This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft File: iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft (raw, json) Hash identifier: xS7uZp37InA+yhkZiw3zQ1y91y6kZwckx+Tjn1U/vT4= Subject key identifier: 01:B0:85:E0:D6:B0:A9:DE:5D:A0:EB:B9:BA:37:70:8E:F0:A2:E8:60 Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72 Certificate issuer: /CN=8829792e3ff21fc35827f68a78c8050015c66a72 Certificate serial: 019BF5AC44FB2C8C31CD0F65D1E81C6EC196 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft Manifest number: 17E5 Signing time: Sun 25 Jan 2026 15:01:06 +0000 Manifest this update: Sun 25 Jan 2026 15:01:06 +0000 Manifest next update: Mon 26 Jan 2026 15:01:06 +0000 Files and hashes: 1: QrAN41qChRTNT4R95qHpTVefHQQ.roa (hash: XDPu188rMm6Y+zuvYmYl0h0eDDm5nOSgaZ2ar9LKmws=) 2: iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl (hash: uHfkIJIZDDqPHIP0hlkqxjPcfKerumYFLebW4QdDk8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:44:fb:2c:8c:31:cd:0f:65:d1:e8:1c:6e:c1:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72 Validity Not Before: Jan 25 15:01:06 2026 GMT Not After : Jan 26 15:01:06 2026 GMT Subject: CN=01b085e0d6b0a9de5da0ebb9ba37708ef0a2e860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3e:06:4e:35:d6:e4:04:b1:be:52:96:0a:d1: 6f:1e:6b:e6:4e:44:20:34:81:57:9d:89:4c:52:32: 0e:f5:fd:c1:1b:9b:05:73:70:92:37:1a:f8:9e:4d: b8:3a:04:8a:64:57:9f:ff:27:58:05:81:dc:70:cd: 71:61:a0:84:36:77:c6:09:27:5a:e7:94:d7:d7:f2: 2d:af:94:da:26:43:f5:37:68:ef:24:fb:13:df:16: 87:5c:2d:70:17:e1:37:23:05:ae:62:6b:c0:a6:3f: 6e:6c:21:09:96:30:87:f3:aa:03:07:a4:8c:71:bc: 1f:89:d1:e4:4e:0c:92:d0:28:5e:b5:e7:e0:db:d2: 88:b1:b6:4f:b7:78:32:ce:31:21:22:08:06:81:31: 4c:13:3b:71:c6:c9:e4:6a:b6:3d:2c:d5:8d:2f:64: 58:44:ba:17:dd:51:85:11:9f:9e:a8:61:05:c7:7e: 9f:7e:ab:b1:3d:ef:ef:59:db:7c:95:f4:89:1b:4f: ec:b4:11:b7:72:9f:9f:3d:e6:e8:7d:c9:7a:fc:ca: a6:1e:22:47:96:e1:1e:3d:7b:b7:10:11:b9:dd:16: 3f:d9:a2:02:63:18:4c:14:5a:53:a2:03:36:5c:5d: 66:17:30:e9:bf:d4:3b:ad:09:1e:cf:30:ea:be:52: 20:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B0:85:E0:D6:B0:A9:DE:5D:A0:EB:B9:BA:37:70:8E:F0:A2:E8:60 X509v3 Authority Key Identifier: keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:5d:6d:99:7f:ab:8f:e8:1a:c9:12:3d:9c:e6:25:8d:d0:91: bc:68:7a:06:48:b4:d7:76:f0:d3:87:6f:7a:44:27:b9:41:31: 