This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft File: I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft (raw, json) Hash identifier: hdGe07T8nU29jSGSTaxyBSMUpGvxpD+Cl2EvlAMQ+HI= Subject key identifier: EC:72:48:1A:7E:A7:74:ED:64:6F:DA:50:82:C9:52:EA:A5:1E:2B:11 Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14 Certificate issuer: /CN=2347aaab2206c08128f543730064a145a3effa14 Certificate serial: 019BF619ED5FA157DA5119CB965183918F12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft Manifest number: 17FC Signing time: Sun 25 Jan 2026 17:00:52 +0000 Manifest this update: Sun 25 Jan 2026 17:00:52 +0000 Manifest next update: Mon 26 Jan 2026 17:00:52 +0000 Files and hashes: 1: 249_vWOJGgvFFmLv_5dYY1MQIWI.roa (hash: XCFj+iRH39Cj0T/bNpjf+R2spCw9+pyFathw15z8sLI=) 2: 9TBMQolrynkT7tDiDQfMSK2fy8k.roa (hash: DNBUcS0X2dXGEBDpiiVERi+TH/oYhB/Rs+ebfGfKbXM=) 3: I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl (hash: uekWit766wCtGpxqNfk15MvgdwyXgjb56oPNQuhMNtg=) 4: Qt2hQ4RevVaZm2AH4M4cjkjQkRg.roa (hash: 8xydBfba/M/Ub2ObXv2KeRHR1VzUxMr8P/a+WAzcdIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:ed:5f:a1:57:da:51:19:cb:96:51:83:91:8f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2347aaab2206c08128f543730064a145a3effa14 Validity Not Before: Jan 25 17:00:52 2026 GMT Not After : Jan 26 17:00:52 2026 GMT Subject: CN=ec72481a7ea774ed646fda5082c952eaa51e2b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:49:69:29:16:64:0b:69:68:b8:9d:24:c6:84: db:bc:fd:25:94:e6:df:8d:56:dd:c0:85:60:51:aa: 36:c2:2d:01:31:72:54:b5:e4:63:c9:a1:77:74:8e: b8:c0:27:bf:ad:a5:83:d2:7f:cd:80:2c:1f:92:30: 58:52:d2:1c:b3:5a:08:fc:2f:bb:8f:01:02:88:ba: 31:ed:6c:7d:65:9a:c4:3e:bf:b4:29:a4:50:33:f2: b6:34:fb:81:46:aa:22:47:9d:38:57:76:7d:b7:c7: 76:36:6c:23:a9:ef:c7:8e:68:60:ce:98:df:03:90: ae:45:34:2a:1c:08:76:d3:13:52:91:42:7a:02:0e: d8:6d:35:2c:7d:86:34:89:1d:4b:f1:af:97:13:83: 57:a1:90:cc:7e:45:b8:1f:3b:87:92:31:f3:f4:b3: 27:b3:4b:e5:55:89:ac:74:bb:32:c5:b6:92:90:d0: dc:81:4d:da:99:1c:84:42:d7:30:a1:52:0c:ac:98: 26:bf:49:3a:57:0e:b4:da:eb:45:2a:ea:29:7d:c9: 30:6d:31:e1:37:dd:b7:d8:bd:fb:f5:f2:c1:2f:79: 54:9b:06:a0:44:e5:c0:68:06:8c:56:f0:2d:93:46: 24:67:ff:af:4d:d9:47:2e:9c:0e:d5:8e:e4:84:1b: f2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:72:48:1A:7E:A7:74:ED:64:6F:DA:50:82:C9:52:EA:A5:1E:2B:11 X509v3 Authority Key Identifier: keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:83:0f:16:32:14:18:a2:ba:4d:5d:ac:9c:9c:2f:c4:aa:00: 