This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft File: iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json) Hash identifier: f7Cjt4xNf+WaiDRQN1Z4Gy6fvave9MJBN41FVAbAp2Y= Subject key identifier: 81:36:47:05:32:51:F2:70:16:25:77:1F:DC:E3:A8:17:5D:6E:DF:01 Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a Certificate serial: 019BF575124F39547FC782BCD9202C2A5C24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 14:00:48 +0000 Manifest this update: Sun 25 Jan 2026 14:00:48 +0000 Manifest next update: Mon 26 Jan 2026 14:00:48 +0000 Files and hashes: 1: cFtA2whI-5eSAd_xz6FflVfrfcA.roa (hash: rjwPdM8tVlnPByunwjAWM9HihlVqQjzJw824S3HbwPc=) 2: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: jShmEFODWbR7AOf+FRDclN24LpMoGH4XpUXess6NHpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:12:4f:39:54:7f:c7:82:bc:d9:20:2c:2a:5c:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a Validity Not Before: Jan 25 14:00:48 2026 GMT Not After : Jan 26 14:00:48 2026 GMT Subject: CN=813647053251f2701625771fdce3a8175d6edf01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fb:33:bc:1e:3b:2e:ed:9b:57:27:73:7a:38: c8:b5:bf:79:51:d7:ef:e0:7d:e5:f8:c6:21:a5:f3: c0:fa:d5:49:a4:4d:25:05:8b:bb:06:05:f9:b2:c0: 21:81:0a:35:20:f2:7a:dd:78:76:26:75:71:90:b6: 29:c7:ef:e9:84:ad:13:19:8a:86:3c:23:31:a2:36: 60:5c:16:9a:bd:ad:bd:22:67:12:4a:ed:49:c6:a4: 27:8c:96:65:a4:cb:ab:e1:7b:44:1b:b8:b0:ca:4a: 49:e9:92:93:7c:64:a5:f0:00:14:b9:86:b0:d3:4e: b1:d0:6f:f3:af:98:81:b5:f4:f8:19:ab:e4:40:f9: 80:d8:f1:94:88:48:74:e4:fd:f8:e9:79:23:a4:c9: 9f:20:aa:e2:57:8c:36:b7:b3:4f:eb:04:13:3e:d0: 08:04:5a:14:ed:57:11:cb:90:39:da:06:e0:2a:9a: 3d:6d:d5:5c:86:70:a0:b5:e7:41:57:61:ed:0a:ee: f4:9a:ea:b8:2a:60:7b:d1:f4:7a:5e:67:45:35:38: 95:00:72:68:47:c9:59:45:8e:c7:5b:82:13:03:95: 33:f2:6a:78:70:31:0c:5e:8d:43:bc:eb:0f:46:97: a7:ab:50:4c:90:df:87:cd:c8:2b:67:72:c7:2e:6f: b3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:36:47:05:32:51:F2:70:16:25:77:1F:DC:E3:A8:17:5D:6E:DF:01 X509v3 Authority Key Identifier: keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b2:46:6d:59:4c:8d:69:01:1d:32:f8:8b:e5:79:04:4e:42: 3c:ce:a5:1c:80:83:69:ee:52:d9:8a:20:e8:e4:32:17:70:38: d5:d5:2c:83:95:80:ea:a0:70:55:0a:ec:32:bf:32:4c:6d:9a: 56:bf:20:9b:1f:da:8f:e6:2c:3b:2e:76:0a:52:c4:42:ea:1c: 27:bb:db:77:81:9c:97:ba:2e:b0:18:9f:16:c6:4d:9c:05:cc: 0d:23:5c:df:eb:d0:93:8e:80:ec:43:c3:f6:9f:4b:9b:96:85: 02:b5:9f:ad:a6:33:86:42:9f:5f:42:d4:eb:c3:cd:ea:d7:16: 12:b1:1d:29:f9:d7:db:c4:73:41:00:6e:c1:bf:07:fc:85:a2: b6:47:d2:77:a6:cc:f6:89:5c:4f:1d:3a:18:ed:c0:a7:22:47: cf:f6:6e:2f:a7:5f:f8:5e:70:71:61:52:0b:f9:30:f4:b4:ba: b9:f2:f6:fb:5a:b2:d7:88:66:cd:ec:ae:c0:0a:c8:83:99:34: 65:3b:1b:68:97:0e:42:c9:51:d4:a9:3d:83:ef:9a:2b:49:c9: 4c:ad:75:f6:c1:9d:0d:8d:85:e6:97:35:3c:fe:82:3a:54:27: d9:a4:8c:3f:98:5d:2f:0c:5c:12:98:e9:86:03:b7:ca:4f:5c: 3d:d6:a9:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dRJPOVR/x4K82SAsKlwkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4N2QzMDExOTM1MTUwMGYyNTlhNTdlMmZmNjg1MDc5N2Qx YjRlMWEwHhcNMjYwMTI1MTQwMDQ4WhcNMjYwMTI2MTQwMDQ4WjAzMTEwLwYDVQQD Eyg4MTM2NDcwNTMyNTFmMjcwMTYyNTc3MWZkY2UzYTgxNzVkNmVkZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPszvB47Lu2bVydzejjItb95Udfv 4H3l+MYhpfPA+tVJpE0lBYu7BgX5ssAhgQo1IPJ63Xh2JnVxkLYpx+/phK0TGYqG PCMxojZgXBaava29ImcSSu1JxqQnjJZlpMur4XtEG7iwykpJ6ZKTfGSl8AAUuYaw 006x0G/zr5iBtfT4GavkQPmA2PGUiEh05P346XkjpMmfIKriV4w2t7NP6wQTPtAI BFoU7VcRy5A52gbgKpo9bdVchnCgtedBV2HtCu70muq4KmB70fR6XmdFNTiVAHJo R8lZRY7HW4ITA5Uz8mp4cDEMXo1DvOsPRpenq1BMkN+HzcgrZ3LHLm+zwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIE2RwUyUfJwFiV3H9zjqBddbt8BMB8GA1UdIwQY MBaAFIh9MBGTUVAPJZpX4v9oUHl9G04aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mZWJiMmUtZjBkYS00ZDc0LWI1NDct Zjc0MDFiNGU0YjRhLzEvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9mZWJiMmUtZjBkYS00ZDc0LWI1NDctZjc0MDFiNGU0YjRh LzEvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLJGbVlM jWkBHTL4i+V5BE5CPM6lHICDae5S2Yog6OQyF3A41dUsg5WA6qBwVQrsMr8yTG2a Vr8gmx/aj+YsOy52ClLEQuocJ7vbd4Gcl7ousBifFsZNnAXMDSNc3+vQk46A7EPD 9p9Lm5aFArWfraYzhkKfX0LU68PN6tcWErEdKfnX28RzQQBuwb8H/IWitkfSd6bM 9olcTx06GO3ApyJHz/ZuL6df+F5wcWFSC/kw9LS6ufL2+1qy14hmzeyuwArIg5k0 ZTsbaJcOQslR1Kk9g++aK0nJTK119sGdDY2F5pc1PP6COlQn2aSMP5hdLwxcEpjp hgO3yk9cPdapXQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:46 2026 by rpki-client