This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft File: ISvg6nHPQ34I798_55jq-YQTHEY.mft (raw, json) Hash identifier: cTBhQDlBmnTDkrwE4ERTRWvIBE0hC70+h8fRjTzUZ2M= Subject key identifier: 5B:4D:70:4D:FD:F9:4D:74:D5:61:1B:20:48:8C:34:F0:59:C5:9C:F7 Authority key identifier: 21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46 Certificate issuer: /CN=212be0ea71cf437e08efdf3fe798eaf984131c46 Certificate serial: 019BF619B50886112BD3750C28A12B305B60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft Manifest number: 17EE Signing time: Sun 25 Jan 2026 17:00:38 +0000 Manifest this update: Sun 25 Jan 2026 17:00:38 +0000 Manifest next update: Mon 26 Jan 2026 17:00:38 +0000 Files and hashes: 1: ISvg6nHPQ34I798_55jq-YQTHEY.crl (hash: chvkqAttsju3zXMBvQvCzZgwqVdtUgTji9JSU8rfccc=) 2: KWBldPC1zbc9Q4_rgiTpKrnQM8g.roa (hash: cfJIxZAqlGXVKEdOa9dOxVEjB/ihxJ4vbQZr/rRnPdU=) 3: YPgZRfV6AFhzXbq4m6XNav-mmCg.roa (hash: Cv05LpDEhrVT+401TQ+oT7WhxjJeD9EoisiqskaJyag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:b5:08:86:11:2b:d3:75:0c:28:a1:2b:30:5b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=212be0ea71cf437e08efdf3fe798eaf984131c46 Validity Not Before: Jan 25 17:00:38 2026 GMT Not After : Jan 26 17:00:38 2026 GMT Subject: CN=5b4d704dfdf94d74d5611b20488c34f059c59cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:af:15:b2:f6:d6:f7:fe:52:31:dc:6f:07:47: 58:2c:e7:87:f8:02:ed:82:91:0b:a7:06:c9:67:a9: f3:74:3b:d8:7a:98:93:dd:14:79:95:2d:76:16:b9: 81:70:3f:38:55:dd:6d:f4:00:79:ca:2f:23:8f:0c: 51:63:ed:54:6c:0c:b4:c1:2c:50:22:3b:68:b8:fc: cf:14:43:1a:90:0d:b8:5e:2a:ac:a5:55:63:45:01: b1:67:d5:f2:b1:07:ce:86:bb:5c:14:3d:50:e5:bb: 9f:04:ed:08:e2:a6:8e:8e:cf:67:6f:76:4b:ea:68: e7:58:41:8b:9a:d7:e0:25:59:77:36:b5:1f:36:3d: fb:d5:52:cc:28:89:8c:de:0d:75:66:66:ec:a9:4a: c3:c5:2e:27:57:5d:43:6d:70:8b:2b:ca:05:98:b6: f9:05:ae:9a:a9:ed:12:57:6e:a7:26:a4:11:2e:c7: b1:ae:04:4a:f6:0f:f1:f3:66:8a:ad:6b:a3:04:0c: b6:46:40:38:6f:e6:b2:79:87:39:17:48:f4:87:db: 99:42:12:6e:41:eb:3c:89:30:2c:28:8e:3b:3d:36: 26:73:6a:de:02:51:0e:e2:57:c3:71:62:ce:84:f1: f9:c6:92:89:a9:c4:9d:fc:db:cf:66:54:12:00:a5: 4c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4D:70:4D:FD:F9:4D:74:D5:61:1B:20:48:8C:34:F0:59:C5:9C:F7 X509v3 Authority Key Identifier: keyid:21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5f:e0:75:08:78:82:1a:14:31:fd:e1:28:a9:ad:86:be:7c: df:0e:bb:84:be:be:6d:5b:fc:bf:c4:a0:0a:0c:69:70:c2:73: 7c:7d:58:01:cb:b0:b9:bf:2c:4a:aa:1c:7c:2a:cd:49:8f:93: 0f:a1:a4:d3:a7:ac:35:a9:11:b5:8e:6b:e3:72:ce:67:ba:15: b5:9f:21:26:2c:57:79:c3:34:87:b2:b5:cf:4e:9b:4f:6a:c6: 90:b5:79:0d:69:d2:07:84:26:b2:61:df:59:50:1b:5e:64:a7: d5:db:b7:e7:dd:7f:38:0e:75:44:d3:7d:a4:25:2a:b4:cd:6b: 00:f4:f7:d0:42:d7:e9:a3:87:c5:30:0b:2e:b5:7f:bb:b2:df: 23:9c:71:b9:49:b8:12:95:6a:df:1c:01:83:08:18:c0:bb:9c: 25:d0:5f:3b:8a:2e:e2:c6:0e:c2:55:fc:17:a4:f7:30:90:60: 33:1c:17:95:da:f3:98:f0:2f:62:09:9f:0d:30:f6:4f:df:b4: c0:64:4d:0f:6c:92:2d:f0:c7:57:73:67:d0:4d:e8:0e:34:e2: ff:c4:3f:6e:e8:d7:d1:a0:59:cb:25:38:62:eb:25:64:49:48: dd:6d:ac:af:a4:03:f9:c4:19:3d:9c:c4:2c:18:b9:a6:a2:49: 29:be:b7:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GbUIhhEr03UMKKErMFtgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMmJlMGVhNzFjZjQzN2UwOGVmZGYzZmU3OThlYWY5ODQx MzFjNDYwHhcNMjYwMTI1MTcwMDM4WhcNMjYwMTI2MTcwMDM4WjAzMTEwLwYDVQQD Eyg1YjRkNzA0ZGZkZjk0ZDc0ZDU2MTFiMjA0ODhjMzRmMDU5YzU5Y2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla8VsvbW9/5SMdxvB0dYLOeH+ALt gpELpwbJZ6nzdDvYepiT3RR5lS12FrmBcD84Vd1t9AB5yi8jjwxRY+1UbAy0wSxQ IjtouPzPFEMakA24XiqspVVjRQGxZ9XysQfOhrtcFD1Q5bufBO0I4qaOjs9nb3ZL 6mjnWEGLmtfgJVl3NrUfNj371VLMKImM3g11ZmbsqUrDxS4nV11DbXCLK8oFmLb5 Ba6aqe0SV26nJqQRLsexrgRK9g/x82aKrWujBAy2RkA4b+ayeYc5F0j0h9uZQhJu Qes8iTAsKI47PTYmc2reAlEO4lfDcWLOhPH5xpKJqcSd/NvPZlQSAKVMvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtNcE39+U101WEbIEiMNPBZxZz3MB8GA1UdIwQY MBaAFCEr4Opxz0N+CO/fP+eY6vmEExxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYmFiZmMtNzllNi00NWRmLThjNDAt NzI1NjhmMDZmZTEwLzEvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYmFiZmMtNzllNi00NWRmLThjNDAtNzI1NjhmMDZmZTEw LzEvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1/gdQh4 ghoUMf3hKKmthr583w67hL6+bVv8v8SgCgxpcMJzfH1YAcuwub8sSqocfCrNSY+T D6Gk06esNakRtY5r43LOZ7oVtZ8hJixXecM0h7K1z06bT2rGkLV5DWnSB4QmsmHf WVAbXmSn1du3591/OA51RNN9pCUqtM1rAPT30ELX6aOHxTALLrV/u7LfI5xxuUm4 EpVq3xwBgwgYwLucJdBfO4ou4sYOwlX8F6T3MJBgMxwXldrzmPAvYgmfDTD2T9+0 wGRND2ySLfDHV3Nn0E3oDjTi/8Q/bujX0aBZyyU4YuslZElI3W2sr6QD+cQZPZzE LBi5pqJJKb63bw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:09 2026 by rpki-client