This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft File: sICdwHvAd1GY8vMVVBUvNWqD93A.mft (raw, json) Hash identifier: Dj/kKHq4l/d/CrbKji9WpWHcsyX4zIKIEiKisog0oQs= Subject key identifier: 20:70:8C:E9:F3:A2:A3:E6:F4:39:19:C4:89:A1:8E:56:89:39:5E:09 Authority key identifier: B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70 Certificate issuer: /CN=b0809dc07bc0775198f2f31554152f356a83f770 Certificate serial: 019BF72D31B67610D870033473339A0DBFD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft Manifest number: 177D Signing time: Sun 25 Jan 2026 22:01:32 +0000 Manifest this update: Sun 25 Jan 2026 22:01:32 +0000 Manifest next update: Mon 26 Jan 2026 22:01:32 +0000 Files and hashes: 1: 9y3JK83GAsm13D0YffuSXVmKNYo.roa (hash: mRnoN4uYmedrpU7jo9ReZ2AadwnL5SQlW0OFJSUdrsE=) 2: sICdwHvAd1GY8vMVVBUvNWqD93A.crl (hash: S80GKe+TMYxBBoS2UzCvKeJ6XOb5TnfzyqOcvMMvoxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:31:b6:76:10:d8:70:03:34:73:33:9a:0d:bf:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0809dc07bc0775198f2f31554152f356a83f770 Validity Not Before: Jan 25 22:01:32 2026 GMT Not After : Jan 26 22:01:32 2026 GMT Subject: CN=20708ce9f3a2a3e6f43919c489a18e5689395e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6b:22:dd:21:f0:d5:96:bf:df:e7:12:c1:3a: 37:4e:5b:c2:60:9e:2e:35:46:57:28:95:c0:13:95: 31:f1:86:f7:7f:59:1e:7e:76:c9:fe:3e:9b:41:fc: b1:c1:65:ae:83:9c:89:53:17:a2:aa:e6:87:4f:d5: 9f:22:6d:71:84:db:cc:d9:44:04:a4:bd:d7:24:f8: 9e:14:4d:41:06:d3:e5:c6:83:65:a8:5c:83:03:10: 0a:5a:55:be:e5:dc:a2:e8:44:c6:54:8b:1f:d2:f3: 13:46:9c:eb:cd:d4:61:98:64:21:e3:b3:8d:ce:1a: b2:87:23:62:ab:59:6d:5a:ee:a2:1b:36:5b:c5:d6: cc:a6:49:23:c8:60:39:3b:ee:fd:de:20:ca:e4:a9: 01:50:e3:43:a5:a5:75:c0:5f:06:56:73:08:38:42: 8e:1c:31:c8:e9:ea:24:02:8a:bd:b0:d0:01:1c:9d: a8:27:01:99:d2:ec:ea:5c:0f:96:1c:f7:56:a4:79: 44:48:40:5e:1c:b6:ce:81:81:d3:c8:e3:51:1b:0d: 23:ae:03:fb:d9:55:b6:f8:07:93:9f:20:79:01:1f: ac:a7:9e:7d:9f:91:bf:f5:66:ac:ba:c9:f2:31:cc: 41:74:af:f5:01:87:bc:bf:04:b2:04:28:2f:2d:70: c1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:70:8C:E9:F3:A2:A3:E6:F4:39:19:C4:89:A1:8E:56:89:39:5E:09 X509v3 Authority Key Identifier: keyid:B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d2:2c:f3:f5:1d:a9:f2:09:95:3a:09:f5:e6:15:06:c6:d3: f7:80:83:e8:5b:90:9a:9d:f9:6e:0b:1c:60:a4:74:81:3a:18: 