This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json) Hash identifier: A8VF4wkLkGpHeV16BMpg6hslQEazZuZFCNhuJZt0Yc8= Subject key identifier: 85:C0:C1:07:11:A5:28:7E:CD:BE:02:77:E6:F8:1B:0A:7F:E4:00:80 Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 019BF42BACC1A5E85AB67ACF3367F9E92A56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft Manifest number: 15A7 Signing time: Sun 25 Jan 2026 08:01:01 +0000 Manifest this update: Sun 25 Jan 2026 08:01:01 +0000 Manifest next update: Mon 26 Jan 2026 08:01:01 +0000 Files and hashes: 1: 5izoM-ae0viPYeMa8vG_OMdcCFM.roa (hash: TwuLhMgA2SHR4gXSc9/RCEg/7dBujziBPA56lp4yzpw=) 2: BKLkIdToQetqMN6t0fILb38dSDc.roa (hash: RhVkHdE+vukqBXIHV6N+0FaehH32ohYDLGAwN+SuRTk=) 3: CupzWU4aLHwacea9s2f26JgGU7w.roa (hash: YiVW0zn+2J0x+BF2Yslb930PEXt7HMZ5DbfmBNoWQKE=) 4: Hf9SE1c9_AO3kFICjo06WD1ExT4.roa (hash: Zcpcz8u2FNeH+3dXoD7WRhTdlszR9sgi9wm3DkRL4TU=) 5: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: z9IB/SpylS9O9Nsh3qyV09FhW/KFGP1igKwCBx9K1pI=) 6: V6V_NlUP57LahAmPSdJLWOxrfrk.roa (hash: PQq468qMgQ7iMbphbUgZdzLfF9PWviyerqDZHzWerVE=) 7: a6tV42bT2z7X2lsjs8cvX8HIAIc.roa (hash: NDbBw26iXwsVl/ElEophDI0QYBlkmtkRinFz/9BOzMw=) 8: fObJjjriSFDg4fSQTq7ENWa9-zc.roa (hash: WGLV3VjdN5mD0f589CBjcyMgLQSoTV+NVe84m46+eBc=) 9: hcsvWgXQpRuMWY3WmGaGm9cGJ4A.roa (hash: dkGLaaklnk5lHe0yhu52I503lMVuY0bbx3ehGkFXyqY=) 10: i7574yuT4RZ2_MwlIM2VKqIIK2U.roa (hash: X+/UrliSCfToScMB/8/XDGdMggPWp6ennjed9G4uk1A=) 11: qJOi4zVPIJeiBz6kzCUQLpwMngk.roa (hash: vqduf5OrqJ9boER+M0PF82VqTnPYijX9elPDZEa03wo=) 12: qOIniIo2K3_zis3JibLadioBPRo.roa (hash: 5h4shskfhopVb9L7z02A78iAajdnh2sIBdf4Kss8RH8=) 13: vWKFpPFVl35hfIog_KoQjclWrmY.roa (hash: 7m8wK3gsN1166dBeFVQxAfE0K89nsZEcg+lnonfGv9Q=) 14: wWIoMzB39ahvaptJv9NhKUQr9Cw.roa (hash: 7GV/ae9yumSfYZH3dmuAGtWW+nlGHJx1A9VViiivwD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:ac:c1:a5:e8:5a:b6:7a:cf:33:67:f9:e9:2a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Jan 25 08:01:01 2026 GMT Not After : Jan 26 08:01:01 2026 GMT Subject: CN=85c0c10711a5287ecdbe0277e6f81b0a7fe40080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:10:11:be:ce:31:88:ad:8f:29:5f:6d:e4:0d: a1:30:5a:27:64:73:2f:7c:9f:0e:46:d6:ed:cd:7b: d1:a7:01:39:a3:29:98:b2:39:df:ec:75:60:c5:ec: 6d:f9:09:93:4c:fd:7c:cf:ea:97:3b:4f:06:3b:0f: 4e:d0:ad:27:66:89:b5:de:44:ac:c0:d5:10:82:fc: aa:c9:91:77:75:dd:3d:8b:a1:3b:9c:4e:c4:18:e7: 79:61:b3:2a:29:86:bd:c5:9f:8e:36:da:5e:fb:de: 1a:35:e0:a7:ac:4c:0c:82:93:71:33:c5:96:f8:85: 47:32:69:b1:76:e3:01:43:d4:97:a2:5e:21:af:d4: