This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft File: iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft (raw, json) Hash identifier: +OFir3oATCU1NL5FpSZfzz8emc3A2XvlgFs1bR55NYI= Subject key identifier: 0C:46:3E:16:BB:27:D5:14:89:BC:41:A5:F3:38:2F:20:23:96:D5:94 Authority key identifier: 88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11 Certificate issuer: /CN=88fc58875608970d9a728347d05ef00d0f1d5611 Certificate serial: 019BF951FC93874611201FF91D889776CD9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft Manifest number: 1156 Signing time: Mon 26 Jan 2026 08:00:58 +0000 Manifest this update: Mon 26 Jan 2026 08:00:58 +0000 Manifest next update: Tue 27 Jan 2026 08:00:58 +0000 Files and hashes: 1: 1-_xreJrOs3w9ZGU1IhIWpYpavKY.roa (hash: cDUbfiWVCS31IunzF5QHEKWOVDVj3fc59oC6ui5b0TI=) 2: iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl (hash: LKcvEE/nnuZZeZqClnGDhspPzFS3ruaYAX5u4Am5Mu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:fc:93:87:46:11:20:1f:f9:1d:88:97:76:cd:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88fc58875608970d9a728347d05ef00d0f1d5611 Validity Not Before: Jan 26 08:00:58 2026 GMT Not After : Jan 27 08:00:58 2026 GMT Subject: CN=0c463e16bb27d51489bc41a5f3382f202396d594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:72:ea:2e:f1:23:f2:d8:93:20:b9:ab:2f: 9d:15:12:38:50:08:42:d2:85:a4:1c:6e:40:4d:a0: 69:8c:8b:37:c8:7d:a0:99:e6:5d:f0:62:6f:d4:f5: c1:96:eb:af:10:cd:84:06:d9:2e:75:77:8b:5b:b3: 47:fe:bd:c6:bb:b3:de:9c:38:23:f7:86:6a:b9:4e: a5:c2:b3:b1:40:98:e1:0e:36:19:f7:c4:c8:79:b3: cd:a4:51:2a:a3:8f:8c:33:dd:e8:9f:01:a0:94:34: d6:8a:04:b6:71:ee:b6:bd:1a:9c:da:4b:da:5b:8f: 72:da:05:87:17:c2:75:90:22:4a:d4:11:e6:8c:41: 89:50:70:bd:3b:fd:88:ae:25:53:29:64:30:b2:6f: 30:4f:cf:7a:f7:ee:09:11:ea:ac:e6:1c:60:75:e8: 1e:cd:a8:d6:fe:f9:f1:65:f3:5b:5a:8a:5a:f0:de: 58:d3:1c:64:b3:9e:9f:0b:fb:32:14:c4:74:ed:d1: 30:b8:79:f5:76:e2:71:ff:e2:b9:a1:ef:98:db:a0: 1f:69:6a:2d:68:f5:cf:d9:0d:1f:6f:ae:ec:52:77: 04:4c:04:ea:7c:6a:e9:85:ea:b4:04:d6:8a:06:f0: 99:f3:c7:c0:b1:af:93:3a:9c:04:7d:c9:03:14:0f: 67:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:46:3E:16:BB:27:D5:14:89:BC:41:A5:F3:38:2F:20:23:96:D5:94 X509v3 Authority Key Identifier: keyid:88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:86:92:ec:d9:9f:90:09:4c:d6:6e:37:b9:db:d7:d7:b6:ef: 