This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft File: Iss2-FBsEYv8QfXa42ImSpaBSZA.mft (raw, json) Hash identifier: wZl4ESww6d7UtYyBxofFhTziXXaACa02IKYibm0MSpc= Subject key identifier: DF:37:67:4B:16:CE:E6:91:41:40:50:CC:64:84:09:6C:FE:E8:E2:91 Authority key identifier: 22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90 Certificate issuer: /CN=22cb36f8506c118bfc41f5dae362264a96814990 Certificate serial: 019BF57565C9A55E36B909F3C82C62FC9F25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft Manifest number: DE Signing time: Sun 25 Jan 2026 14:01:10 +0000 Manifest this update: Sun 25 Jan 2026 14:01:10 +0000 Manifest next update: Mon 26 Jan 2026 14:01:10 +0000 Files and hashes: 1: GUQW3oeRBPoGPp_6XnIg_YS248M.roa (hash: oD0wBdW+ygOBHBdC0skIWPthzTXGMd5Me6Sk/yskuP8=) 2: Iss2-FBsEYv8QfXa42ImSpaBSZA.crl (hash: bvVQLtydkuJkBv0WUsYGnVNAP1870aCESxkGfV8qARE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:65:c9:a5:5e:36:b9:09:f3:c8:2c:62:fc:9f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22cb36f8506c118bfc41f5dae362264a96814990 Validity Not Before: Jan 25 14:01:10 2026 GMT Not After : Jan 26 14:01:10 2026 GMT Subject: CN=df37674b16cee691414050cc6484096cfee8e291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:da:c5:e1:63:f8:a4:48:02:c7:8d:d8:a2:3c: 46:b2:fd:c2:13:93:23:07:60:27:31:1a:76:4e:55: 0d:f2:d3:3a:2b:27:c7:9b:fe:fa:29:c4:5c:1a:fd: c9:25:44:8f:94:b1:20:ac:30:2b:4e:a2:d5:6e:96: 85:f0:e3:16:f5:3a:b5:55:29:39:3a:e3:f3:e0:75: d2:3b:0f:80:44:d7:9f:b9:a2:09:37:95:f3:db:98: 34:96:fa:53:1b:8b:93:ed:29:1e:32:f0:19:20:7a: 2f:9f:6b:2a:89:e1:2d:1c:86:65:e6:11:19:a6:e9: 17:ad:5f:7a:d2:0d:d3:1e:61:6e:03:ab:56:8c:dd: 5e:08:73:b4:d1:66:72:c1:a2:02:8b:76:3f:9f:86: 6d:99:01:ba:a2:60:6b:1e:a2:b1:76:22:a4:d4:b8: 97:74:42:77:08:71:11:13:22:4a:03:e3:1d:c1:b6: 80:7d:e8:3d:f7:2d:b4:85:ef:d9:30:c7:7b:66:da: 1a:0b:8c:c4:5a:25:52:84:ad:c6:67:b1:27:55:d1: ed:1c:00:e7:f2:f5:e4:ca:d5:ec:71:18:ac:99:4f: 74:05:b6:32:30:fd:7c:a9:76:8d:b3:cc:16:5e:e4: b7:cb:bc:e4:53:5c:58:ae:5c:cb:06:53:35:60:61: fc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:37:67:4B:16:CE:E6:91:41:40:50:CC:64:84:09:6C:FE:E8:E2:91 X509v3 Authority Key Identifier: keyid:22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:3c:6a:5b:c8:a2:4a:a1:ac:50:c9:96:8e:79:b1:23:9f:f1: c6:fc:b8:0b:3d:ac:5c:33:b1:7f:10:ad:d3:76:8d:15:73:11: 