cd:cd:25:18:4a:b7:65:73:d8:99:8c:52:d2:d2:1c: 67:3b:5c:b6:a0:09:b6:77:2b:dd:df:ce:5a:51:37: 59:f8:92:ad:60:91:a2:d2:39:56:7e:0f:00:c6:d2: f7:c0:01:0b:09:19:16:6a:56:ec:8c:95:e8:57:d9: 0e:b3:c8:0f:49:40:42:6c:a7:3d:42:a3:79:53:70: 34:e6:6a:34:50:96:2e:5c:ea:b6:5e:15:46:7c:f6: ad:64:d5:75:4b:2b:16:7d:3b:99:34:58:f9:c3:60: ef:77:e4:5d:61:69:7c:29:c2:81:2c:74:94:04:98: 57:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C0:C1:07:11:A5:28:7E:CD:BE:02:77:E6:F8:1B:0A:7F:E4:00:80 X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:97:8b:0d:44:e4:ef:f8:92:fc:00:da:48:29:d6:41:13:44: 1d:a1:10:fd:06:a1:38:be:bb:df:e5:44:ed:d0:69:dd:ea:83: ed:5c:27:6b:ce:9e:87:ca:e4:89:c3:a8:dc:56:68:76:a0:b3: f4:87:8a:3b:91:7a:62:4f:ae:0d:5a:3e:a8:11:27:3e:0f:46: fa:ac:cf:d1:c5:4a:4e:56:0e:18:d1:97:67:c2:04:4b:06:e0: ed:70:c8:29:ac:c3:22:0b:b4:b1:0d:fe:1f:c1:28:b2:8a:66: 7e:96:33:32:99:6d:43:f0:22:eb:5f:4f:d8:59:f7:73:e3:a7: 3d:d6:5c:93:8a:aa:00:62:8f:06:ca:7d:b7:b2:d5:ee:08:c5: 60:ca:e6:49:5e:09:af:d1:a1:c1:33:0a:a6:f2:ec:db:4a:08: 9c:82:d0:17:00:64:53:86:7f:fc:2e:8e:34:14:6e:15:64:40: 78:2f:a3:14:81:a1:d2:20:a3:1f:50:2d:b0:2f:b0:22:65:b7: 3f:46:66:51:d9:07:09:b2:7e:77:00:d7:5b:80:9c:26:bf:92: 61:1b:16:d0:b6:5d:de:32:91:de:e8:33:94:bf:4f:ff:09:7c: 5e:7d:11:56:b1:aa:82:60:bd:46:74:80:00:63:25:01:cb:20: 77:01:ed:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K6zBpehatnrPM2f56SpWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjYwMTI1MDgwMTAxWhcNMjYwMTI2MDgwMTAxWjAzMTEwLwYDVQQD Eyg4NWMwYzEwNzExYTUyODdlY2RiZTAyNzdlNmY4MWIwYTdmZTQwMDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BARvs4xiK2PKV9t5A2hMFonZHMv fJ8ORtbtzXvRpwE5oymYsjnf7HVgxext+QmTTP18z+qXO08GOw9O0K0nZom13kSs wNUQgvyqyZF3dd09i6E7nE7EGOd5YbMqKYa9xZ+ONtpe+94aNeCnrEwMgpNxM8WW +IVHMmmxduMBQ9SXol4hr9TNzSUYSrdlc9iZjFLS0hxnO1y2oAm2dyvd385aUTdZ +JKtYJGi0jlWfg8AxtL3wAELCRkWalbsjJXoV9kOs8gPSUBCbKc9QqN5U3A05mo0 UJYuXOq2XhVGfPatZNV1SysWfTuZNFj5w2Dvd+RdYWl8KcKBLHSUBJhXzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXAwQcRpSh+zb4Cd+b4Gwp/5ACAMB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZeLDUTk 7/iS/ADaSCnWQRNEHaEQ/QahOL673+VE7dBp3eqD7Vwna86eh8rkicOo3FZodqCz 9IeKO5F6Yk+uDVo+qBEnPg9G+qzP0cVKTlYOGNGXZ8IESwbg7XDIKazDIgu0sQ3+ H8EosopmfpYzMpltQ/Ai619P2Fn3c+OnPdZck4qqAGKPBsp9t7LV7gjFYMrmSV4J r9GhwTMKpvLs20oInILQFwBkU4Z//C6ONBRuFWRAeC+jFIGh0iCjH1AtsC+wImW3 P0ZmUdkHCbJ+dwDXW4CcJr+SYRsW0LZd3jKR3ugzlL9P/wl8Xn0RVrGqgmC9RnSA AGMlAcsgdwHtYQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:04 2026 by rpki-client