This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: T83NKtupu2EvE25npAsDgTnvBJYjOjrvizJCLcGCd4s= Subject key identifier: 74:6D:2E:DF:F9:A2:7C:DE:3E:9D:12:F8:1D:5A:D3:9B:35:74:A6:EB Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 019BF462D245F55995AB7486E29025051EEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 09:01:15 +0000 Manifest this update: Sun 25 Jan 2026 09:01:15 +0000 Manifest next update: Mon 26 Jan 2026 09:01:15 +0000 Files and hashes: 1: 1WyX2wYZfSpfBSYJmVIkxnQu2wQ.roa (hash: HByWovJax8W7lyVW8tq54HBM8ZSxxFTqPknO3ul1ROw=) 2: 2CXydi7pS_cJcMpLbvELMfs4pr4.roa (hash: 4VhEMr7PE71mfWduL3bPnzBAu34zlbw2TZ44djrJbfs=) 3: ABESchGm3xAWCWATli7x4kGiTzw.roa (hash: AnU+yC61NkHACr9HWnVDLRjrcdrvaYYu39Z2t2XH2V8=) 4: AkX-mzKyW-zWL7niXL60Uuhd2-M.roa (hash: KT91YU3baNR7x3ucuvqSZ47bi2WtNK8I/Rkt9bmg+ew=) 5: IwsvS8RMbeaKnb6W0isgZ_jGVmw.roa (hash: 4c2RJvFORctjrcpJUYKuJxaYNELJKpkNVKrS5LH92qg=) 6: J99XeamfX85WdvVj9bf7jMIVc1M.roa (hash: mqf7/m5EBvBpIA8HdJaRPy8S8x76AjMtaSPox8GG7EU=) 7: VOtCH4o4J2I_5xCMQITnNsVrQfM.roa (hash: lN9s8lkEygb8GJjfZSSBzQIfuy7TwscZaveIQRwQT+M=) 8: VsVyNiSsXQIos_8DFMvFrVCvPpA.roa (hash: R0tV98ZO0gRaUtsVcVg2fiIoo3NKUpn02E2MWrZq94I=) 9: _LeL1BNmnES7Us_tgk-2zM9WYz4.roa (hash: 6CIKHs+5sFlyV+xFBJTDb1/TPrK1K1Sk3+HBhp50WvE=) 10: aumQ2rFvvPhxeJtuueKJVvufvQo.roa (hash: ZFlq8TIHB2weJNR+r1TYQoztERUk3FxSRK57UxVkfCM=) 11: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: oIhPwlGFNofK0A1ESnfVrmlFbYY2TWcSFuGePKF3SMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:d2:45:f5:59:95:ab:74:86:e2:90:25:05:1e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Jan 25 09:01:15 2026 GMT Not After : Jan 26 09:01:15 2026 GMT Subject: CN=746d2edff9a27cde3e9d12f81d5ad39b3574a6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:14:05:1f:44:86:71:86:d0:1e:f2:3c:93:56: bc:d9:43:a3:73:12:d8:7a:11:08:be:92:e1:5d:de: 6e:5e:60:b4:71:5f:8e:3c:0f:c2:7c:af:2e:1a:69: 3d:bd:07:15:47:de:4e:3e:e2:22:69:a9:8b:05:10: aa:af:70:65:c1:61:41:3d:e1:33:c9:b2:8b:83:24: 99:b2:bb:89:10:12:29:4b:f4:25:a4:82:05:6a:35: 31:d9:a2:32:cf:88:ce:c6:15:79:1e:be:82:e0:a8: f5:1c:9d:d4:84:8c:64:4e:08:70:9d:51:48:f2:98: f8:ce:85:d9:52:e9:01:95:89:66:1d:f1:84:dc:b7: 3e:d0:aa:68:ee:44:50:3a:0c:bb:08:2c:24:2a:a8: eb:d8:5b:69:e2:bf:ef:ea:0b:56:d3:87:d2:89:f7: 65:9a:b2:db:75:9d:c5:b6:0b:ef:75:90:f6:3b:2d: 1f:99:f1:6b:47:fd:62:0d:6f:31:d0:30:41:a2:07: