This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft File: iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft (raw, json) Hash identifier: hibKNMBI3FheqDY8D9MYv3gESYaKsqa6MViNYWvzWUU= Subject key identifier: 64:BF:3A:05:23:54:69:49:12:B9:EE:CD:8B:C7:E9:E2:3A:ED:77:12 Authority key identifier: 88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07 Certificate issuer: /CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07 Certificate serial: 019BF651A5CEED8D37A6306D3679C443C429 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft Manifest number: 177C Signing time: Sun 25 Jan 2026 18:01:44 +0000 Manifest this update: Sun 25 Jan 2026 18:01:44 +0000 Manifest next update: Mon 26 Jan 2026 18:01:44 +0000 Files and hashes: 1: _96Euvo05bQiTFxZBzxImx3S1Qo.roa (hash: 8USkhhFs2laMuIgluBHy8qGwUIcnnc8iCXVDlvT0OTc=) 2: iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl (hash: CW3YvdZnTXSc1Kiftdxw6hwGlppg1N22UJDv5/L3/XM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:a5:ce:ed:8d:37:a6:30:6d:36:79:c4:43:c4:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07 Validity Not Before: Jan 25 18:01:44 2026 GMT Not After : Jan 26 18:01:44 2026 GMT Subject: CN=64bf3a052354694912b9eecd8bc7e9e23aed7712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:46:d2:7f:0a:aa:25:72:b8:f9:02:66:62:29: 80:ec:de:01:40:95:a0:7e:82:ef:c6:21:f5:be:1c: b1:95:98:ac:b7:3a:38:6c:a6:09:90:47:f2:5a:43: 32:19:07:c9:d3:61:84:ba:d9:7a:ae:fa:c9:aa:d2: db:68:f0:8c:f7:f3:53:d2:04:b5:e0:96:e1:ec:b7: 66:56:20:6f:6c:2b:a4:84:ef:73:1f:4b:d4:a5:18: 47:94:f4:f6:d8:79:4d:4b:95:04:25:6b:f0:73:f9: e1:2e:0c:9d:3b:54:b2:e8:a0:9e:92:e7:e0:34:4f: d2:f9:de:ea:b6:bc:63:86:19:16:02:da:b9:5a:4c: ac:0d:2c:22:41:0f:44:c5:83:ce:76:47:65:6f:3f: a1:e0:a5:9f:0c:79:60:43:b3:9c:df:64:49:af:30: 20:7b:1a:e0:19:5c:ad:25:b2:1c:3f:47:b7:52:62: 9b:78:1c:ad:e4:46:21:a7:76:ba:db:0a:2f:27:a7: 40:08:75:15:ee:84:6e:b0:29:b6:d4:47:fd:3f:89: cd:75:ba:ad:53:72:f0:de:f7:07:3a:ba:f2:25:80: 59:ee:d0:ed:77:32:85:06:55:d2:a3:58:a1:5b:89: 25:4b:b9:2b:c5:25:8d:78:f0:25:0f:64:55:c9:b4: 7b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BF:3A:05:23:54:69:49:12:B9:EE:CD:8B:C7:E9:E2:3A:ED:77:12 X509v3 Authority Key Identifier: keyid:88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:5d:32:5f:6d:be:d0:a2:b3:e3:dc:ed:42:d3:b3:dc:49:ad: 32:2f:b7:67:63:84:ad:f4:d3:f1:bd:5c:d6:b6:73:79:9e:90: e9:4c:2c:e0:ad:0a:f8:ff:ec:5d:8e:b3:38:2b:ab:9a:2a:cc: 18:02:1c:16:56:43:e0:40:13:d5:6e:ee:35:11:bb:d6:60:0e: 0e:33:37:21:56:b1:5b:1e:98:f3:7a:da:c5:78:d2:ec:f5:4d: be:bd:e2:48:ef:01:a4:16:02:0f:e0:db:e3:71:8d:18:19:0e: b6:ab:16:c6:ed:39:13:5c:62:52:ea:b5:d3:f3:2d:af:af:e0: 42:fb:c8:0b:c2:ba:6d:70:06:dd:39:99:1c:70:ad:65:9f:00: 09:1e:d5:f0:3e:49:8d:a6:c5:7f:f9:28:ef:b2:6e:57:16:f5: 57:1d:2e:c7:40:35:80:6f:23:29:e4:aa:a7:04:9c:17:0b:45: 98:07:b2:d7:dd:0b:8e:a6:aa:21:0e:06:9c:fe:ac:58:d1:06: d5:01:20:ff:39:11:08:ce:3d:0c:f9:c5:e3:27:17:4e:a9:a6: aa:2a:a9:2c:76:83:bf:98:58:e7:3c:47:c4:6c:cf:86:6f:df: e3:90:d2:8a:cf:2d:b1:c6:4d:69:41:ee:99:ce:70:4f:9f:1b: 98:d9:a9:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UaXO7Y03pjBtNnnEQ8QpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ODg4MThjNGVjZjFkNWRlYjRlYTkzNjY3NDcwYTdhMTE0 ZDlhMDcwHhcNMjYwMTI1MTgwMTQ0WhcNMjYwMTI2MTgwMTQ0WjAzMTEwLwYDVQQD Eyg2NGJmM2EwNTIzNTQ2OTQ5MTJiOWVlY2Q4YmM3ZTllMjNhZWQ3NzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0bSfwqqJXK4+QJmYimA7N4BQJWg foLvxiH1vhyxlZistzo4bKYJkEfyWkMyGQfJ02GEutl6rvrJqtLbaPCM9/NT0gS1 4Jbh7LdmViBvbCukhO9zH0vUpRhHlPT22HlNS5UEJWvwc/nhLgydO1Sy6KCekufg NE/S+d7qtrxjhhkWAtq5WkysDSwiQQ9ExYPOdkdlbz+h4KWfDHlgQ7Oc32RJrzAg exrgGVytJbIcP0e3UmKbeByt5EYhp3a62wovJ6dACHUV7oRusCm21Ef9P4nNdbqt U3Lw3vcHOrryJYBZ7tDtdzKFBlXSo1ihW4klS7krxSWNePAlD2RVybR7fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGS/OgUjVGlJErnuzYvH6eI67XcSMB8GA1UdIwQY MBaAFIiIgYxOzx1d606pNmdHCnoRTZoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUlpQmpFN1BIVjNyVHFrMlowY0tlaEZObWdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOWViYjItODUxZC00NTc4LWE4Nzkt YzI5YmYyNWQyNjZlLzEvaUlpQmpFN1BIVjNyVHFrMlowY0tlaEZObWdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOWViYjItODUxZC00NTc4LWE4NzktYzI5YmYyNWQyNjZl LzEvaUlpQmpFN1BIVjNyVHFrMlowY0tlaEZObWdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWl0yX22+ 0KKz49ztQtOz3EmtMi+3Z2OErfTT8b1c1rZzeZ6Q6Uws4K0K+P/sXY6zOCurmirM GAIcFlZD4EAT1W7uNRG71mAODjM3IVaxWx6Y83raxXjS7PVNvr3iSO8BpBYCD+Db 43GNGBkOtqsWxu05E1xiUuq10/Mtr6/gQvvIC8K6bXAG3TmZHHCtZZ8ACR7V8D5J jabFf/ko77JuVxb1Vx0ux0A1gG8jKeSqpwScFwtFmAey190LjqaqIQ4GnP6sWNEG 1QEg/zkRCM49DPnF4ycXTqmmqiqpLHaDv5hY5zxHxGzPhm/f45DSis8tscZNaUHu mc5wT58bmNmppA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:30 2026 by rpki-client