This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft File: gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json) Hash identifier: CNvMEi9ThDiWXYs+SX/MDvnPUV3JSxq9ZI1GBH8u8dQ= Subject key identifier: A2:AB:3C:BB:93:38:8A:BF:0F:74:54:28:CA:B7:35:3F:67:E4:61:44 Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87 Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87 Certificate serial: 019BF6BF44D319D74448CF03BC0C1D888757 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft Manifest number: 17A2 Signing time: Sun 25 Jan 2026 20:01:28 +0000 Manifest this update: Sun 25 Jan 2026 20:01:28 +0000 Manifest next update: Mon 26 Jan 2026 20:01:28 +0000 Files and hashes: 1: 6K4rT6VCuHtrpHkb6XBvfHzGcts.roa (hash: rcgp9RRt2ZMAtK8hgAgj71whrGluIkO7wLBZN77JUi8=) 2: 7H4eovIj7ri5a4YGeazmMZD4xU0.roa (hash: VG6bKSTJ2U4Zytr4AzXi09offh8427MPVKqZ8LWMbF8=) 3: C7uI61q8dQVU_3fsVaMtwm-r8h4.roa (hash: j2Y8Kx7Kbyv7kbNZrbep36yCj0SwPksojFDFgp+to00=) 4: EsSyiXnC44Xl8fO-3wz0FTDHjxQ.roa (hash: RCqvNh4i3hyPp+Oe+ChUyeaHuVCxT8Wqs4E9vLq+3Wo=) 5: TJcBJB8tMVwgDD5VmpPQL_K5MUc.roa (hash: SHSnvcEgiE0T0omJOGKRwDEpcU7UTWSZBFiCrzeaHso=) 6: aLeBPPf7ugWBDmXZtGstFAYR5d8.roa (hash: WCjwJf715go5YX++trIsBUfbf3PUAGqQfhdqAZp7NwQ=) 7: cFNkpBBI6QgxmqXdNxyE4i3ZWnQ.roa (hash: Tq1d2AHFpLFiKaiI1LAqCi5XawIGiQzqgQJ+E8gkzHI=) 8: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: MLcCjgwA/nhwhmP+/keRBEUkVi91cGn+zHWfPW+nZ10=) 9: rqerlNmrLuq2_e9gT61g1lPKhKw.roa (hash: baZcLs1YVGyRyT3FzbboyPeCvMFaa7u6Y1jXFJdiXQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:44:d3:19:d7:44:48:cf:03:bc:0c:1d:88:87:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87 Validity Not Before: Jan 25 20:01:28 2026 GMT Not After : Jan 26 20:01:28 2026 GMT Subject: CN=a2ab3cbb93388abf0f745428cab7353f67e46144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:77:27:28:a7:e4:2b:44:f7:a8:df:95:aa:95: 21:eb:d1:24:36:4c:2e:b6:fd:11:44:b4:15:a7:dd: 3b:e8:7a:62:fe:93:bb:0b:d9:09:c7:11:8d:85:17: 46:90:31:5c:df:1c:05:4b:da:ed:bb:49:ec:40:1d: f5:ef:d2:27:7a:0b:04:3c:4b:b8:c4:b8:6e:1c:1a: 3d:50:2f:43:34:6a:d2:8a:d5:cf:84:e2:42:b0:df: 5d:89:77:fa:79:4c:ca:30:39:f8:e6:59:8d:25:7c: 63:8e:61:d9:09:f1:f1:49:08:77:c9:9e:df:a9:f9: 86:e9:f0:62:b4:99:94:eb:74:e0:38:21:a4:6b:5a: b0:e6:3f:00:95:32:07:e4:ea:d5:3f:d3:ba:0d:14: aa:f2:02:0a:34:e2:fb:0a:10:f5:28:13:14:05:d5: e8:06:c0:3b:06:b7:18:1c:97:63:26:9b:71:22:d1: 04:5d:56:95:76:c4:9b:8a:bc:44:69:37:2a:78:c7: 89:c6:bb:68:72:aa:12:10:17:ce:5e:f9:55:9f:4a: cb:63:79:f9:fe:22:19:63:33:54:31:66:18:aa:e8: e8:70:37:4e:6a:63:98:90:5e:18:c6:e5:da:1f:d5: 13:d9:a8:6e:7f:b3:93:b1:f8:0b:0e:6b:9f:9d:73: b7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AB:3C:BB:93:38:8A:BF:0F:74:54:28:CA:B7:35:3F:67:E4:61:44 X509v3 Authority Key Identifier: keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5b:26:4e:d8:47:de:ef:c2:95:62:75:73:d2:d7:a1:eb:d6: ff:20:ec:ab:6e:97:5a:c1:3c:f9:3f:84:a8:17:cc:43:82:49: 78:06:a5:d6:91:2a:f9:a3:20:c2:8d:9b:74:c9:ba:55:08:82: dc:01:98:41:a8:b6:b0:51:00:be:38:7e:3e:f2:a7:32:a9:e2: af:77:b0:ba:74:c3:e8:c0:8f:d3:e3:12:e7:8b:b0:28:6f:67: 46:3e:3a:a4:da:cd:66:34:7a:78:f2:a7:aa:1f:d0:cb:ae:59: dd:9c:37:ae:13:9a:6c:7c:04:43:29:6e:9a:e1:0e:c6:a4:1e: 9e:86:12:9c:5b:38:0c:f7:f4:e0:a7:91:cf:36:f1:00:09:de: 3e:47:a9:e6:ba:91:d7:b2:0a:25:15:4a:2f:3b:88:08:4d:53: 3b:92:05:35:a4:8d:99:cc:74:db:9a:77:7f:60:8e:6f:ba:d3: 5e:22:20:41:e7:c0:8a:4b:af:f6:a4:2c:56:5f:ba:35:d9:72: e0:06:e2:f5:40:92:7c:29:ca:43:74:76:f8:bc:38:ed:ca:2b: 4d:4a:c5:5f:4c:9f:9f:86:6e:8b:c8:8e:f8:16:9d:b2:74:a4: 6d:ca:bd:1f:3e:f8:d4:d8:08:bf:d9:d6:ee:94:c5:c1:ed:4e: d3:22:aa:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v0TTGddESM8DvAwdiIdXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwOGUyMzhlMzBkY2I3NTk3NTlmYjhhMzk0ZDllMjExYTI4 YjlkODcwHhcNMjYwMTI1MjAwMTI4WhcNMjYwMTI2MjAwMTI4WjAzMTEwLwYDVQQD EyhhMmFiM2NiYjkzMzg4YWJmMGY3NDU0MjhjYWI3MzUzZjY3ZTQ2MTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXcnKKfkK0T3qN+VqpUh69EkNkwu tv0RRLQVp9076Hpi/pO7C9kJxxGNhRdGkDFc3xwFS9rtu0nsQB3179InegsEPEu4 xLhuHBo9UC9DNGrSitXPhOJCsN9diXf6eUzKMDn45lmNJXxjjmHZCfHxSQh3yZ7f qfmG6fBitJmU63TgOCGka1qw5j8AlTIH5OrVP9O6DRSq8gIKNOL7ChD1KBMUBdXo BsA7BrcYHJdjJptxItEEXVaVdsSbirxEaTcqeMeJxrtocqoSEBfOXvlVn0rLY3n5 /iIZYzNUMWYYqujocDdOamOYkF4YxuXaH9UT2ahuf7OTsfgLDmufnXO30wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKrPLuTOIq/D3RUKMq3NT9n5GFEMB8GA1UdIwQY MBaAFICOI44w3LdZdZ+4o5TZ4hGii52HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDkt Y2Q5NzQwNDI2NDlmLzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDktY2Q5NzQwNDI2NDlm LzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1smTthH 3u/ClWJ1c9LXoevW/yDsq26XWsE8+T+EqBfMQ4JJeAal1pEq+aMgwo2bdMm6VQiC 3AGYQai2sFEAvjh+PvKnMqnir3ewunTD6MCP0+MS54uwKG9nRj46pNrNZjR6ePKn qh/Qy65Z3Zw3rhOabHwEQylumuEOxqQenoYSnFs4DPf04KeRzzbxAAnePkep5rqR 17IKJRVKLzuICE1TO5IFNaSNmcx025p3f2COb7rTXiIgQefAikuv9qQsVl+6Ndly 4Abi9UCSfCnKQ3R2+Lw47corTUrFX0yfn4Zui8iO+BadsnSkbcq9Hz741NgIv9nW 7pTFwe1O0yKqiQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:47 2026 by rpki-client