This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json) Hash identifier: Y9FduYmsPou1vblNnmkt8Jez6USpDcupiMOuaPwFgaY= Subject key identifier: 1D:86:9B:76:64:B1:46:BE:6E:C7:C8:B0:33:A6:63:AB:72:1B:F0:5B Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5 Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5 Certificate serial: 019BF68805BB170636A6D8F61FC44713761B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft Manifest number: 14F6 Signing time: Sun 25 Jan 2026 19:01:07 +0000 Manifest this update: Sun 25 Jan 2026 19:01:07 +0000 Manifest next update: Mon 26 Jan 2026 19:01:07 +0000 Files and hashes: 1: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: Ajp7DG6HiXxCNhED9YFN2cPf4RIjSSa+7TzCFSHwtXs=) 2: vTbZcHH_wcLQWpBSiiNEOr8soog.roa (hash: qwqHAj9cQHotfU1ZEtxZLN+u16iKUOU9Eiv2ZuFYnLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:05:bb:17:06:36:a6:d8:f6:1f:c4:47:13:76:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5 Validity Not Before: Jan 25 19:01:07 2026 GMT Not After : Jan 26 19:01:07 2026 GMT Subject: CN=1d869b7664b146be6ec7c8b033a663ab721bf05b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:26:0c:8d:87:1f:e3:06:63:25:74:e2:8e:d1: 65:65:db:da:25:3e:c6:b9:38:f9:e2:28:a9:61:0b: f4:13:91:5c:5f:30:fe:46:91:bd:36:00:23:f1:28: fd:e6:9d:14:1a:df:3a:69:66:60:29:cb:5c:5f:c9: dd:c8:a7:f0:fd:72:ea:35:49:d5:be:68:56:6c:99: b7:34:e5:ea:1e:f8:9e:97:9e:78:11:97:4d:d9:77: 7c:e6:54:47:fe:4a:8a:ca:cd:61:85:89:3d:09:c2: fe:b3:7e:04:78:ee:0d:b9:f6:d8:f1:45:89:8c:0f: 4c:fc:4c:3a:8b:7a:51:cc:19:01:e4:60:49:2a:dd: 46:c7:63:78:fe:94:cb:52:ba:b7:63:22:6e:d7:1a: d9:93:52:dc:67:92:f8:0a:2a:9f:d7:d3:ab:13:83: df:08:48:cf:84:9f:6b:34:47:39:0a:75:ed:20:4d: ad:72:e8:96:30:3d:b7:8b:82:7f:51:59:8a:9d:d2: 56:93:07:4b:86:bd:7e:55:7e:ca:61:3b:a0:13:0b: c0:09:23:45:d4:9d:62:c5:2c:74:ec:c4:cc:d0:f6: 13:8c:d2:2c:db:48:08:d7:60:de:ad:b3:1e:6c:2a: 0b:2e:b2:27:ff:41:1e:80:61:02:db:ed:95:a1:2e: 73:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:86:9B:76:64:B1:46:BE:6E:C7:C8:B0:33:A6:63:AB:72:1B:F0:5B X509v3 Authority Key Identifier: keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:7c:c9:d6:12:0a:f4:d0:60:17:2e:c3:bc:1a:b3:f1:bf:e3: 11:ff:9c:33:e4:b5:f4:93:6d:cf:64:57:2a:4a:46:91:5f:3d: 3d:de:a3:a3:d9:a0:69:cb:8e:b7:8d:d4:12:a0:f1:e9:8b:02: 53:db:29:d2:f3:22:11:96:df:33:09:3c:0a:04:64:91:33:e0: 9c:73:77:7c:c0:4f:92:78:14:00:32:4a:e5:8f:f2:21:7b:05: 2c:b7:b7:73:8e:0a:26:9f:9d:63:66:24:d2:6f:82:cb:ff:4c: 28:ca:2c:79:d2:bc:b6:80:17:8e:d1:ed:0f:72:64:99:fb:a5: 60:8f:fd:13:4d:61:a3:10:b3:69:c1:4d:28:68:4e:07:49:2d: 3a:30:2c:98:97:e7:08:84:8d:76:b0:48:ea:49:85:56:8f:e7: 9a:6b:dc:eb:82:5d:27:54:fd:ee:73:5b:d8:d7:d9:8f:c3:bb: cf:c1:a8:34:8a:6d:ff:4e:56:4f:78:b6:fc:d0:a4:cf:eb:2c: 3f:1b:a9:6b:ed:a9:58:f4:27:7b:44:2e:08:09:49:d7:54:a4: 7d:38:65:43:fa:a1:6b:4f:72:82:ca:3c:b5:ae:ef:93:08:99: ce:d2:f5:ee:02:a7:69:93:1f:04:e0:98:3a:fb:d9:6f:05:4a: 46:26:36:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iAW7FwY2ptj2H8RHE3YbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMTZhNWZhYzY1YWM1ZTljNWViYmZlZDcxNTE4Y2FlMGMx MzExYzUwHhcNMjYwMTI1MTkwMTA3WhcNMjYwMTI2MTkwMTA3WjAzMTEwLwYDVQQD EygxZDg2OWI3NjY0YjE0NmJlNmVjN2M4YjAzM2E2NjNhYjcyMWJmMDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCYMjYcf4wZjJXTijtFlZdvaJT7G uTj54iipYQv0E5FcXzD+RpG9NgAj8Sj95p0UGt86aWZgKctcX8ndyKfw/XLqNUnV vmhWbJm3NOXqHviel554EZdN2Xd85lRH/kqKys1hhYk9CcL+s34EeO4NufbY8UWJ jA9M/Ew6i3pRzBkB5GBJKt1Gx2N4/pTLUrq3YyJu1xrZk1LcZ5L4Ciqf19OrE4Pf CEjPhJ9rNEc5CnXtIE2tcuiWMD23i4J/UVmKndJWkwdLhr1+VX7KYTugEwvACSNF 1J1ixSx07MTM0PYTjNIs20gI12DerbMebCoLLrIn/0EegGEC2+2VoS5z0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2Gm3ZksUa+bsfIsDOmY6tyG/BbMB8GA1UdIwQY MBaAFIoWpfrGWsXpxeu/7XFRjK4MExHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUt NGNjMDFiNmY4ODQ3LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUtNGNjMDFiNmY4ODQ3 LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHzJ1hIK 9NBgFy7DvBqz8b/jEf+cM+S19JNtz2RXKkpGkV89Pd6jo9mgacuOt43UEqDx6YsC U9sp0vMiEZbfMwk8CgRkkTPgnHN3fMBPkngUADJK5Y/yIXsFLLe3c44KJp+dY2Yk 0m+Cy/9MKMosedK8toAXjtHtD3JkmfulYI/9E01hoxCzacFNKGhOB0ktOjAsmJfn CISNdrBI6kmFVo/nmmvc64JdJ1T97nNb2NfZj8O7z8GoNIpt/05WT3i2/NCkz+ss Pxupa+2pWPQne0QuCAlJ11SkfThlQ/qha09ygso8ta7vkwiZztL17gKnaZMfBOCY OvvZbwVKRiY2kA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:22:38 2026 by rpki-client