95:1f:9e:0e:57:ac:0c:96:09:4d:f0:34:7c:81:c8:b0:7c:04: 7d:9e:e9:9d:e6:c3:71:c6:c0:90:3c:a8:ba:46:ad:aa:b8:97: 13:07:4f:74:3f:ac:7e:5b:b3:31:b7:33:63:13:d9:80:84:ca: 0e:8f:79:43:e6:09:53:5a:a5:8e:88:92:78:11:df:c0:8e:95: 46:f2:c5:e3:e3:c6:a9:f2:29:74:cb:59:37:3f:0b:90:19:38: c3:2e:6d:ce:c9:ca:e7:74:a7:5d:48:5e:d4:08:1f:ff:2b:9d: 3f:de:3b:2c:32:67:1a:06:4b:b0:32:cc:fc:4c:98:d0:1a:fe: bc:4e:63:96:4c:95:1a:92:a8:d0:34:d7:21:f6:4f:92:ef:7e: 54:4b:71:a3:22:40:2c:3e:61:8b:ee:3c:39:48:11:49:61:90: 2d:ca:23:20:fa:09:11:47:d2:a5:d6:f7:67:87:28:ca:42:6c: 4b:48:fc:81:02:f7:06:c1:13:f8:c8:69:29:e3:8c:b7:0a:65: 92:92:74:60:b6:8f:bf:3e:96:2e:ff:cb:c7:53:64:ca:ee:c1: 82:b8:56:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dWXJpV42uQnzyCxi/J8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyY2IzNmY4NTA2YzExOGJmYzQxZjVkYWUzNjIyNjRhOTY4 MTQ5OTAwHhcNMjYwMTI1MTQwMTEwWhcNMjYwMTI2MTQwMTEwWjAzMTEwLwYDVQQD EyhkZjM3Njc0YjE2Y2VlNjkxNDE0MDUwY2M2NDg0MDk2Y2ZlZThlMjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotrF4WP4pEgCx43YojxGsv3CE5Mj B2AnMRp2TlUN8tM6KyfHm/76KcRcGv3JJUSPlLEgrDArTqLVbpaF8OMW9Tq1VSk5 OuPz4HXSOw+ARNefuaIJN5Xz25g0lvpTG4uT7SkeMvAZIHovn2sqieEtHIZl5hEZ pukXrV960g3THmFuA6tWjN1eCHO00WZywaICi3Y/n4ZtmQG6omBrHqKxdiKk1LiX dEJ3CHEREyJKA+MdwbaAfeg99y20he/ZMMd7ZtoaC4zEWiVShK3GZ7EnVdHtHADn 8vXkytXscRismU90BbYyMP18qXaNs8wWXuS3y7zkU1xYrlzLBlM1YGH8ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN83Z0sWzuaRQUBQzGSECWz+6OKRMB8GA1UdIwQY MBaAFCLLNvhQbBGL/EH12uNiJkqWgUmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNzMi1GQnNFWXY4UWZYYTQySW1TcGFCU1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81MGNhMzUtYmRlNi00NTA4LWI4MGYt MjM2Nzg5NTg3OTk3LzEvSXNzMi1GQnNFWXY4UWZYYTQySW1TcGFCU1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy81MGNhMzUtYmRlNi00NTA4LWI4MGYtMjM2Nzg5NTg3OTk3 LzEvSXNzMi1GQnNFWXY4UWZYYTQySW1TcGFCU1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczxqW8ii SqGsUMmWjnmxI5/xxvy4Cz2sXDOxfxCt03aNFXMRlR+eDlesDJYJTfA0fIHIsHwE fZ7pnebDccbAkDyoukatqriXEwdPdD+sfluzMbczYxPZgITKDo95Q+YJU1qljoiS eBHfwI6VRvLF4+PGqfIpdMtZNz8LkBk4wy5tzsnK53SnXUhe1Agf/yudP947LDJn GgZLsDLM/EyY0Br+vE5jlkyVGpKo0DTXIfZPku9+VEtxoyJALD5hi+48OUgRSWGQ LcojIPoJEUfSpdb3Z4coykJsS0j8gQL3BsET+MhpKeOMtwplkpJ0YLaPvz6WLv/L x1Nkyu7BgrhWlg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:50 2026 by rpki-client