This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft File: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json) Hash identifier: /LktjnOLYyRphb7enJJyYACN3gQMeUoUu0W7DSHNYdc= Subject key identifier: 6C:A3:5F:9A:44:58:0D:7C:47:3A:E2:42:1D:44:63:FE:04:7B:83:98 Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75 Certificate issuer: /CN=89aed2cff8ce31b334f83a0b305feef01d71da75 Certificate serial: 019BF6882DF28BC6D3BBEB7F7C3EC01BD499 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft Manifest number: 17A3 Signing time: Sun 25 Jan 2026 19:01:18 +0000 Manifest this update: Sun 25 Jan 2026 19:01:18 +0000 Manifest next update: Mon 26 Jan 2026 19:01:18 +0000 Files and hashes: 1: FwqF1yEFG7mKuQRa7RkSyKPz0W0.roa (hash: arAr0Lk0kEre21H8drvKyvd7aUFHvFqu0QRUk2zIk0Y=) 2: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: GTKibQngp++TiS0UXTUdLv7AQ/G8K9ZSpXdn1A+0Hgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:2d:f2:8b:c6:d3:bb:eb:7f:7c:3e:c0:1b:d4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75 Validity Not Before: Jan 25 19:01:18 2026 GMT Not After : Jan 26 19:01:18 2026 GMT Subject: CN=6ca35f9a44580d7c473ae2421d4463fe047b8398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:4d:1f:d5:3c:7f:39:28:f2:10:57:4d:89:23: f9:7a:b8:cd:24:1a:2a:06:bf:48:38:2d:90:cc:fd: 62:a1:4a:1f:26:4c:ea:1f:08:36:5e:6f:5e:0e:f0: 17:90:51:ee:a3:a8:bf:b8:cb:21:fd:0c:aa:a2:f0: 17:9f:ed:e9:de:1e:80:40:4f:cf:9e:0d:6d:e6:c9: 7d:c0:80:31:fe:ab:d1:9c:b6:e2:b0:9e:0e:97:33: cd:22:25:fd:b7:e0:fa:9a:21:5f:17:99:fc:9a:57: 9b:5f:ca:ab:f5:83:e4:9e:02:e7:c3:f5:1b:1b:2e: b7:fc:c1:c2:97:19:bb:e2:5d:02:8a:a0:b3:b3:2d: 19:9a:15:26:a4:a8:37:a9:cc:a9:ba:41:2a:ed:44: 26:1b:c4:03:9d:73:04:a6:64:f1:cf:8d:eb:a2:30: 19:e3:a5:6d:38:b5:d7:1f:2c:fe:67:c3:f9:b9:e8: 66:4e:b4:97:eb:21:51:cf:6e:92:43:01:a3:c6:d1: 9d:9f:a7:a6:85:8b:1a:97:7d:6f:dc:fc:cf:17:45: 6b:ef:76:8c:54:04:d0:14:c0:8f:f8:98:f4:3b:9f: 37:bf:21:55:9d:6e:c4:f4:fa:82:b9:60:ee:8c:a4: 24:b7:2f:f1:20:83:43:06:4c:ad:b9:8a:b2:b9:3e: ca:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A3:5F:9A:44:58:0D:7C:47:3A:E2:42:1D:44:63:FE:04:7B:83:98 X509v3 Authority Key Identifier: keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:54:25:16:32:fb:96:ca:ca:32:55:df:0d:99:7d:be:36:60: 45:ae:7c:60:c5:38:f5:7f:7c:dc:17:6d:61:7a:32:d7:ce:ae: e4:03:32:47:9d:b0:1c:13:af:cd:44:6c:32:5e:f9:60:85:57: b9:c2:90:3b:5d:ab:7a:ca:d8:f7:32:32:ec:25:37:a3:0b:e7: 85:b9:2f:8b:b4:09:44:57:bd:2c:2d:c6:0e:04:88:b8:8b:3f: de:cd:9a:57:ca:10:ab:35:5c:20:29:9d:17:8e:49:44:f6:f1: fa:34:bf:5d:e9:2a:13:51:46:9f:3c:0c:37:ab:bf:30:bd:25: 7f:61:64:eb:d2:1f:44:19:20:a0:cf:40:21:24:4a:58:74:dc: cd:4f:11:88:36:3e:1b:d5:74:2b:fa:52:44:2c:b5:25:ae:e5: 0d:99:fe:fe:24:a8:84:98:07:50:60:af:74:3f:be:de:4a:87: af:eb:8a:6d:6d:02:a9:76:ed:05:59:aa:bc:0d:26:30:03:8d: 53:fc:af:e4:b9:05:30:b5:b9:ff:41:d2:1f:5d:4f:25:f7:c4: d4:30:cb:44:0d:09:8e:17:e3:35:b2:4b:d2:dc:f0:30:e0:4b: fa:48:86:3b:80:f5:9a:80:80:13:5d:8b:24:78:2e:d6:e7:55: ba:61:8e:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iC3yi8bTu+t/fD7AG9SZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWVkMmNmZjhjZTMxYjMzNGY4M2EwYjMwNWZlZWYwMWQ3 MWRhNzUwHhcNMjYwMTI1MTkwMTE4WhcNMjYwMTI2MTkwMTE4WjAzMTEwLwYDVQQD Eyg2Y2EzNWY5YTQ0NTgwZDdjNDczYWUyNDIxZDQ0NjNmZTA0N2I4Mzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+k0f1Tx/OSjyEFdNiSP5erjNJBoq Br9IOC2QzP1ioUofJkzqHwg2Xm9eDvAXkFHuo6i/uMsh/QyqovAXn+3p3h6AQE/P ng1t5sl9wIAx/qvRnLbisJ4OlzPNIiX9t+D6miFfF5n8mlebX8qr9YPkngLnw/Ub Gy63/MHClxm74l0CiqCzsy0ZmhUmpKg3qcypukEq7UQmG8QDnXMEpmTxz43rojAZ 46VtOLXXHyz+Z8P5uehmTrSX6yFRz26SQwGjxtGdn6emhYsal31v3PzPF0Vr73aM VATQFMCP+Jj0O583vyFVnW7E9PqCuWDujKQkty/xIINDBkytuYqyuT7KewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyjX5pEWA18RzriQh1EY/4Ee4OYMB8GA1UdIwQY MBaAFImu0s/4zjGzNPg6CzBf7vAdcdp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWE3U3pfak9NYk0wLURvTE1GX3U4QjF4Mm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lOTBmNTEtODlhYS00OWViLTllYTYt ZmJlOGJjNWEyOWZhLzEvaWE3U3pfak9NYk0wLURvTE1GX3U4QjF4Mm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lOTBmNTEtODlhYS00OWViLTllYTYtZmJlOGJjNWEyOWZh LzEvaWE3U3pfak9NYk0wLURvTE1GX3U4QjF4Mm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjlQlFjL7 lsrKMlXfDZl9vjZgRa58YMU49X983BdtYXoy186u5AMyR52wHBOvzURsMl75YIVX ucKQO12resrY9zIy7CU3owvnhbkvi7QJRFe9LC3GDgSIuIs/3s2aV8oQqzVcICmd F45JRPbx+jS/XekqE1FGnzwMN6u/ML0lf2Fk69IfRBkgoM9AISRKWHTczU8RiDY+ G9V0K/pSRCy1Ja7lDZn+/iSohJgHUGCvdD++3kqHr+uKbW0CqXbtBVmqvA0mMAON U/yv5LkFMLW5/0HSH11PJffE1DDLRA0JjhfjNbJL0tzwMOBL+kiGO4D1moCAE12L JHgu1udVumGOLg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:21 2026 by rpki-client