This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft File: ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json) Hash identifier: wo+HFYJlYK/e0PK37cX7/7DCf96TRcx+XGs1k/iai0g= Subject key identifier: 27:47:CF:98:58:F7:96:8E:F5:43:C7:29:85:BB:7C:9C:F3:63:23:FA Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1 Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1 Certificate serial: 019BF9F6FC280A8BF0A0AE11AB2BD5961D15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft Manifest number: 17FE Signing time: Mon 26 Jan 2026 11:01:11 +0000 Manifest this update: Mon 26 Jan 2026 11:01:11 +0000 Manifest next update: Tue 27 Jan 2026 11:01:11 +0000 Files and hashes: 1: b0-Xi6NBuLovKlD60S3WgfbEvE8.roa (hash: N3EToacrn4DPrwEqB5RQ8S/8WXwqVJ+l1JFbW6BkbXc=) 2: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: fHQ5P70ASKv0rn5Di1zkrHa3mZjTiHgY73x4PR/6FSc=) 3: lXNdyBwVDWYBMuoN-G2bf7qUlEE.roa (hash: h/kstetY/g4/LlSQ3m9zcXR0qlfD4v6m5TWgTPaQlfs=) 4: m5w3Ma4fCgh741R3c4X5Al5UcNA.roa (hash: Su1TyZOSv86S0DYPclZsbCQqerrqEB8xvpHCZRksi1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:fc:28:0a:8b:f0:a0:ae:11:ab:2b:d5:96:1d:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1 Validity Not Before: Jan 26 11:01:11 2026 GMT Not After : Jan 27 11:01:11 2026 GMT Subject: CN=2747cf9858f7968ef543c72985bb7c9cf36323fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fc:ec:8b:c5:e4:db:d6:df:46:8f:2a:41:05: a0:c7:3f:ed:78:9c:39:55:2f:ee:ab:19:47:aa:99: 0e:49:1b:8f:b9:15:4e:13:ae:8e:b4:b5:87:38:f2: d1:78:74:17:b6:76:72:bc:46:9b:94:cc:f3:81:2c: f1:9c:b9:06:ad:53:fb:14:a4:93:a2:c3:71:16:b9: f5:4c:4d:13:a7:48:d2:7b:6f:50:a0:8a:7a:fc:ff: e6:00:0e:16:c8:4c:01:02:ef:14:43:03:9d:0e:cb: 28:06:1e:0e:02:3d:ee:e9:2a:e3:78:a8:d0:f1:62: 15:b3:65:c5:ac:47:31:23:13:c6:b1:92:2e:e7:e2: 7d:34:17:60:f9:0f:4f:0f:82:6d:b0:30:1d:51:f7: d9:94:9c:f3:58:32:4e:be:e9:ff:fa:8d:d3:8e:b9: b5:13:2e:3a:99:19:b3:f6:cf:00:e0:b8:5e:de:a6: 60:3d:e2:7f:b3:38:e8:86:3c:0b:2c:62:03:99:f0: cd:48:9e:ff:d1:b2:50:a2:2e:ad:27:39:5b:e8:cf: 96:86:07:b0:f2:a4:68:a8:88:72:3c:0e:2d:39:b7: 75:9a:7f:ff:68:99:5e:20:69:90:49:d1:68:74:b0: 7e:5f:d6:c0:4e:ff:9f:43:21:4a:64:33:e2:22:d8: 2f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:47:CF:98:58:F7:96:8E:F5:43:C7:29:85:BB:7C:9C:F3:63:23:FA X509v3 Authority Key Identifier: keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:86:96:01:15:24:fd:61:22:28:5a:1d:25:be:5a:d5:63:82: 4c:37:7d:aa:ea:47:19:cf:fc:0a:8b:5c:78:eb:ab:f0:76:ba: b5:88:21:41:3d:13:6a:3f:2b:23:f8:6a:c9:c6:7c:38:97:35: 02:27:3f:51:df:3b:3f:27:a0:5e:ed:26:54:9e:e6:39:9a:ce: 05:fc:30:de:29:3b:19:bc:5c:31:2d:70:a4:72:35:6a:14:e9: 2f:44:0f:cb:fa:fa:1f:b4:fb:c5:e0:7f:69:42:85:8c:8a:65: 96:b7:9d:73:9e:87:50:f5:a3:b9:2a:75:4a:5a:b4:81:fe:b7: 94:0d:50:88:9d:34:39:a3:07:48:68:e3:a1:ca:dd:c0:8f:5f: 89:99:33:d7:56:df:fe:07:b0:43:f7:0a:07:09:f0:81:fd:5d: 0c:e1:68:c4:96:71:cd:ce:39:a3:8c:f9:fc:3a:79:7e:15:31: 82:22:cd:60:4b:34:2a:20:fa:2b:e5:1c:1b:4b:ea:7f:8c:af: df:c7:73:1f:0b:80:2f:2f:c6:09:99:da:5f:d7:9a:39:3d:e5: 60:56:ec:4d:5c:38:f6:8d:e7:26:1e:85:f6:67:98:1c:ee:ed: 31:26:a6:02:58:fb:34:37:a4:1a:49:42:69:14:22:6e:c7:eb: 11:7c:fe:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59vwoCovwoK4RqyvVlh0VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YjVmYWQxOGRkOTExMDQxM2EzMWI0ZDhlMTg3NjVhMjdk NGMzZjEwHhcNMjYwMTI2MTEwMTExWhcNMjYwMTI3MTEwMTExWjAzMTEwLwYDVQQD EygyNzQ3Y2Y5ODU4Zjc5NjhlZjU0M2M3Mjk4NWJiN2M5Y2YzNjMyM2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/zsi8Xk29bfRo8qQQWgxz/teJw5 VS/uqxlHqpkOSRuPuRVOE66OtLWHOPLReHQXtnZyvEablMzzgSzxnLkGrVP7FKST osNxFrn1TE0Tp0jSe29QoIp6/P/mAA4WyEwBAu8UQwOdDssoBh4OAj3u6SrjeKjQ 8WIVs2XFrEcxIxPGsZIu5+J9NBdg+Q9PD4JtsDAdUffZlJzzWDJOvun/+o3Tjrm1 Ey46mRmz9s8A4Lhe3qZgPeJ/szjohjwLLGIDmfDNSJ7/0bJQoi6tJzlb6M+Whgew 8qRoqIhyPA4tObd1mn//aJleIGmQSdFodLB+X9bATv+fQyFKZDPiItgv0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdHz5hY95aO9UPHKYW7fJzzYyP6MB8GA1UdIwQY MBaAFIm1+tGN2REEE6MbTY4Ydlon1MPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MDFhZDItNmM2Yy00M2M2LWEyODAt NDI1MGNlNTUxN2Q5LzEvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85MDFhZDItNmM2Yy00M2M2LWEyODAtNDI1MGNlNTUxN2Q5 LzEvaWJYNjBZM1pFUVFUb3h0TmpoaDJXaWZVd19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIaWARUk /WEiKFodJb5a1WOCTDd9qupHGc/8CotceOur8Ha6tYghQT0Taj8rI/hqycZ8OJc1 Aic/Ud87PyegXu0mVJ7mOZrOBfww3ik7GbxcMS1wpHI1ahTpL0QPy/r6H7T7xeB/ aUKFjIpllredc56HUPWjuSp1Slq0gf63lA1QiJ00OaMHSGjjocrdwI9fiZkz11bf /gewQ/cKBwnwgf1dDOFoxJZxzc45o4z5/Dp5fhUxgiLNYEs0KiD6K+UcG0vqf4yv 38dzHwuALy/GCZnaX9eaOT3lYFbsTVw49o3nJh6F9meYHO7tMSamAlj7NDekGklC aRQibsfrEXz+Hg== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:23 2026 by rpki-client