0b:ad:f4:bf:3e:40:8d:ea:ed:48:94:d3:c4:05:d1:87:13:2a: f7:0f:8e:94:9b:00:52:a0:49:82:ec:a3:b5:51:51:9c:97:c3: d6:fd:6f:0f:8c:28:83:4c:f6:a1:4a:ce:63:a8:13:25:ad:23: 33:38:f2:e2:ae:de:04:b9:53:fa:e8:6e:da:8c:96:4e:8d:f7: 64:d7:15:cc:a2:2c:03:1e:77:c8:da:c3:fa:71:2c:35:46:06: 44:a1:d0:9c:4d:27:fe:a6:36:4d:5b:2b:a6:6c:34:24:e7:dc: 73:38:db:a0:58:50:f3:0f:92:e7:8a:25:d8:0a:29:56:a0:50: 84:a9:e4:f0:22:2a:79:85:e3:8b:e9:0f:af:66:d7:06:22:82: 49:48:bb:a3:c4:39:4d:e0:e3:ed:88:b7:01:fc:46:ba:ad:8f: ab:2a:c1:49:cd:e1:06:ec:b7:ae:96:3b:60:dc:75:f8:00:44: ad:a3:7b:69:75:73:86:36:49:18:f0:5a:43:94:ad:48:60:a4: 57:b9:e8:b4:21:4b:3d:1f:f1:c8:b3:bb:ab:6d:a7:fe:71:1a: ca:14:4d:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rET7LIwxzQ9l0egcbsGWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4Mjk3OTJlM2ZmMjFmYzM1ODI3ZjY4YTc4YzgwNTAwMTVj NjZhNzIwHhcNMjYwMTI1MTUwMTA2WhcNMjYwMTI2MTUwMTA2WjAzMTEwLwYDVQQD EygwMWIwODVlMGQ2YjBhOWRlNWRhMGViYjliYTM3NzA4ZWYwYTJlODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D4GTjXW5ASxvlKWCtFvHmvmTkQg NIFXnYlMUjIO9f3BG5sFc3CSNxr4nk24OgSKZFef/ydYBYHccM1xYaCENnfGCSda 55TX1/Itr5TaJkP1N2jvJPsT3xaHXC1wF+E3IwWuYmvApj9ubCEJljCH86oDB6SM cbwfidHkTgyS0Chetefg29KIsbZPt3gyzjEhIggGgTFMEztxxsnkarY9LNWNL2RY RLoX3VGFEZ+eqGEFx36ffquxPe/vWdt8lfSJG0/stBG3cp+fPebofcl6/MqmHiJH luEePXu3EBG53RY/2aICYxhMFFpTogM2XF1mFzDpv9Q7rQkezzDqvlIg+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGwheDWsKneXaDrubo3cI7wouhgMB8GA1UdIwQY MBaAFIgpeS4/8h/DWCf2injIBQAVxmpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUNsNUxqX3lIOE5ZSl9hS2VNZ0ZBQlhHYW5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC82ZjM4NWUtN2ZlMS00OWFkLTgxZmIt MTg4MmY0YzI3NmNkLzEvaUNsNUxqX3lIOE5ZSl9hS2VNZ0ZBQlhHYW5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC82ZjM4NWUtN2ZlMS00OWFkLTgxZmItMTg4MmY0YzI3NmNk LzEvaUNsNUxqX3lIOE5ZSl9hS2VNZ0ZBQlhHYW5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhF1tmX+r j+gayRI9nOYljdCRvGh6Bki013bw04dvekQnuUExC630vz5AjertSJTTxAXRhxMq 9w+OlJsAUqBJguyjtVFRnJfD1v1vD4wog0z2oUrOY6gTJa0jMzjy4q7eBLlT+uhu 2oyWTo33ZNcVzKIsAx53yNrD+nEsNUYGRKHQnE0n/qY2TVsrpmw0JOfcczjboFhQ 8w+S54ol2AopVqBQhKnk8CIqeYXji+kPr2bXBiKCSUi7o8Q5TeDj7Yi3AfxGuq2P qyrBSc3hBuy3rpY7YNx1+ABEraN7aXVzhjZJGPBaQ5StSGCkV7notCFLPR/xyLO7 q22n/nEayhRNpg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:53 2026 by rpki-client