This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json) Hash identifier: v6or2wLQ/6YdGvRZSighIaPCg7N53PMZcOpbt755YHs= Subject key identifier: B0:B9:D4:16:CF:FD:19:28:D3:40:97:80:82:DF:E1:FE:1B:56:38:EE Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86 Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86 Certificate serial: 019BF499E40B5985119830BD5FB1816EF159 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft Manifest number: 1693 Signing time: Sun 25 Jan 2026 10:01:24 +0000 Manifest this update: Sun 25 Jan 2026 10:01:24 +0000 Manifest next update: Mon 26 Jan 2026 10:01:24 +0000 Files and hashes: 1: 2-_2_IDxpsQLzWDQlDdWQeC93So.roa (hash: C/sYDCh+7z4k95NlXshO5H+2hd7q3+hoSmGrG/dEb88=) 2: 5vrsmyjFleJ0yUVHYDa_0rWWAj8.roa (hash: nIs8/R3vM6q19N29/Vbny98FGr35vW2896YebXXJgRc=) 3: BkI2fqSz1Z-B7JTGfER5sgZJw0g.roa (hash: U/pXYfDq5FlIWhoXhJrg1WEdVHjoMWTvfpnvFpHwiwI=) 4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: T1/vHyC5KOrY6kNS5AQ+GFZqe948pjm2YTSBrwn29Qo=) 5: YTs7F7QKGSd-NXieHlPiyocSg84.roa (hash: XfRVE9RR/F+C43UX85HP1GLPJW4Zovxkh+VSdknXbS0=) 6: fZGYXSekbTVSZPpMcboxBS2NZ7k.roa (hash: 66iWEZmHP0If1Bq1w2+shdZ1SJ7zwsXYFDBhoczAtsY=) 7: hLe9Xa1rDMaunSX5UD8tCHRgLLc.roa (hash: 9qvXC/uilYEYnlhtLr2bokb3DyBNi92EuqBrDngnP80=) 8: uZxQxlesZp1GTSpT-FmL6reK9pc.roa (hash: yHIIDSGJ2RBJAQAcU5Lp0TMWHjXkIZJ2V4k36+SBfbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:e4:0b:59:85:11:98:30:bd:5f:b1:81:6e:f1:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86 Validity Not Before: Jan 25 10:01:24 2026 GMT Not After : Jan 26 10:01:24 2026 GMT Subject: CN=b0b9d416cffd1928d340978082dfe1fe1b5638ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0f:6f:2d:34:76:fe:23:3d:ba:76:76:95:64: 4d:ad:10:3f:d0:1f:cd:46:9e:5e:e6:2e:c2:26:e7: ff:94:af:e6:d5:db:27:18:ff:7b:b3:75:92:5e:01: a9:fb:bf:84:26:d9:5f:ac:fd:40:3c:76:b0:44:4d: 52:29:cf:c8:ea:ea:26:40:79:80:9b:fb:41:56:c2: d5:30:4f:a1:97:fd:88:61:eb:0b:17:7d:86:d5:7c: 13:8f:6a:e3:29:94:e2:83:21:5e:aa:5d:a0:70:4b: 63:9d:ac:a5:3a:0a:f5:18:ae:ba:8c:98:4d:1c:b9: 29:8c:2c:34:07:53:e6:1e:52:4b:79:31:17:8c:1a: fb:d6:ad:80:49:a1:4d:c0:36:bf:33:1b:f0:c5:1e: d5:45:50:a2:49:24:5b:e2:a5:b5:5b:3b:71:03:81: f7:a1:4b:13:1c:c3:c3:03:dd:e6:ba:d0:2e:6b:fb: e1:b7:36:40:32:38:50:02:33:d8:12:5f:99:04:c1: 18:3d:c6:34:63:e9:f2:f0:c5:d4:fa:7e:5c:b8:85: ad:bc:f2:49:04:ff:e0:90:98:6e:26:ed:c2:f1:66: 1a:c7:f6:ff:17:3e:f4:1b:68:5b:c1:2c:bb:d0:95: 9e:6f:98:d0:d2:b6:7e:30:6d:77:f6:92:af:80:aa: