This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft File: iib0dtYIYlrR_gblK5dKn2bwFBo.mft (raw, json) Hash identifier: PsGqKoIjiGf70By1f10YI2oX8JY4oQdm3XIlVuI4TSY= Subject key identifier: 01:BA:45:32:94:53:7B:D4:6A:8B:76:03:3F:E9:CE:0D:F6:CF:F6:A5 Authority key identifier: 8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A Certificate issuer: /CN=8a26f476d608625ad1fe06e52b974a9f66f0141a Certificate serial: 019BF8AD82FC44115736EECB7F3088A24823 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 05:01:19 +0000 Manifest this update: Mon 26 Jan 2026 05:01:19 +0000 Manifest next update: Tue 27 Jan 2026 05:01:19 +0000 Files and hashes: 1: 0NrSrWJ-O8aYoYy6d254UK8VxJE.roa (hash: hCuB3dIhCpdptwM9it5xWdDmCSKrB4IVEUm5lFB1wK8=) 2: Dj9CJFUsImKBU9U_mhefNRwvbIo.roa (hash: jfaVbt4D0tQv1/8oA/TsxoFyvLDfmm01xPEsZK7MAww=) 3: ddP8BpIU-MaA-3H_y1D2YA_MFvk.roa (hash: egFPsgGwcBntJyqTtf6bIrnDHbQ5F2B22kHTn0DO3Gg=) 4: iib0dtYIYlrR_gblK5dKn2bwFBo.crl (hash: 8vSoZPWAmB2MKEgUeWXcZGuAWayksIXC3GP+neQsbSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:82:fc:44:11:57:36:ee:cb:7f:30:88:a2:48:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a26f476d608625ad1fe06e52b974a9f66f0141a Validity Not Before: Jan 26 05:01:19 2026 GMT Not After : Jan 27 05:01:19 2026 GMT Subject: CN=01ba453294537bd46a8b76033fe9ce0df6cff6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b5:f2:26:1f:e9:08:52:a8:5c:7a:40:fe:12: 3f:a0:41:5c:57:8c:4a:0a:c6:7a:5b:cd:54:cc:c8: 85:cc:ed:27:44:33:08:c9:6f:d6:ed:7b:e7:53:47: 4e:17:51:3e:fa:6d:36:2c:7a:c5:89:ca:8f:84:73: 8c:a1:0e:91:a7:05:58:03:0a:d0:0e:26:4c:d1:22: 0b:2e:b5:1a:26:ba:c9:0d:93:de:36:bd:00:38:29: 31:42:de:3e:d8:64:b8:79:f5:a7:51:08:b9:6b:94: 1e:37:18:f1:af:7b:23:31:97:30:38:d3:f0:6e:fb: 8b:0a:b7:c5:05:54:e4:39:6c:bf:93:3f:af:c8:d3: f9:66:88:3d:19:f3:cb:9a:2c:65:a1:90:c8:7b:fd: a9:fc:a2:c8:dc:5c:9a:e1:8b:de:ef:a0:88:49:7f: 72:76:05:21:3c:72:2c:da:e4:33:aa:fb:a7:02:1d: 8d:f7:d7:d2:f0:9f:4d:c4:81:97:52:c7:68:7c:56: 77:b9:3b:a2:76:49:eb:1f:22:47:be:ff:98:65:12: 9c:d7:c1:93:df:84:ea:93:e2:e1:c0:c1:38:8a:a0: 57:96:3c:86:74:c3:b8:76:c2:97:2b:c4:05:f3:57: 00:eb:53:12:d3:b1:d3:5e:84:6f:a2:b6:66:b6:62: 36:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BA:45:32:94:53:7B:D4:6A:8B:76:03:3F:E9:CE:0D:F6:CF:F6:A5 X509v3 Authority Key Identifier: keyid:8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e4:b2:f7:4f:e1:a8:6e:3a:e9:18:b4:ee:f8:1d:ed:ac:d0: 