This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: qHCch2CkrDDRw6yBoak/2kyiVkRxMo41DlxJ6DgXNDw= Subject key identifier: A0:2C:EE:5A:BF:FA:CF:91:80:01:9A:2D:45:24:E4:45:DB:DD:16:D0 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019BF6BE97DC882CE5DEF6D448668A77FCBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 17FA Signing time: Sun 25 Jan 2026 20:00:44 +0000 Manifest this update: Sun 25 Jan 2026 20:00:44 +0000 Manifest next update: Mon 26 Jan 2026 20:00:44 +0000 Files and hashes: 1: 1-GhRhgsSmBC7gWKhOHnpR776bf4.roa (hash: qnv9CLKULc4l872r6nllGPstkP0XkRt6PU8gP+XhJSI=) 2: 6v4HqsYH-6som_YpUpTifh8cS0U.roa (hash: o/bzOokvVjVdRRGlEanFfeM+ssve25vJEVqBsKnyXeM=) 3: 9vuOuOvj62P021fXQQxf0hIL-7Y.asa (hash: IV14GyGa+T6PyA00vxABTsOZmDpbofMON8dQI+vejQo=) 4: B1mlic3MBKdWlyRVytiTsaiFEpo.roa (hash: 9Ke9dxoY8TVa8fbx0FgxVlR01PX31ijJ+fbU+/+2oMs=) 5: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: HCeyUl4Au6GyGu0j9E0N6Ko46i1cQ1f8bpXH0ttJSss=) 6: KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa (hash: Hw3psnYEIeZVvc6w8ErUMeU8xREBKOKc8FzSPBoD+z0=) 7: b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa (hash: J+IrH96dkk4qiDFeus4aE0u+r2utLyjmelYRT1wTqnQ=) 8: bSrLWTYwlUXSgoWh2AaTKv-yqmA.roa (hash: Xoy4Bu7OUAX9sEbib55m/isLQimqg72dL3LXY0l3BGU=) 9: eM1X7x8wZM8pIbppf3y2iwcpciE.roa (hash: BhDC27TkTu5DoQZF1Cb42Wxs7AL7Hko2eWVnucF5rqA=) 10: ex0_koM3Hnul1gB4FdrgAL4TaJk.roa (hash: r9XRIZzTUJ+UJFblQTe7FtwXbaQCKtxgvzkvKCI8IbQ=) 11: li3Nzxt_F2UC_oHWeAWyOoIU6tI.roa (hash: qLkVwH1CtUNyv0xKh9iCCsPrbH80JJJwsrB9STz3pME=) 12: uLk-SOdg3NaZVxDw7uzOJ2cDto0.roa (hash: WMGu6CGGF8Zc3rzf7uT2wsSrHABykv7oyw0K24uqKAU=) 13: y1ma_1MpKFwpBA0ud8_GPTkN9fs.roa (hash: wYvSLwWEiQxZIUgyNEOSCPvFdda8fgf6UgQ9JrolQ/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:97:dc:88:2c:e5:de:f6:d4:48:66:8a:77:fc:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Jan 25 20:00:44 2026 GMT Not After : Jan 26 20:00:44 2026 GMT Subject: CN=a02cee5abffacf9180019a2d4524e445dbdd16d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b6:78:1e:4f:05:1c:f8:53:d5:53:a8:41:c1: a2:61:34:15:a6:da:53:bc:89:47:45:30:ee:5b:a3: a8:59:4b:8b:cb:3a:79:d5:50:62:39:ca:b5:0e:d9: ab:d7:0f:19:c4:83:60:9f:e7:d5:cf:20:9c:e1:a3: 78:69:8f:de:fb:db:13:e2:ee:c8:28:73:a5:ff:b6: d9:a1:b4:62:f4:41:52:64:eb:28:e0:1f:23:a0:17: 88:8a:bf:c0:9a:8a:f3:0d:dc:09:19:b4:cb:c5:82: 4b:31:55:3a:28:79:6a:3a:26:4a:bb:47:c4:8b:c0: 7b:1e:bc:9b:30:03:45:b5:42:0f:c8:93:80:17:a5: b9:c6:97:5a:6a:c6:79:46:eb:99:e3:f1:7f:31:89: ec:64:39:50:b9:ef:ea:b8:85:a7:2d:44:1d:88:5c: 27:ee:1d:ac:ea:6a:de:92:e3:1e:81:c6:ef:76:f7: 15:82:ed:57:ee:9e:7e:db:11:af:57:da:69:c8:8a: 33:ae:31:f6:67:72:30:f0:c8:b3:dc:4f:07:58:06: ef:30:0c:69:7d:31:25:0e:ac:ee:65:06:a6:06:ab: 23:74:10:4a:f0:7d:0b:07:7b:c4:53:fb:71:07:d7: 11:0b:8e:11:cc:eb:be:bf:dc:08:6b:29:8d:f3:67: 6e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2C:EE:5A:BF:FA:CF:91:80:01:9A:2D:45:24:E4:45:DB:DD:16:D0 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:d8:41:45:62:08:79:9b:64:40:2a:4f:60:d0:ab:1e:32:04: e4:85:f2:11:ee:93:20:72:60:d1:86:a9:19:04:dc:8c:2a:a2: 15:21:ad:01:3a:10:53:9a:9b:1d:0b:ab:b4:dc:03:51:67:a5: d0:b2:29:0f:d0:de:26:4e:0c:79:13:f7:9c:06:f0:3c:ee:85: bf:8a:95:ae:6d:5f:71:4d:7c:8b:73:3d:0e:1f:6f:18:48:16: 6c:25:34:a0:a8:b9:79:50:d6:8c:b4:bc:97:f2:60:c0:08:d5: 07:42:1f:1f:ff:17:e5:76:82:ce:c6:58:93:66:d3:88:e1:4a: ac:d5:31:dd:32:62:ce:bc:61:c6:59:77:66:67:d5:b2:a7:62: 91:93:85:0e:2e:fc:cb:61:74:67:8d:7b:eb:d8:a3:f9:9d:85: 44:98:30:39:0a:81:62:8e:d2:3e:7b:a6:46:12:af:2a:be:4a: 4b:f2:3b:e1:34:16:2e:af:79:3e:8c:67:83:23:71:19:ce:63: b0:ae:a0:54:88:26:b9:85:05:c8:93:e5:40:0c:b2:54:b4:88: c4:7b:e8:b2:e8:4b:c3:78:26:46:92:1d:93:bc:25:12:0d:ed: 5e:3a:87:63:4d:53:d0:7f:43:19:ca:94:05:35:79:20:26:ec: a3:fa:84:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vpfciCzl3vbUSGaKd/y7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYwMTI1MjAwMDQ0WhcNMjYwMTI2MjAwMDQ0WjAzMTEwLwYDVQQD EyhhMDJjZWU1YWJmZmFjZjkxODAwMTlhMmQ0NTI0ZTQ0NWRiZGQxNmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LZ4Hk8FHPhT1VOoQcGiYTQVptpT vIlHRTDuW6OoWUuLyzp51VBiOcq1Dtmr1w8ZxINgn+fVzyCc4aN4aY/e+9sT4u7I KHOl/7bZobRi9EFSZOso4B8joBeIir/AmorzDdwJGbTLxYJLMVU6KHlqOiZKu0fE i8B7HrybMANFtUIPyJOAF6W5xpdaasZ5RuuZ4/F/MYnsZDlQue/quIWnLUQdiFwn 7h2s6mrekuMegcbvdvcVgu1X7p5+2xGvV9ppyIozrjH2Z3Iw8Miz3E8HWAbvMAxp fTElDqzuZQamBqsjdBBK8H0LB3vEU/txB9cRC44RzOu+v9wIaymN82duzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAs7lq/+s+RgAGaLUUk5EXb3RbQMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu9hBRWII eZtkQCpPYNCrHjIE5IXyEe6TIHJg0YapGQTcjCqiFSGtAToQU5qbHQurtNwDUWel 0LIpD9DeJk4MeRP3nAbwPO6Fv4qVrm1fcU18i3M9Dh9vGEgWbCU0oKi5eVDWjLS8 l/JgwAjVB0IfH/8X5XaCzsZYk2bTiOFKrNUx3TJizrxhxll3ZmfVsqdikZOFDi78 y2F0Z41769ij+Z2FRJgwOQqBYo7SPnumRhKvKr5KS/I74TQWLq95PoxngyNxGc5j sK6gVIgmuYUFyJPlQAyyVLSIxHvosuhLw3gmRpIdk7wlEg3tXjqHY01T0H9DGcqU BTV5ICbso/qE/A== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:15 2026 by rpki-client