This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft File: ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json) Hash identifier: sM1KEM9QmgtQG/hBl1s/GJM9lvHIrniwxojOK6mof0M= Subject key identifier: 3B:03:AA:8D:D1:54:76:B2:C6:6D:FB:15:2F:AB:EA:76:8D:64:D5:03 Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb Certificate serial: 019BF687DE74267C5D083DA28F5F2EE92491 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft Manifest number: 0C5D Signing time: Sun 25 Jan 2026 19:00:57 +0000 Manifest this update: Sun 25 Jan 2026 19:00:57 +0000 Manifest next update: Mon 26 Jan 2026 19:00:57 +0000 Files and hashes: 1: PCk3nkxvRoLF1gDbkxnDCrjgGa0.roa (hash: /z0KQlvJI+XaH2sEgQieqsdlMwCig0WcE8tOTdtJWRQ=) 2: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: wb3CGLQOXxy/zQG1kMfoC4E9V9SBCfUrFTgbQ7VyJDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:de:74:26:7c:5d:08:3d:a2:8f:5f:2e:e9:24:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb Validity Not Before: Jan 25 19:00:57 2026 GMT Not After : Jan 26 19:00:57 2026 GMT Subject: CN=3b03aa8dd15476b2c66dfb152fabea768d64d503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b5:17:07:70:4e:11:fb:93:05:58:fa:05:62: a0:92:b0:1b:ea:46:e7:ac:91:41:d1:9e:16:be:6f: 68:68:24:b0:a4:8c:5d:d6:fd:47:46:a7:3c:2d:a1: 58:79:51:c6:d3:9f:ac:68:12:e6:ab:57:2a:a5:52: d3:45:67:e4:dc:13:be:35:d7:3d:da:13:1e:4e:77: 14:af:a8:b4:38:41:c8:98:61:d2:35:06:33:8f:3e: 28:2b:47:d9:17:ab:f9:3f:4e:e8:d9:2c:02:f9:02: e5:fc:1b:52:e7:d1:3c:b7:17:e7:ff:57:8b:bd:e6: 82:0e:da:2f:e4:5b:31:de:c0:23:e0:53:46:f0:0f: 6a:9a:49:7b:02:a5:79:f0:b3:cf:dd:d3:d1:24:cb: 0d:5b:bf:6f:53:44:51:d9:65:c5:0f:66:ab:f8:8f: 83:a4:91:01:d5:f9:50:17:e9:b7:43:62:bb:b7:b9: b2:61:6d:8c:25:75:d4:c9:bc:74:91:0b:56:24:88: 29:c9:0d:04:cd:95:94:b9:bc:9a:aa:0e:5c:09:16: 3a:12:ed:75:ad:0a:08:d9:fb:d9:12:48:4a:73:7b: f4:46:63:aa:38:66:03:de:43:9c:09:5c:ba:8b:e0: 16:f8:e0:dd:23:6d:03:34:a4:49:ea:3e:15:45:56: bb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:03:AA:8D:D1:54:76:B2:C6:6D:FB:15:2F:AB:EA:76:8D:64:D5:03 X509v3 Authority Key Identifier: keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ab:39:5a:8d:73:82:aa:08:f4:4f:80:ec:d0:12:53:87:c9: d7:01:b7:b1:c4:83:02:7d:52:e5:4c:5d:a6:c8:82:42:76:9f: bd:bb:eb:c1:93:91:cd:45:99:2e:6b:c5:4b:5f:15:4b:a6:63: 66:9b:87:b1:71:df:54:9b:5b:e4:3d:82:d7:14:9c:9a:20:39: e3:55:0b:d0:30:1f:bd:0e:74:12:ce:0c:42:75:92:22:08:7a: 79:3d:3e:24:d4:e1:24:65:b2:5b:99:e2:ba:c4:c9:bc:e2:ed: 5d:fe:e8:e1:ef:02:0d:38:0c:aa:2a:f8:e0:6d:9a:5a:19:79: ce:b9:ff:b9:31:5e:fc:f3:e1:56:e3:7b:fb:42:86:02:cc:83: 0c:cd:8f:bb:e7:53:0d:75:7d:65:db:9b:5e:f0:20:e4:ea:bc: ef:92:38:11:47:10:3b:72:62:b7:1d:30:f5:d1:f5:03:80:6e: 71:67:ff:21:2a:5e:cc:e6:8c:11:7e:e8:25:4b:bf:76:a0:33: fd:37:be:20:fa:7d:7f:fd:29:74:cc:cb:d1:2b:27:18:90:48: 4f:3c:9c:57:54:2b:f0:3b:9c:2f:ba:41:e2:85:e4:d1:b0:16: c8:51:42:2b:37:a4:68:7f:fb:bc:b9:3d:58:59:c1:ce:23:d8: 47:1a:e5:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h950JnxdCD2ij18u6SSRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZWRmYTQxNDk0NGQwMTBhYzY5ZWU1YmZiMjI3NzNiMjRi MjdlZmIwHhcNMjYwMTI1MTkwMDU3WhcNMjYwMTI2MTkwMDU3WjAzMTEwLwYDVQQD EygzYjAzYWE4ZGQxNTQ3NmIyYzY2ZGZiMTUyZmFiZWE3NjhkNjRkNTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LUXB3BOEfuTBVj6BWKgkrAb6kbn rJFB0Z4Wvm9oaCSwpIxd1v1HRqc8LaFYeVHG05+saBLmq1cqpVLTRWfk3BO+Ndc9 2hMeTncUr6i0OEHImGHSNQYzjz4oK0fZF6v5P07o2SwC+QLl/BtS59E8txfn/1eL veaCDtov5Fsx3sAj4FNG8A9qmkl7AqV58LPP3dPRJMsNW79vU0RR2WXFD2ar+I+D pJEB1flQF+m3Q2K7t7myYW2MJXXUybx0kQtWJIgpyQ0EzZWUubyaqg5cCRY6Eu11 rQoI2fvZEkhKc3v0RmOqOGYD3kOcCVy6i+AW+ODdI20DNKRJ6j4VRVa7ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsDqo3RVHayxm37FS+r6naNZNUDMB8GA1UdIwQY MBaAFInt+kFJRNAQrGnuW/sidzsksn77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85MzZjYmItYmFjNC00ZmRlLThkZWYt ZmViYzFlZDNjZWJhLzEvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC85MzZjYmItYmFjNC00ZmRlLThkZWYtZmViYzFlZDNjZWJh LzEvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlas5Wo1z gqoI9E+A7NASU4fJ1wG3scSDAn1S5UxdpsiCQnafvbvrwZORzUWZLmvFS18VS6Zj ZpuHsXHfVJtb5D2C1xScmiA541UL0DAfvQ50Es4MQnWSIgh6eT0+JNThJGWyW5ni usTJvOLtXf7o4e8CDTgMqir44G2aWhl5zrn/uTFe/PPhVuN7+0KGAsyDDM2Pu+dT DXV9ZdubXvAg5Oq875I4EUcQO3Jitx0w9dH1A4BucWf/ISpezOaMEX7oJUu/dqAz /Te+IPp9f/0pdMzL0SsnGJBITzycV1Qr8DucL7pB4oXk0bAWyFFCKzekaH/7vLk9 WFnBziPYRxrlXA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:10 2026 by rpki-client