This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft File: IwbLbMzQnnXtGfwG-1kkzyejmMM.mft (raw, json) Hash identifier: noGpYTZcO8T8jR3GIQk/ZP1ElnZUOqPdMkH0x2GAO6Q= Subject key identifier: 8D:FD:12:E1:5F:AD:A7:F5:04:93:14:C7:A7:B1:C3:B2:33:17:B1:A4 Authority key identifier: 23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3 Certificate issuer: /CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3 Certificate serial: 019BF83F46760242D1DDD112CD8A2B2C5ED1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft Manifest number: 0565 Signing time: Mon 26 Jan 2026 03:00:54 +0000 Manifest this update: Mon 26 Jan 2026 03:00:54 +0000 Manifest next update: Tue 27 Jan 2026 03:00:54 +0000 Files and hashes: 1: IwbLbMzQnnXtGfwG-1kkzyejmMM.crl (hash: zu+ZovV7fktdTg1wnO8vufP7We0KXGZcyXwoGXeNx+0=) 2: _ZmWi_4A68mliCVRNTlWAPhsl0g.roa (hash: 2jnimjwEDqLE8neS9dfpFX+zSMTp/IcCZCBA5fy0w8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:46:76:02:42:d1:dd:d1:12:cd:8a:2b:2c:5e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3 Validity Not Before: Jan 26 03:00:54 2026 GMT Not After : Jan 27 03:00:54 2026 GMT Subject: CN=8dfd12e15fada7f5049314c7a7b1c3b23317b1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6b:46:e9:88:a1:9e:f9:d8:01:dc:aa:7a:a6: ec:75:c8:25:39:9e:6c:10:48:9d:19:66:1a:69:3f: fc:78:0a:83:b5:8b:51:2a:23:1d:e2:d7:2f:72:be: a4:13:c9:16:67:59:e5:01:38:20:94:9c:2d:b1:73: 54:29:7e:88:0c:28:45:60:b8:8d:b6:fd:e9:66:60: 32:97:cd:13:a7:9a:4d:14:82:62:1e:34:5b:cf:14: 73:32:ec:10:d2:9f:49:62:4c:07:8b:41:f6:0d:c8: bb:f0:37:93:b6:85:4c:ae:33:ef:87:15:d3:01:e2: 83:35:b4:e4:ee:e6:63:39:c6:5f:dd:e2:3d:34:b5: f0:70:f6:c3:64:b6:8a:20:71:95:b5:f0:99:14:8e: 3b:95:bb:b3:79:55:d5:36:ca:82:56:3d:9c:3a:d3: 32:2c:0a:81:c4:c5:b6:cc:ae:34:cf:cf:35:89:9f: 22:93:1c:32:50:a6:fc:93:a2:9d:3f:55:e6:5d:e5: 60:29:d5:04:b0:d8:f0:85:19:ae:ca:99:e9:bd:7c: bc:0b:be:8b:01:55:a5:5f:fe:d5:e5:88:21:aa:a1: 54:af:47:71:d6:0e:e5:d8:b0:9d:2e:0f:38:c9:24: 01:a2:e5:59:5b:5b:c7:20:de:dc:3e:d0:a9:dd:87: 56:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FD:12:E1:5F:AD:A7:F5:04:93:14:C7:A7:B1:C3:B2:33:17:B1:A4 X509v3 Authority Key Identifier: keyid:23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:94:31:57:f8:6a:c6:df:60:f7:38:53:e0:5f:03:af:4c:ef: d4:eb:a4:4d:30:8e:c9:9f:c7:41:db:33:d9:d4:d7:bd:15:12: c0:56:d0:9a:ec:b8:c8:ec:9a:4a:7b:03:a9:d6:3d:1d:90:27: 44:d5:5a:bf:b9:37:41:f5:23:61:18:50:ec:12:2b:c9:fa:c2: 15:cf:20:c3:d3:b2:2a:4e:59:e4:08:52:66:85:a7:5e:f7:f5: ef:5d:16:8f:4d:12:f2:16:71:79:30:b2:e5:c5:e3:08:a8:af: f6:59:cb:20:fa:1f:fa:48:af:2d:85:45:52:dd:94:1b:10:8f: df:51:b6:e4:45:3b:d1:f4:42:e3:2f:11:5d:55:e6:7b:8d:89: 07:e2:08:c9:f6:7a:69:17:cb:be:77:42:f6:f7:52:ee:e5:50: 8a:f7:0e:64:f9:f2:2b:62:cf:b2:52:32:4b:ab:c1:19:2a:c3: 63:af:05:4c:eb:7c:f5:42:82:ad:f3:da:a6:49:d2:a5:9b:3b: f3:58:5e:de:7d:09:c1:e5:90:88:13:f5:0e:e0:80:92:a4:88: 78:65:32:91:a2:c3:16:43:16:c6:49:04:03:33:05:49:bc:b3: c1:f0:dd:2f:70:a3:ef:2e:a0:72:26:a2:45:c5:0b:ff:dd:92: de:94:fc:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P0Z2AkLR3dESzYorLF7RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDZjYjZjY2NkMDllNzVlZDE5ZmMwNmZiNTkyNGNmMjdh Mzk4YzMwHhcNMjYwMTI2MDMwMDU0WhcNMjYwMTI3MDMwMDU0WjAzMTEwLwYDVQQD Eyg4ZGZkMTJlMTVmYWRhN2Y1MDQ5MzE0YzdhN2IxYzNiMjMzMTdiMWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42tG6YihnvnYAdyqeqbsdcglOZ5s EEidGWYaaT/8eAqDtYtRKiMd4tcvcr6kE8kWZ1nlATgglJwtsXNUKX6IDChFYLiN tv3pZmAyl80Tp5pNFIJiHjRbzxRzMuwQ0p9JYkwHi0H2Dci78DeTtoVMrjPvhxXT AeKDNbTk7uZjOcZf3eI9NLXwcPbDZLaKIHGVtfCZFI47lbuzeVXVNsqCVj2cOtMy LAqBxMW2zK40z881iZ8ikxwyUKb8k6KdP1XmXeVgKdUEsNjwhRmuypnpvXy8C76L AVWlX/7V5YghqqFUr0dx1g7l2LCdLg84ySQBouVZW1vHIN7cPtCp3YdWVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI39EuFfraf1BJMUx6exw7IzF7GkMB8GA1UdIwQY MBaAFCMGy2zM0J517Rn8BvtZJM8no5jDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdiTGJNelFublh0R2Z3Ry0xa2t6eWVqbU1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kOWRkODItOWJiOS00ODRjLTgxY2It ODNiZGNhZDAyMDQ3LzEvSXdiTGJNelFublh0R2Z3Ry0xa2t6eWVqbU1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9kOWRkODItOWJiOS00ODRjLTgxY2ItODNiZGNhZDAyMDQ3 LzEvSXdiTGJNelFublh0R2Z3Ry0xa2t6eWVqbU1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpQxV/hq xt9g9zhT4F8Dr0zv1OukTTCOyZ/HQdsz2dTXvRUSwFbQmuy4yOyaSnsDqdY9HZAn RNVav7k3QfUjYRhQ7BIryfrCFc8gw9OyKk5Z5AhSZoWnXvf1710Wj00S8hZxeTCy 5cXjCKiv9lnLIPof+kivLYVFUt2UGxCP31G25EU70fRC4y8RXVXme42JB+IIyfZ6 aRfLvndC9vdS7uVQivcOZPnyK2LPslIyS6vBGSrDY68FTOt89UKCrfPapknSpZs7 81he3n0JweWQiBP1DuCAkqSIeGUykaLDFkMWxkkEAzMFSbyzwfDdL3Cj7y6gciai RcUL/92S3pT8HA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:22 2026 by rpki-client