This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft File: ieIaK4oluXG9t0GgquMlmSMEGU4.mft (raw, json) Hash identifier: AsW95mbb+sj8Xx3kl8GU802Dsp311Zs+SeuR1dWbUM8= Subject key identifier: E0:78:E4:1B:15:33:2A:38:D9:66:81:E3:3D:CA:6C:64:83:1B:35:39 Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E Certificate issuer: /CN=89e21a2b8a25b971bdb741a0aae325992304194e Certificate serial: 019BF688222E42C048B9E49DE444FB3B083B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft Manifest number: 17F9 Signing time: Sun 25 Jan 2026 19:01:15 +0000 Manifest this update: Sun 25 Jan 2026 19:01:15 +0000 Manifest next update: Mon 26 Jan 2026 19:01:15 +0000 Files and hashes: 1: ZhzWzsv1esuDg2--HsFJsoBVczM.roa (hash: aJg+/l3uu6d+sWISGNiUNa/6bWNNVpESm/Si0FjXGJY=) 2: dkhQ_UaK7KYvlzpQ9GDq8JVLYXM.roa (hash: Hysc5ZKIFwdVr2e/1RLMNiLyLDj0bzccSLkW/4M0Q+o=) 3: fhcZVexRF5qaj_1pM8ahhSdfydc.roa (hash: EkiQ4ssRbjZx+/2UZU++Ez1X9Vz4f0hPt2rcl2HCQAQ=) 4: ieIaK4oluXG9t0GgquMlmSMEGU4.crl (hash: MZcO13nPa74bHLpNAaCf0244FcNZ7LEP2EdwiweGARI=) 5: nYWrF9Km5Z2bdnEGENFIysthFYY.roa (hash: 9Sz8hqL9rh1yiVyW8AkvB82GifJEOrPjylm2DNyZ1lA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:22:2e:42:c0:48:b9:e4:9d:e4:44:fb:3b:08:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e Validity Not Before: Jan 25 19:01:15 2026 GMT Not After : Jan 26 19:01:15 2026 GMT Subject: CN=e078e41b15332a38d96681e33dca6c64831b3539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2e:5f:1f:b8:b6:26:15:07:00:b3:7d:88:80: a0:48:89:7a:24:80:0a:92:42:4f:6f:1c:34:07:9f: 48:da:24:62:76:fa:6d:18:e7:dd:38:20:4d:39:bf: fa:92:a0:9d:13:3b:19:b9:ca:92:1f:88:aa:b6:fb: 66:3f:c6:f2:2c:9c:23:b4:6a:e3:ca:ce:87:0c:59: 42:58:74:0e:27:84:cb:a9:7d:f1:23:a1:dd:c7:31: fc:7e:ef:c5:00:08:52:e7:ea:43:8c:45:26:fa:5d: dd:0c:ce:f2:49:8c:de:24:ed:86:c0:9c:69:ef:37: 3d:72:00:a9:b0:6b:7e:9c:a0:69:1c:3b:68:e5:25: 21:4a:9d:2c:f8:d9:1f:f4:ad:1a:58:68:9c:7c:35: c0:4b:15:40:d6:63:fc:98:38:3f:39:f9:60:f8:85: e6:4e:4e:b6:3c:f6:eb:cd:e5:da:3d:c3:56:6a:3c: 62:b2:f4:05:61:4a:0c:04:1e:52:75:24:41:3c:28: 0b:0e:0c:5a:ce:50:fb:d6:cb:2d:79:4c:f3:4d:b1: 73:bd:33:eb:13:05:38:2b:41:26:45:9c:78:a1:c3: 35:8c:73:2c:a4:f0:e1:83:80:0b:74:11:20:7e:8a: 44:7e:64:5d:17:5e:0e:73:16:c0:2b:57:79:23:4a: a1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:78:E4:1B:15:33:2A:38:D9:66:81:E3:3D:CA:6C:64:83:1B:35:39 