This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft File: iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft (raw, json) Hash identifier: W2CPdd/+4gCaJaqXV9W5cfD/9SW/lgP0moCpZXUOKS0= Subject key identifier: D2:0C:6B:AB:0B:70:26:44:20:68:42:69:76:0D:16:BF:8C:1A:5C:DE Authority key identifier: 89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1 Certificate issuer: /CN=8968883765549991d7ff376126d58a909a14b8f1 Certificate serial: 019BF3509C4A6D2F95136FCD0CFB274D1867 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft Manifest number: 040E Signing time: Sun 25 Jan 2026 04:01:44 +0000 Manifest this update: Sun 25 Jan 2026 04:01:44 +0000 Manifest next update: Mon 26 Jan 2026 04:01:44 +0000 Files and hashes: 1: 5WTOPfP4GIE5sx5MkNTYwg1UDCw.roa (hash: wiv18quwyClsd4yVsJMpmHhiUfcPB5/Y1Yp9XFRzyRk=) 2: iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl (hash: OZRUidIxuENcw2GidRS7jlIWpz+1LCC+yxr97gcwyVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:9c:4a:6d:2f:95:13:6f:cd:0c:fb:27:4d:18:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8968883765549991d7ff376126d58a909a14b8f1 Validity Not Before: Jan 25 04:01:44 2026 GMT Not After : Jan 26 04:01:44 2026 GMT Subject: CN=d20c6bab0b70264420684269760d16bf8c1a5cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a0:e9:7b:d5:6a:49:e1:11:59:be:f2:92:ff: 73:47:d1:77:17:02:cf:b0:6c:70:8d:f2:02:91:12: 1d:e6:b1:20:5d:8f:ab:a2:7d:92:48:4f:6b:1f:dd: fe:54:e4:89:b6:8f:be:06:b8:38:e7:9a:3d:6d:10: 21:4d:16:ab:40:a9:c4:7c:cd:ef:f5:e8:4a:30:32: 4a:a1:0c:17:94:ea:0d:dc:06:b5:e2:62:f2:b3:50: a1:25:d5:e6:f4:df:a2:71:bf:65:42:6b:bd:14:86: 59:93:dd:53:bd:62:c2:52:15:f4:95:a2:bd:14:e4: 08:b0:8a:9d:29:48:af:8c:f1:5c:6a:69:d2:1d:ee: d6:6c:11:8b:7b:38:ba:74:d8:8c:c7:54:bb:9d:53: a6:25:65:5c:50:02:d0:db:97:91:c9:ad:4a:24:84: f5:29:91:57:f8:08:2d:c0:73:d4:fa:ff:f6:2e:f3: e9:74:df:8d:2e:7a:3d:f3:e0:c4:ee:34:53:c0:3d: 56:2c:6e:d2:b3:e6:4d:4f:05:e8:75:25:f1:8a:a9: 77:54:1b:83:b4:80:3b:05:fc:aa:c2:86:bb:3d:0f: 79:80:bd:f9:ad:31:03:bb:4b:b9:5c:6f:7f:db:ac: 13:5e:37:f8:33:f3:33:fa:8f:e2:87:a4:9b:90:ca: fc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0C:6B:AB:0B:70:26:44:20:68:42:69:76:0D:16:BF:8C:1A:5C:DE X509v3 Authority Key Identifier: keyid:89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:29:35:fa:1f:1e:4b:3e:6d:19:b1:c6:86:ec:0c:21:09:fe: e1:35:3a:ae:6b:bb:82:20:ce:ed:c2:ae:92:98:4f:e9:62:5b: af:3e:a6:02:d7:d2:41:de:47:f4:13:b3:26:93:3a:e0:6f:14: ae:f6:cb:e9:86:6d:51:ec:31:33:10:18:03:fe:2b:6b:bd:bc: 19:ae:41:17:bb:e0:8f:c6:85:3c:ed:f4:d6:4c:98:ca:5e:d5: 67:69:bf:20:7f:48:3f:94:7e:75:70:bb:8f:bf:72:13:6f:57: aa:51:a3:49:4e:23:47:7b:57:9f:0a:4b:6a:56:54:87:ee:58: f4:dd:2d:9e:f1:23:aa:54:cc:ad:30:78:a9:f4:e7:9c:70:eb: 65:94:b2:84:64:df:c6:e4:c7:d7:32:ec:a6:c5:ed:85:05:2e: 56:96:25:db:df:b7:d4:8d:8f:01:7a:4f:b9:ef:e3:bd:2f:01: 94:40:17:bd:4b:6e:ae:ec:81:02:d4:c6:40:7c:d8:be:8a:1c: fd:3c:bc:75:c3:a7:0b:e5:e1:f9:97:e7:f4:dd:19:ae:18:88: e4:19:5c:67:cf:aa:91:15:67:fb:90:d6:26:40:01:93:db:fd: c7:92:71:7f:a4:33:0a:a8:76:c0:f7:14:29:b3:35:a5:1f:3b: 51:09:0c:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUJxKbS+VE2/NDPsnTRhnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5Njg4ODM3NjU1NDk5OTFkN2ZmMzc2MTI2ZDU4YTkwOWEx NGI4ZjEwHhcNMjYwMTI1MDQwMTQ0WhcNMjYwMTI2MDQwMTQ0WjAzMTEwLwYDVQQD EyhkMjBjNmJhYjBiNzAyNjQ0MjA2ODQyNjk3NjBkMTZiZjhjMWE1Y2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqDpe9VqSeERWb7ykv9zR9F3FwLP sGxwjfICkRId5rEgXY+ron2SSE9rH93+VOSJto++Brg455o9bRAhTRarQKnEfM3v 9ehKMDJKoQwXlOoN3Aa14mLys1ChJdXm9N+icb9lQmu9FIZZk91TvWLCUhX0laK9 FOQIsIqdKUivjPFcamnSHe7WbBGLezi6dNiMx1S7nVOmJWVcUALQ25eRya1KJIT1 KZFX+AgtwHPU+v/2LvPpdN+NLno98+DE7jRTwD1WLG7Ss+ZNTwXodSXxiql3VBuD tIA7Bfyqwoa7PQ95gL35rTEDu0u5XG9/26wTXjf4M/Mz+o/ih6SbkMr8pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIMa6sLcCZEIGhCaXYNFr+MGlzeMB8GA1UdIwQY MBaAFIloiDdlVJmR1/83YSbVipCaFLjxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdpSU4yVlVtWkhYX3pkaEp0V0trSm9VdVBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jMTcxZDQtMDY3Mi00MTRkLWEwMmQt Y2QwMjdhMDY4MWJkLzEvaVdpSU4yVlVtWkhYX3pkaEp0V0trSm9VdVBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9jMTcxZDQtMDY3Mi00MTRkLWEwMmQtY2QwMjdhMDY4MWJk LzEvaVdpSU4yVlVtWkhYX3pkaEp0V0trSm9VdVBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSk1+h8e Sz5tGbHGhuwMIQn+4TU6rmu7giDO7cKukphP6WJbrz6mAtfSQd5H9BOzJpM64G8U rvbL6YZtUewxMxAYA/4ra728Ga5BF7vgj8aFPO301kyYyl7VZ2m/IH9IP5R+dXC7 j79yE29XqlGjSU4jR3tXnwpLalZUh+5Y9N0tnvEjqlTMrTB4qfTnnHDrZZSyhGTf xuTH1zLspsXthQUuVpYl29+31I2PAXpPue/jvS8BlEAXvUturuyBAtTGQHzYvooc /Ty8dcOnC+Xh+Zfn9N0ZrhiI5BlcZ8+qkRVn+5DWJkABk9v9x5Jxf6QzCqh2wPcU KbM1pR87UQkMxw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:06 2026 by rpki-client