This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: rhr03PltbFqc06Q+OAWUjDAj5Nouuy6S7Bb8tg3pqdM= Subject key identifier: 0D:54:BC:9F:00:D4:09:88:0B:ED:A4:CE:24:F8:02:01:4E:C4:6D:C5 Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 019BF34FEFAB4B7375B35D9E29B32F99917F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 13C2 Signing time: Sun 25 Jan 2026 04:01:00 +0000 Manifest this update: Sun 25 Jan 2026 04:01:00 +0000 Manifest next update: Mon 26 Jan 2026 04:01:00 +0000 Files and hashes: 1: 0hcq4PZX-1xxmrjFSYjLo3wgxq8.roa (hash: fBvZPJmlkoGB3cHe8R1wzHuEiD2O7hJFr9Ij0HVMY1c=) 2: 4uhQK-ahMU-b686CpY3ebuHDcxA.roa (hash: jPmzy29N69ytvo0+nxFYwzpNOf0HZh68Epxb4V5zrHQ=) 3: AygaSJoY4X-N8pcfdiWT-0OzTH0.roa (hash: GpuGRR+uDCRH0KzkkUeOxZxQXmqHI/G6tCUG41o6giA=) 4: EHyHz9gbiIWU2Q5sl0TdaoAfeVE.roa (hash: xvfiNAM8dce9pnD+OcgFDuIEl8iG5dBrERTSonUjoY8=) 5: Gz0_KsyuxF_Mtua-1HhemOuZcQg.roa (hash: IbzaI7YpmiRgkQae6jLRwhProyJ2PzVbvEcbQ3Zj2TA=) 6: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: f1OZgduSDpzK/ltlqFgj+qXWqW30zLlrTa+kvZitdXQ=) 7: NYPoffrLoAbAwFWjaJWC9xF7tag.roa (hash: QYIkGHhsJbFCCKO0D05wYVkIDI1TsV96ppLPRrx2sEQ=) 8: ONFJ7LphZxOGZ2K2zbv66AhtweY.roa (hash: DDngO20oZwmh9SFw7vnZ3c/5+t8eB0azTMW7fa0PcqY=) 9: PuWzaWDPZdUuUrxGCiIHTaSNw1I.roa (hash: ZhpxPkZ5HeM7Cta+60eILIvsV0BXzirBM2q8c5C0MXo=) 10: iS9uo2CVpXEBFYokkCE8nbhbEMM.roa (hash: QeKvl9dlg12hw8xWR+4vV6LFMdl1MpdXqQH0ouyz7Vk=) 11: lwmtxoWx5clkivlnh1Kh10qANc8.roa (hash: aox9Sa8RSdnqNanp7vV3UK2GlMEf/ITdwIirj370CTo=) 12: pUjgfHpSLJEroItVeYdePetGeno.roa (hash: 3GHGFzGCi0a87nJzoUGj4P1u3SwU6ateFJ0oPnoaNEM=) 13: ygZyjuYzflVbHgfVvcHOxvuu0E4.roa (hash: IH0YWQaBGEjd+Nsl8K72F6uJWsgW3OOY75p4PPRBdZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:ef:ab:4b:73:75:b3:5d:9e:29:b3:2f:99:91:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Jan 25 04:01:00 2026 GMT Not After : Jan 26 04:01:00 2026 GMT Subject: CN=0d54bc9f00d409880beda4ce24f802014ec46dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:29:aa:4f:74:98:ba:29:38:34:89:30:64: ae:20:38:d0:95:da:39:08:8f:f1:69:db:d1:9e:fc: 9d:b3:03:36:e9:cf:68:99:52:69:39:db:10:0d:55: d3:59:93:30:40:da:2f:69:35:ec:8d:c3:ce:b9:dd: 77:a6:76:6b:b1:cb:e7:50:af:63:f0:6f:6d:ef:a5: 29:c6:40:2c:a6:99:84:eb:7d:11:7b:00:86:56:f7: 8b:82:eb:0e:46:df:00:b9:d4:ed:e4:06:df:f2:f1: a9:16:47:be:55:e7:c7:8a:58:25:28:b5:2b:cb:4f: 61:63:73:e1:84:cb:5e:56:fa:d2:0a:3e:83:97:58: f6:21:d3:0c:bb:5b:da:d6:fb:ad:ef:86:2f:09:5d: b5:92:f2:93:0d:dc:6c:72:d0:ab:46:d6:bd:2a:4d: 73:00:1b:ff:97:c6:aa:67:0f:33:e2:e2:ff:b0:61: fa:d1:3f:44:f5:4c:71:0e:ec:f6:4f:8d:d9:91:2d: c1:f0:09:40:ff:ec:0d:7a:4f:c3:cc:c4:60:f7:ee: b5:36:e7:66:c3:93:e8:1c:fe:82:3b:58:c7:11:19: 82:7b:bf:66:d2:cd:df:6d:a5:3e:06:5c:0d:26:70: 44:2a:33:91:55:ff:5f:ed:95:d8:22:d7:bb:65:88: c3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:54:BC:9F:00:D4:09:88:0B:ED:A4:CE:24:F8:02:01:4E:C4:6D:C5 X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:28:50:a8:41:f9:3a:e1:a2:53:bc:10:7a:12:3f:42:ac:bb: 24:22:eb:57:be:68:70:47:51:d5:69:42:42:f7:6e:b7:82:af: 15:18:07:80:69:c5:43:57:e9:b2:7b:a9:ca:33:b0:e8:24:40: cb:a6:ff:a6:37:e8:98:4d:70:b2:fb:67:d3:cf:dc:2a:05:53: 95:7a:9c:ec:80:bb:ed:b1:8b:26:62:28:a4:04:3d:a3:fa:e7: 64:27:4a:53:ff:b2:84:a1:e5:a3:9a:5d:45:1a:1c:ff:41:3e: 2d:66:53:e2:31:90:6b:6c:b3:4f:cb:0b:78:6c:c9:cf:5d:7f: b2:09:98:72:67:70:8f:d2:52:0c:0d:c9:f5:83:63:c5:0a:77: bf:a9:9c:d0:c4:7f:3e:83:32:08:56:b1:ab:02:1c:2d:ec:9a: de:c2:d3:30:09:b2:7b:30:0e:3a:3b:bd:2d:99:bd:7e:16:ea: e4:e0:ad:70:02:6f:d4:d0:6f:77:30:ee:d9:89:3b:98:cc:ee: a8:7f:70:d3:8b:62:af:b6:5c:94:4a:ec:d6:45:98:01:a2:dc: 69:ec:bb:b0:2c:98:12:02:70:72:6a:6d:89:80:e2:01:3c:11: 28:a6:74:db:d3:ab:71:b0:fe:76:55:2c:25:6b:44:48:fe:a4: f9:d8:7e:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT++rS3N1s12eKbMvmZF/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjYwMTI1MDQwMTAwWhcNMjYwMTI2MDQwMTAwWjAzMTEwLwYDVQQD EygwZDU0YmM5ZjAwZDQwOTg4MGJlZGE0Y2UyNGY4MDIwMTRlYzQ2ZGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGApqk90mLopODSJMGSuIDjQldo5 CI/xadvRnvydswM26c9omVJpOdsQDVXTWZMwQNovaTXsjcPOud13pnZrscvnUK9j 8G9t76UpxkAsppmE630RewCGVveLgusORt8AudTt5Abf8vGpFke+VefHilglKLUr y09hY3PhhMteVvrSCj6Dl1j2IdMMu1va1vut74YvCV21kvKTDdxsctCrRta9Kk1z ABv/l8aqZw8z4uL/sGH60T9E9UxxDuz2T43ZkS3B8AlA/+wNek/DzMRg9+61Nudm w5PoHP6CO1jHERmCe79m0s3fbaU+BlwNJnBEKjORVf9f7ZXYIte7ZYjDQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1UvJ8A1AmIC+2kziT4AgFOxG3FMB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuChQqEH5 OuGiU7wQehI/Qqy7JCLrV75ocEdR1WlCQvdut4KvFRgHgGnFQ1fpsnupyjOw6CRA y6b/pjfomE1wsvtn08/cKgVTlXqc7IC77bGLJmIopAQ9o/rnZCdKU/+yhKHlo5pd RRoc/0E+LWZT4jGQa2yzT8sLeGzJz11/sgmYcmdwj9JSDA3J9YNjxQp3v6mc0MR/ PoMyCFaxqwIcLeya3sLTMAmyezAOOju9LZm9fhbq5OCtcAJv1NBvdzDu2Yk7mMzu qH9w04tir7ZclErs1kWYAaLcaey7sCyYEgJwcmptiYDiATwRKKZ029OrcbD+dlUs JWtESP6k+dh+JQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:49:49 2026 by rpki-client