46:52:ec:11:70:25:2d:a5:d9:ff:c6:76:26:99:e8:85:ce:03: 99:dd:55:96:d8:aa:c0:38:c8:49:a7:e5:61:cf:cd:2a:67:e5: 83:90:b4:61:1e:d1:18:3b:2c:56:e8:e3:54:94:a5:b1:db:4f: 2c:47:0d:3e:91:fa:0e:65:97:8f:6e:db:72:15:b3:52:7f:f4: ba:4a:78:af:5b:83:31:ab:a6:3f:1f:97:da:75:cd:24:76:9f: 00:1e:97:00:0e:ef:32:a5:3a:87:28:0f:fc:54:4d:cf:78:f6: f0:eb:3b:8c:11:32:0c:9b:a2:a2:e1:6f:06:2c:d9:3a:d4:79: c1:ef:9e:68:70:c1:36:49:ce:87:3e:81:a1:29:a0:e4:24:8b: 24:b4:d3:80:27:8f:2b:52:61:26:5a:85:dd:29:50:12:5f:b5: 37:ff:9d:e1:7b:34:aa:ca:29:7c:3e:5d:ba:4e:79:38:03:7d: cf:7f:5e:16:2b:ec:cf:08:a6:bc:3a:06:21:31:2e:16:20:2d: 4e:db:b9:63:8a:68:8f:30:bc:e0:a8:14:9d:be:42:7c:5e:0c: cb:48:a6:4a:24:45:13:67:a0:b8:91:7b:d9:2f:de:62:b8:d7: df:e6:50:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rYL8RBFXNu7LfzCIokgjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMjZmNDc2ZDYwODYyNWFkMWZlMDZlNTJiOTc0YTlmNjZm MDE0MWEwHhcNMjYwMTI2MDUwMTE5WhcNMjYwMTI3MDUwMTE5WjAzMTEwLwYDVQQD EygwMWJhNDUzMjk0NTM3YmQ0NmE4Yjc2MDMzZmU5Y2UwZGY2Y2ZmNmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybXyJh/pCFKoXHpA/hI/oEFcV4xK CsZ6W81UzMiFzO0nRDMIyW/W7XvnU0dOF1E++m02LHrFicqPhHOMoQ6RpwVYAwrQ DiZM0SILLrUaJrrJDZPeNr0AOCkxQt4+2GS4efWnUQi5a5QeNxjxr3sjMZcwONPw bvuLCrfFBVTkOWy/kz+vyNP5Zog9GfPLmixloZDIe/2p/KLI3Fya4Yve76CISX9y dgUhPHIs2uQzqvunAh2N99fS8J9NxIGXUsdofFZ3uTuidknrHyJHvv+YZRKc18GT 34Tqk+LhwME4iqBXljyGdMO4dsKXK8QF81cA61MS07HTXoRvorZmtmI2TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAG6RTKUU3vUaot2Az/pzg32z/alMB8GA1UdIwQY MBaAFIom9HbWCGJa0f4G5SuXSp9m8BQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWliMGR0WUlZbHJSX2dibEs1ZEtuMmJ3RkJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNjZmMmQtY2EyZi00YmNhLWIyN2It ZDg0NmQxMDZiNWY3LzEvaWliMGR0WUlZbHJSX2dibEs1ZEtuMmJ3RkJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9hNjZmMmQtY2EyZi00YmNhLWIyN2ItZDg0NmQxMDZiNWY3 LzEvaWliMGR0WUlZbHJSX2dibEs1ZEtuMmJ3RkJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANeSy90/h qG466Ri07vgd7azQRlLsEXAlLaXZ/8Z2Jpnohc4Dmd1VltiqwDjISaflYc/NKmfl g5C0YR7RGDssVujjVJSlsdtPLEcNPpH6DmWXj27bchWzUn/0ukp4r1uDMaumPx+X 2nXNJHafAB6XAA7vMqU6hygP/FRNz3j28Os7jBEyDJuiouFvBizZOtR5we+eaHDB NknOhz6BoSmg5CSLJLTTgCePK1JhJlqF3SlQEl+1N/+d4Xs0qsopfD5duk55OAN9 z39eFivszwimvDoGITEuFiAtTtu5Y4pojzC84KgUnb5CfF4My0imSiRFE2eguJF7 2S/eYrjX3+ZQEg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:10:07 2026 by rpki-client