This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json) Hash identifier: r6/fpb63RaAc3UR0Ra4WIKy2qjFeCYAsJMNWDO1/SK4= Subject key identifier: 3B:ED:8D:67:11:D1:DA:43:32:F3:5A:4F:78:8A:92:1D:2F:D8:13:B3 Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02 Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802 Certificate serial: 019BF6BE6A5611268D1405369FE3181F70A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft Manifest number: 0E65 Signing time: Sun 25 Jan 2026 20:00:32 +0000 Manifest this update: Sun 25 Jan 2026 20:00:32 +0000 Manifest next update: Mon 26 Jan 2026 20:00:32 +0000 Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: 0rPU3Ag7NZOyl4zSmeN86v0SJunY2sApgi9vDfsnOA8=) 2: Rcr1rF06ss6zsR-k7_lYhZLvbFA.roa (hash: 5S/JlLF6tLEV2uH6cVuwpWmcaMewRgyHJdvM6XbNwdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:6a:56:11:26:8d:14:05:36:9f:e3:18:1f:70:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802 Validity Not Before: Jan 25 20:00:32 2026 GMT Not After : Jan 26 20:00:32 2026 GMT Subject: CN=3bed8d6711d1da4332f35a4f788a921d2fd813b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:e2:e2:11:54:2e:ba:6c:0a:23:e0:a5:88: 34:e7:38:2e:92:b2:b5:ce:bf:ad:73:3c:c2:11:dc: 07:2f:6f:1b:1e:40:4d:08:03:60:ec:bd:b9:86:92: d4:42:2e:0d:0c:9f:28:61:75:9f:69:d7:d5:df:82: c0:91:81:9b:fe:a2:5e:45:df:26:d6:5c:9e:b6:54: 97:fc:b6:ee:c5:83:d0:8f:f6:1a:3e:2e:e8:3b:55: 99:2a:5f:e4:61:1f:e9:75:fb:1a:ca:7c:18:30:72: 46:0e:42:fb:e3:61:78:a6:76:ba:67:03:70:f2:a9: 19:81:fe:6d:0c:34:99:54:8b:a4:b7:b3:fa:11:de: d9:36:4b:33:cd:2f:c7:b9:2c:ef:37:1a:a3:b3:8b: f6:08:81:52:ef:9f:f8:55:3f:f4:c5:3c:bd:f5:e5: 7b:e0:f5:06:cb:4b:d1:c4:d9:76:f1:23:8d:94:d4: 16:f7:d8:60:73:c2:b2:7e:c4:5e:f9:b2:2c:73:f0: 9c:73:6e:d5:7d:c1:14:31:ba:31:e0:4e:32:e2:8a: 85:6e:e1:33:9d:24:97:64:33:50:71:7e:a1:8e:2e: 7a:a6:25:5d:f6:79:9b:bd:30:a8:0b:30:fb:fa:31: d3:e9:b1:d5:39:8c:1c:52:b3:8b:09:1a:a8:ce:aa: a0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:ED:8D:67:11:D1:DA:43:32:F3:5A:4F:78:8A:92:1D:2F:D8:13:B3 X509v3 Authority Key Identifier: keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:1f:23:98:5e:da:41:d0:a1:84:bf:f4:f8:1f:f3:8d:eb:81: 1f:3a:41:77:02:d3:5d:72:91:9b:7b:ed:e2:ec:b0:96:00:d2: 47:29:b0:cc:8e:dc:54:33:cb:1e:68:b6:7d:71:67:89:0b:2f: db:1d:0a:96:3d:9a:2e:da:34:f7:d3:38:df:f7:ce:23:d0:f7: 04:a5:87:c8:57:b0:46:18:48:0e:af:bb:b4:de:49:17:6d:f2: 63:da:e1:65:28:2d:84:b9:55:fb:c0:d4:39:8d:58:e8:e8:9d: 88:49:c6:08:1c:8a:e4:51:d9:5e:78:63:0f:90:0a:dd:73:f2: f8:2b:51:9f:e2:b7:af:36:a9:74:39:2f:8e:d4:e3:8a:40:1e: 70:fc:50:4e:6b:ae:d0:c1:7f:f1:0d:bc:33:7a:be:c2:0c:99: de:0b:be:3a:26:85:92:84:55:b7:90:72:f0:cf:f6:e4:bc:57: e6:01:83:04:78:45:14:b6:89:c6:05:4f:4b:01:31:55:af:89: 1b:86:57:94:5d:17:01:9a:cc:7b:03:c3:45:42:5b:5c:dc:0d: c6:7b:e1:07:46:b5:fc:8d:7c:45:16:a6:47:f3:cf:2e:b4:64: dd:d6:d4:7a:ea:29:75:e3:e8:f6:a0:5f:33:75:7f:e9:c9:ec: 3c:ad:88:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vmpWESaNFAU2n+MYH3ClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmZiOWUyMTllMTVmZWRhNmFkZDI5NjM5YjhkNzNmNWMy Y2Q4MDIwHhcNMjYwMTI1MjAwMDMyWhcNMjYwMTI2MjAwMDMyWjAzMTEwLwYDVQQD EygzYmVkOGQ2NzExZDFkYTQzMzJmMzVhNGY3ODhhOTIxZDJmZDgxM2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxri4hFULrpsCiPgpYg05zgukrK1 zr+tczzCEdwHL28bHkBNCANg7L25hpLUQi4NDJ8oYXWfadfV34LAkYGb/qJeRd8m 1lyetlSX/LbuxYPQj/YaPi7oO1WZKl/kYR/pdfsaynwYMHJGDkL742F4pna6ZwNw 8qkZgf5tDDSZVIukt7P6Ed7ZNkszzS/HuSzvNxqjs4v2CIFS75/4VT/0xTy99eV7 4PUGy0vRxNl28SONlNQW99hgc8KyfsRe+bIsc/Ccc27VfcEUMbox4E4y4oqFbuEz nSSXZDNQcX6hji56piVd9nmbvTCoCzD7+jHT6bHVOYwcUrOLCRqozqqgEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvtjWcR0dpDMvNaT3iKkh0v2BOzMB8GA1UdIwQY MBaAFCG/ueIZ4V/tpq3Sljm41z9cLNgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODIt NzNmZDJjMDM1ZWI1LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODItNzNmZDJjMDM1ZWI1 LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlR8jmF7a QdChhL/0+B/zjeuBHzpBdwLTXXKRm3vt4uywlgDSRymwzI7cVDPLHmi2fXFniQsv 2x0Klj2aLto099M43/fOI9D3BKWHyFewRhhIDq+7tN5JF23yY9rhZSgthLlV+8DU OY1Y6OidiEnGCByK5FHZXnhjD5AK3XPy+CtRn+K3rzapdDkvjtTjikAecPxQTmuu 0MF/8Q28M3q+wgyZ3gu+OiaFkoRVt5By8M/25LxX5gGDBHhFFLaJxgVPSwExVa+J G4ZXlF0XAZrMewPDRUJbXNwNxnvhB0a1/I18RRamR/PPLrRk3dbUeuopdePo9qBf M3V/6cnsPK2I4Q== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:51 2026 by rpki-client