This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft File: ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft (raw, json) Hash identifier: Dn82q+tVAUngxMjV5BUxpi4kH8fClnxEm2nqz5G/Kxs= Subject key identifier: 14:C9:21:B2:FF:14:05:65:C6:26:4B:D2:80:0F:D0:2D:EB:DC:9F:C7 Authority key identifier: 8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F Certificate issuer: /CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f Certificate serial: 019BF6514F123BD62B1867FD3252DB349CC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 18:01:22 +0000 Manifest this update: Sun 25 Jan 2026 18:01:22 +0000 Manifest next update: Mon 26 Jan 2026 18:01:22 +0000 Files and hashes: 1: 9R3X_Fbswyp0dlU7e0jgLCwlRc4.roa (hash: 48MU1qRcOJqUGd4gBSOu3MVRdMSx3ak0Iy7V4C0HIPg=) 2: FMytXTkalgyla6hJFj4eKXqjzf4.roa (hash: uaDRTElD/eQeLBmpMs0iWQkiUkgTUHVvQqy46V1pRPI=) 3: VfzZLy_qDdGJi9lSEwmjw7oLt5k.roa (hash: 1oHM+ulR5lgMRMtepZExqDQwuwKJ8Qpfg/fB1/zmAX8=) 4: ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl (hash: e3ov0Ln1HWi7CUgYT/CQ0BFdLXyGcdEZhYU6qRIqVSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:4f:12:3b:d6:2b:18:67:fd:32:52:db:34:9c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f Validity Not Before: Jan 25 18:01:22 2026 GMT Not After : Jan 26 18:01:22 2026 GMT Subject: CN=14c921b2ff140565c6264bd2800fd02debdc9fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b9:dd:cb:2b:b2:be:3e:9e:9f:d5:59:44:09: 64:66:bc:bc:a2:9d:25:8a:17:d7:6c:01:19:bd:d2: fd:dc:7b:8b:42:91:c5:23:6f:ba:c5:3f:30:5e:d0: 36:f1:39:eb:26:32:cd:40:83:0f:f4:7f:48:06:90: 94:33:15:10:15:f9:8a:68:bc:89:5e:f5:28:86:67: 2b:fc:f6:b0:8f:de:f0:1b:de:38:98:14:42:53:e3: 85:14:b5:8d:f7:dd:a3:f6:20:40:e4:9f:0a:88:aa: 11:9a:58:2e:3e:ce:96:9d:5f:56:4a:3f:34:4e:cc: 3b:60:7c:2e:56:82:4a:a9:30:51:87:b5:bf:6f:50: 15:5d:b0:e5:09:f0:d1:5c:64:58:7c:ad:41:f1:40: f2:97:78:3f:ad:bd:7c:da:bb:84:d0:76:3a:44:78: 1c:07:40:e7:82:3b:eb:15:f8:b5:87:41:65:4e:36: f9:d2:f2:9d:40:05:ff:21:1d:a5:a1:ce:05:d5:3e: 74:49:4f:e6:d1:9f:32:06:d1:f9:7a:67:7b:34:20: e1:9e:3e:0d:b8:08:b9:fe:7f:47:7a:7d:f1:bd:b4: 67:ca:21:5c:ab:f7:fa:cd:58:68:3b:d1:e4:5d:0b: 69:55:47:b0:0c:1b:ac:95:e7:ed:2f:7e:2c:ab:cb: fb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C9:21:B2:FF:14:05:65:C6:26:4B:D2:80:0F:D0:2D:EB:DC:9F:C7 X509v3 Authority Key Identifier: keyid:8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:fa:77:60:07:3b:a2:a0:a6:78:5a:13:6e:83:d6:49:e3:54: d6:ad:d3:8c:d5:3b:a6:38:dc:7a:1b:cd:f7:fc:9d:8a:e9:67: d9:b8:b2:f5:d5:9b:18:66:c4:f7:87:fc:be:e4:b4:7d:2d:c8: af:de:e9:1a:33:62:9e:51:fa:0d:6f:0f:ed:0f:29:ca:84:43: 9a:0c:31:c5:4b:84:82:54:07:cd:7a:05:30:d7:90:72:f2:14: 93:88:2b:5d:c7:22:ed:5e:c7:ff:a2:6a:ba:27:d9:d1:aa:a6: 62:05:05:50:7c:24:dc:c7:8b:6b:6d:24:eb:de:63:19:fc:40: a5:be:29:fc:7c:46:b9:24:e0:ab:ca:d3:5b:1f:e5:31:43:fb: 7a:3f:55:c6:cd:47:a5:1c:fc:3e:b6:0b:ae:66:2a:85:6b:38: 82:c3:d4:d4:4c:fa:54:73:3d:5f:80:4d:b6:1f:f8:3e:1b:a3: ae:fa:b8:64:f4:bd:4e:12:47:ee:0a:66:2f:8f:49:eb:a2:f8: 9d:06:a5:e8:a6:5d:df:28:b3:93:47:46:91:84:b0:d7:e7:03: cf:5f:9a:82:c8:47:e5:f4:ef:9b:26:21:57:5f:b1:4f:ca:d3: bf:50:f3:8e:a6:92:e2:94:6d:53:b0:af:e2:5a:3b:e9:d4:5f: a4:11:df:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UU8SO9YrGGf9MlLbNJzBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhM2VjMDUzNzI0MmY0NGNlN2Q1OTMzZTliMzIyMDRiM2Y4 NWU5OWYwHhcNMjYwMTI1MTgwMTIyWhcNMjYwMTI2MTgwMTIyWjAzMTEwLwYDVQQD EygxNGM5MjFiMmZmMTQwNTY1YzYyNjRiZDI4MDBmZDAyZGViZGM5ZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobndyyuyvj6en9VZRAlkZry8op0l ihfXbAEZvdL93HuLQpHFI2+6xT8wXtA28TnrJjLNQIMP9H9IBpCUMxUQFfmKaLyJ XvUohmcr/Pawj97wG944mBRCU+OFFLWN992j9iBA5J8KiKoRmlguPs6WnV9WSj80 Tsw7YHwuVoJKqTBRh7W/b1AVXbDlCfDRXGRYfK1B8UDyl3g/rb182ruE0HY6RHgc B0DngjvrFfi1h0FlTjb50vKdQAX/IR2loc4F1T50SU/m0Z8yBtH5emd7NCDhnj4N uAi5/n9Hen3xvbRnyiFcq/f6zVhoO9HkXQtpVUewDBusleftL34sq8v7kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTJIbL/FAVlxiZL0oAP0C3r3J/HMB8GA1UdIwQY MBaAFIo+wFNyQvRM59WTPpsyIEs/hemfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWo3QVUzSkM5RXpuMVpNLW16SWdTei1GNlo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZWIwMDItZDI2YS00NmQ2LTlkODct ODQwOTMwNjFlOWZmLzEvaWo3QVUzSkM5RXpuMVpNLW16SWdTei1GNlo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS85ZWIwMDItZDI2YS00NmQ2LTlkODctODQwOTMwNjFlOWZm LzEvaWo3QVUzSkM5RXpuMVpNLW16SWdTei1GNlo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvp3YAc7 oqCmeFoTboPWSeNU1q3TjNU7pjjcehvN9/ydiuln2biy9dWbGGbE94f8vuS0fS3I r97pGjNinlH6DW8P7Q8pyoRDmgwxxUuEglQHzXoFMNeQcvIUk4grXcci7V7H/6Jq uifZ0aqmYgUFUHwk3MeLa20k695jGfxApb4p/HxGuSTgq8rTWx/lMUP7ej9Vxs1H pRz8PrYLrmYqhWs4gsPU1Ez6VHM9X4BNth/4Phujrvq4ZPS9ThJH7gpmL49J66L4 nQal6KZd3yizk0dGkYSw1+cDz1+agshH5fTvmyYhV1+xT8rTv1DzjqaS4pRtU7Cv 4lo76dRfpBHfZQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:26 2026 by rpki-client