:7b:b6:ee:6e:f6:74:37:2e:50:d4:5c:26: 5b:3f:f5:c3:30:db:7c:be:05:4f:8b:1a:d9:82:68: b6:ee:3c:88:1d:f6:d7:4d:ab:ef:ae:fa:da:41:70: d6:75:79:86:e9:e3:08:1b:1b:b5:b6:5e:e8:5f:a3: 6b:ca:b2:4d:89:39:12:b0:ab:58:20:e5:cf:d1:44: 97:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7C:F1:07:95:C3:B4:EF:4C:FE:98:BE:77:31:BC:EA:D4:27:09:3A X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:60:3f:02:b2:4f:10:ab:07:73:61:43:ff:d5:15:5f:29:14: 59:e7:a3:44:3c:c0:e6:af:35:9e:7d:68:51:ad:08:e2:e8:53: 5c:0b:3e:45:05:44:ba:ac:93:34:53:27:fa:17:fc:86:c0:44: 95:e7:3a:0c:b5:69:06:f9:a9:0e:39:15:96:ca:6e:52:1f:56: 38:13:72:ee:b2:15:8a:83:d7:26:26:ba:a4:f2:98:94:ee:34: af:14:4c:d0:de:9c:0b:d3:6d:00:d2:ad:20:ec:d1:35:54:b4: 54:eb:06:a5:ec:c8:a9:6c:71:c4:09:3d:66:c4:b4:5f:78:a2: 00:82:dd:d9:ab:51:1f:aa:87:7e:53:b6:1b:69:9d:a4:9f:80: d5:ad:db:15:c9:95:8c:b8:4e:e2:c2:c9:ff:28:08:51:e0:8e: 93:30:a6:9e:90:36:8b:3b:c6:4c:97:d7:70:8c:55:b2:99:1b: a6:ed:62:6a:2d:7a:d7:ea:77:fd:da:4b:f8:b4:17:2d:d5:63: 1d:68:b5:4e:88:9f:82:58:54:53:9f:97:a3:dd:53:75:96:32: 83:b8:b9:0f:75:b3:08:a0:b8:bb:e2:93:07:28:b5:41:de:4d: bf:78:3c:ce:b1:12:fd:5b:ab:4d:c1:75:26:a9:f7:dc:39:f2: 0a:c7:c8:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B7NqLQRqs/HExI8fS6tMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjYwMTI1MTIwMTIxWhcNMjYwMTI2MTIwMTIxWjAzMTEwLwYDVQQD Eyg2YjdjZjEwNzk1YzNiNGVmNGNmZTk4YmU3NzMxYmNlYWQ0MjcwOTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjh7pb6Tf8rk5GLagXLg48sqDsn1 ZkMj4UAQPCp/l2vS/6O9cmBf2V86IXqXbtXgbEKuA1tNtNMRxpEPPDsWvHo7CjUO E2UuBUvfsl1feYJJTZmIST5LNxyZD7D3spWBdZL+SUSUHhF5ZTMDKDM8dKNUC8Fc H4b773o2oRGYvpV868YpeR1otOyIlfdxrgOtr8z2rhCvxb9E7xbtJOjLdD/tDODf yCnipm2GBZ7eurZ/KhLpvY97tu5u9nQ3LlDUXCZbP/XDMNt8vgVPixrZgmi27jyI HfbXTavvrvraQXDWdXmG6eMIGxu1tl7oX6NryrJNiTkSsKtYIOXP0USXAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGt88QeVw7TvTP6YvncxvOrUJwk6MB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2GA/ArJP EKsHc2FD/9UVXykUWeejRDzA5q81nn1oUa0I4uhTXAs+RQVEuqyTNFMn+hf8hsBE lec6DLVpBvmpDjkVlspuUh9WOBNy7rIVioPXJia6pPKYlO40rxRM0N6cC9NtANKt IOzRNVS0VOsGpezIqWxxxAk9ZsS0X3iiAILd2atRH6qHflO2G2mdpJ+A1a3bFcmV jLhO4sLJ/ygIUeCOkzCmnpA2izvGTJfXcIxVspkbpu1iai161+p3/dpL+LQXLdVj HWi1ToifglhUU5+Xo91TdZYyg7i5D3WzCKC4u+KTByi1Qd5Nv3g8zrES/VurTcF1 Jqn33DnyCsfITQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:46:57 2026 by rpki-client