This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft File: ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft (raw, json) Hash identifier: YuP4yDXSlsouju4OzvfJH32h8WBCRBbRs905lWnuosU= Subject key identifier: 3A:E2:39:E6:5C:79:66:A9:13:27:32:CD:3A:FF:42:A1:08:A0:FF:D3 Authority key identifier: 8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F Certificate issuer: /CN=8b17fe8dd72c50c628dea973158d0f942326da8f Certificate serial: 019BF79AC53ADBCC28FB214E9F1C385A94C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft Manifest number: 096B Signing time: Mon 26 Jan 2026 00:01:13 +0000 Manifest this update: Mon 26 Jan 2026 00:01:13 +0000 Manifest next update: Tue 27 Jan 2026 00:01:13 +0000 Files and hashes: 1: RvKz_KYG6cMBvsy8YZ2LeWC-Jqc.roa (hash: r3EeiiesKv5F1JB1yTDFm2/eqrLc37XLpiQOCBpKBec=) 2: ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl (hash: vl3kVt9E5eVYY58gbZ4OhPEbphGhJxBdayLmCY1TVWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:c5:3a:db:cc:28:fb:21:4e:9f:1c:38:5a:94:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b17fe8dd72c50c628dea973158d0f942326da8f Validity Not Before: Jan 26 00:01:13 2026 GMT Not After : Jan 27 00:01:13 2026 GMT Subject: CN=3ae239e65c7966a9132732cd3aff42a108a0ffd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2d:ba:eb:09:a9:89:cf:b0:4d:ab:2c:49:86: f8:fe:df:a9:d0:3b:bb:03:a6:95:14:7b:b6:02:5d: de:f4:d1:12:e8:80:8f:97:1b:55:ef:5f:d9:d8:a6: b7:46:a1:b7:17:6d:e2:8b:fb:f1:1e:bc:26:f9:77: 67:e7:6a:81:17:b6:38:2e:0b:40:c8:c5:c8:4b:95: 64:e8:30:f2:2a:df:f1:ec:68:e1:90:c1:9e:6f:c8: df:fb:f4:7d:82:a8:06:ed:26:50:cc:8d:14:51:01: 24:a7:57:bf:e9:21:b9:e3:ce:6a:3d:b3:90:ce:45: 61:e2:10:f8:ea:d9:67:91:8b:75:b9:08:6f:18:b6: 33:6a:9c:95:e0:a2:4a:0a:3a:64:4a:3b:71:ed:81: 9c:84:48:3b:59:63:68:da:9e:3b:5c:76:17:b5:7c: c9:17:63:d6:0b:d3:65:1d:39:28:a7:a0:15:c2:6e: 05:34:da:ab:39:03:71:93:c7:17:71:c9:20:9c:8d: d2:8e:d3:69:5f:a3:8e:c2:86:8a:fc:f8:52:10:a0: b7:13:55:f4:aa:6a:ec:a0:2b:b6:a8:8d:3d:ad:cf: 88:99:90:cb:50:a1:1a:c7:17:cd:d8:6e:58:87:a1: 65:ff:06:bc:bd:11:4f:14:dc:1f:b7:25:62:31:e6: 0a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E2:39:E6:5C:79:66:A9:13:27:32:CD:3A:FF:42:A1:08:A0:FF:D3 X509v3 Authority Key Identifier: keyid:8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:0c:14:0a:8e:9c:b9:97:3b:59:e1:e4:cd:f2:e1:67:be:2b: 