This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft File: ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft (raw, json) Hash identifier: JUZ9vaQsCoSxLS/JkmJW+9PvMzMaLr1bhEx5f7wI+tM= Subject key identifier: 6C:67:29:DB:B9:F5:90:78:4C:75:E5:75:90:36:11:8C:0B:7B:7B:81 Authority key identifier: 8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB Certificate issuer: /CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb Certificate serial: 019BFBAE8847D5EF4537D565267DAAAB409D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 19:01:17 +0000 Manifest this update: Mon 26 Jan 2026 19:01:17 +0000 Manifest next update: Tue 27 Jan 2026 19:01:17 +0000 Files and hashes: 1: Isf0X2VA5k71HKCeTyJN9hXCDdw.roa (hash: moujoYkwbdpd8nceyk8u6dwvR2yVCkwxf/DT9Cg/itk=) 2: ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl (hash: RotmsW+0Dv1k5ezb8bcTBHUTHcV5QehOYwwdjPl2JLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:88:47:d5:ef:45:37:d5:65:26:7d:aa:ab:40:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb Validity Not Before: Jan 26 19:01:17 2026 GMT Not After : Jan 27 19:01:17 2026 GMT Subject: CN=6c6729dbb9f590784c75e5759036118c0b7b7b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9a:5c:8b:b3:31:ae:e2:6d:f7:50:db:6d:fe: a2:00:d8:0e:02:64:4e:b4:0b:56:de:c5:8d:ea:c5: 97:f5:32:65:8c:30:ad:c5:7f:07:8c:cf:3f:63:d3: 9f:6f:32:73:d0:81:cf:2f:1f:e7:7c:4d:2d:ef:ea: bc:01:86:86:c7:78:78:95:54:46:b4:7e:a6:8d:e7: cd:dc:3f:f9:5d:19:18:a8:2a:ca:7f:75:97:2a:2d: 28:b6:d9:bd:50:2a:8c:df:66:bf:62:da:e7:5b:40: db:d1:96:17:ef:f9:ac:47:69:22:7f:e4:22:e1:16: 7e:11:23:b9:6b:f1:f4:63:58:99:2e:19:1b:4b:a5: ca:92:6f:4d:17:e9:0b:24:a8:22:2e:2e:2b:b0:d2: 75:15:02:10:3a:07:99:8f:49:c4:43:ec:90:85:f7: 72:de:68:e8:7a:cb:ad:07:f7:0e:2a:99:fb:71:81: e4:77:39:51:95:3b:e2:b1:e3:03:75:2f:6f:f1:c6: 5d:ef:d4:e8:ad:8f:35:0d:82:7e:40:ef:ad:33:5e: d3:97:d9:7b:1d:fb:55:4d:2d:b4:28:fe:59:b2:69: 72:ab:51:63:77:23:ad:60:5a:9b:e4:bf:cf:8d:c5: 94:60:69:2d:e3:0f:84:af:c6:ac:eb:05:b0:70:4e: 56:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:67:29:DB:B9:F5:90:78:4C:75:E5:75:90:36:11:8C:0B:7B:7B:81 X509v3 Authority Key Identifier: keyid:8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c2:6e:ca:1c:65:8b:ed:cb:57:f9:dc:d2:71:10:66:9b:3c: b0:ab:48:ed:77:fa:83:a7:8d:4d:58:fc:f4:d7:58:af:c6:39: 