06:0f:39:fc:7e:cd:cf:0e:74:e6:90:09:2d:d9:84:f7:ef:19: 59:01:20:76:a5:46:17:92:45:ca:b6:4e:5a:5d:2f:a6:ca:4d: 04:36:75:02:07:30:fd:fe:84:94:4f:53:20:ec:cc:5d:78:95: c8:09:bb:59:40:6c:3e:7d:ec:7a:6e:c9:38:dd:d8:df:c4:ec: 5b:b1:d2:dd:66:df:75:43:35:3f:ca:38:6c:d1:0e:86:b6:83: 39:f4:75:7d:66:0c:3b:14:59:28:d8:52:59:2a:4d:5e:85:57: b6:20:33:19:ca:60:10:11:8b:7c:17:c0:fc:4d:78:d9:f8:e3: ae:74:b8:95:ed:29:83:65:94:c4:09:62:35:32:93:ee:bb:dc: 40:f5:d9:b7:4b:cc:8e:eb:c4:24:09:a7:b0:b1:7f:48:d1:71: 13:34:c6:bf:74:c1:43:4a:b0:2e:9c:b7:ea:c6:dd:e1:e8:ad: e3:e0:9d:ac:95:4c:be:f6:17:f0:1c:03:9b:b8:8d:5f:8a:32: e6:d0:9e:87:d0:9c:e6:9c:f3:c7:57:52:3e:05:68:0c:93:50: b5:0a:46:48:55:e6:82:0d:8c:d9:7b:7c:46:77:d3:54:53:15: 99:fe:41:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Ge1foVfaURnLllGDkY8SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDdhYWFiMjIwNmMwODEyOGY1NDM3MzAwNjRhMTQ1YTNl ZmZhMTQwHhcNMjYwMTI1MTcwMDUyWhcNMjYwMTI2MTcwMDUyWjAzMTEwLwYDVQQD EyhlYzcyNDgxYTdlYTc3NGVkNjQ2ZmRhNTA4MmM5NTJlYWE1MWUyYjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0lpKRZkC2louJ0kxoTbvP0llObf jVbdwIVgUao2wi0BMXJUteRjyaF3dI64wCe/raWD0n/NgCwfkjBYUtIcs1oI/C+7 jwECiLox7Wx9ZZrEPr+0KaRQM/K2NPuBRqoiR504V3Z9t8d2Nmwjqe/Hjmhgzpjf A5CuRTQqHAh20xNSkUJ6Ag7YbTUsfYY0iR1L8a+XE4NXoZDMfkW4HzuHkjHz9LMn s0vlVYmsdLsyxbaSkNDcgU3amRyEQtcwoVIMrJgmv0k6Vw602utFKuopfckwbTHh N9232L379fLBL3lUmwagROXAaAaMVvAtk0YkZ/+vTdlHLpwO1Y7khBvytwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxySBp+p3TtZG/aUILJUuqlHisRMB8GA1UdIwQY MBaAFCNHqqsiBsCBKPVDcwBkoUWj7/oUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBlcXF5SUd3SUVvOVVOekFHU2hSYVB2LWhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9lZjlmMGQtZDg0MC00MzcxLWFkYzQt NzU4NDA2NjFlYWY1LzEvSTBlcXF5SUd3SUVvOVVOekFHU2hSYVB2LWhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9lZjlmMGQtZDg0MC00MzcxLWFkYzQtNzU4NDA2NjFlYWY1 LzEvSTBlcXF5SUd3SUVvOVVOekFHU2hSYVB2LWhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIMPFjIU GKK6TV2snJwvxKoABg85/H7Nzw505pAJLdmE9+8ZWQEgdqVGF5JFyrZOWl0vpspN BDZ1Agcw/f6ElE9TIOzMXXiVyAm7WUBsPn3sem7JON3Y38TsW7HS3WbfdUM1P8o4 bNEOhraDOfR1fWYMOxRZKNhSWSpNXoVXtiAzGcpgEBGLfBfA/E142fjjrnS4le0p g2WUxAliNTKT7rvcQPXZt0vMjuvEJAmnsLF/SNFxEzTGv3TBQ0qwLpy36sbd4eit 4+CdrJVMvvYX8BwDm7iNX4oy5tCeh9Cc5pzzx1dSPgVoDJNQtQpGSFXmgg2M2Xt8 RnfTVFMVmf5BDQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:25:51 2026 by rpki-client