This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json) Hash identifier: dNWDDqcMXxhjja5sH4pBsZX9UEYLb+3NMhTUqLnNYK4= Subject key identifier: A5:80:41:2D:D6:7F:3E:F9:C5:ED:1D:CC:51:3A:83:77:C9:D6:B0:91 Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83 Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83 Certificate serial: 019BF46267B71392103A7C0E5868347D0FD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft Manifest number: 0F39 Signing time: Sun 25 Jan 2026 09:00:48 +0000 Manifest this update: Sun 25 Jan 2026 09:00:48 +0000 Manifest next update: Mon 26 Jan 2026 09:00:48 +0000 Files and hashes: 1: 2bVvxRffnJ6GQKgs2LoPDWvUcK4.roa (hash: er7wIVOxtiLCvuKAAvSBfYTSBvkd5n1t/IW0taeZM7Y=) 2: EKwGj8cGWTKa1emZfvaG-_KFnug.roa (hash: 0WqMi3eKQHHkupGYUjixsLx2D37mbsIXi9Fsl7hZLiw=) 3: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: ZHnMiEAN1MtuSdDXkTu96it5RdFUqIdbmnedmgfT934=) 4: QdRrKIrH4mGJmO4pGdzpank3gew.roa (hash: uL5ZvBd0SOggdi3Ll3eXsAHR4s6R5DvUqu2sa+EiNtI=) 5: TruqXXhyrBV8Cwe5yzCBt7QLsCE.roa (hash: Ab+jWWB0kPKqVoiUmBfNBgr0bDHAA/s+gzbI3fKh/Jo=) 6: YIiAdksRfvM2tL27jCCRXB5ju3Q.roa (hash: QClgQMgXCLixY3zPZ3xGliorGs5EkE6bJGcMO+wqsBg=) 7: hD3IqorNDrlwkzGUmybhJLv5L2k.roa (hash: ZaWNL4A6CBZBDeNroOwIUO67tG+ZeiSsCvPL+QQ5od4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:67:b7:13:92:10:3a:7c:0e:58:68:34:7d:0f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83 Validity Not Before: Jan 25 09:00:48 2026 GMT Not After : Jan 26 09:00:48 2026 GMT Subject: CN=a580412dd67f3ef9c5ed1dcc513a8377c9d6b091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:30:17:93:b4:a6:10:06:ba:92:ac:8f:25:59: 7c:8f:aa:30:3e:f9:9d:83:7a:26:38:5d:53:aa:68: f1:69:22:2d:21:9f:17:b5:22:90:14:68:6c:0c:df: 4c:8b:50:d3:f3:db:3f:12:97:30:aa:74:0e:86:50: a7:f5:25:f8:bc:02:b5:6e:53:68:bd:71:96:f5:3e: 54:81:b0:75:14:c4:22:b7:7d:c4:8a:cc:2b:61:79: 22:32:c9:8c:55:d2:e2:68:de:82:e7:dc:4a:45:87: 6a:ff:9c:a9:81:f0:0e:29:44:11:d6:9a:a4:71:1d: 01:ad:98:07:08:53:61:f1:f2:81:66:9a:50:e2:99: 80:66:2a:65:18:f0:42:5a:f7:a6:35:f7:f6:bf:75: 62:88:70:da:1d:e0:07:c6:f3:c8:4b:a7:e8:df:58: c4:0a:ee:ba:24:c1:07:83:79:e1:69:54:4f:50:7d: 91:50:cd:42:d2:f4:e4:5a:c2:fd:2b:65:f8:64:56: 33:3f:11:9a:51:d8:37:e1:0f:ff:10:ef:2d:4e:12: 17:d4:32:4c:66:63:5a:5a:03:f5:d9:f4:92:4a:9f: 29:61:fd:0d:0a:23:f3:8d:ce:49:f9:30:10:17:45: 9b:d4:a9:03:8e:f7:33:4c:78:12:bb:76:fc:a2:ee: 