This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: JFeSCqegTikFUj3cceIyTgissPyL/xtGmmepYmUoFfo= Subject key identifier: 74:9B:37:C6:66:B9:B7:F8:4B:FA:A7:AE:CF:BF:12:1A:11:80:03:D7 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019BF4D031DE56E73C7CD61F258C8C115B5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 17F9 Signing time: Sun 25 Jan 2026 11:00:43 +0000 Manifest this update: Sun 25 Jan 2026 11:00:43 +0000 Manifest next update: Mon 26 Jan 2026 11:00:43 +0000 Files and hashes: 1: 1-GhRhgsSmBC7gWKhOHnpR776bf4.roa (hash: qnv9CLKULc4l872r6nllGPstkP0XkRt6PU8gP+XhJSI=) 2: 6v4HqsYH-6som_YpUpTifh8cS0U.roa (hash: o/bzOokvVjVdRRGlEanFfeM+ssve25vJEVqBsKnyXeM=) 3: 9vuOuOvj62P021fXQQxf0hIL-7Y.asa (hash: IV14GyGa+T6PyA00vxABTsOZmDpbofMON8dQI+vejQo=) 4: B1mlic3MBKdWlyRVytiTsaiFEpo.roa (hash: 9Ke9dxoY8TVa8fbx0FgxVlR01PX31ijJ+fbU+/+2oMs=) 5: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: XRdnBYe5XVznJ6sTtFVRE/7hyWU7k8utW7bU0zQrj1A=) 6: KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa (hash: Hw3psnYEIeZVvc6w8ErUMeU8xREBKOKc8FzSPBoD+z0=) 7: b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa (hash: J+IrH96dkk4qiDFeus4aE0u+r2utLyjmelYRT1wTqnQ=) 8: bSrLWTYwlUXSgoWh2AaTKv-yqmA.roa (hash: Xoy4Bu7OUAX9sEbib55m/isLQimqg72dL3LXY0l3BGU=) 9: eM1X7x8wZM8pIbppf3y2iwcpciE.roa (hash: BhDC27TkTu5DoQZF1Cb42Wxs7AL7Hko2eWVnucF5rqA=) 10: ex0_koM3Hnul1gB4FdrgAL4TaJk.roa (hash: r9XRIZzTUJ+UJFblQTe7FtwXbaQCKtxgvzkvKCI8IbQ=) 11: li3Nzxt_F2UC_oHWeAWyOoIU6tI.roa (hash: qLkVwH1CtUNyv0xKh9iCCsPrbH80JJJwsrB9STz3pME=) 12: uLk-SOdg3NaZVxDw7uzOJ2cDto0.roa (hash: WMGu6CGGF8Zc3rzf7uT2wsSrHABykv7oyw0K24uqKAU=) 13: y1ma_1MpKFwpBA0ud8_GPTkN9fs.roa (hash: wYvSLwWEiQxZIUgyNEOSCPvFdda8fgf6UgQ9JrolQ/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:31:de:56:e7:3c:7c:d6:1f:25:8c:8c:11:5b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Jan 25 11:00:43 2026 GMT Not After : Jan 26 11:00:43 2026 GMT Subject: CN=749b37c666b9b7f84bfaa7aecfbf121a118003d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:b1:7b:f7:83:e1:e3:d3:60:34:0d:a7:7d: c0:5c:81:32:af:95:58:de:78:99:fe:80:4d:31:4e: 87:4a:07:18:02:c5:fd:a7:be:3a:e8:ab:84:fd:c9: 3a:17:e6:a0:46:cb:b5:dc:00:cf:2d:d7:04:9e:0d: c5:cd:4f:f6:6b:7c:81:24:9d:66:0f:a4:8a:35:9f: 7c:78:2c:14:e5:2b:1c:bc:64:08:69:f2:46:78:2f: ca:f2:10:35:46:9f:99:72:c5:04:86:d5:24:e0:88: 77:4e:30:50:3c:04:ee:6b:63:74:ad:61:81:9a:8e: 88:ca:a8:0e:af:f0:a2:b2:9e:0e:0a:ce:88:07:fe: c2:59:45:24:a5:35:86:e4:27:74:c5:c1:f4:11:c5: 