This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft File: igCeFxuvjCo6lNKbJIee-X8JZgI.mft (raw, json) Hash identifier: QrZLo9Y6Y/d+nAkJhJwofDUnCMR0ZRMVSe7uIa1WQU8= Subject key identifier: 7B:97:C5:ED:83:D1:A8:ED:76:41:06:C5:29:35:03:DC:F4:6D:89:DF Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02 Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602 Certificate serial: 019BFA648DFB212747BA00AFB9D11B8BC93E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft Manifest number: 1596 Signing time: Mon 26 Jan 2026 13:00:52 +0000 Manifest this update: Mon 26 Jan 2026 13:00:52 +0000 Manifest next update: Tue 27 Jan 2026 13:00:52 +0000 Files and hashes: 1: igCeFxuvjCo6lNKbJIee-X8JZgI.crl (hash: MH13LXJmKHQs9phB4UqFBHbGSEjU2o+/MR2l3ALANT8=) 2: oL7Va2kH8P-3vrFReEUhkCyRmcY.roa (hash: r6Ou/HXbegxpeXGw26fS8AHPIewd+N00kGGB9t5uCj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:8d:fb:21:27:47:ba:00:af:b9:d1:1b:8b:c9:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602 Validity Not Before: Jan 26 13:00:52 2026 GMT Not After : Jan 27 13:00:52 2026 GMT Subject: CN=7b97c5ed83d1a8ed764106c5293503dcf46d89df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3c:97:fa:b7:0d:c3:02:33:89:00:6f:2b:83: 9e:d2:78:08:47:a5:8c:21:24:9d:e0:92:83:0a:21: 7c:ce:77:b8:82:20:cb:23:2f:c5:f2:73:0e:d2:d9: 60:52:4c:49:2d:1d:4e:fd:08:aa:ab:e4:98:c7:15: 34:59:ec:a9:2a:99:c8:17:94:63:c9:bd:6f:e6:3a: 02:20:7c:fd:ee:db:29:c9:f8:79:51:bc:ac:ca:8b: 93:59:bc:44:c3:2a:37:1f:c0:ed:84:81:09:28:e4: 14:11:8f:b9:3a:bf:b6:a6:aa:68:88:bc:c4:1b:6d: 23:82:8b:c5:79:b7:de:26:7c:60:34:42:20:87:67: 29:86:32:6a:55:f6:b6:07:0d:f9:ba:a3:34:02:c1: 6c:d5:1e:5d:09:53:8e:45:f2:93:51:95:ec:bf:46: 6d:c4:74:8e:81:a4:86:b1:23:2c:42:6a:fb:29:17: a0:1a:12:b8:be:4e:32:cd:a9:a6:07:9f:28:56:62: f0:c5:b9:69:33:0a:b8:00:c7:5d:d8:25:84:6d:8a: d8:ab:34:9e:71:6f:d8:f8:8a:02:6b:24:a6:f1:30: f8:c7:1b:d1:c7:79:6e:42:23:c7:5b:86:e7:66:6a: 06:9c:a7:8c:e1:20:0a:75:7e:8b:48:6f:9b:8d:df: f6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:97:C5:ED:83:D1:A8:ED:76:41:06:C5:29:35:03:DC:F4:6D:89:DF X509v3 Authority Key Identifier: keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b3:38:14:85:6b:ff:b8:de:5c:00:de:19:c6:86:36:90:81: 64:d0:fc:33:be:92:a9:86:d0:c7:25:eb:29:68:82:f5:9e:bd: 06:6a:59:3b:b3:e1:40:d0:1b:bf:39:1f:87:4e:04:5b:0f:d1: 57:a6:94:d0:5a:29:66:b2:b0:ba:2e:63:a3:b9:d0:08:7e:78: 77:46:86:b4:51:3e:79:8a:51:dc:f2:b0:10:08:58:e9:75:a1: 06:ed:65:56:aa:11:4c:cd:24:d0:76:eb:f8:f1:00:f6:20:f1: c4:ec:55:14:28:76:42:2b:fd:03:5c:f4:1c:f3:33:61:22:85: 02:04:50:af:20:ae:7a:1f:01:37:cb:09:f6:e9:63:da:45:a6: 38:cd:d5:fe:ab:2d:24:03:d2:5c:47:7b:25:e2:37:f1:84:39: 61:73:fb:e1:18:5c:60:97:f1:63:f9:9b:eb:c9:33:e2:3b:da: f4:b0:04:40:ff:33:e6:a0:00:47:4a:85:c0:a4:77:fd:1b:f6: ab:e1:85:21:44:1a:b6:6d:a8:ba:b0:3d:0f:05:63:ff:ac:f2: af:b1:14:e1:27:bd:f2:e7:46:e1:c0:3d:86:76:28:60:dc:c5: 35:08:d0:06:e7:5c:9f:d1:e9:62:db:60:90:bb:91:d2:be:50: e2:94:25:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZI37ISdHugCvudEbi8k+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDA5ZTE3MWJhZjhjMmEzYTk0ZDI5YjI0ODc5ZWY5N2Yw OTY2MDIwHhcNMjYwMTI2MTMwMDUyWhcNMjYwMTI3MTMwMDUyWjAzMTEwLwYDVQQD Eyg3Yjk3YzVlZDgzZDFhOGVkNzY0MTA2YzUyOTM1MDNkY2Y0NmQ4OWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDyX+rcNwwIziQBvK4Oe0ngIR6WM ISSd4JKDCiF8zne4giDLIy/F8nMO0tlgUkxJLR1O/Qiqq+SYxxU0WeypKpnIF5Rj yb1v5joCIHz97tspyfh5UbysyouTWbxEwyo3H8DthIEJKOQUEY+5Or+2pqpoiLzE G20jgovFebfeJnxgNEIgh2cphjJqVfa2Bw35uqM0AsFs1R5dCVOORfKTUZXsv0Zt xHSOgaSGsSMsQmr7KRegGhK4vk4yzammB58oVmLwxblpMwq4AMdd2CWEbYrYqzSe cW/Y+IoCaySm8TD4xxvRx3luQiPHW4bnZmoGnKeM4SAKdX6LSG+bjd/2LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuXxe2D0ajtdkEGxSk1A9z0bYnfMB8GA1UdIwQY MBaAFIoAnhcbr4wqOpTSmySHnvl/CWYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZjM3ZDEtMTRjYS00ZGNmLTk4Zjct MmU3MjEzNzY3NjI4LzEvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85ZjM3ZDEtMTRjYS00ZGNmLTk4ZjctMmU3MjEzNzY3NjI4 LzEvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbM4FIVr /7jeXADeGcaGNpCBZND8M76SqYbQxyXrKWiC9Z69BmpZO7PhQNAbvzkfh04EWw/R V6aU0FopZrKwui5jo7nQCH54d0aGtFE+eYpR3PKwEAhY6XWhBu1lVqoRTM0k0Hbr +PEA9iDxxOxVFCh2Qiv9A1z0HPMzYSKFAgRQryCueh8BN8sJ9ulj2kWmOM3V/qst JAPSXEd7JeI38YQ5YXP74RhcYJfxY/mb68kz4jva9LAEQP8z5qAAR0qFwKR3/Rv2 q+GFIUQatm2ourA9DwVj/6zyr7EU4Se98udG4cA9hnYoYNzFNQjQBudcn9HpYttg kLuR0r5Q4pQlDg== -----END CERTIFICATE-----Generated at Mon Jan 26 19:39:13 2026 by rpki-client