This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json) Hash identifier: MnsZXFMxIGSKkZli73IsKIYAotIjxfEZkuJtBG61ux8= Subject key identifier: 25:B1:22:DD:D4:65:05:85:03:7A:A3:AC:E4:C2:96:C9:4D:17:D9:55 Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7 Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7 Certificate serial: 019BF687B7B87CA7BA5E47F924AD04C94911 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft Manifest number: 14B0 Signing time: Sun 25 Jan 2026 19:00:47 +0000 Manifest this update: Sun 25 Jan 2026 19:00:47 +0000 Manifest next update: Mon 26 Jan 2026 19:00:47 +0000 Files and hashes: 1: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: HeXlvFkJmI2vJXetisIA9Sg6221I8rPWD5emLe4mSFY=) 2: uOMfavwENLpPMVU126jBRKAkKw8.roa (hash: vsD6+XFIYlluDo4Fj+w6NTOqOdxFMiatW0N6TdNehjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:b7:b8:7c:a7:ba:5e:47:f9:24:ad:04:c9:49:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7 Validity Not Before: Jan 25 19:00:47 2026 GMT Not After : Jan 26 19:00:47 2026 GMT Subject: CN=25b122ddd4650585037aa3ace4c296c94d17d955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:a1:7d:41:bd:04:24:f0:9f:07:f8:a6:d4: 0a:df:7b:30:ad:d9:bc:d8:59:d4:06:35:e2:ab:ea: 36:87:6f:32:79:9d:91:f4:64:3f:75:cc:7d:62:f5: c8:0d:71:73:36:86:8b:5f:cf:42:73:d6:2f:0e:1c: 46:be:97:78:c5:9a:5b:f0:c9:ee:3a:f0:f4:73:1d: 31:fb:9a:98:64:75:2f:06:1c:07:39:b6:32:e9:93: c0:2c:e9:f3:06:2d:ca:2b:b5:f0:b4:36:16:5a:6f: 9d:89:6f:f0:57:19:a0:05:04:bc:5a:d6:3d:fe:9a: e0:42:79:6e:da:78:76:10:47:7b:44:b2:1a:55:05: 65:f7:fb:7c:93:04:38:18:37:02:20:12:b2:98:4d: 40:83:93:38:74:af:c9:fa:43:ff:d5:d3:e9:c2:ba: e8:20:2c:10:8f:8c:4f:4f:f4:93:38:f7:4e:05:44: 6d:bb:27:46:f9:b7:5a:94:ab:ff:03:9a:5b:4d:e4: 48:ba:10:9b:06:71:d6:82:a4:c3:e2:8b:25:e0:b8: ed:49:02:1e:03:80:e7:40:b8:a4:62:0f:d6:1a:29: 5e:52:37:00:90:f6:52:06:1a:14:72:91:8d:fb:3f: e5:60:16:55:54:42:f2:60:e7:74:7a:bd:c2:56:97: 53:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B1:22:DD:D4:65:05:85:03:7A:A3:AC:E4:C2:96:C9:4D:17:D9:55 X509v3 Authority Key Identifier: keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:85:7c:20:fd:22:97:60:3d:23:96:95:95:38:77:b5:db:db: 9b:4b:a5:d2:e4:cb:ad:d0:f0:7e:5d:8e:99:dd:f6:1f:be:fe: 1d:dc:fa:7a:f3:7f:29:2b:63:47:95:e8:7f:98:35:83:ee:fc: 64:de:bf:a0:35:6e:ed:24:0a:37:19:b2:58:ba:d5:4e:4b:96: 98:8e:22:7e:ce:f5:67:86:50:ad:d5:16:64:4b:a7:d4:d5:c4: df:e8:03:3c:c4:5d:05:27:9f:ba:cb:dc:99:3b:30:ab:a2:a3: 20:09:20:94:73:b8:e2:83:a1:0c:ec:2c:ea:d4:66:e1:d9:b3: 43:cd:b7:5e:0a:8d:ae:69:02:92:a5:54:68:e3:28:94:b7:3c: 23:c9:75:75:e2:a4:e5:85:88:4a:8f:e0:0b:d5:de:83:1f:a4: 7a:4d:43:b1:38:e7:c7:28:9a:81:a1:0f:95:e0:15:44:71:85: d8:14:36:39:27:3b:ae:cb:b0:57:f0:87:0e:5d:85:66:4a:5d: 5c:62:a5:f1:22:dc:31:25:6c:31:e6:66:b2:7c:9e:4d:e7:59: 6b:b9:79:b7:b2:80:f3:00:8f:d1:9b:de:a5:43:27:44:80:fe: ee:32:f4:b8:24:cb:09:56:2a:fa:ae:f8:9c:b0:70:2c:78:7d: 40:58:4e:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h7e4fKe6Xkf5JK0EyUkRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMDE4MTdkNDJjZmY4Yjg4MTRiYmQxNzAwYWRlOTE2NzQy NjhlZDcwHhcNMjYwMTI1MTkwMDQ3WhcNMjYwMTI2MTkwMDQ3WjAzMTEwLwYDVQQD EygyNWIxMjJkZGQ0NjUwNTg1MDM3YWEzYWNlNGMyOTZjOTRkMTdkOTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjihfUG9BCTwnwf4ptQK33swrdm8 2FnUBjXiq+o2h28yeZ2R9GQ/dcx9YvXIDXFzNoaLX89Cc9YvDhxGvpd4xZpb8Mnu OvD0cx0x+5qYZHUvBhwHObYy6ZPALOnzBi3KK7XwtDYWWm+diW/wVxmgBQS8WtY9 /prgQnlu2nh2EEd7RLIaVQVl9/t8kwQ4GDcCIBKymE1Ag5M4dK/J+kP/1dPpwrro ICwQj4xPT/STOPdOBURtuydG+bdalKv/A5pbTeRIuhCbBnHWgqTD4osl4LjtSQIe A4DnQLikYg/WGileUjcAkPZSBhoUcpGN+z/lYBZVVELyYOd0er3CVpdT9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWxIt3UZQWFA3qjrOTClslNF9lVMB8GA1UdIwQY MBaAFIsBgX1Cz/i4gUu9FwCt6RZ0Jo7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDct ZDdhNjYwZDRjYWFkLzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDctZDdhNjYwZDRjYWFk LzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4V8IP0i l2A9I5aVlTh3tdvbm0ul0uTLrdDwfl2Omd32H77+Hdz6evN/KStjR5Xof5g1g+78 ZN6/oDVu7SQKNxmyWLrVTkuWmI4ifs71Z4ZQrdUWZEun1NXE3+gDPMRdBSefusvc mTswq6KjIAkglHO44oOhDOws6tRm4dmzQ823XgqNrmkCkqVUaOMolLc8I8l1deKk 5YWISo/gC9Xegx+kek1DsTjnxyiagaEPleAVRHGF2BQ2OSc7rsuwV/CHDl2FZkpd XGKl8SLcMSVsMeZmsnyeTedZa7l5t7KA8wCP0ZvepUMnRID+7jL0uCTLCVYq+q74 nLBwLHh9QFhOzQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:36:16 2026 by rpki-client