d0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B9:D4:16:CF:FD:19:28:D3:40:97:80:82:DF:E1:FE:1B:56:38:EE X509v3 Authority Key Identifier: keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5c:a7:31:af:77:5e:ae:fc:a8:01:51:d3:60:32:d7:c3:bf: 74:06:21:61:22:9f:72:93:35:a6:3e:fa:79:63:c8:9c:75:5a: cb:be:60:3a:b8:ca:e3:2b:75:a5:b0:d3:e6:f9:ae:58:18:25: 05:7e:5a:5b:de:51:48:f5:ab:69:7d:12:57:2b:b5:49:af:a0: cd:a2:f9:29:b5:6d:0c:8b:8d:6b:30:3c:b5:e0:37:75:03:db: 48:74:cb:bb:5f:7e:e6:d7:94:d3:34:b9:a6:0a:1c:f5:60:86: 62:28:6f:fa:bb:6d:ff:3e:32:3e:eb:8b:03:da:29:05:7d:ea: 5f:c3:b9:8f:3e:9e:ca:27:b4:6f:d1:7c:d2:7e:12:e2:57:7d: 63:c8:d6:5e:76:59:75:b2:cc:8d:53:40:15:a2:f7:27:22:3c: 14:33:4e:27:57:ca:c3:3f:89:13:2a:60:41:8b:fc:30:04:da: 4e:84:fd:ed:a2:8e:dd:5a:7a:98:f8:c1:18:92:23:8e:0e:7f: bb:79:b0:fa:df:96:55:61:5e:1c:21:38:bd:10:e8:2e:ca:33: a0:5c:c9:7e:6f:0b:25:63:4c:b8:19:8a:94:55:b7:f0:df:ad: d4:01:70:42:4d:ec:c2:37:6c:7c:71:ab:7f:09:2d:73:36:30: d9:7c:74:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0meQLWYURmDC9X7GBbvFZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZTg2ZmY5OTczYzkzYWJlNjM5OGYwMzE5NjZjMjlkNzVh M2JhODYwHhcNMjYwMTI1MTAwMTI0WhcNMjYwMTI2MTAwMTI0WjAzMTEwLwYDVQQD EyhiMGI5ZDQxNmNmZmQxOTI4ZDM0MDk3ODA4MmRmZTFmZTFiNTYzOGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ9vLTR2/iM9unZ2lWRNrRA/0B/N Rp5e5i7CJuf/lK/m1dsnGP97s3WSXgGp+7+EJtlfrP1APHawRE1SKc/I6uomQHmA m/tBVsLVME+hl/2IYesLF32G1XwTj2rjKZTigyFeql2gcEtjnaylOgr1GK66jJhN HLkpjCw0B1PmHlJLeTEXjBr71q2ASaFNwDa/MxvwxR7VRVCiSSRb4qW1WztxA4H3 oUsTHMPDA93mutAua/vhtzZAMjhQAjPYEl+ZBMEYPcY0Y+ny8MXU+n5cuIWtvPJJ BP/gkJhuJu3C8WYax/b/Fz70G2hbwSy70JWeb5jQ0rZ+MG139pKvgKrQdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLC51BbP/Rko00CXgILf4f4bVjjuMB8GA1UdIwQY MBaAFCHob/mXPJOr5jmPAxlmwp11o7qGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWIt MzJmZWViNTY2ZWU2LzEvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWItMzJmZWViNTY2ZWU2 LzEvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1ynMa93 Xq78qAFR02Ay18O/dAYhYSKfcpM1pj76eWPInHVay75gOrjK4yt1pbDT5vmuWBgl BX5aW95RSPWraX0SVyu1Sa+gzaL5KbVtDIuNazA8teA3dQPbSHTLu19+5teU0zS5 pgoc9WCGYihv+rtt/z4yPuuLA9opBX3qX8O5jz6eyie0b9F80n4S4ld9Y8jWXnZZ dbLMjVNAFaL3JyI8FDNOJ1fKwz+JEypgQYv8MATaToT97aKO3Vp6mPjBGJIjjg5/ u3mw+t+WVWFeHCE4vRDoLsozoFzJfm8LJWNMuBmKlFW38N+t1AFwQk3swjdsfHGr fwktczYw2Xx0rQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:23 2026 by rpki-client