This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft File: iLda7v6O6hrFwhnYdQXS58XzL0g.mft (raw, json) Hash identifier: v7mz/w/oBaW+B3R4tHYI/A5bMJ1Zqy076s4ygwSRxgo= Subject key identifier: 8B:59:CD:EC:BC:9E:2A:98:88:9D:59:7F:39:C0:73:D7:2C:BC:82:68 Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48 Certificate issuer: /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48 Certificate serial: 019BF876910B729942DC2ED6C8884C40F399 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 04:01:18 +0000 Manifest this update: Mon 26 Jan 2026 04:01:18 +0000 Manifest next update: Tue 27 Jan 2026 04:01:18 +0000 Files and hashes: 1: XCD8aXlAzGnzxXRVOLV38VoENzs.roa (hash: nXyOSXVfXWMbU4dphXnH7dDUeGh2mNE9IwSEdv2yiZs=) 2: iLda7v6O6hrFwhnYdQXS58XzL0g.crl (hash: KRZYbg6Feazpmxu+fQq8SfrzTgFDuhzFDNEAoq46EYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:91:0b:72:99:42:dc:2e:d6:c8:88:4c:40:f3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48 Validity Not Before: Jan 26 04:01:18 2026 GMT Not After : Jan 27 04:01:18 2026 GMT Subject: CN=8b59cdecbc9e2a98889d597f39c073d72cbc8268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:94:11:72:1b:29:83:fd:97:02:fd:ac:42:93: 68:f0:f2:28:37:a4:ce:17:cb:a7:28:64:c9:08:3c: 09:82:78:99:aa:e6:f5:0e:98:0d:23:00:72:8a:06: 55:0b:76:27:92:bc:83:f5:31:60:c4:46:fe:29:f0: 9a:e7:02:29:60:7e:f5:f0:56:54:9d:c1:66:db:da: 75:fb:fa:51:21:6f:f8:f1:64:d9:05:c0:4d:2a:30: eb:e1:64:98:5a:81:42:ab:2e:2b:30:4c:fe:b5:5a: 01:c2:12:80:94:f3:b5:16:10:de:ca:16:4a:c2:b4: 0d:d9:ea:9e:43:7c:ea:49:ae:8b:c3:dc:97:13:d4: 0c:63:12:c8:5e:19:69:37:04:5c:ea:6d:b8:25:1b: d0:95:10:79:20:41:15:14:67:e2:39:e8:ad:a3:19: 3f:e4:db:f8:4e:dd:aa:15:2c:36:54:38:99:4b:bb: ef:81:d6:72:49:b6:08:87:a9:41:50:93:6b:20:dd: 81:78:ea:d9:d2:cb:09:41:7c:54:8a:22:25:d5:c7: a5:a6:fb:ab:c6:54:9c:46:d0:32:aa:70:74:d0:ec: 95:e3:01:02:38:f0:15:de:72:7f:e2:20:0e:0f:5c: 66:e5:9e:53:f6:7f:1f:82:84:b1:f4:2e:bd:37:2a: 35:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:59:CD:EC:BC:9E:2A:98:88:9D:59:7F:39:C0:73:D7:2C:BC:82:68 X509v3 Authority Key Identifier: keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:b4:9f:90:a8:fb:62:64:3d:19:97:0a:c1:71:4e:8b:fb:9c: 81:25:0e:ce:0b:df:8b:39:c5:72:65:6d:d4:c0:b6:34:c3:5d: cb:96:ad:00:5f:70:b6:b7:95:25:45:8c:3c:e0:e9:0e:93:bd: 