This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft File: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft (raw, json) Hash identifier: PO1gnt1h+wRNkKCwDmYsGtyWDrgugPOd3t/4yH48uPI= Subject key identifier: 8D:DB:6D:E7:B2:20:AA:70:01:32:F9:F2:D8:B0:F9:B1:0C:D8:F4:54 Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16 Certificate issuer: /CN=88e719f426793b1e9063771460abd311a3dff116 Certificate serial: 019BF8E44D46BFC04600A58E019BA47B1315 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft Manifest number: 17E8 Signing time: Mon 26 Jan 2026 06:01:10 +0000 Manifest this update: Mon 26 Jan 2026 06:01:10 +0000 Manifest next update: Tue 27 Jan 2026 06:01:10 +0000 Files and hashes: 1: ImConIEQA2KDtzAT0CUbHUEbH_s.roa (hash: A7/XjtAfBEgLHLQ8oNWxPg8deYNIQ6lOIEhh+waSaZI=) 2: ZxLR_I6eiLsRd1oV4IP5PeLu7DE.roa (hash: kZngczWI+T3GrCv/8Yja3kQMBd7RGIDrozKXhV53UWY=) 3: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl (hash: qv9zqzGlLyUq8JhTNF6SQE/wjmUwGpaMXBdZqKQiEhY=) 4: q2aBWG2CuEimsjXb18Ou0fyLb7k.roa (hash: A0AoTuyENlHBNdH6JVEsUQXr8MFCH3cXbTXxCbPc1hg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:4d:46:bf:c0:46:00:a5:8e:01:9b:a4:7b:13:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e719f426793b1e9063771460abd311a3dff116 Validity Not Before: Jan 26 06:01:10 2026 GMT Not After : Jan 27 06:01:10 2026 GMT Subject: CN=8ddb6de7b220aa700132f9f2d8b0f9b10cd8f454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:90:6f:19:c1:a6:c7:38:eb:f8:2f:4c:37:6d: 2d:a2:07:54:8b:a4:0a:4b:ba:e3:a0:c4:79:0a:cf: 61:72:a8:0b:16:35:fa:24:8d:a3:5a:ba:4a:1b:0e: 52:19:cb:5e:35:be:3e:be:f8:cd:2f:cb:48:da:06: b8:a3:22:50:bd:de:ae:d7:dc:ff:9d:8a:70:bf:77: 9a:71:12:b2:8d:01:60:51:2e:2e:8a:80:4a:87:2e: 6c:23:7b:dc:28:72:02:36:b3:80:63:76:41:14:2b: 7b:b7:d2:1d:2b:60:fc:be:42:b4:c0:44:b5:74:9d: f1:2b:2a:7f:26:4f:ef:15:dd:64:3e:f5:3c:0b:45: 5c:da:a2:62:5c:fc:2b:a4:02:e3:39:6c:3b:ee:03: d4:ee:14:b4:cb:e6:1f:4a:00:c2:be:a4:13:71:9f: eb:8f:6f:96:95:81:be:64:05:4b:81:59:2d:6b:07: 3d:04:78:b2:0b:4f:95:76:d5:71:dc:6c:3b:93:90: e9:c2:95:65:58:ac:6c:94:1e:74:aa:6a:32:a2:9a: 71:c0:19:5e:e6:32:84:5b:8b:68:0f:93:1a:39:cf: b6:8f:a8:eb:d5:5d:81:d3:a6:a3:cb:58:8a:06:bc: 37:51:1e:78:da:b5:9d:26:97:77:90:54:5f:52:e0: de:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DB:6D:E7:B2:20:AA:70:01:32:F9:F2:D8:B0:F9:B1:0C:D8:F4:54 X509v3 Authority Key Identifier: keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:7f:a5:5f:98:54:2b:ed:4b:03:5b:d0:14:74:e7:10:f1:5a: 