This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft File: iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft (raw, json) Hash identifier: TrDnFLlGBxNn72lttBJymONpq8ypSWJyd5KxSiT1JIU= Subject key identifier: 99:F0:B7:CA:C9:E1:A0:70:9F:8B:72:A3:5A:65:EB:09:4A:49:07:BE Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e Certificate serial: 019BF38697D79FF6F50473EA1B83EC1FF4DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft Manifest number: 0127 Signing time: Sun 25 Jan 2026 05:00:42 +0000 Manifest this update: Sun 25 Jan 2026 05:00:42 +0000 Manifest next update: Mon 26 Jan 2026 05:00:42 +0000 Files and hashes: 1: 43jM40RYm5KfeGPiDNzubwAPnss.roa (hash: 3FdXgssZKeAEaBlX49WSPSeSpanDn1fR5o5d1jEZFX8=) 2: F7I5rnkHLQ8PitpUJJXzJQnZJaU.roa (hash: mzXoIYY5/cdBAcGj+HsD/eRCWuIVU1w+4VfWf00hQ20=) 3: OwnmL8kddIBhLRX-NHEzddhuNVA.roa (hash: leLJKgM8a2VW5VrAHQjffz+j5cjfJqCfMtcGbwf0E0E=) 4: iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl (hash: juYiyKzWQJMeDT07HRJynQt7XEq7EnhU1jxL6evc2tc=) 5: pCWFYgZBhGHbELeQcs-4zGj4CgI.roa (hash: SOOQXwgeDKJOSzjwjNvboDnmZ1A6znAmE487OR2Rqes=) 6: q-RWodK7a-3CkL-IcmgLBAtseBw.roa (hash: IdzRoZdWnPk+8n2VcM7Jqg89nCMd+QL98y/Yo8OkRK4=) 7: r50bqW5SnPNE9WQYYRLDyXwjtZc.roa (hash: up7vGtBh2DqMmPO7x5Q3VURAhNEUmEQqjy49vJmJas0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:97:d7:9f:f6:f5:04:73:ea:1b:83:ec:1f:f4:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e Validity Not Before: Jan 25 05:00:42 2026 GMT Not After : Jan 26 05:00:42 2026 GMT Subject: CN=99f0b7cac9e1a0709f8b72a35a65eb094a4907be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:f4:01:06:df:46:38:bf:d5:9e:e2:b4:4e: 8b:b9:e8:08:d5:02:6e:93:1f:e8:b6:7b:00:2d:77: 8d:d4:51:2c:16:7f:7c:2f:2c:e6:de:20:18:86:d1: 06:70:70:42:23:07:1f:92:e0:b5:6d:bf:86:d3:05: 04:2a:fb:e4:f2:91:a8:e5:d4:cf:c6:1a:95:48:4d: f4:07:f8:f4:dd:3c:e4:d0:f7:c0:cf:32:12:fd:41: 39:6b:f5:4c:6a:1e:df:40:00:90:ca:97:5a:09:50: 3f:e7:83:88:c5:b7:5a:35:bf:f9:4b:d0:6d:48:ec: 71:76:f3:b7:9f:88:f1:ff:38:c8:3c:a3:5b:e2:64: 4c:f7:ac:6a:2a:b2:cc:c1:3a:00:fe:73:2f:da:8b: c5:c7:08:1b:a9:80:aa:ee:61:67:92:8e:a7:ed:6c: 68:db:82:f0:94:2f:94:ef:d8:f3:67:18:c5:33:1a: 28:c9:43:eb:06:e8:e4:f3:59:dd:65:b9:b5:52:a4: a2:7a:00:fe:8e:ed:bd:2b:58:34:9a:6a:8d:d4:ed: b5:d1:d2:58:51:f6:fe:2c:b0:cd:20:2d:9c:e7:0f: 71:d9:24:89:f7:86:95:b3:22:df:33:bf:7c:c8:87: 5d:14:58:38:fe:4c:94:3f:0a:35:43:35:7d:41:f1: 64:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F0:B7:CA:C9:E1:A0:70:9F:8B:72:A3:5A:65:EB:09:4A:49:07:BE X509v3 Authority Key Identifier: keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ef:39:05:3b:35:31:8a:13:14:84:4a:84:57:47:20:e8:7f: 7a:57:58:6d:c2:a1:43:80:30:9e:3d:34:c9:35:02:b1:82:90: 05:a1:30:a5:40:ed:43:1b:2d:db:33:aa:c2:99:0b:22:45:00: 89:ec:c0:b8:a9:71:c1:95:ce:1f:6c:c2:35:b2:15:ea:c4:96: ac:21:79:90:cb:27:b5:59:b9:16:3f:5d:f9:df:1c:bb:f7:58: e5:9d:be:57:e4:8b:f9:6b:ed:56:37:64:48:db:ad:91:44:ea: 0b:ed:29:cb:bd:d1:0a:be:ea:a1:48:38:96:10:8d:6b:3a:b5: 58:7a:de:84:a8:dc:ee:77:52:c0:89:33:01:19:8b:38:33:32: eb:26:85:5a:ed:ef:b8:65:a6:a6:ae:46:4a:6d:9b:66:59:d9: 83:39:cb:2b:14:96:7d:17:7f:17:6c:f4:65:61:8d:ff:d6:cf: 62:88:45:c7:34:c6:5c:5c:c3:31:3c:69:d0:f6:1f:cf:76:ac: 3c:ef:a0:27:37:5b:3d:2a:3d:8d:99:25:51:75:68:4b:43:f9: 3a:b2:09:89:fa:84:a2:21:d8:e6:16:16:40:5a:93:f3:37:d6: 9c:be:1a:17:c0:71:fa:2f:76:cc:e0:0d:14:99:8c:fd:8c:7b: 62:a4:ce:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhpfXn/b1BHPqG4PsH/TcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZmI0MTBhM2JmYzczNDBiNjY3YjRmMjIxYzdjYjgwNjI2 Nzg5NmUwHhcNMjYwMTI1MDUwMDQyWhcNMjYwMTI2MDUwMDQyWjAzMTEwLwYDVQQD Eyg5OWYwYjdjYWM5ZTFhMDcwOWY4YjcyYTM1YTY1ZWIwOTRhNDkwN2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzL0AQbfRji/1Z7itE6LuegI1QJu kx/otnsALXeN1FEsFn98Lyzm3iAYhtEGcHBCIwcfkuC1bb+G0wUEKvvk8pGo5dTP xhqVSE30B/j03Tzk0PfAzzIS/UE5a/VMah7fQACQypdaCVA/54OIxbdaNb/5S9Bt SOxxdvO3n4jx/zjIPKNb4mRM96xqKrLMwToA/nMv2ovFxwgbqYCq7mFnko6n7Wxo 24LwlC+U79jzZxjFMxooyUPrBujk81ndZbm1UqSiegD+ju29K1g0mmqN1O210dJY Ufb+LLDNIC2c5w9x2SSJ94aVsyLfM798yIddFFg4/kyUPwo1QzV9QfFkOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnwt8rJ4aBwn4tyo1pl6wlKSQe+MB8GA1UdIwQY MBaAFIj7QQo7/HNAtme08iHHy4BiZ4luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDIt YjM4YzgwOTUxOTgxLzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDItYjM4YzgwOTUxOTgx LzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANO85BTs1 MYoTFIRKhFdHIOh/eldYbcKhQ4Awnj00yTUCsYKQBaEwpUDtQxst2zOqwpkLIkUA iezAuKlxwZXOH2zCNbIV6sSWrCF5kMsntVm5Fj9d+d8cu/dY5Z2+V+SL+WvtVjdk SNutkUTqC+0py73RCr7qoUg4lhCNazq1WHrehKjc7ndSwIkzARmLODMy6yaFWu3v uGWmpq5GSm2bZlnZgznLKxSWfRd/F2z0ZWGN/9bPYohFxzTGXFzDMTxp0PYfz3as PO+gJzdbPSo9jZklUXVoS0P5OrIJifqEoiHY5hYWQFqT8zfWnL4aF8Bx+i92zOAN FJmM/Yx7YqTOiA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:44:52 2026 by rpki-client