This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft File: IysXeNY2I3Q-2JyH3oDCpkCToGI.mft (raw, json) Hash identifier: sn563ddYyxKsgSXolxYCqchVgRv5XYydznAW//QgImw= Subject key identifier: BA:D6:5F:E8:31:2E:75:16:7A:6E:13:32:80:50:0C:67:F8:16:E5:CE Authority key identifier: 23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62 Certificate issuer: /CN=232b1778d63623743ed89c87de80c2a64093a062 Certificate serial: 019BF7D14458580460F605E3BD4991FE203F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft Manifest number: 0922 Signing time: Mon 26 Jan 2026 01:00:45 +0000 Manifest this update: Mon 26 Jan 2026 01:00:45 +0000 Manifest next update: Tue 27 Jan 2026 01:00:45 +0000 Files and hashes: 1: 6JMmxrfiQpPlC_lOumLXACWDZqM.roa (hash: J1a3qyIyAUriipjYLsphj7xq5F7o8cCyCbTPqGYHNhI=) 2: IysXeNY2I3Q-2JyH3oDCpkCToGI.crl (hash: Mn/V+e7grpxNmp5Q+L58UuRJvAM0UQhLHn+g5dZtmuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:44:58:58:04:60:f6:05:e3:bd:49:91:fe:20:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=232b1778d63623743ed89c87de80c2a64093a062 Validity Not Before: Jan 26 01:00:45 2026 GMT Not After : Jan 27 01:00:45 2026 GMT Subject: CN=bad65fe8312e75167a6e133280500c67f816e5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:27:b3:34:55:47:0f:48:79:c6:53:a4:4c:33: 17:ed:57:c5:41:66:c9:5e:39:7f:19:c5:60:98:3b: b1:c9:96:5c:e3:e4:e8:3b:89:77:45:39:3c:5e:a9: 2c:12:44:91:be:e1:20:9a:23:fe:60:a2:37:40:8c: a0:0e:f1:45:aa:c8:c8:be:1a:9b:12:58:b1:ab:4c: d8:f8:a8:63:2e:05:f6:0e:40:04:c7:67:6c:ee:99: e9:c7:86:27:58:1e:2b:06:31:82:78:fc:87:59:97: 12:af:f6:b0:6a:9f:b1:0a:cd:5c:71:31:13:94:38: 25:36:32:7f:0c:f8:b3:53:bf:45:02:27:fe:24:d8: df:cc:b8:29:f1:78:62:08:35:69:8f:af:bb:6c:cf: b7:e3:d3:e8:d2:8f:b7:65:7a:d8:d8:ac:28:96:72: 74:f5:77:a4:8a:9a:0c:e4:d2:4c:12:83:c0:6e:36: 9a:74:5e:03:c9:1a:8c:23:c3:e9:45:e2:50:48:45: 57:22:c6:04:c9:d2:b6:e9:8a:5f:24:10:30:49:18: e8:61:ce:4b:5e:4b:55:26:83:50:0f:7d:5a:53:67: d1:ef:ba:5b:9c:59:d9:7d:b7:aa:96:90:25:fa:ac: 7c:83:ef:9a:4f:b1:94:df:1c:48:f1:e6:da:09:89: ec:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D6:5F:E8:31:2E:75:16:7A:6E:13:32:80:50:0C:67:F8:16:E5:CE X509v3 Authority Key Identifier: keyid:23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:08:2d:69:8d:29:4b:b1:b6:f2:7f:c5:da:ae:03:f1:15:3f: c9:e8:ea:52:89:2e:8e:d5:08:80:1e:ea:6e:b1:7d:be:f4:ef: 