This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft File: ihZhi3H_yA4cP0HtDfyJq16WP9I.mft (raw, json) Hash identifier: +/KtcBV0GgIttUCVLbJSTxXPyYbM6B+hOwqL1y0+QVQ= Subject key identifier: D6:28:D9:AB:AE:05:B8:F9:CA:57:52:B3:AD:06:25:18:09:35:72:20 Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2 Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2 Certificate serial: 019BF876018576CC644B85E65C779A9E5FA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft Manifest number: 17F0 Signing time: Mon 26 Jan 2026 04:00:41 +0000 Manifest this update: Mon 26 Jan 2026 04:00:41 +0000 Manifest next update: Tue 27 Jan 2026 04:00:41 +0000 Files and hashes: 1: SheiKMejj2UlfePnEJK4YM6UYGQ.roa (hash: Ll9jhdHvmhGlynW15LRcU3rlqzasSbGuWZW11z3vQs0=) 2: auDg02aDw-Ng4UMnzRMAZPV_78A.roa (hash: A2MCkRQZ/VKnTqKHBJZ1hnIKYJGRR8Cd5N45/0b9lic=) 3: ihZhi3H_yA4cP0HtDfyJq16WP9I.crl (hash: 5mwg6tI+akrZZlv0YTRqnBArK3PrOsbEIlYERLrM3H0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:01:85:76:cc:64:4b:85:e6:5c:77:9a:9e:5f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2 Validity Not Before: Jan 26 04:00:41 2026 GMT Not After : Jan 27 04:00:41 2026 GMT Subject: CN=d628d9abae05b8f9ca5752b3ad06251809357220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:b2:ef:a0:92:25:ea:b1:0b:39:7e:5a:ad: 48:cc:e7:5f:58:ca:af:9e:d7:98:33:b0:b8:50:64: 2b:52:89:34:08:f6:3a:01:15:2f:eb:d1:9c:0c:16: 6c:14:fe:2d:38:72:42:8c:53:e1:fc:0b:15:f2:77: f9:f7:68:5f:45:c8:df:ed:0a:c9:44:46:49:c6:2f: e9:89:e5:52:bf:43:e5:55:bf:77:0d:ea:0c:02:73: 6c:4d:6a:56:86:3a:e2:9d:10:89:ed:c2:37:c5:94: 02:d2:08:f7:b7:d6:90:c9:4f:cc:e7:0d:c3:10:ab: b4:6e:45:8b:22:59:ea:0f:c1:03:ca:81:c1:7c:4a: 55:78:ee:7b:cb:06:b3:1d:c6:43:29:c6:7c:b1:99: 30:64:52:4e:43:c5:a6:74:53:b4:3b:2c:50:b2:ff: 59:46:6e:40:0a:6b:5a:a9:b7:7e:fc:79:21:b4:ff: d6:5b:e4:f7:2f:09:44:c5:cd:03:22:51:19:4b:67: 28:4b:45:a4:27:35:6c:04:58:90:c1:10:1b:e9:f1: 06:4a:df:f9:78:d1:8d:f5:b3:e1:fe:e0:c8:2f:75: 8e:f7:7b:ee:be:33:84:b0:70:28:ca:bb:74:52:30: 16:eb:d1:a8:da:39:dc:19:65:14:ba:e5:0f:6f:7f: 49:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:28:D9:AB:AE:05:B8:F9:CA:57:52:B3:AD:06:25:18:09:35:72:20 X509v3 Authority Key Identifier: keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:05:67:01:d3:20:1a:f3:4b:83:78:03:44:05:72:38:96:fd: f3:85:2e:3f:4c:c0:3b:2c:c8:af:83:98:5d:da:0d:31:01:29: 27:2c:46:b1:03:91:b8:11:bb:5d:08:f3:70:1e:7a:a6:cf:a2: 73:0a:ff:2b:17:b9:7e:a3:bd:65:0c:aa:f7:9b:62:31:13:c0: 1e:bc:23:df:b2:75:c2:1d:2d:5b:e1:63:9a:db:fd:1e:48:c2: 8b:1b:cb:df:ef:3e:9f:71:de:02:da:cc:ed:d6:ab:40:66:b2: 15:ad:ab:87:16:0a:68:7e:d8:f2:5a:90:6c:a7:85:4b:e0:86: 8e:91:6e:ca:dd:73:e3:ee:48:55:51:1b:4d:f7:64:29:2f:a0: 8c:88:1f:8c:c1:19:b1:05:45:2b:3e:d6:95:af:8d:f6:dd:da: 40:e1:87:64:0b:47:82:c9:b6:63:c5:df:95:34:59:7e:68:49: 90:53:25:f8:f4:10:8e:5c:ee:31:e6:e3:f2:99:04:8c:38:12: c2:45:dd:a5:db:d7:17:89:a7:f0:91:03:3e:b7:58:c6:c2:77: 27:eb:f0:d1:78:80:9d:0e:53:27:ff:aa:af:d7:06:14:80:04: a1:ee:d3:d2:b9:c7:db:ec:cc:6b:0b:b6:c4:92:cd:b9:34:c9: 80:e7:5e:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dgGFdsxkS4XmXHeanl+jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMTY2MThiNzFmZmM4MGUxYzNmNDFlZDBkZmM4OWFiNWU5 NjNmZDIwHhcNMjYwMTI2MDQwMDQxWhcNMjYwMTI3MDQwMDQxWjAzMTEwLwYDVQQD EyhkNjI4ZDlhYmFlMDViOGY5Y2E1NzUyYjNhZDA2MjUxODA5MzU3MjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2uy76CSJeqxCzl+Wq1IzOdfWMqv nteYM7C4UGQrUok0CPY6ARUv69GcDBZsFP4tOHJCjFPh/AsV8nf592hfRcjf7QrJ REZJxi/pieVSv0PlVb93DeoMAnNsTWpWhjrinRCJ7cI3xZQC0gj3t9aQyU/M5w3D EKu0bkWLIlnqD8EDyoHBfEpVeO57ywazHcZDKcZ8sZkwZFJOQ8WmdFO0OyxQsv9Z Rm5ACmtaqbd+/HkhtP/WW+T3LwlExc0DIlEZS2coS0WkJzVsBFiQwRAb6fEGSt/5 eNGN9bPh/uDIL3WO93vuvjOEsHAoyrt0UjAW69Go2jncGWUUuuUPb39JnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYo2auuBbj5yldSs60GJRgJNXIgMB8GA1UdIwQY MBaAFIoWYYtx/8gOHD9B7Q38iatelj/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUt MjkxYWFlZGQ1OGNjLzEvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUtMjkxYWFlZGQ1OGNj LzEvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwVnAdMg GvNLg3gDRAVyOJb984UuP0zAOyzIr4OYXdoNMQEpJyxGsQORuBG7XQjzcB56ps+i cwr/Kxe5fqO9ZQyq95tiMRPAHrwj37J1wh0tW+Fjmtv9HkjCixvL3+8+n3HeAtrM 7darQGayFa2rhxYKaH7Y8lqQbKeFS+CGjpFuyt1z4+5IVVEbTfdkKS+gjIgfjMEZ sQVFKz7Wla+N9t3aQOGHZAtHgsm2Y8XflTRZfmhJkFMl+PQQjlzuMebj8pkEjDgS wkXdpdvXF4mn8JEDPrdYxsJ3J+vw0XiAnQ5TJ/+qr9cGFIAEoe7T0rnH2+zMawu2 xJLNuTTJgOdeuQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:32:42 2026 by rpki-client