9b:e9:fb:bb:7f:77:49:38:4b:e0:dd:dd:53:92:3d:ad:eb:4a: 9d:75:21:9d:5b:0c:f7:87:ce:dd:06:7c:4b:7e:ca:c3:2e:a2: 2b:06:09:20:eb:08:81:9a:11:f1:99:20:e7:df:84:88:23:d3: 2e:ad:f3:7c:ed:77:02:d1:9d:82:75:0d:f4:72:c4:6c:07:9d: 33:7c:fd:45:4e:38:4c:1d:87:33:f0:8c:8a:38:11:22:a8:e3: d6:a2:e9:65:be:e1:11:18:00:4c:a0:a3:1e:24:19:1b:b6:5f: 55:5c:4a:a8:c1:4b:b6:f7:f5:89:a0:f9:e2:24:30:3c:74:68: 2c:d7:4f:5f:ef:2b:49:78:15:44:60:a5:5e:72:59:4a:ca:dc: 29:c0:36:5a:b3:55:d5:e3:31:11:6c:00:29:f6:53:17:94:b4: 79:11:d3:e0:d3:92:0d:dc:93:41:48:08:00:a3:86:15:4b:6b: e5:e7:68:cd:bf:45:03:51:57:83:ac:3d:a5:3b:ec:4f:42:8a: af:a3:e2:4e:08:7e:2e:29:b6:07:bd:6a:b1:36:13:80:33:da: 68:aa:ce:30:fd:0f:78:0b:16:fe:27:8e:78:df:b9:60:22:20: 59:74:db:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3msU628wo+yFOnxw4WpTBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMTdmZThkZDcyYzUwYzYyOGRlYTk3MzE1OGQwZjk0MjMy NmRhOGYwHhcNMjYwMTI2MDAwMTEzWhcNMjYwMTI3MDAwMTEzWjAzMTEwLwYDVQQD EygzYWUyMzllNjVjNzk2NmE5MTMyNzMyY2QzYWZmNDJhMTA4YTBmZmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS266wmpic+wTassSYb4/t+p0Du7 A6aVFHu2Al3e9NES6ICPlxtV71/Z2Ka3RqG3F23ii/vxHrwm+Xdn52qBF7Y4LgtA yMXIS5Vk6DDyKt/x7GjhkMGeb8jf+/R9gqgG7SZQzI0UUQEkp1e/6SG5485qPbOQ zkVh4hD46tlnkYt1uQhvGLYzapyV4KJKCjpkSjtx7YGchEg7WWNo2p47XHYXtXzJ F2PWC9NlHTkop6AVwm4FNNqrOQNxk8cXcckgnI3SjtNpX6OOwoaK/PhSEKC3E1X0 qmrsoCu2qI09rc+ImZDLUKEaxxfN2G5Yh6Fl/wa8vRFPFNwftyViMeYKvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDriOeZceWapEycyzTr/QqEIoP/TMB8GA1UdIwQY MBaAFIsX/o3XLFDGKN6pcxWND5QjJtqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXhmLWpkY3NVTVlvM3FsekZZMFBsQ01tMm84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yOGQzY2QtZDc5OS00M2Y2LTg3ZmUt ZjViYWVhZWU4NjVhLzEvaXhmLWpkY3NVTVlvM3FsekZZMFBsQ01tMm84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yOGQzY2QtZDc5OS00M2Y2LTg3ZmUtZjViYWVhZWU4NjVh LzEvaXhmLWpkY3NVTVlvM3FsekZZMFBsQ01tMm84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAwUCo6c uZc7WeHkzfLhZ74rm+n7u393SThL4N3dU5I9retKnXUhnVsM94fO3QZ8S37Kwy6i KwYJIOsIgZoR8Zkg59+EiCPTLq3zfO13AtGdgnUN9HLEbAedM3z9RU44TB2HM/CM ijgRIqjj1qLpZb7hERgATKCjHiQZG7ZfVVxKqMFLtvf1iaD54iQwPHRoLNdPX+8r SXgVRGClXnJZSsrcKcA2WrNV1eMxEWwAKfZTF5S0eRHT4NOSDdyTQUgIAKOGFUtr 5edozb9FA1FXg6w9pTvsT0KKr6PiTgh+Lim2B71qsTYTgDPaaKrOMP0PeAsW/ieO eN+5YCIgWXTbCg== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:40 2026 by rpki-client