49:c5:e1:1c:52:0e:79:9c:4c:c2:4a:ef:4f:53:17:df:80:2a: 8b:c9:b2:b5:16:8b:40:e7:48:6f:96:73:a3:95:51:96:60:c7: 68:95:a8:07:b7:29:b4:e1:e9:bc:1c:ad:ad:7c:8b:46:20:92: dc:40:63:71:d1:77:80:ef:03:25:28:b5:08:4d:7d:65:01:1d: 19:2a:2f:f9:5c:1b:cf:04:47:b8:08:67:09:6e:f2:db:5b:57: a4:b5:b9:0f:36:af:e3:5f:df:f5:cd:a0:3a:66:42:eb:a5:0f: 6c:34:44:e3:ee:21:96:26:9c:5e:8e:c8:da:75:13:13:9a:dc: 22:7c:65:40:82:f7:81:92:78:04:d2:32:4c:7a:8a:d3:46:35: c4:29:90:5f:2d:fd:14:f5:da:49:dc:47:e9:ff:22:55:b0:c2: e1:76:06:5b:f3:c0:69:bd:12:1f:b8:94:f9:f7:b9:38:60:1f: 70:56:51:b2:f4:be:8e:f7:3b:1e:b0:d4:04:f8:89:de:f8:8d: 88:08:86:6a:37:04:93:55:de:52:9f:c0:9d:03:1c:e9:ca:71: bd:ab:df:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30URYWARg9gXjvUmR/iA/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMmIxNzc4ZDYzNjIzNzQzZWQ4OWM4N2RlODBjMmE2NDA5 M2EwNjIwHhcNMjYwMTI2MDEwMDQ1WhcNMjYwMTI3MDEwMDQ1WjAzMTEwLwYDVQQD EyhiYWQ2NWZlODMxMmU3NTE2N2E2ZTEzMzI4MDUwMGM2N2Y4MTZlNWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSezNFVHD0h5xlOkTDMX7VfFQWbJ Xjl/GcVgmDuxyZZc4+ToO4l3RTk8XqksEkSRvuEgmiP+YKI3QIygDvFFqsjIvhqb Elixq0zY+KhjLgX2DkAEx2ds7pnpx4YnWB4rBjGCePyHWZcSr/awap+xCs1ccTET lDglNjJ/DPizU79FAif+JNjfzLgp8XhiCDVpj6+7bM+349Po0o+3ZXrY2KwolnJ0 9XekipoM5NJMEoPAbjaadF4DyRqMI8PpReJQSEVXIsYEydK26YpfJBAwSRjoYc5L XktVJoNQD31aU2fR77pbnFnZfbeqlpAl+qx8g++aT7GU3xxI8ebaCYnsAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrWX+gxLnUWem4TMoBQDGf4FuXOMB8GA1UdIwQY MBaAFCMrF3jWNiN0Ptich96AwqZAk6BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlzWGVOWTJJM1EtMkp5SDNvRENwa0NUb0dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wNzk1OTQtZTQwMS00ZWQ1LTk4YTYt OTBkMzViMjQ1Y2VkLzEvSXlzWGVOWTJJM1EtMkp5SDNvRENwa0NUb0dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8wNzk1OTQtZTQwMS00ZWQ1LTk4YTYtOTBkMzViMjQ1Y2Vk LzEvSXlzWGVOWTJJM1EtMkp5SDNvRENwa0NUb0dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwgtaY0p S7G28n/F2q4D8RU/yejqUokujtUIgB7qbrF9vvTvScXhHFIOeZxMwkrvT1MX34Aq i8mytRaLQOdIb5Zzo5VRlmDHaJWoB7cptOHpvBytrXyLRiCS3EBjcdF3gO8DJSi1 CE19ZQEdGSov+VwbzwRHuAhnCW7y21tXpLW5Dzav41/f9c2gOmZC66UPbDRE4+4h liacXo7I2nUTE5rcInxlQIL3gZJ4BNIyTHqK00Y1xCmQXy39FPXaSdxH6f8iVbDC 4XYGW/PAab0SH7iU+fe5OGAfcFZRsvS+jvc7HrDUBPiJ3viNiAiGajcEk1XeUp/A nQMc6cpxvavfiQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:45 2026 by rpki-client