78:92:e7:b9:92:1a:5f:fe:ef:fe:bc:29:6f:04:b5:8c:af:99: 1b:43:e5:a4:b3:3a:07:3a:6a:7a:2e:0d:00:ba:7e:d4:ed:21: 74:62:cb:d8:58:3a:cb:e9:b3:85:4d:df:c3:e9:23:1a:49:f7: 7c:db:b7:33:0c:89:d5:ab:0f:ab:7c:e5:5a:ec:3d:05:51:fa: e6:85:f1:fe:72:3d:9e:1d:d9:b2:92:d9:20:dd:07:89:cb:93: fc:ca:f8:1f:8b:66:f7:76:74:02:4b:b7:93:e1:b5:33:d5:97: 3a:cc:d4:16:c8:3d:c0:cf:08:b9:b0:b6:27:14:7b:84:8f:4d: 73:63:1b:96:21:65:f3:ab:7f:e2:c6:7f:c5:12:4b:fd:d3:f0: 76:7d:95:a8:c5:9e:96:b5:f9:db:d3:28:b2:88:92:18:2f:74: 59:d5:4f:94:ab:20:59:64:48:02:26:79:07:07:ba:3f:03:3d: b6:84:95:bc:c5:3d:c0:55:55:55:c2:c1:18:95:27:02:bc:76: 55:81:d9:da:4a:fd:51:f4:40:93:c0:0b:60:5b:5b:c3:cb:ae: 58:f6:00:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rohH1e9FN9VlJn2qq0CdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMzhkMTE5MWY2NmYxZjAzMTVkZTVmNDVjYzE5NGQxY2Qx OWQxZmIwHhcNMjYwMTI2MTkwMTE3WhcNMjYwMTI3MTkwMTE3WjAzMTEwLwYDVQQD Eyg2YzY3MjlkYmI5ZjU5MDc4NGM3NWU1NzU5MDM2MTE4YzBiN2I3YjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5pci7MxruJt91Dbbf6iANgOAmRO tAtW3sWN6sWX9TJljDCtxX8HjM8/Y9OfbzJz0IHPLx/nfE0t7+q8AYaGx3h4lVRG tH6mjefN3D/5XRkYqCrKf3WXKi0ottm9UCqM32a/YtrnW0Db0ZYX7/msR2kif+Qi 4RZ+ESO5a/H0Y1iZLhkbS6XKkm9NF+kLJKgiLi4rsNJ1FQIQOgeZj0nEQ+yQhfdy 3mjoesutB/cOKpn7cYHkdzlRlTviseMDdS9v8cZd79TorY81DYJ+QO+tM17Tl9l7 HftVTS20KP5Zsmlyq1FjdyOtYFqb5L/PjcWUYGkt4w+Er8as6wWwcE5WIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxnKdu59ZB4THXldZA2EYwLe3uBMB8GA1UdIwQY MBaAFIo40RkfZvHwMV3l9FzBlNHNGdH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWpqUkdSOW04ZkF4WGVYMFhNR1UwYzBaMGZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NzIwNmYtMzNkMC00ZjMzLWI3ODEt ODRmOGZkYzBjNjk4LzEvaWpqUkdSOW04ZkF4WGVYMFhNR1UwYzBaMGZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84NzIwNmYtMzNkMC00ZjMzLWI3ODEtODRmOGZkYzBjNjk4 LzEvaWpqUkdSOW04ZkF4WGVYMFhNR1UwYzBaMGZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsJuyhxl i+3LV/nc0nEQZps8sKtI7Xf6g6eNTVj89NdYr8Y5eJLnuZIaX/7v/rwpbwS1jK+Z G0PlpLM6Bzpqei4NALp+1O0hdGLL2Fg6y+mzhU3fw+kjGkn3fNu3MwyJ1asPq3zl Wuw9BVH65oXx/nI9nh3ZspLZIN0HicuT/Mr4H4tm93Z0Aku3k+G1M9WXOszUFsg9 wM8IubC2JxR7hI9Nc2MbliFl86t/4sZ/xRJL/dPwdn2VqMWelrX529MosoiSGC90 WdVPlKsgWWRIAiZ5Bwe6PwM9toSVvMU9wFVVVcLBGJUnArx2VYHZ2kr9UfRAk8AL YFtbw8uuWPYAKg== -----END CERTIFICATE-----Generated at Tue Jan 27 01:57:29 2026 by rpki-client