0e:23:9f:bd:6e:a9:f0:4b:c6:5b:3d:e0:b4:29:50:36:c8:36: 44:d9:dc:9d:2f:e2:ba:f9:7b:62:f6:f9:da:80:fe:2b:9c:6c: d6:d6:17:59:49:7b:79:18:b7:79:7a:18:93:34:15:56:99:30: 9f:c4:fe:d2:9a:1d:f7:99:be:0b:10:6e:ae:56:6b:b7:df:71: 93:cf:f3:25:75:86:cb:31:cb:ba:cf:41:03:ff:01:f3:dc:33: 9a:ce:69:72:44:89:68:94:98:77:c5:92:34:26:5f:f2:fe:c6: 1a:db:a4:ac:24:bb:86:47:18:dd:92:f6:ef:64:aa:73:4a:02: ae:c2:f1:e9:e7:e0:bf:a7:d2:52:8f:04:b1:b1:47:7e:64:c6: b6:bf:94:3e:ce:07:2d:c5:4f:d0:e9:f5:1b:e5:bb:61:68:80: c1:b7:a5:a9:56:8d:08:9d:68:39:f1:a8:86:bd:bd:e2:c6:79: 69:fe:0e:21:f2:05:0d:f8:b5:cf:57:01:43:fe:50:6c:80:fc: 30:07:b9:ce:22:af:37:44:e7:4c:26:3b:ed:b4:0a:ff:1e:cb: 12:53:0b:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LTG2dhDYcAM0czOaDb/RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwODA5ZGMwN2JjMDc3NTE5OGYyZjMxNTU0MTUyZjM1NmE4 M2Y3NzAwHhcNMjYwMTI1MjIwMTMyWhcNMjYwMTI2MjIwMTMyWjAzMTEwLwYDVQQD EygyMDcwOGNlOWYzYTJhM2U2ZjQzOTE5YzQ4OWExOGU1Njg5Mzk1ZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2si3SHw1Za/3+cSwTo3TlvCYJ4u NUZXKJXAE5Ux8Yb3f1kefnbJ/j6bQfyxwWWug5yJUxeiquaHT9WfIm1xhNvM2UQE pL3XJPieFE1BBtPlxoNlqFyDAxAKWlW+5dyi6ETGVIsf0vMTRpzrzdRhmGQh47ON zhqyhyNiq1ltWu6iGzZbxdbMpkkjyGA5O+793iDK5KkBUONDpaV1wF8GVnMIOEKO HDHI6eokAoq9sNABHJ2oJwGZ0uzqXA+WHPdWpHlESEBeHLbOgYHTyONRGw0jrgP7 2VW2+AeTnyB5AR+sp559n5G/9WasusnyMcxBdK/1AYe8vwSyBCgvLXDBjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBwjOnzoqPm9DkZxImhjlaJOV4JMB8GA1UdIwQY MBaAFLCAncB7wHdRmPLzFVQVLzVqg/dwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0lDZHdIdkFkMUdZOHZNVlZCVXZOV3FEOTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9kYjcyNGEtY2JjYS00ZWQxLTliNzkt OWExYWIxMWFiZGVkLzEvc0lDZHdIdkFkMUdZOHZNVlZCVXZOV3FEOTNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9kYjcyNGEtY2JjYS00ZWQxLTliNzktOWExYWIxMWFiZGVk LzEvc0lDZHdIdkFkMUdZOHZNVlZCVXZOV3FEOTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdIs8/Ud qfIJlToJ9eYVBsbT94CD6FuQmp35bgscYKR0gToYDiOfvW6p8EvGWz3gtClQNsg2 RNncnS/iuvl7Yvb52oD+K5xs1tYXWUl7eRi3eXoYkzQVVpkwn8T+0pod95m+CxBu rlZrt99xk8/zJXWGyzHLus9BA/8B89wzms5pckSJaJSYd8WSNCZf8v7GGtukrCS7 hkcY3ZL272Sqc0oCrsLx6efgv6fSUo8EsbFHfmTGtr+UPs4HLcVP0On1G+W7YWiA wbelqVaNCJ1oOfGohr294sZ5af4OIfIFDfi1z1cBQ/5QbID8MAe5ziKvN0TnTCY7 7bQK/x7LElMLsg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:35 2026 by rpki-client