This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft File: IvLC57wdpU2RnKW1lB03iJKyzLI.mft (raw, json) Hash identifier: 6YE4j6EeCesl2RbEk4gKKrHKE/1WYZlfMzfVlfXoCpA= Subject key identifier: AF:43:6F:70:EC:48:ED:F1:69:6C:EB:AA:CB:C6:7F:87:14:C3:95:51 Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 019BF38702AA969F0CE8B45DF48686225EEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft Manifest number: 1354 Signing time: Sun 25 Jan 2026 05:01:10 +0000 Manifest this update: Sun 25 Jan 2026 05:01:10 +0000 Manifest next update: Mon 26 Jan 2026 05:01:10 +0000 Files and hashes: 1: 44aGJKnw5Hesx37y7qMcSZ1iMsI.roa (hash: gXCpn8JpVZnLs233LPUlWa8pDJaZD06hjtiYiLo5D/g=) 2: 5Q5SmVwCYdWVR4jJ4yPXGm6nx4E.roa (hash: E+HPw/BSZoy+FRt+tdA/pl0xYJ8cBINy/SV66sa2K/Q=) 3: 5VJALfhFe7o_AUDjHLN1heHmdsg.roa (hash: 1gHtL7JZ6Kw9aV9pDDeqj4dLmT+0UP21NwOVssRKidM=) 4: 5eKnFrezKqp3RFybwrKD6RzHZeY.roa (hash: Y43namxpY84cm0E5KqxDyJ0xhF6ivsfdIzgc9v2etVc=) 5: 6V9r_f6L2m84KT2hfkYO8YKk4Qw.roa (hash: IggBLq2a8EpveAoDyReWvG833q0pjf83jxc+h1sihOI=) 6: Ffin0rWh_yvg6Tmk-u_cXjupM8Q.roa (hash: 9VIUPXOuLKIWThDUo3hV+lRqsAnOw3iAcmnqTjK/WTI=) 7: GAfFh1K7-2DSrU9YyyevDu6GoAI.roa (hash: oAnnKyrmJ66q7il8XCcxKmZFYj/swRA7KwF/cg/lhdo=) 8: IvLC57wdpU2RnKW1lB03iJKyzLI.crl (hash: ub7+zfV7SD45iB4OrCbBlmw0djFY9ngOJt2QchndQjA=) 9: PXFNsoTvcWLxutWM2U5o07bf39c.roa (hash: cG54vwBTWhTGlpn6HVoksrAbeIW3ITTreN2nYOiUpbE=) 10: PjuATr_UD6dPJ0RwbBG9WM6DQBU.roa (hash: FIh/JLPct1tPMk6cZXHr49IFJ+6jWnbcJViSmXmQnYI=) 11: VJ5x4bTZ9uK9NTcParFas1iO94c.roa (hash: YUotaVqMnXNqH2dTVeK+ioLm7GFUTiyLmJLQkyPf5rU=) 12: tgbG7zzhd0TpX7VXUJAj4569L48.roa (hash: XrlNtaTTKiEVZlZoi4ceAdhJeiK4Z6r68mciWuydsEY=) 13: uo5w_hamUoonPJRV5DL4G24KROY.roa (hash: aLK0bMT0B6Nh4M0ukHsojn4vtUCdZ1/I4BO6p+c6iOw=) 14: w2zfAC9OFoRmjotH_tHfZysWNMM.roa (hash: a05kJJ6+2j1m7iM1OBjj6aSX+sB+ZxnLme7+mqcwB44=) 15: xO4PnwUl40-LplCi16rGoCZS9YU.roa (hash: /JSxXf/o8DRoe32IgSj2KVEoIDnrUXVHn3+S3v/zp1Q=) 16: xU0QFbF8ebbEKP8H7P9eC03fQMQ.roa (hash: KH1JqVr3kTbgL0PPszybvYJtN44mCFq5r1mmiGKHDpM=) 17: yiDY3SGI7WigaQvKhlaQ0G9KHiw.roa (hash: 3jx8WLBTA4o7Ytgp7aYJ5rkqcrsl0J+rRTYWA5viX9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:87:02:aa:96:9f:0c:e8:b4:5d:f4:86:86:22:5e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: Jan 25 05:01:10 2026 GMT Not After : Jan 26 05:01:10 2026 GMT Subject: CN=af436f70ec48edf1696cebaacbc67f8714c39551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:68:3d:5f:ea:c0:9a:bb:ba:03:a7:6d:b7:8c: 06:7c:7c:f6:f1:ab:eb:c3:8c:23:86:94:2c:df:26: 54:53:36:da:3c:eb:11:cd:62:7d:89:07:2b:00:2c: 21:36:82:56:1c:bb:9e:de:68:1d:e5:bb:60:c1:7d: fe:08:c0:8c:54:86:23:51:af:a9:43:8a:3d:06:13: fd:e5:03:f2:9e:ec:b7:a1:73:b3:27:09:58:82:f9: a3:f4:b9:b5:5b:aa:c4:74:49:a8:29:51:41:a4:2a: 2b:12:cb:e7:e4:72:5c:26:e9:bd:36:59:5e:14:fd: bb:e6:62:89:7c:86:0f:f8:9e:04:0e:bb:c0:ef:95: de:0a:e1:20:21:9a:7f:4c:4f:c2:29:a8:cd:a6:a6: 21:71:1e:40:da:9a:25:26:43:9a:95:be:ea:24:b2: a3:05:c0:56:be:79:cf:c7:4d:7a:13:01:4e:43:3a: 8e:1c:7d:36:20:80:54:fb:cc:16:db:6c:19:a5:dd: 6f:51:2c:9c:df:b3:e6:f5:a9:10:25:d8:65:d6:dc: a4:34:61:d3:fa:03:e4:f5:51:a1:69:26:a2:76:e6: 7b:77:8c:db:8b:ee:8b:da:2a:16:d2:7b:2b:ef:14: 21:f0:db:26:42:0d:2a:4c:20:1c:2a:8f:28:58:c8: b1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:43:6F:70:EC:48:ED:F1:69:6C:EB:AA:CB:C6:7F:87:14:C3:95:51 X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:2c:56:02:48:45:78:55:bf:f6:d5:a1:5f:4c:b5:ad:26:af: d5:6d:b1:ab:be:3c:68:a4:55:41:3b:b0:9b:90:ca:85:eb:36: 21:0b:fd:5c:e9:52:2f:2a:0e:7d:c5:f4:bf:0a:ec:e9:a5:82: d3:0d:ff:b5:14:f9:17:eb:87:fb:21:53:4a:53:55:df:8c:63: 99:3c:a3:56:82:cc:42:4a:7a:c4:16:04:6f:94:63:32:c1:8b: da:bc:e7:76:f0:e5:c8:22:0f:6c:8f:b3:fe:2f:28:87:86:10: b8:86:05:76:fb:3f:c9:66:2a:fc:07:4d:38:ae:f8:5f:3e:4c: b6:31:ba:28:cc:43:87:18:20:3e:79:88:b5:9c:bc:95:b8:a9: a2:6b:24:ff:e4:c8:0d:7b:e5:4b:9f:d2:d5:26:b4:e8:2e:b8: 3b:0b:1d:0b:05:ea:c1:db:f9:0d:13:75:ec:98:df:ef:ad:76: 7d:b6:13:92:8e:5a:ee:db:4c:d1:c2:2e:9a:75:c8:e4:44:12: 7d:fd:09:91:fd:26:f0:e1:e9:82:57:a7:33:6b:8c:74:ba:c9: 7e:69:75:c7:0a:b9:45:50:af:82:62:29:21:39:37:bd:28:27: e9:8d:dd:b6:17:4c:00:9b:b7:f1:6e:0a:d5:55:f9:d4:29:fd: f8:ff:67:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhwKqlp8M6LRd9IaGIl7qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjYwMTI1MDUwMTEwWhcNMjYwMTI2MDUwMTEwWjAzMTEwLwYDVQQD EyhhZjQzNmY3MGVjNDhlZGYxNjk2Y2ViYWFjYmM2N2Y4NzE0YzM5NTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2g9X+rAmru6A6dtt4wGfHz28avr w4wjhpQs3yZUUzbaPOsRzWJ9iQcrACwhNoJWHLue3mgd5btgwX3+CMCMVIYjUa+p Q4o9BhP95QPynuy3oXOzJwlYgvmj9Lm1W6rEdEmoKVFBpCorEsvn5HJcJum9Nlle FP275mKJfIYP+J4EDrvA75XeCuEgIZp/TE/CKajNpqYhcR5A2polJkOalb7qJLKj BcBWvnnPx016EwFOQzqOHH02IIBU+8wW22wZpd1vUSyc37Pm9akQJdhl1tykNGHT +gPk9VGhaSaiduZ7d4zbi+6L2ioW0nsr7xQh8NsmQg0qTCAcKo8oWMixJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9Db3DsSO3xaWzrqsvGf4cUw5VRMB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVixWAkhF eFW/9tWhX0y1rSav1W2xq748aKRVQTuwm5DKhes2IQv9XOlSLyoOfcX0vwrs6aWC 0w3/tRT5F+uH+yFTSlNV34xjmTyjVoLMQkp6xBYEb5RjMsGL2rzndvDlyCIPbI+z /i8oh4YQuIYFdvs/yWYq/AdNOK74Xz5MtjG6KMxDhxggPnmItZy8lbipomsk/+TI DXvlS5/S1Sa06C64OwsdCwXqwdv5DRN17Jjf7612fbYTko5a7ttM0cIumnXI5EQS ff0Jkf0m8OHpglenM2uMdLrJfml1xwq5RVCvgmIpITk3vSgn6Y3dthdMAJu38W4K 1VX51Cn9+P9n4A== -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:38 2026 by rpki-client