6e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:80:41:2D:D6:7F:3E:F9:C5:ED:1D:CC:51:3A:83:77:C9:D6:B0:91 X509v3 Authority Key Identifier: keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:54:21:b9:63:3c:0e:81:3a:d3:9c:7f:e1:a4:e6:40:5d:08: 36:56:de:98:e1:c1:31:65:8a:0b:10:1b:e8:35:df:a6:31:47: 5b:d6:8d:2e:56:91:7b:5b:92:82:31:c3:67:7e:68:2c:f6:07: 14:85:25:52:da:4d:2c:29:0d:42:15:32:8f:e1:4a:a4:0b:a0: 99:fd:12:42:2a:9c:5d:df:9e:9a:ef:66:29:ab:00:1a:8d:54: 80:e7:09:88:32:5b:b5:07:fd:10:ce:dd:23:4e:1f:ba:c7:17: 1f:79:80:8b:86:3c:bb:d9:ae:d4:d3:1b:32:08:75:1f:80:4c: 41:06:a3:77:1c:3b:ba:f6:14:42:96:40:2e:24:e5:dc:21:11: 5f:4d:84:cf:e9:02:0d:17:ba:a3:d5:d5:bd:b3:23:dd:e7:bb: f9:2a:63:f0:af:40:f0:f4:bd:7c:8e:26:6b:c6:9c:e4:01:5f: fe:15:59:aa:30:fa:22:a0:01:fd:3e:8c:00:69:cd:87:36:dd: fb:a9:8c:24:30:4a:f3:62:9d:d4:46:28:4d:4d:e9:11:6c:76: fd:3d:9e:b0:30:21:0a:f3:b9:a8:09:6e:7a:6f:0d:f2:73:64: 7e:ad:2d:41:97:fb:a7:09:22:91:86:59:f9:f5:fe:07:df:de: 03:5b:38:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yme3E5IQOnwOWGg0fQ/YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMmM0NTg1YmQ4OGZiMjdjYWRmMjllZTViYjk1ZDY1NzVm Y2VmODMwHhcNMjYwMTI1MDkwMDQ4WhcNMjYwMTI2MDkwMDQ4WjAzMTEwLwYDVQQD EyhhNTgwNDEyZGQ2N2YzZWY5YzVlZDFkY2M1MTNhODM3N2M5ZDZiMDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDAXk7SmEAa6kqyPJVl8j6owPvmd g3omOF1TqmjxaSItIZ8XtSKQFGhsDN9Mi1DT89s/EpcwqnQOhlCn9SX4vAK1blNo vXGW9T5UgbB1FMQit33EiswrYXkiMsmMVdLiaN6C59xKRYdq/5ypgfAOKUQR1pqk cR0BrZgHCFNh8fKBZppQ4pmAZiplGPBCWvemNff2v3ViiHDaHeAHxvPIS6fo31jE Cu66JMEHg3nhaVRPUH2RUM1C0vTkWsL9K2X4ZFYzPxGaUdg34Q//EO8tThIX1DJM ZmNaWgP12fSSSp8pYf0NCiPzjc5J+TAQF0Wb1KkDjvczTHgSu3b8ou5uPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWAQS3Wfz75xe0dzFE6g3fJ1rCRMB8GA1UdIwQY MBaAFCIsRYW9iPsnyt8p7lu5XWV1/O+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUt YzY0N2E4YzFkZGZhLzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUtYzY0N2E4YzFkZGZh LzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFQhuWM8 DoE605x/4aTmQF0INlbemOHBMWWKCxAb6DXfpjFHW9aNLlaRe1uSgjHDZ35oLPYH FIUlUtpNLCkNQhUyj+FKpAugmf0SQiqcXd+emu9mKasAGo1UgOcJiDJbtQf9EM7d I04fuscXH3mAi4Y8u9mu1NMbMgh1H4BMQQajdxw7uvYUQpZALiTl3CERX02Ez+kC DRe6o9XVvbMj3ee7+Spj8K9A8PS9fI4ma8ac5AFf/hVZqjD6IqAB/T6MAGnNhzbd +6mMJDBK82Kd1EYoTU3pEWx2/T2esDAhCvO5qAluem8N8nNkfq0tQZf7pwkikYZZ +fX+B9/eA1s47A== -----END CERTIFICATE-----Generated at Sun Jan 25 20:12:15 2026 by rpki-client