00:dc:89:f7:a1:c3:92:dc:fc:77:9b:a5:81:2f:f4:74:6e:21: 6d:01:d2:af:64:1a:ba:51:ca:29:8f:64:c1:cc:99:3a:fb:75: c0:ab:05:35:d4:3a:e2:9b:fc:94:12:1f:53:9f:8d:64:22:d8: fd:64:ea:88:25:ec:cf:45:5d:43:71:a3:c0:42:93:ea:0e:3a: 7c:7c:4f:7d:90:ac:95:72:4c:ba:e8:1f:e3:7a:85:6d:47:c8: c3:37:e9:8e:22:b2:b5:0f:7e:18:69:f0:f8:dd:a2:ad:fd:89: 1b:00:66:7d:eb:f9:7b:93:c5:2b:49:2c:b4:11:2a:66:e6:b5: 2f:3a:89:23:de:55:7c:ea:0d:5c:e2:d1:98:dc:5c:37:18:be: 7c:d8:9e:34:20:2e:5a:3c:1c:ec:06:93:27:4c:0e:dc:03:3a: fc:19:db:ea:dd:85:14:fd:62:6e:70:d2:58:a9:09:78:27:10: c4:5c:23:a8:3b:0a:69:23:bd:9f:d5:83:f8:84:5f:69:bb:11: fd:d3:66:1c:ea:11:db:03:ee:7f:6c:c0:3e:d0:af:0a:10:cb: 75:34:de:4a:1f:c3:4c:08:d1:d6:d1:bb:57:c4:7a:c4:44:e4: de:62:22:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UfyTh0YRIB/5HYiXds2dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZmM1ODg3NTYwODk3MGQ5YTcyODM0N2QwNWVmMDBkMGYx ZDU2MTEwHhcNMjYwMTI2MDgwMDU4WhcNMjYwMTI3MDgwMDU4WjAzMTEwLwYDVQQD EygwYzQ2M2UxNmJiMjdkNTE0ODliYzQxYTVmMzM4MmYyMDIzOTZkNTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLVy6i7xI/LYkyC5qy+dFRI4UAhC 0oWkHG5ATaBpjIs3yH2gmeZd8GJv1PXBluuvEM2EBtkudXeLW7NH/r3Gu7PenDgj 94ZquU6lwrOxQJjhDjYZ98TIebPNpFEqo4+MM93onwGglDTWigS2ce62vRqc2kva W49y2gWHF8J1kCJK1BHmjEGJUHC9O/2IriVTKWQwsm8wT8969+4JEeqs5hxgdege zajW/vnxZfNbWopa8N5Y0xxks56fC/syFMR07dEwuHn1duJx/+K5oe+Y26AfaWot aPXP2Q0fb67sUncETATqfGrpheq0BNaKBvCZ88fAsa+TOpwEfckDFA9nUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxGPha7J9UUibxBpfM4LyAjltWUMB8GA1UdIwQY MBaAFIj8WIdWCJcNmnKDR9Be8A0PHVYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVB4WWgxWUlsdzJhY29OSDBGN3dEUThkVmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9hMmRmNzktZDRmZi00MGM3LWI0YTQt N2FlYzU1OGViNDBkLzEvaVB4WWgxWUlsdzJhY29OSDBGN3dEUThkVmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9hMmRmNzktZDRmZi00MGM3LWI0YTQtN2FlYzU1OGViNDBk LzEvaVB4WWgxWUlsdzJhY29OSDBGN3dEUThkVmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoaS7Nmf kAlM1m43udvX17bvANyJ96HDktz8d5ulgS/0dG4hbQHSr2QaulHKKY9kwcyZOvt1 wKsFNdQ64pv8lBIfU5+NZCLY/WTqiCXsz0VdQ3GjwEKT6g46fHxPfZCslXJMuugf 43qFbUfIwzfpjiKytQ9+GGnw+N2irf2JGwBmfev5e5PFK0kstBEqZua1LzqJI95V fOoNXOLRmNxcNxi+fNieNCAuWjwc7AaTJ0wO3AM6/Bnb6t2FFP1ibnDSWKkJeCcQ xFwjqDsKaSO9n9WD+IRfabsR/dNmHOoR2wPuf2zAPtCvChDLdTTeSh/DTAjR1tG7 V8R6xETk3mIiEg== -----END CERTIFICATE-----Generated at Mon Jan 26 12:25:39 2026 by rpki-client