This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json) Hash identifier: 4CMh5OZ+vfZuINGmvlEDWUVFBfrhDR1Oyzyl1ILCMXw= Subject key identifier: 7D:42:94:D6:00:BF:0C:0B:C3:25:5F:33:84:D6:8F:46:DF:30:AE:91 Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f Certificate serial: 019BF61A401F1D66B58E772779F663C3C561 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft Manifest number: 1005 Signing time: Sun 25 Jan 2026 17:01:14 +0000 Manifest this update: Sun 25 Jan 2026 17:01:14 +0000 Manifest next update: Mon 26 Jan 2026 17:01:14 +0000 Files and hashes: 1: 1-lmEP6bvSg72yf_GUeD4MSKNWhk.roa (hash: UZw/L6lxwycncfuJtQDWqM2GbKpxVlPtsRDnOtxZfq4=) 2: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: lyuZgMf9t4XidqPaYM/NtAjcxKu+lX2ZngU9dfLKIN8=) 3: uy5YZrZ342ZeZ2NGVVpULZDoPcE.roa (hash: ePYFBpMymgZ8ANPnNiychRqaQ6Srx/8bC1+U5miv+Ng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:40:1f:1d:66:b5:8e:77:27:79:f6:63:c3:c5:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f Validity Not Before: Jan 25 17:01:14 2026 GMT Not After : Jan 26 17:01:14 2026 GMT Subject: CN=7d4294d600bf0c0bc3255f3384d68f46df30ae91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:07:ed:86:f8:cf:77:3c:ac:c1:82:fa:69:9a: 9e:a2:9b:e7:a3:24:03:6d:0e:a5:25:4c:c3:ad:42: 39:94:d1:72:79:af:d9:e9:e8:b9:47:47:43:c7:54: c4:55:52:ab:8e:01:3c:2d:4b:9d:78:a9:82:da:3c: 11:85:50:54:e4:81:aa:7b:2e:4f:07:c9:eb:66:9d: 1d:42:56:8d:82:24:ae:62:41:aa:82:4e:5d:b8:b8: 55:a0:eb:10:d6:e5:8b:81:b6:a1:dd:0b:82:95:6d: f9:d4:b1:ac:35:10:38:e9:fd:25:fd:a9:e0:a7:ce: c7:cc:04:ed:7f:01:2f:c3:fc:86:63:a7:a3:3c:3b: 7a:a6:4a:95:96:35:0b:bd:f4:2b:6d:48:25:60:19: ec:d0:31:64:6c:d1:48:42:5b:68:ef:ef:5b:27:d2: 3b:86:9c:4c:3c:b5:47:dd:c0:1b:ed:e7:db:7a:39: 06:a3:07:04:a5:ed:f0:37:93:0c:b7:14:6b:44:b0: e9:f0:e8:d2:44:30:1e:77:7e:45:8f:50:2d:dd:d5: d5:1b:10:9a:79:13:43:66:79:55:1f:a5:25:68:a2: 2d:a8:96:be:c6:e3:e6:21:3d:5b:64:da:67:e7:98: 36:f7:9a:cf:fe:50:f5:03:ab:ab:1f:2b:94:54:50: 00:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:42:94:D6:00:BF:0C:0B:C3:25:5F:33:84:D6:8F:46:DF:30:AE:91 X509v3 Authority Key Identifier: keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3f:d3:40:bc:d3:fd:ed:f0:5a:f8:92:16:1a:bb:d9:df:5c: 16:b9:db:e1:4c:7a:b7:dc:a7:34:68:39:44:aa:58:ff:f0:f5: 55:d3:c6:b5:7b:f8:23:3b:1d:24:3a:a0:90:03:f3:d0:97:97: 0e:c0:e6:79:bb:e7:12:d1:28:80:31:56:50:0f:56:38:a0:1e: fa:1c:71:a4:ed:20:33:90:2e:d7:f5:53:fc:87:8d:a7:37:4f: 67:0b:ce:6b:fb:de:fe:a1:0d:06:66:08:55:8c:0f:60:42:34: 54:8f:84:91:4a:44:25:a7:4f:a6:c2:d9:43:10:9e:c2:86:24: bf:25:24:44:e5:66:88:c7:b1:ce:a2:e1:06:8e:65:f0:6d:eb: ee:f5:41:31:0c:34:42:92:ff:9a:ec:ee:9a:bb:ee:40:8e:73: 12:e8:77:a8:1c:5d:7c:31:78:45:57:bf:5e:51:1a:74:c6:42: 59:51:a4:ca:f6:32:95:44:8a:9b:1a:f4:02:c1:54:7d:f3:55: a8:5b:e4:84:4a:0a:8a:89:e4:af:30:f3:8a:7e:97:07:a6:c6: 93:21:db:0d:a9:c0:51:45:85:fc:14:24:03:9c:36:e7:7e:a8: cf:82:e6:86:a3:93:78:04:37:52:46:58:d1:67:65:2d:d5:88: dc:e9:5c:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GkAfHWa1jncnefZjw8VhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYTcxNzM2MTMwOWQyOTM5MzUxYzlkOGJhMjE3M2RiODMx OWE4OGYwHhcNMjYwMTI1MTcwMTE0WhcNMjYwMTI2MTcwMTE0WjAzMTEwLwYDVQQD Eyg3ZDQyOTRkNjAwYmYwYzBiYzMyNTVmMzM4NGQ2OGY0NmRmMzBhZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgfthvjPdzyswYL6aZqeopvnoyQD bQ6lJUzDrUI5lNFyea/Z6ei5R0dDx1TEVVKrjgE8LUudeKmC2jwRhVBU5IGqey5P B8nrZp0dQlaNgiSuYkGqgk5duLhVoOsQ1uWLgbah3QuClW351LGsNRA46f0l/ang p87HzATtfwEvw/yGY6ejPDt6pkqVljULvfQrbUglYBns0DFkbNFIQlto7+9bJ9I7 hpxMPLVH3cAb7efbejkGowcEpe3wN5MMtxRrRLDp8OjSRDAed35Fj1At3dXVGxCa eRNDZnlVH6UlaKItqJa+xuPmIT1bZNpn55g295rP/lD1A6urHyuUVFAAoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1ClNYAvwwLwyVfM4TWj0bfMK6RMB8GA1UdIwQY MBaAFCGnFzYTCdKTk1HJ2Lohc9uDGaiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUt ZjhhNDY5ZDRlMmIyLzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUtZjhhNDY5ZDRlMmIy LzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATz/TQLzT /e3wWviSFhq72d9cFrnb4Ux6t9ynNGg5RKpY//D1VdPGtXv4IzsdJDqgkAPz0JeX DsDmebvnEtEogDFWUA9WOKAe+hxxpO0gM5Au1/VT/IeNpzdPZwvOa/ve/qENBmYI VYwPYEI0VI+EkUpEJadPpsLZQxCewoYkvyUkROVmiMexzqLhBo5l8G3r7vVBMQw0 QpL/muzumrvuQI5zEuh3qBxdfDF4RVe/XlEadMZCWVGkyvYylUSKmxr0AsFUffNV qFvkhEoKionkrzDzin6XB6bGkyHbDanAUUWF/BQkA5w2536oz4LmhqOTeAQ3UkZY 0WdlLdWI3OlcPg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:44:44 2026 by rpki-client