This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft File: I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft (raw, json) Hash identifier: Col521Gn9NHc62J6tG7MA5fbqinxx4ngDwvJ0J3z8UA= Subject key identifier: 5E:E7:EF:9D:6B:1A:37:63:76:62:5E:67:65:A0:80:D4:67:D1:0A:06 Authority key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44 Certificate issuer: /CN=23a7b593c804a683f0c8fa3eda9335af92a89044 Certificate serial: 019BF5E34893E19815A47AC1BCED9D048A01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft Manifest number: 1530 Signing time: Sun 25 Jan 2026 16:01:11 +0000 Manifest this update: Sun 25 Jan 2026 16:01:11 +0000 Manifest next update: Mon 26 Jan 2026 16:01:11 +0000 Files and hashes: 1: EBjSa7A-On9uI8_gmDnR7SDL_J8.roa (hash: cYEOk8Kxrw9KuVJI4MOZDU2QZ9S+tI4rD6Xrsxto8lg=) 2: I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl (hash: r93X2GRPZ+rAp97FRbRfGGxyrU8Hn3tCiB6Ap7G/hPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:48:93:e1:98:15:a4:7a:c1:bc:ed:9d:04:8a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23a7b593c804a683f0c8fa3eda9335af92a89044 Validity Not Before: Jan 25 16:01:11 2026 GMT Not After : Jan 26 16:01:11 2026 GMT Subject: CN=5ee7ef9d6b1a376376625e6765a080d467d10a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:86:b7:cb:b4:1a:50:68:94:92:5d:ac:3c:d2: f4:59:1c:1a:3e:45:db:bb:0b:eb:13:cb:e0:a0:c9: 0a:b8:6e:b5:95:ea:e2:c0:a6:41:bd:55:43:a9:d7: fb:e6:48:9a:47:ff:6c:8b:ce:e0:e2:b9:be:50:23: 13:d0:82:25:2e:c5:89:0a:e3:75:2f:69:58:da:bb: 1f:bb:01:27:b8:a3:e2:97:5a:bd:4c:7f:c3:62:39: 5d:8b:37:2d:a5:3a:97:58:b7:96:d9:d3:3d:25:b3: 67:ed:58:4e:24:c6:1a:9b:99:d1:18:9e:be:a6:15: ea:a6:6f:74:2d:16:4c:b6:84:76:15:0b:92:2e:5b: 74:be:23:0d:62:c3:2c:ff:3b:f4:b9:88:22:aa:d8: 58:75:90:17:dc:4b:27:09:3e:b1:e3:69:a6:94:de: 52:23:24:8b:6d:7a:3d:a7:4e:61:28:fd:d2:5b:93: cb:8f:75:c6:28:f5:92:7f:4a:d8:e6:a9:d7:91:7b: 71:29:70:df:8f:70:af:d7:18:46:51:2d:76:75:f5: eb:57:90:08:fe:e4:77:a9:2b:44:da:27:fa:10:ac: 35:d4:8f:8e:c5:99:11:56:7c:70:dd:85:48:f3:3d: 54:3f:e2:b6:10:8d:91:ad:23:94:0a:37:ad:be:63: 05:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E7:EF:9D:6B:1A:37:63:76:62:5E:67:65:A0:80:D4:67:D1:0A:06 X509v3 Authority Key Identifier: keyid:23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:77:96:23:33:dc:9c:0b:79:63:46:34:9f:7c:4e:a4:6c:ac: b4:0d:a2:a9:f3:fa:d9:7c:fb:4a:3f:f2:f1:fb:31:2e:e8:c0: c5:02:0d:3c:c5:5c:b3:ef:25:45:ac:f5:0f:e0:af:0b:f9:62: 1d:4e:24:ec:1f:74:9a:9b:a0:f0:ef:06:5e:ce:76:a8:52:fd: 08:0e:05:39:03:13:07:b8:a7:2b:98:4e:ce:70:0a:60:38:cf: 9d:45:cf:a8:80:8e:e4:a9:f7:c1:f4:b2:30:30:b8:2e:87:b4: 1e:f1:31:e5:83:c1:d9:82:97:16:b6:ae:b1:4b:66:a9:41:16: 82:b0:50:3a:10:35:bb:8f:c2:bd:84:06:73:e5:d9:55:e5:be: 6f:ce:0f:db:95:ca:c8:5f:d7:15:59:e2:92:43:dd:a6:a3:50: ea:20:c5:21:8a:58:39:cc:ae:72:3a:9a:41:55:d3:57:2e:8f: 2e:9f:e8:25:81:94:6e:b5:36:45:16:da:98:af:e0:db:84:b5: f0:d9:03:9b:e2:79:54:de:ca:9b:cb:d8:8e:7d:83:8e:db:30: 9d:a9:e0:d3:da:43:07:4f:83:c7:e6:80:82:81:ce:99:d6:5f: b4:0f:fc:57:be:50:8a:98:76:6e:b5:16:2b:58:44:14:24:f3: 68:27:a2:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv140iT4ZgVpHrBvO2dBIoBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYTdiNTkzYzgwNGE2ODNmMGM4ZmEzZWRhOTMzNWFmOTJh ODkwNDQwHhcNMjYwMTI1MTYwMTExWhcNMjYwMTI2MTYwMTExWjAzMTEwLwYDVQQD Eyg1ZWU3ZWY5ZDZiMWEzNzYzNzY2MjVlNjc2NWEwODBkNDY3ZDEwYTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4a3y7QaUGiUkl2sPNL0WRwaPkXb uwvrE8vgoMkKuG61leriwKZBvVVDqdf75kiaR/9si87g4rm+UCMT0IIlLsWJCuN1 L2lY2rsfuwEnuKPil1q9TH/DYjldizctpTqXWLeW2dM9JbNn7VhOJMYam5nRGJ6+ phXqpm90LRZMtoR2FQuSLlt0viMNYsMs/zv0uYgiqthYdZAX3EsnCT6x42mmlN5S IySLbXo9p05hKP3SW5PLj3XGKPWSf0rY5qnXkXtxKXDfj3Cv1xhGUS12dfXrV5AI /uR3qStE2if6EKw11I+OxZkRVnxw3YVI8z1UP+K2EI2RrSOUCjetvmMFxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7n751rGjdjdmJeZ2WggNRn0QoGMB8GA1UdIwQY MBaAFCOntZPIBKaD8Mj6PtqTNa+SqJBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9kZGY1NTktNDMzYi00MDhmLWE1YjIt M2ZiNWFkZGU2MDQwLzEvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9kZGY1NTktNDMzYi00MDhmLWE1YjItM2ZiNWFkZGU2MDQw LzEvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdHeWIzPc nAt5Y0Y0n3xOpGystA2iqfP62Xz7Sj/y8fsxLujAxQINPMVcs+8lRaz1D+CvC/li HU4k7B90mpug8O8GXs52qFL9CA4FOQMTB7inK5hOznAKYDjPnUXPqICO5Kn3wfSy MDC4Loe0HvEx5YPB2YKXFrausUtmqUEWgrBQOhA1u4/CvYQGc+XZVeW+b84P25XK yF/XFVnikkPdpqNQ6iDFIYpYOcyucjqaQVXTVy6PLp/oJYGUbrU2RRbamK/g24S1 8NkDm+J5VN7Km8vYjn2Djtswnang09pDB0+Dx+aAgoHOmdZftA/8V75Qiph2brUW K1hEFCTzaCeiOw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:44 2026 by rpki-client