X509v3 Authority Key Identifier: keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:47:01:10:07:85:13:64:3f:69:04:b0:6f:a1:42:81:fc:43: 31:7c:42:0b:98:4f:ba:97:10:68:24:93:df:37:bf:e5:b0:d3: 48:93:eb:8e:15:c3:e0:92:b0:ac:35:c2:19:ad:50:02:43:2e: d3:00:78:93:0c:b3:bb:c1:7d:c2:3b:28:0f:91:50:34:77:0a: a4:7c:68:8c:89:6e:31:1b:2a:dd:9e:e8:92:2b:40:ad:20:ab: 59:d2:ea:9d:06:dc:d5:8f:f1:b5:16:81:22:be:b5:de:ac:44: 59:18:57:12:50:8d:a5:ce:5d:11:4e:21:ae:f7:fd:37:49:cb: 1d:8f:92:46:1a:6c:74:36:73:fe:42:a0:91:89:65:09:53:87: be:36:78:c8:0b:90:96:48:59:1b:d7:f7:37:cb:e5:11:2a:2d: 2e:0f:d5:e3:c9:23:59:8f:f9:da:b4:b3:40:9d:cd:c6:6d:5c: b7:1c:44:78:c1:9b:64:6d:0b:d9:29:81:06:a9:15:9d:98:d0: d5:f4:17:7c:79:16:e7:23:e8:56:26:d7:f3:a0:a4:e5:0d:21: c8:06:87:b2:85:28:08:07:e1:98:43:fb:cb:a1:a0:2e:61:64: fd:92:c2:5e:58:76:81:f2:8f:f1:f0:55:0c:a1:af:db:ad:27: 76:3e:16:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iCIuQsBIueSd5ET7Owg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZTIxYTJiOGEyNWI5NzFiZGI3NDFhMGFhZTMyNTk5MjMw NDE5NGUwHhcNMjYwMTI1MTkwMTE1WhcNMjYwMTI2MTkwMTE1WjAzMTEwLwYDVQQD EyhlMDc4ZTQxYjE1MzMyYTM4ZDk2NjgxZTMzZGNhNmM2NDgzMWIzNTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy5fH7i2JhUHALN9iICgSIl6JIAK kkJPbxw0B59I2iRidvptGOfdOCBNOb/6kqCdEzsZucqSH4iqtvtmP8byLJwjtGrj ys6HDFlCWHQOJ4TLqX3xI6HdxzH8fu/FAAhS5+pDjEUm+l3dDM7ySYzeJO2GwJxp 7zc9cgCpsGt+nKBpHDto5SUhSp0s+Nkf9K0aWGicfDXASxVA1mP8mDg/Oflg+IXm Tk62PPbrzeXaPcNWajxisvQFYUoMBB5SdSRBPCgLDgxazlD71ssteUzzTbFzvTPr EwU4K0EmRZx4ocM1jHMspPDhg4ALdBEgfopEfmRdF14OcxbAK1d5I0qhjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOB45BsVMyo42WaB4z3KbGSDGzU5MB8GA1UdIwQY MBaAFIniGiuKJblxvbdBoKrjJZkjBBlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjIt MWFkNDdjY2QyZDlhLzEvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjItMWFkNDdjY2QyZDlh LzEvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEcBEAeF E2Q/aQSwb6FCgfxDMXxCC5hPupcQaCST3ze/5bDTSJPrjhXD4JKwrDXCGa1QAkMu 0wB4kwyzu8F9wjsoD5FQNHcKpHxojIluMRsq3Z7okitArSCrWdLqnQbc1Y/xtRaB Ir613qxEWRhXElCNpc5dEU4hrvf9N0nLHY+SRhpsdDZz/kKgkYllCVOHvjZ4yAuQ lkhZG9f3N8vlESotLg/V48kjWY/52rSzQJ3Nxm1ctxxEeMGbZG0L2SmBBqkVnZjQ 1fQXfHkW5yPoVibX86Ck5Q0hyAaHsoUoCAfhmEP7y6GgLmFk/ZLCXlh2gfKP8fBV DKGv260ndj4Wbw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:42 2026 by rpki-client