This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft File: cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json) Hash identifier: bLRjfMrzFjlzg8qQrEgyQfDkV+259VoMBtkJs22jWWg= Subject key identifier: 20:7C:70:CF:6B:31:A7:46:38:7F:17:A2:74:6C:04:42:FA:78:EF:E9 Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5 Certificate issuer: /CN=70847f8221897d6e952e86ea2c339abaacc131f5 Certificate serial: 019BF53F05DF2DE86DB1AA0A6C1216E8B8A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft Manifest number: 10F2 Signing time: Sun 25 Jan 2026 13:01:46 +0000 Manifest this update: Sun 25 Jan 2026 13:01:46 +0000 Manifest next update: Mon 26 Jan 2026 13:01:46 +0000 Files and hashes: 1: DgHkmROyC3MxqqPYkuTyDoxtyqw.roa (hash: q4huZNQpi2E4AXxex6IplXT0SZt2O1CYv71WiSI/rLI=) 2: Ns__ZZIiPb9TMl7NZ4zyQ0KeLeY.roa (hash: Jq4DCJzMOXzkiYCzhRhQfITbIQrgdmZME0+wIilmKI0=) 3: PWseQmzX6iLF_AKjxIoDYYEV-zs.roa (hash: 5qw7OHsXZ5/YdO0FCT2hsJ4vIKg9r9qwZPsnMuFb2j4=) 4: W4ezimhOK28HTElZ-mL_VlHTTYY.roa (hash: aW+HAsRTpiBjWIXXUsRRtCgHyvy44DkCN4CGgiTo7pw=) 5: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: BEsrxbhuunkZEFtx4THDqPnL/LcTQ2hW9KMa9G8GQVo=) 6: dvl1qc6F1GgOMamGgtlUjjsOAmg.roa (hash: HqSbVOynVSnxKlocjrN8BkkCsHJA79UECwHRf5zem3E=) 7: lPV_USFOSo5QlpwzyG9GZkglfYI.roa (hash: F2MPkEsQMavl9IFac2UMwUB3IRMDo28oAPxrO4XQVFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3f:05:df:2d:e8:6d:b1:aa:0a:6c:12:16:e8:b8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5 Validity Not Before: Jan 25 13:01:46 2026 GMT Not After : Jan 26 13:01:46 2026 GMT Subject: CN=207c70cf6b31a746387f17a2746c0442fa78efe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5c:86:5f:f8:4e:47:a0:e9:d0:04:54:33:77: 9a:47:c8:64:f4:d4:d8:c1:82:39:ea:93:1c:91:c9: cc:d1:4d:28:9e:66:61:b9:b8:16:21:a6:05:27:cd: 9c:28:74:fe:54:ab:55:b5:43:80:bb:c7:5b:08:64: d0:5d:fb:0f:6f:b6:b4:b6:4f:58:ff:8b:27:cf:80: 60:78:fb:5c:e0:9f:7e:dc:6b:67:f8:ff:e3:43:fe: d3:84:e4:a8:55:88:8d:24:a4:eb:7b:7a:8f:13:39: 38:15:cc:ec:89:a3:16:e0:14:9c:1d:64:ab:01:1b: 72:4a:ce:2e:28:53:32:9d:2d:79:8f:9e:d2:28:f2: 00:c1:9d:c7:b6:52:ca:a7:d6:e6:51:45:06:99:78: a9:9f:09:08:9e:f4:ec:7a:e6:c0:e2:cf:96:09:6b: 1b:0a:35:64:2f:35:eb:2a:20:7a:10:a8:05:93:90: b5:82:f6:03:2c:62:2e:6e:d4:1e:f7:a9:82:6a:7e: 02:2b:12:7d:d6:e5:9e:69:25:d8:ae:30:69:95:db: b3:fa:a2:e9:57:2f:bd:09:d5:48:13:7e:c2:23:b4: 2f:f0:cd:00:bd:d9:c7:81:66:e1:40:d5:25:7f:c6: b7:62:f0:d2:03:6e:56:64:9e:6f:1e:34:41:06:b1: 27:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7C:70:CF:6B:31:A7:46:38:7F:17:A2:74:6C:04:42:FA:78:EF:E9 X509v3 Authority Key Identifier: keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d3:33:85:d7:4e:cb:1d:b9:0d:0c:5d:6e:6e:8a:ea:e2:6c: f9:8f:42:cb:40:89:7f:85:5c:3b:85:dd:19:2b:6e:0b:3b:4e: 9c:5d:bb:8f:fc:ae:7e:fa:99:63:d2:39:b8:ab:19:f3:92:06: 11:d5:59:bd:5a:a7:35:c3:fc:7a:55:85:e4:c9:79:70:5a:d4: 67:d8:f6:8d:17:a5:43:05:59:6e:04:32:b7:98:7f:0a:2e:11: 9c:b5:28:f7:98:c2:aa:dd:cc:99:3e:54:45:fd:fa:73:ef:5d: 21:9e:9f:13:8f:cb:0a:60:a0:1a:69:b6:ec:9f:87:84:02:2c: da:b2:a0:a6:95:eb:87:05:f3:6c:d7:ed:c8:19:02:54:e7:3f: c5:c5:56:b8:1b:b8:f1:aa:01:56:bd:77:ab:cd:c6:11:8d:62: 31:5a:b7:79:34:35:70:8d:95:67:ff:bf:05:10:be:eb:a4:d6: d0:18:0e:9c:cf:3f:0b:25:01:d5:96:d3:1a:af:de:c2:82:eb: e3:96:eb:e2:c4:e3:67:5c:cf:8f:68:35:b0:78:2c:ae:5f:c4: 52:cd:b8:dd:b1:3d:00:2f:cf:60:7a:d1:3c:41:82:1b:73:d9: 70:6b:12:cf:a1:61:ee:44:99:3c:ac:81:06:fe:c9:52:f8:97: 56:0a:e9:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PwXfLehtsaoKbBIW6LinMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwODQ3ZjgyMjE4OTdkNmU5NTJlODZlYTJjMzM5YWJhYWNj MTMxZjUwHhcNMjYwMTI1MTMwMTQ2WhcNMjYwMTI2MTMwMTQ2WjAzMTEwLwYDVQQD EygyMDdjNzBjZjZiMzFhNzQ2Mzg3ZjE3YTI3NDZjMDQ0MmZhNzhlZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFyGX/hOR6Dp0ARUM3eaR8hk9NTY wYI56pMckcnM0U0onmZhubgWIaYFJ82cKHT+VKtVtUOAu8dbCGTQXfsPb7a0tk9Y /4snz4BgePtc4J9+3Gtn+P/jQ/7ThOSoVYiNJKTre3qPEzk4FczsiaMW4BScHWSr ARtySs4uKFMynS15j57SKPIAwZ3HtlLKp9bmUUUGmXipnwkInvTseubA4s+WCWsb CjVkLzXrKiB6EKgFk5C1gvYDLGIubtQe96mCan4CKxJ91uWeaSXYrjBplduz+qLp Vy+9CdVIE37CI7Qv8M0AvdnHgWbhQNUlf8a3YvDSA25WZJ5vHjRBBrEnQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCB8cM9rMadGOH8XonRsBEL6eO/pMB8GA1UdIwQY MBaAFHCEf4IhiX1ulS6G6iwzmrqswTH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgt NmU4Nzg0YTdhZDA5LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgtNmU4Nzg0YTdhZDA5 LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9MzhddO yx25DQxdbm6K6uJs+Y9Cy0CJf4VcO4XdGStuCztOnF27j/yufvqZY9I5uKsZ85IG EdVZvVqnNcP8elWF5Ml5cFrUZ9j2jRelQwVZbgQyt5h/Ci4RnLUo95jCqt3MmT5U Rf36c+9dIZ6fE4/LCmCgGmm27J+HhAIs2rKgppXrhwXzbNftyBkCVOc/xcVWuBu4 8aoBVr13q83GEY1iMVq3eTQ1cI2VZ/+/BRC+66TW0BgOnM8/CyUB1ZbTGq/ewoLr 45br4sTjZ1zPj2g1sHgsrl/EUs243bE9AC/PYHrRPEGCG3PZcGsSz6Fh7kSZPKyB Bv7JUviXVgrpxQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:36:27 2026 by rpki-client