2d:8a:09:7f:3d:ac:9a:14:ed:08:ad:2c:82:4f:51:b1:e6:73: 92:69:97:55:4a:b6:c9:fc:b3:ef:a1:a6:89:58:e9:1d:e9:24: 0d:80:ac:a9:1c:34:29:2e:91:8d:a3:67:c1:b3:0e:4d:66:6d: 7b:9f:ea:8b:84:2e:1d:c6:56:2d:7c:f9:a4:39:cc:bc:9b:d6: c6:1d:2f:cf:cb:b4:2a:8b:fd:78:34:04:0a:e3:0e:65:ae:51: 75:1f:51:04:4a:42:32:fd:3b:61:f6:5a:a2:e7:10:0d:80:b6: be:f1:e8:20:c0:85:3f:b4:15:95:99:bf:bd:38:e7:c4:cd:78: be:a0:ec:b5:8b:b1:a4:76:4a:35:a1:54:c7:87:28:66:63:02: 93:bf:ec:1a:74:c5:75:1a:04:96:be:2a:08:af:90:09:a8:13: 81:f0:e9:5a:8d:d9:d3:38:31:03:aa:d3:f7:4e:58:8b:23:ae: cc:97:2b:36:be:2c:80:9f:1e:c1:f5:e2:1c:40:72:53:2b:8f: 90:f2:de:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dpELcplC3C7WyIhMQPOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4Yjc1YWVlZmU4ZWVhMWFjNWMyMTlkODc1MDVkMmU3YzVm MzJmNDgwHhcNMjYwMTI2MDQwMTE4WhcNMjYwMTI3MDQwMTE4WjAzMTEwLwYDVQQD Eyg4YjU5Y2RlY2JjOWUyYTk4ODg5ZDU5N2YzOWMwNzNkNzJjYmM4MjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJQRchspg/2XAv2sQpNo8PIoN6TO F8unKGTJCDwJgniZqub1DpgNIwByigZVC3YnkryD9TFgxEb+KfCa5wIpYH718FZU ncFm29p1+/pRIW/48WTZBcBNKjDr4WSYWoFCqy4rMEz+tVoBwhKAlPO1FhDeyhZK wrQN2eqeQ3zqSa6Lw9yXE9QMYxLIXhlpNwRc6m24JRvQlRB5IEEVFGfiOeitoxk/ 5Nv4Tt2qFSw2VDiZS7vvgdZySbYIh6lBUJNrIN2BeOrZ0ssJQXxUiiIl1celpvur xlScRtAyqnB00OyV4wECOPAV3nJ/4iAOD1xm5Z5T9n8fgoSx9C69Nyo1jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItZzey8niqYiJ1ZfznAc9csvIJoMB8GA1UdIwQY MBaAFIi3Wu7+juoaxcIZ2HUF0ufF8y9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUxkYTd2Nk82aHJGd2huWWRRWFM1OFh6TDBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZDI4MzEtMTJlYy00NzcwLTljZWEt OWFjMDhjM2VhYWExLzEvaUxkYTd2Nk82aHJGd2huWWRRWFM1OFh6TDBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80ZDI4MzEtMTJlYy00NzcwLTljZWEtOWFjMDhjM2VhYWEx LzEvaUxkYTd2Nk82aHJGd2huWWRRWFM1OFh6TDBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbSfkKj7 YmQ9GZcKwXFOi/ucgSUOzgvfiznFcmVt1MC2NMNdy5atAF9wtreVJUWMPODpDpO9 LYoJfz2smhTtCK0sgk9RseZzkmmXVUq2yfyz76GmiVjpHekkDYCsqRw0KS6RjaNn wbMOTWZte5/qi4QuHcZWLXz5pDnMvJvWxh0vz8u0Kov9eDQECuMOZa5RdR9RBEpC Mv07YfZaoucQDYC2vvHoIMCFP7QVlZm/vTjnxM14vqDstYuxpHZKNaFUx4coZmMC k7/sGnTFdRoElr4qCK+QCagTgfDpWo3Z0zgxA6rT905YiyOuzJcrNr4sgJ8ewfXi HEByUyuPkPLe0A== -----END CERTIFICATE-----Generated at Mon Jan 26 13:48:52 2026 by rpki-client