This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft File: iUkoo5YnzV7l-XW9iXwtd1qymUA.mft (raw, json) Hash identifier: 0KLJRpWg/VuQEaMTYZ9+YO3tOKIJ3QxJSIP6EcThDS8= Subject key identifier: 71:95:97:58:35:D9:C2:F8:6B:70:64:DA:B7:22:51:E9:F9:99:28:0B Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940 Certificate serial: 019BF688427816C9F285ED2158DCC83C10E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft Manifest number: 15E2 Signing time: Sun 25 Jan 2026 19:01:23 +0000 Manifest this update: Sun 25 Jan 2026 19:01:23 +0000 Manifest next update: Mon 26 Jan 2026 19:01:23 +0000 Files and hashes: 1: AFQC7jHnRlCUVKp9-Y8DclCs6sw.roa (hash: K8ES0stF0B9nVEj6mDlZTMrk2WtUAQbBdwAem6tOZGY=) 2: Io_ZVHvCyR6E0UkrByDPhBSjf28.roa (hash: GgHe68vIGWEdGtgi9K1dWLKGMpr22uj5DBtVFq/PEt8=) 3: Sw3TBAZfbT7g9hIziOAVbID_LK0.roa (hash: GcVNx3s7JTViQrTy69Sa/cOemh0RTv4+/HNRQpVhgG8=) 4: UBRxr2nYR9E7znMInZ4kkE77leM.roa (hash: n5idYROewwRPTbiKVI2bzv8U9KgMAq8Hw16uWVfkjtA=) 5: ZgTKdwUh3SurmRUa8dm-u_MWcXw.roa (hash: qRP4wuFNa16Ds9pfHaXqX+aH3Ub6klNpQNjHeuFx6D8=) 6: iUkoo5YnzV7l-XW9iXwtd1qymUA.crl (hash: IF/ZsZCWspyhZR1pS9UAMrisplkRCiuVCrW1rgBjNj8=) 7: iXVTxxd-VzfNWG_h6FSR8aDfAh0.roa (hash: TCBBqFimvaPYoPwM3u7pi0MqQ4jMKUyoiDLkS/Ux7PI=) 8: pBq3W9xPZuycWXuqkD961L-mWtw.roa (hash: UcttI+nS2NhvK4pCjq/sa+PPYwZRzwG7hdOjojDGC14=) 9: qOJN9omToo0C3f14D69g26kolF0.roa (hash: ID+RWAeZnySlCvlcenhMVT/bVoxf+6Y//DrxiQaW6/A=) 10: uRRMYgnu-bZBG9baaLWfUi4PBns.roa (hash: JWxuXbyBJNwH97SXL3KmtOQUktUGRxMlosbaF3EpabU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:42:78:16:c9:f2:85:ed:21:58:dc:c8:3c:10:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940 Validity Not Before: Jan 25 19:01:23 2026 GMT Not After : Jan 26 19:01:23 2026 GMT Subject: CN=7195975835d9c2f86b7064dab72251e9f999280b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fd:7f:a1:d6:a3:7d:e0:53:1a:64:17:5b:a0: 85:71:23:91:45:2c:22:b0:95:c8:10:d8:bc:17:4c: a8:fc:e9:db:db:f1:d4:38:a4:be:8d:d1:72:96:75: e0:a4:1e:96:a2:ee:c7:9b:f5:32:c3:5e:ad:62:9d: 50:f5:04:61:de:5d:0b:6b:72:12:87:3c:88:e4:05: 72:fe:20:01:e1:02:0f:b1:43:73:87:0f:1e:49:52: 11:76:26:9a:2b:31:10:cf:f6:ad:18:87:c4:fb:f4: 62:a3:ca:9c:21:29:c9:cb:3c:33:bb:3a:70:a7:58: df:e5:06:9a:19:0d:01:22:40:95:58:7f:87:87:9e: a2:09:b5:fe:95:49:2f:e7:6c:40:10:50:58:2b:66: a0:25:85:59:51:ba:7a:24:1c:60:ce:7f:52:f5:14: 16:ca:10:4a:ff:e3:e3:0d:07:df:4f:6e:f3:09:3f: ef:7b:58:f7:c8:3d:58:b1:9b:a9:96:d7:2f:70:1f: 7a:e4:10:de:54:d3:60:2f:9b:37:8e:f6:dc:da:61: 0a:b2:19:79:cb:1a:d8:1f:f2:b8:97:eb:73:f4:41: ed:9a:13:3e:39:d2:02:78:4e:ad:5b:77:29:c9:7e: 56:f6:62:21:14:33:77:80:1b:04:91:62:6c:63:8d: 53:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:95:97:58:35:D9:C2:F8:6B:70:64:DA:B7:22:51:E9:F9:99:28:0B X509v3 Authority Key Identifier: keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:f7:3a:53:4f:da:05:d0:21:9c:0b:9a:f0:c3:ca:ad:ad:48: 23:35:04:88:97:d7:a2:97:7d:7a:3c:29:8c:ba:42:1d:02:ab: b6:2e:23:5a:7a:42:5f:a5:68:c9:54:22:b6:64:38:fb:96:ad: a3:aa:07:a6:43:b7:a8:c1:af:9f:24:c7:5a:4f:0f:24:f8:e4: c8:1b:8b:d9:54:80:5b:de:7e:0c:86:e9:7b:0f:5a:66:22:2c: 88:a5:c7:80:0d:d7:af:58:89:15:a9:eb:f2:d4:e3:ba:ec:f4: 42:fa:63:8a:0b:49:d0:5d:df:2e:8e:61:30:91:b0:35:01:cf: 98:4f:ff:cb:c6:96:13:b4:74:e5:0e:9d:45:99:f1:45:ac:e3: 41:f3:77:5e:c2:17:12:8a:d0:35:79:75:c9:8d:8e:8a:3c:fa: 93:e7:61:ae:60:ce:8e:4a:1c:73:01:fe:6b:03:4e:ec:32:30: 43:54:b2:96:78:02:07:2d:5f:0b:8b:88:b5:97:80:52:e7:0a: 9f:92:55:ee:dd:ee:a2:fd:84:fc:c1:20:2b:26:17:b6:72:ad: 2d:cd:2e:e9:39:a4:6f:6c:22:82:a2:98:55:3a:4d:75:dc:85: ee:e2:f9:9a:28:f1:a7:ef:6b:e1:fe:4c:6c:88:dc:ee:af:37: 9b:67:a0:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iEJ4Fsnyhe0hWNzIPBDkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NDkyOGEzOTYyN2NkNWVlNWY5NzViZDg5N2MyZDc3NWFi Mjk5NDAwHhcNMjYwMTI1MTkwMTIzWhcNMjYwMTI2MTkwMTIzWjAzMTEwLwYDVQQD Eyg3MTk1OTc1ODM1ZDljMmY4NmI3MDY0ZGFiNzIyNTFlOWY5OTkyODBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP1/odajfeBTGmQXW6CFcSORRSwi sJXIENi8F0yo/Onb2/HUOKS+jdFylnXgpB6Wou7Hm/Uyw16tYp1Q9QRh3l0La3IS hzyI5AVy/iAB4QIPsUNzhw8eSVIRdiaaKzEQz/atGIfE+/Rio8qcISnJyzwzuzpw p1jf5QaaGQ0BIkCVWH+Hh56iCbX+lUkv52xAEFBYK2agJYVZUbp6JBxgzn9S9RQW yhBK/+PjDQffT27zCT/ve1j3yD1YsZupltcvcB965BDeVNNgL5s3jvbc2mEKshl5 yxrYH/K4l+tz9EHtmhM+OdICeE6tW3cpyX5W9mIhFDN3gBsEkWJsY41TAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGVl1g12cL4a3Bk2rciUen5mSgLMB8GA1UdIwQY MBaAFIlJKKOWJ81e5fl1vYl8LXdasplAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEt MTU5M2Q0MDQ1Y2JjLzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEtMTU5M2Q0MDQ1Y2Jj LzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArvc6U0/a BdAhnAua8MPKra1IIzUEiJfXopd9ejwpjLpCHQKrti4jWnpCX6VoyVQitmQ4+5at o6oHpkO3qMGvnyTHWk8PJPjkyBuL2VSAW95+DIbpew9aZiIsiKXHgA3Xr1iJFanr 8tTjuuz0QvpjigtJ0F3fLo5hMJGwNQHPmE//y8aWE7R05Q6dRZnxRazjQfN3XsIX EorQNXl1yY2Oijz6k+dhrmDOjkoccwH+awNO7DIwQ1SylngCBy1fC4uItZeAUucK n5JV7t3uov2E/MEgKyYXtnKtLc0u6Tmkb2wigqKYVTpNddyF7uL5mijxp+9r4f5M bIjc7q83m2egLQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:51:03 2026 by rpki-client