5d:a7:29:4a:78:3f:ac:5e:24:e6:30:9e:90:d4:6a:2e:b1:f9: 31:94:85:2f:4c:72:d2:28:b6:c1:a1:18:ab:c3:69:02:79:cc: c7:09:7d:77:d6:31:55:15:52:3e:38:0a:0e:ea:35:ea:a7:ab: 60:35:03:34:8f:7c:58:1a:e7:93:8f:d3:78:11:b8:a8:6f:aa: 89:4c:01:2a:35:9e:77:cf:11:e6:f7:0e:be:4f:25:03:ce:92: dd:34:8b:99:ef:09:98:12:bd:34:00:a5:c0:0e:c3:d2:56:5a: 64:ca:79:ac:45:b4:ca:92:e2:c7:e5:d0:af:c2:a0:31:38:20: d8:4c:56:22:ef:db:53:e1:7d:4d:60:00:01:05:e3:4d:b9:2d: 33:55:4e:ec:1c:b0:38:c4:d0:0b:48:b5:f0:5f:07:c3:21:26: 5a:1f:f3:14:f2:2d:b4:25:f1:70:b3:9b:dd:89:5a:4e:dc:40: aa:58:d5:56:df:0e:03:b5:ae:b7:c7:c7:04:de:9b:d5:56:96: dd:cb:29:a1:48:d4:11:7b:9c:e4:1b:d1:37:64:88:98:b1:81: 8c:df:87:08:0c:71:10:26:1f:32:f0:a0:d3:fb:e4:e6:bf:ca: 7b:c9:fb:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45E1Gv8BGAKWOAZukexMVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZTcxOWY0MjY3OTNiMWU5MDYzNzcxNDYwYWJkMzExYTNk ZmYxMTYwHhcNMjYwMTI2MDYwMTEwWhcNMjYwMTI3MDYwMTEwWjAzMTEwLwYDVQQD Eyg4ZGRiNmRlN2IyMjBhYTcwMDEzMmY5ZjJkOGIwZjliMTBjZDhmNDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55BvGcGmxzjr+C9MN20togdUi6QK S7rjoMR5Cs9hcqgLFjX6JI2jWrpKGw5SGcteNb4+vvjNL8tI2ga4oyJQvd6u19z/ nYpwv3eacRKyjQFgUS4uioBKhy5sI3vcKHICNrOAY3ZBFCt7t9IdK2D8vkK0wES1 dJ3xKyp/Jk/vFd1kPvU8C0Vc2qJiXPwrpALjOWw77gPU7hS0y+YfSgDCvqQTcZ/r j2+WlYG+ZAVLgVktawc9BHiyC0+VdtVx3Gw7k5DpwpVlWKxslB50qmoyoppxwBle 5jKEW4toD5MaOc+2j6jr1V2B06ajy1iKBrw3UR542rWdJpd3kFRfUuDeSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3bbeeyIKpwATL58tiw+bEM2PRUMB8GA1UdIwQY MBaAFIjnGfQmeTsekGN3FGCr0xGj3/EWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU9jWjlDWjVPeDZRWTNjVVlLdlRFYVBmOFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8wMGQ0NWQtNWU0OC00NThkLTkyZjct YWU1MmUxNTZiNzdlLzEvaU9jWjlDWjVPeDZRWTNjVVlLdlRFYVBmOFJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8wMGQ0NWQtNWU0OC00NThkLTkyZjctYWU1MmUxNTZiNzdl LzEvaU9jWjlDWjVPeDZRWTNjVVlLdlRFYVBmOFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPn+lX5hU K+1LA1vQFHTnEPFaXacpSng/rF4k5jCekNRqLrH5MZSFL0xy0ii2waEYq8NpAnnM xwl9d9YxVRVSPjgKDuo16qerYDUDNI98WBrnk4/TeBG4qG+qiUwBKjWed88R5vcO vk8lA86S3TSLme8JmBK9NAClwA7D0lZaZMp5rEW0ypLix+XQr8KgMTgg2ExWIu/b U+F9TWAAAQXjTbktM1VO7BywOMTQC0i18F8HwyEmWh/zFPIttCXxcLOb3YlaTtxA qljVVt8OA7Wut8fHBN6b1VaW3cspoUjUEXuc5BvRN2SImLGBjN+HCAxxECYfMvCg 0/vk5r/Ke8n7Pw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:04 2026 by rpki-client