05:04:05:7a:03:49:51:8e:79:c1:31:91:fd:37:01: 05:2b:61:8d:64:f3:18:30:19:a1:7f:08:43:52:55: 52:04:92:eb:41:97:b1:fc:72:3d:4d:fa:51:e6:9d: c9:40:e3:6d:55:f9:6a:50:fa:53:a1:8b:82:cc:9f: 4f:e3:81:15:93:5a:ee:16:79:88:58:89:04:1f:f1: 64:44:54:fe:06:fe:ee:30:68:61:6a:fe:87:55:62: 72:b0:68:bb:34:b0:cc:7b:5d:83:8c:3f:60:43:9d: d6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9B:37:C6:66:B9:B7:F8:4B:FA:A7:AE:CF:BF:12:1A:11:80:03:D7 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:5c:f0:f5:47:24:71:8d:68:5f:85:59:d9:a7:74:0b:68:0a: 51:1a:46:98:94:c7:d2:06:ca:99:ce:b7:36:0e:7e:1b:c0:7f: 34:64:bd:5c:79:42:dc:52:5d:ff:cb:9a:47:3a:15:09:ce:65: 27:d7:9b:18:05:22:33:3d:b1:92:75:6c:34:41:45:9e:0e:c8: 6d:1b:d1:45:b2:fc:eb:26:3e:69:7f:ac:b3:63:46:38:0a:55: 74:75:0a:63:d2:02:78:10:1a:07:8a:11:2c:eb:99:11:5a:a5: 4a:37:da:91:0c:11:c4:62:52:cb:b9:0d:3e:74:49:c0:e9:a3: 5a:f8:a3:d6:90:c9:41:d4:97:89:20:c6:14:53:bb:38:bf:04: d9:9b:d4:a9:e8:a9:cd:67:a1:b0:50:b2:32:f0:51:b5:e9:1c: c9:32:f0:a0:a5:2f:7b:07:c3:65:a4:45:44:6f:f0:b0:b5:2e: 37:1a:aa:35:6e:86:f4:9a:5c:70:79:68:6b:8c:e3:53:74:74: 1b:f2:c6:19:8a:6f:4a:2b:6c:9a:11:ba:6a:05:df:3a:76:bb: e8:97:49:9f:b5:7c:89:ec:bd:f2:e6:89:ae:8c:b3:40:d5:f9: 11:63:b8:6a:fc:3d:12:84:3d:92:79:39:f6:b7:d1:88:90:b7: 2b:e9:76:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00DHeVuc8fNYfJYyMEVtaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYwMTI1MTEwMDQzWhcNMjYwMTI2MTEwMDQzWjAzMTEwLwYDVQQD Eyg3NDliMzdjNjY2YjliN2Y4NGJmYWE3YWVjZmJmMTIxYTExODAwM2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7ixe/eD4ePTYDQNp33AXIEyr5VY 3niZ/oBNMU6HSgcYAsX9p7466KuE/ck6F+agRsu13ADPLdcEng3FzU/2a3yBJJ1m D6SKNZ98eCwU5SscvGQIafJGeC/K8hA1Rp+ZcsUEhtUk4Ih3TjBQPATua2N0rWGB mo6IyqgOr/Cisp4OCs6IB/7CWUUkpTWG5Cd0xcH0EcUFBAV6A0lRjnnBMZH9NwEF K2GNZPMYMBmhfwhDUlVSBJLrQZex/HI9TfpR5p3JQONtVflqUPpToYuCzJ9P44EV k1ruFnmIWIkEH/FkRFT+Bv7uMGhhav6HVWJysGi7NLDMe12DjD9gQ53WFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSbN8Zmubf4S/qnrs+/EhoRgAPXMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglzw9Uck cY1oX4VZ2ad0C2gKURpGmJTH0gbKmc63Ng5+G8B/NGS9XHlC3FJd/8uaRzoVCc5l J9ebGAUiMz2xknVsNEFFng7IbRvRRbL86yY+aX+ss2NGOApVdHUKY9ICeBAaB4oR LOuZEVqlSjfakQwRxGJSy7kNPnRJwOmjWvij1pDJQdSXiSDGFFO7OL8E2ZvUqeip zWehsFCyMvBRtekcyTLwoKUvewfDZaRFRG/wsLUuNxqqNW6G9JpccHloa4zjU3R0 G/LGGYpvSitsmhG6agXfOna76JdJn7V8iey98uaJroyzQNX5EWO4avw9EoQ9knk5 9rfRiJC3K+l2+g== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:20 2026 by rpki-client