This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft File: IqXYQFPisMMTrx47pRAkZqX3lng.mft (raw, json) Hash identifier: 0o7E05AUNTNEOSh9IedKknxPXT3gDAELPmsdVCIGMAI= Subject key identifier: 15:4F:9B:AD:01:73:76:F4:6B:73:53:10:D2:FB:5A:48:C8:35:DD:CF Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Certificate serial: 019BF5ABF78F67D46D4EFE4BE3A0F7B55916 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft Manifest number: 0B19 Signing time: Sun 25 Jan 2026 15:00:46 +0000 Manifest this update: Sun 25 Jan 2026 15:00:46 +0000 Manifest next update: Mon 26 Jan 2026 15:00:46 +0000 Files and hashes: 1: 1-Y24DkHX_YS8BQf944IXH_5kays.roa (hash: +VJRpnj8CgCWOeIl5a7z0P70ihS3i/FmFwSi/9utCPo=) 2: IY-cX-MNALu4IC_OTud7vyl-LrA.roa (hash: EREk8HtkB+3C+caNH7Ch6KSJNkDCyci86tLaep5Ej3s=) 3: IqXYQFPisMMTrx47pRAkZqX3lng.crl (hash: 7rq7d/6wy2TT1ERCBO4hjiPux6qIHXIZsqGjLRJprGw=) 4: KSxgyXQgmuvgD3hsIbjoWlYRqkk.roa (hash: MfPYx4d8dGraW1R0Aep23IPqwadZP9+eAkLv5cmiWoM=) 5: M6wnPrDmWw7o372pn664G-6XMUM.roa (hash: vz3Xt9QAg5obB1AHMtVF5JrXwk6u3qtnMl8SakINxdQ=) 6: QU7_3XfMPgpIQHQ50_jrWQFQx7o.roa (hash: LAB6ax0DqVCa39oB2jLFatVSxmBNDm8xZgfRNR237Ws=) 7: _25UfYuLERvQd7ERXXNW_sly9Oo.roa (hash: mce8PC+zpkQB3aka/bSBor9uJVmt1ZEupgGD8nmRstI=) 8: gr17UYbRi7cQ6eQ9EyDF-CuJIp4.roa (hash: NAQ/vI5+2VgZpVpsxQmGoZaiAZnJI/pT7XEYYA4d1IM=) 9: mwE7644yuRyikfXfTRLC6TQjC0w.roa (hash: KcHRogBcTVnQMGjCpBXC4Xr5iRWrDOZmEHuY1S/TOXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:f7:8f:67:d4:6d:4e:fe:4b:e3:a0:f7:b5:59:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Validity Not Before: Jan 25 15:00:46 2026 GMT Not After : Jan 26 15:00:46 2026 GMT Subject: CN=154f9bad017376f46b735310d2fb5a48c835ddcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cc:14:1f:80:fa:48:07:15:8e:12:7b:e3:d3: 81:89:ef:99:f8:d2:03:6d:e5:27:d0:f4:07:b9:e2: 50:e8:87:46:90:d3:56:b9:25:52:79:44:d9:5a:f7: bf:ef:25:8b:98:15:d3:ef:e7:3a:b1:fe:77:1a:db: 1a:b7:18:0d:02:95:6b:7f:59:f5:21:9e:35:5f:ac: 8e:d9:d4:56:82:2c:64:4a:2b:6e:ea:23:88:00:45: fa:22:71:fc:87:36:90:8d:e4:9e:e2:09:14:d8:d5: 52:88:b9:20:12:57:92:df:d6:36:b8:aa:09:72:be: 8a:8d:f7:13:93:a2:86:0f:e2:a4:03:26:f7:2f:03: bf:ab:cf:96:40:cd:d1:4c:41:fa:a8:40:29:12:7d: bc:f0:33:81:ea:8a:76:79:26:ba:86:38:bc:6f:91: 05:89:53:34:96:32:00:d4:ef:be:5f:eb:d3:36:0e: 2f:c5:ba:a8:92:05:ba:2f:fa:a1:e9:8c:d1:e7:fe: 4e:0e:73:6f:65:16:02:db:bc:f3:8f:a2:b3:09:93: bd:8c:73:98:fd:bd:c2:54:1a:d4:c1:28:e0:e0:5e: c2:92:93:91:f8:e8:ca:e2:49:82:88:3b:de:62:17: 