This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft File: i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json) Hash identifier: zeokqpi45dAMUl0FiDGfDA3EwwbnaTwIY18k8ecviRI= Subject key identifier: 25:18:BB:9E:59:65:2F:2C:B8:6B:F3:25:06:EF:5B:46:35:74:5B:A8 Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a Certificate serial: 019BF72CFE1D9133600AE40528FB9DC76276 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft Manifest number: 02EE Signing time: Sun 25 Jan 2026 22:01:19 +0000 Manifest this update: Sun 25 Jan 2026 22:01:19 +0000 Manifest next update: Mon 26 Jan 2026 22:01:19 +0000 Files and hashes: 1: antdIoiZjHuYWIPE0lbINVR7LM4.roa (hash: zzoqx+mD+wgU8qtd5pYOql61oJEO2Kr8zeQk2T0A+rQ=) 2: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: ihbKMJWJ2MYDTfzs1DX0NokChcRNMhFEURybuq4E/FU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:fe:1d:91:33:60:0a:e4:05:28:fb:9d:c7:62:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a Validity Not Before: Jan 25 22:01:19 2026 GMT Not After : Jan 26 22:01:19 2026 GMT Subject: CN=2518bb9e59652f2cb86bf32506ef5b4635745ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f8:67:a4:5b:28:de:89:c6:ff:da:5a:8f:ac: 63:5b:18:97:f2:46:b8:10:81:e5:0b:aa:5e:a4:4b: 6a:f4:91:21:2b:90:f2:8d:fc:b9:39:5c:78:21:6d: cf:dc:38:1a:1d:9f:c8:4c:e1:c1:9a:66:2a:2f:a0: e1:1d:6e:4d:36:dd:81:fe:e0:02:eb:a7:0d:ae:d7: f8:31:66:4f:0d:88:59:bf:1d:e6:44:7e:b2:a9:21: c9:ef:5d:2f:2d:f1:c1:30:cf:a0:e2:98:55:d9:85: d2:f0:d0:d7:e6:f6:54:15:81:a8:ad:2a:9d:92:04: c7:a6:d9:14:cf:a9:f1:f5:de:0c:b8:f1:6b:44:d4: 93:14:12:56:70:47:2f:1a:2b:bf:80:3b:88:fb:f9: a8:c2:72:e1:fc:d1:c5:16:42:58:eb:e1:54:9a:8a: dd:86:95:49:03:7d:85:e7:a3:b7:3c:c3:fd:1f:8b: ce:58:43:6a:87:89:ff:f1:0a:cc:c9:fb:a3:f9:d8: 86:9c:6a:d8:93:4b:21:93:b9:62:7b:0b:37:79:6e: 15:91:5d:fa:5c:76:4a:bb:1b:b9:a7:bc:b5:eb:99: 4b:85:ad:28:6f:b7:36:b1:41:39:1f:48:df:a5:fd: cf:ea:93:1b:b3:f0:16:73:6a:e1:b1:31:f5:d6:02: 3d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:18:BB:9E:59:65:2F:2C:B8:6B:F3:25:06:EF:5B:46:35:74:5B:A8 X509v3 Authority Key Identifier: keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:aa:53:82:76:6b:31:e8:d2:91:71:7b:1b:e9:06:10:78:1a: 3b:81:ce:b1:9f:2c:4f:be:f0:24:ff:1c:1b:23:31:0c:51:14: 64:95:54:97:16:d5:df:8b:10:1a:f4:f9:04:4d:2f:58:8f:84: 37:3c:23:30:a7:6f:5a:e2:79:ba:51:a4:41:3c:03:54:8c:eb: 23:4f:31:b7:58:3e:0b:aa:17:e7:43:b0:d6:36:5f:fe:b8:16: a2:fb:3c:f6:98:03:44:1a:8a:d9:01:1a:31:1f:cd:ce:88:61: 11:5f:c4:df:af:36:4c:8e:49:90:55:a1:e9:a0:41:26:9b:41: d3:b1:37:cf:b6:b8:ee:48:5b:f2:ed:97:95:47:67:19:c6:dc: 3c:7b:c7:16:59:be:f3:24:5d:00:b3:73:f3:87:84:c7:13:11: f5:bd:08:3a:cf:62:9b:39:75:d8:74:7f:1c:78:af:1e:d1:c0: fc:d7:17:c6:5f:7c:81:24:a8:94:e7:63:43:c2:2c:54:67:c1: 0c:e5:c7:47:44:3a:29:28:0c:17:ed:c6:6d:90:9c:69:7b:f7: 6c:60:8e:4d:97:0d:33:ad:c1:7e:a5:48:dc:b6:29:4e:18:48: 5d:4d:94:99:df:41:04:a5:60:a3:4a:f4:f6:c0:e3:9b:9c:58: b3:79:67:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LP4dkTNgCuQFKPudx2J2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZjhhMjk4MTQxZmMyZjQ1YzA3MmQyN2EwYmYyNjI2NTVj YjZmNWEwHhcNMjYwMTI1MjIwMTE5WhcNMjYwMTI2MjIwMTE5WjAzMTEwLwYDVQQD EygyNTE4YmI5ZTU5NjUyZjJjYjg2YmYzMjUwNmVmNWI0NjM1NzQ1YmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/hnpFso3onG/9paj6xjWxiX8ka4 EIHlC6pepEtq9JEhK5Dyjfy5OVx4IW3P3DgaHZ/ITOHBmmYqL6DhHW5NNt2B/uAC 66cNrtf4MWZPDYhZvx3mRH6yqSHJ710vLfHBMM+g4phV2YXS8NDX5vZUFYGorSqd kgTHptkUz6nx9d4MuPFrRNSTFBJWcEcvGiu/gDuI+/mownLh/NHFFkJY6+FUmord hpVJA32F56O3PMP9H4vOWENqh4n/8QrMyfuj+diGnGrYk0shk7liews3eW4VkV36 XHZKuxu5p7y165lLha0ob7c2sUE5H0jfpf3P6pMbs/AWc2rhsTH11gI9dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUYu55ZZS8suGvzJQbvW0Y1dFuoMB8GA1UdIwQY MBaAFIv4opgUH8L0XActJ6C/JiZVy29aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaV9paW1CUWZ3dlJjQnkwbm9MOG1KbFhMYjFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My80OTY0NDItYWFiNy00MDljLTllZmYt ZDQ2ZWQ1NjhmODcxLzEvaV9paW1CUWZ3dlJjQnkwbm9MOG1KbFhMYjFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My80OTY0NDItYWFiNy00MDljLTllZmYtZDQ2ZWQ1NjhmODcx LzEvaV9paW1CUWZ3dlJjQnkwbm9MOG1KbFhMYjFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKpTgnZr MejSkXF7G+kGEHgaO4HOsZ8sT77wJP8cGyMxDFEUZJVUlxbV34sQGvT5BE0vWI+E NzwjMKdvWuJ5ulGkQTwDVIzrI08xt1g+C6oX50Ow1jZf/rgWovs89pgDRBqK2QEa MR/NzohhEV/E3682TI5JkFWh6aBBJptB07E3z7a47khb8u2XlUdnGcbcPHvHFlm+ 8yRdALNz84eExxMR9b0IOs9imzl12HR/HHivHtHA/NcXxl98gSSolOdjQ8IsVGfB DOXHR0Q6KSgMF+3GbZCcaXv3bGCOTZcNM63BfqVI3LYpThhIXU2Umd9BBKVgo0r0 9sDjm5xYs3lnPA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:59 2026 by rpki-client