This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json) Hash identifier: +fqcwIMiWn5sSemszm3WoJBXnSBJYnBfUuF3WYKOwAQ= Subject key identifier: 70:A2:50:75:64:C0:75:0C:62:3C:69:22:9D:08:57:73:FB:30:A5:58 Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83 Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83 Certificate serial: 019BF650CC606F987C1CF52713F0C0704ED0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft Manifest number: 0F3A Signing time: Sun 25 Jan 2026 18:00:48 +0000 Manifest this update: Sun 25 Jan 2026 18:00:48 +0000 Manifest next update: Mon 26 Jan 2026 18:00:48 +0000 Files and hashes: 1: 2bVvxRffnJ6GQKgs2LoPDWvUcK4.roa (hash: er7wIVOxtiLCvuKAAvSBfYTSBvkd5n1t/IW0taeZM7Y=) 2: EKwGj8cGWTKa1emZfvaG-_KFnug.roa (hash: 0WqMi3eKQHHkupGYUjixsLx2D37mbsIXi9Fsl7hZLiw=) 3: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: /N2kcvTnSdsMPh3ix48iCGNlUvNkRFD9DUBICRFDXYE=) 4: QdRrKIrH4mGJmO4pGdzpank3gew.roa (hash: uL5ZvBd0SOggdi3Ll3eXsAHR4s6R5DvUqu2sa+EiNtI=) 5: TruqXXhyrBV8Cwe5yzCBt7QLsCE.roa (hash: Ab+jWWB0kPKqVoiUmBfNBgr0bDHAA/s+gzbI3fKh/Jo=) 6: YIiAdksRfvM2tL27jCCRXB5ju3Q.roa (hash: QClgQMgXCLixY3zPZ3xGliorGs5EkE6bJGcMO+wqsBg=) 7: hD3IqorNDrlwkzGUmybhJLv5L2k.roa (hash: ZaWNL4A6CBZBDeNroOwIUO67tG+ZeiSsCvPL+QQ5od4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:cc:60:6f:98:7c:1c:f5:27:13:f0:c0:70:4e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83 Validity Not Before: Jan 25 18:00:48 2026 GMT Not After : Jan 26 18:00:48 2026 GMT Subject: CN=70a2507564c0750c623c69229d085773fb30a558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8d:6a:3b:2c:33:47:6a:08:72:0d:2d:d9:f9: af:00:29:e1:32:85:79:55:c3:26:3f:aa:96:e5:4e: 97:c2:b2:d5:1f:2a:26:3f:10:e8:9c:53:e7:30:bd: 9c:0c:86:2b:8f:89:d8:2f:8c:96:bd:44:5e:41:86: 49:97:21:88:fc:dc:29:73:88:f9:9d:0b:fd:87:d1: d0:25:f5:a0:24:0f:51:cf:a4:67:cc:62:6e:2b:56: bb:4c:01:33:13:05:1f:e4:01:47:69:d8:a9:28:a3: e2:b8:c8:9b:83:4b:91:90:cd:78:4f:bf:ce:c1:04: 7c:2a:ee:15:8f:a2:bf:da:d7:9c:50:8a:6c:18:23: 81:21:82:ff:3a:73:c1:ff:98:33:bb:92:8b:0d:5d: 58:6b:4f:da:85:49:4f:c1:4b:c9:da:98:6d:a3:89: 49:04:b5:f2:c5:67:a6:7f:8b:00:9f:41:d5:5e:53: ba:46:c5:fb:b7:dd:d6:34:57:b5:a4:31:34:44:67: dc:23:91:ec:88:50:04:cf:8d:58:a7:bc:90:98:0a: ed:24:c0:35:df:c9:9f:0a:b1:7d:26:0e:e9:40:fd: 7d:fe:ec:78:73:7a:6b:62:60:c3:a1:07:94:91:0b: 38:81:35:db:eb:fd:07:ce:19:72:ff:fd:40:e0:d6: 46:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A2:50:75:64:C0:75:0C:62:3C:69:22:9D:08:57:73:FB:30:A5:58 X509v3 Authority Key Identifier: keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:4e:aa:45:a7:95:32:5a:57:ac:d1:95:ba:b5:87:9b:6b:1c: 0c:a9:ba:a9:cb:7d:be:3a:50:d5:e0:c4:63:87:2f:67:f5:ca: fc:d9:42:9b:b9:0b:1a:15:a4:93:35:18:d8:d0:8c:9c:7d:1f: 3d:37:2f:60:98:ad:b1:99:7a:1a:ae:bc:4d:11:0e:49:8c:81: ab:64:1e:74:dd:27:2a:6f:c2:ba:a1:ba:e7:0a:c3:f1:54:61: bc:f4:c1:d8:16:b4:50:a3:b1:84:05:c6:6a:af:38:e0:f1:eb: 62:82:ec:81:b3:28:e2:59:c8:fb:11:fa:f0:ac:4f:dd:88:ac: d0:7e:9a:5b:46:30:79:63:23:23:5d:9b:6b:e8:c0:d4:68:ce: b0:6e:8d:fa:c6:3c:69:4b:b4:6c:bc:c4:1b:b2:5e:7e:0f:55: 9e:7d:87:83:c0:8e:81:be:04:ff:0b:ac:75:d1:22:76:d7:e7: f9:f7:6e:e1:f5:ba:66:9d:16:f7:0e:a1:ae:b1:99:82:34:4a: 5f:01:0e:65:00:87:dd:f2:71:fa:c3:d4:e3:54:e5:20:27:e1: 4f:52:ac:98:f7:16:f7:30:5c:e8:32:ea:6f:99:5a:57:a5:d5: 94:34:0c:15:b5:dd:8c:86:bd:c1:8e:e4:fe:dc:3c:f8:ae:0b: 3b:a4:e2:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UMxgb5h8HPUnE/DAcE7QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMmM0NTg1YmQ4OGZiMjdjYWRmMjllZTViYjk1ZDY1NzVm Y2VmODMwHhcNMjYwMTI1MTgwMDQ4WhcNMjYwMTI2MTgwMDQ4WjAzMTEwLwYDVQQD Eyg3MGEyNTA3NTY0YzA3NTBjNjIzYzY5MjI5ZDA4NTc3M2ZiMzBhNTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo1qOywzR2oIcg0t2fmvACnhMoV5 VcMmP6qW5U6XwrLVHyomPxDonFPnML2cDIYrj4nYL4yWvUReQYZJlyGI/Nwpc4j5 nQv9h9HQJfWgJA9Rz6RnzGJuK1a7TAEzEwUf5AFHadipKKPiuMibg0uRkM14T7/O wQR8Ku4Vj6K/2tecUIpsGCOBIYL/OnPB/5gzu5KLDV1Ya0/ahUlPwUvJ2phto4lJ BLXyxWemf4sAn0HVXlO6RsX7t93WNFe1pDE0RGfcI5HsiFAEz41Yp7yQmArtJMA1 38mfCrF9Jg7pQP19/ux4c3prYmDDoQeUkQs4gTXb6/0Hzhly//1A4NZGlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCiUHVkwHUMYjxpIp0IV3P7MKVYMB8GA1UdIwQY MBaAFCIsRYW9iPsnyt8p7lu5XWV1/O+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUt YzY0N2E4YzFkZGZhLzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUtYzY0N2E4YzFkZGZh LzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIE6qRaeV MlpXrNGVurWHm2scDKm6qct9vjpQ1eDEY4cvZ/XK/NlCm7kLGhWkkzUY2NCMnH0f PTcvYJitsZl6Gq68TREOSYyBq2QedN0nKm/CuqG65wrD8VRhvPTB2Ba0UKOxhAXG aq844PHrYoLsgbMo4lnI+xH68KxP3Yis0H6aW0YweWMjI12ba+jA1GjOsG6N+sY8 aUu0bLzEG7Jefg9Vnn2Hg8COgb4E/wusddEidtfn+fdu4fW6Zp0W9w6hrrGZgjRK XwEOZQCH3fJx+sPU41TlICfhT1KsmPcW9zBc6DLqb5laV6XVlDQMFbXdjIa9wY7k /tw8+K4LO6TivQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:27 2026 by rpki-client