c0:84:30:c3:1d:6d:51:16:f4:cd:e2:8e:b3:92:ea: 45:f2:36:62:95:36:82:80:6e:2a:69:d8:c1:d9:49: e4:39:19:c2:78:04:c8:5a:6c:d0:cf:2b:33:57:ed: 64:e5:ad:7e:5d:d8:14:12:d1:1f:0b:f2:f6:8e:de: 79:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6D:2E:DF:F9:A2:7C:DE:3E:9D:12:F8:1D:5A:D3:9B:35:74:A6:EB X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:04:80:1e:9c:79:f1:77:16:b0:bd:f2:23:d4:f9:15:c1:de: d4:50:3b:bc:dc:6e:9b:2a:69:b6:bf:4e:49:38:04:db:5f:f8: 19:ad:c6:96:98:6d:9e:46:05:96:8a:d8:8b:cd:f0:f6:33:0b: 66:b6:f6:47:1c:99:a9:3e:40:34:87:da:a3:7a:b5:2a:25:32: 86:d1:ec:b5:a4:47:79:3c:8e:cd:cc:5d:24:f5:7a:56:c5:24: c3:3d:de:0d:e3:b2:88:8f:73:15:83:f2:26:47:8d:2f:ce:dc: 26:ce:78:e9:36:31:26:5c:82:d2:58:d1:e5:a3:25:93:77:e0: 97:9b:ed:d1:18:4c:58:00:66:12:98:8a:a1:79:1b:4d:19:bc: c4:33:75:10:76:c6:62:cc:4d:c1:08:3e:6c:cb:59:a4:a1:ca: eb:21:5a:dc:e2:d1:12:9e:00:a6:5b:12:40:d3:29:cd:24:53: 2d:5e:3d:f8:15:a8:fa:ee:86:8b:5b:c8:48:ab:c4:e2:99:7f: 0d:50:4a:98:81:e1:48:82:96:aa:c0:70:0e:6a:b3:11:6b:c9: 5a:5d:c8:e3:de:d4:42:4a:cb:34:dd:f6:95:70:92:69:22:98: 33:9e:09:db:cd:d3:41:30:82:9e:7a:f5:58:0e:fa:fc:cc:67: 20:63:78:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YtJF9VmVq3SG4pAlBR7sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjYwMTI1MDkwMTE1WhcNMjYwMTI2MDkwMTE1WjAzMTEwLwYDVQQD Eyg3NDZkMmVkZmY5YTI3Y2RlM2U5ZDEyZjgxZDVhZDM5YjM1NzRhNmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxQFH0SGcYbQHvI8k1a82UOjcxLY ehEIvpLhXd5uXmC0cV+OPA/CfK8uGmk9vQcVR95OPuIiaamLBRCqr3BlwWFBPeEz ybKLgySZsruJEBIpS/QlpIIFajUx2aIyz4jOxhV5Hr6C4Kj1HJ3UhIxkTghwnVFI 8pj4zoXZUukBlYlmHfGE3Lc+0Kpo7kRQOgy7CCwkKqjr2Ftp4r/v6gtW04fSifdl mrLbdZ3FtgvvdZD2Oy0fmfFrR/1iDW8x0DBBogfAhDDDHW1RFvTN4o6zkupF8jZi lTaCgG4qadjB2UnkORnCeATIWmzQzyszV+1k5a1+XdgUEtEfC/L2jt55nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRtLt/5onzePp0S+B1a05s1dKbrMB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjASAHpx5 8XcWsL3yI9T5FcHe1FA7vNxumypptr9OSTgE21/4Ga3GlphtnkYFlorYi83w9jML Zrb2RxyZqT5ANIfao3q1KiUyhtHstaRHeTyOzcxdJPV6VsUkwz3eDeOyiI9zFYPy JkeNL87cJs546TYxJlyC0ljR5aMlk3fgl5vt0RhMWABmEpiKoXkbTRm8xDN1EHbG YsxNwQg+bMtZpKHK6yFa3OLREp4AplsSQNMpzSRTLV49+BWo+u6Gi1vISKvE4pl/ DVBKmIHhSIKWqsBwDmqzEWvJWl3I497UQkrLNN32lXCSaSKYM54J283TQTCCnnr1 WA76/MxnIGN4Mg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:47:48 2026 by rpki-client