25:f0:f7:4a:aa:13:ce:55:f2:6d:9c:c6:e4:a3:52: 63:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4F:9B:AD:01:73:76:F4:6B:73:53:10:D2:FB:5A:48:C8:35:DD:CF X509v3 Authority Key Identifier: keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:14:3f:80:78:1f:8d:3d:39:b6:31:c4:4f:11:96:9f:e3:c7: 8a:e7:e5:f0:14:22:7c:fe:c9:bc:11:35:96:aa:8a:61:1c:0c: 4c:3c:3c:0c:0b:e0:0e:80:3c:90:cb:d5:83:72:8e:06:41:cb: 10:2b:a7:09:cf:31:55:92:eb:29:05:5f:0e:9e:f9:0e:ad:f4: 7d:1b:af:1b:20:8d:a1:8d:ca:d4:4c:14:5d:39:d0:53:02:ac: da:bd:df:b8:c5:e5:cc:5e:17:f3:ee:a0:27:ea:80:9e:6a:46: ee:c8:7c:1f:8a:b4:0d:b3:41:aa:09:8d:25:2b:4d:56:e4:35: ed:01:57:0d:55:bd:65:32:7f:dd:96:56:df:3a:aa:a3:de:b6: a5:3a:8f:d4:04:b8:52:6c:76:ce:4f:f2:22:2a:1d:eb:ad:d5: 30:54:f4:83:93:18:95:ce:53:96:11:c5:c7:74:9d:e0:c6:f5: 27:57:84:d7:bd:f5:6d:58:6e:ae:bd:96:03:90:6e:73:5f:b6: 1c:71:6e:06:f0:51:9d:24:f4:a8:6c:7d:24:bc:3a:cd:fe:7e: fd:f1:2b:26:d0:6c:dd:08:a8:19:5c:c5:1e:3d:0c:c0:55:0e: 2a:f4:d3:a2:2b:d8:ca:19:d8:1d:91:79:ff:c5:55:80:c3:4a: 07:94:52:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q/ePZ9RtTv5L46D3tVkWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTVkODQwNTNlMmIwYzMxM2FmMWUzYmE1MTAyNDY2YTVm Nzk2NzgwHhcNMjYwMTI1MTUwMDQ2WhcNMjYwMTI2MTUwMDQ2WjAzMTEwLwYDVQQD EygxNTRmOWJhZDAxNzM3NmY0NmI3MzUzMTBkMmZiNWE0OGM4MzVkZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cwUH4D6SAcVjhJ749OBie+Z+NID beUn0PQHueJQ6IdGkNNWuSVSeUTZWve/7yWLmBXT7+c6sf53GtsatxgNApVrf1n1 IZ41X6yO2dRWgixkSitu6iOIAEX6InH8hzaQjeSe4gkU2NVSiLkgEleS39Y2uKoJ cr6KjfcTk6KGD+KkAyb3LwO/q8+WQM3RTEH6qEApEn288DOB6op2eSa6hji8b5EF iVM0ljIA1O++X+vTNg4vxbqokgW6L/qh6YzR5/5ODnNvZRYC27zzj6KzCZO9jHOY /b3CVBrUwSjg4F7CkpOR+OjK4kmCiDveYhcl8PdKqhPOVfJtnMbko1JjnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVPm60Bc3b0a3NTENL7WkjINd3PMB8GA1UdIwQY MBaAFCKl2EBT4rDDE68eO6UQJGal95Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUt NTkxY2FmNTM2ZWNjLzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUtNTkxY2FmNTM2ZWNj LzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBQ/gHgf jT05tjHETxGWn+PHiufl8BQifP7JvBE1lqqKYRwMTDw8DAvgDoA8kMvVg3KOBkHL ECunCc8xVZLrKQVfDp75Dq30fRuvGyCNoY3K1EwUXTnQUwKs2r3fuMXlzF4X8+6g J+qAnmpG7sh8H4q0DbNBqgmNJStNVuQ17QFXDVW9ZTJ/3ZZW3zqqo962pTqP1AS4 Umx2zk/yIiod663VMFT0g5MYlc5TlhHFx3Sd4Mb1J1eE1731bVhurr2WA5Buc1+2 HHFuBvBRnST0qGx9JLw6zf5+/fErJtBs3QioGVzFHj0MwFUOKvTToivYyhnYHZF5 /8VVgMNKB5RS4g== -----END CERTIFICATE-----Generated at Mon Jan 26 00:27:09 2026 by rpki-client