This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft File: ihZhi3H_yA4cP0HtDfyJq16WP9I.mft (raw, json) Hash identifier: ehQPpPVZWOGhfVvh9o+j5EWiZR51RREyJvhkk5FSPjg= Subject key identifier: 65:55:34:91:10:3A:5A:02:76:EC:82:0A:FD:7F:D6:4C:58:91:AA:40 Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2 Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2 Certificate serial: 019BF687A390B6560FB678F22306537DA68D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft Manifest number: 17EF Signing time: Sun 25 Jan 2026 19:00:42 +0000 Manifest this update: Sun 25 Jan 2026 19:00:42 +0000 Manifest next update: Mon 26 Jan 2026 19:00:42 +0000 Files and hashes: 1: SheiKMejj2UlfePnEJK4YM6UYGQ.roa (hash: Ll9jhdHvmhGlynW15LRcU3rlqzasSbGuWZW11z3vQs0=) 2: auDg02aDw-Ng4UMnzRMAZPV_78A.roa (hash: A2MCkRQZ/VKnTqKHBJZ1hnIKYJGRR8Cd5N45/0b9lic=) 3: ihZhi3H_yA4cP0HtDfyJq16WP9I.crl (hash: Zby9+TXHYcyqMiv06yQhpboqWZvtE13sw0av5dwiRAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:a3:90:b6:56:0f:b6:78:f2:23:06:53:7d:a6:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2 Validity Not Before: Jan 25 19:00:42 2026 GMT Not After : Jan 26 19:00:42 2026 GMT Subject: CN=65553491103a5a0276ec820afd7fd64c5891aa40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d4:25:dd:42:d5:b7:42:a0:c2:65:a6:e8:b5: 2b:3b:6f:c4:77:7b:40:26:f2:b1:49:e2:cb:04:37: 18:9b:ec:d6:f8:8b:9c:b6:e5:d9:9e:1d:5f:a9:df: 7a:48:3d:b7:43:ca:61:46:08:fb:92:37:60:0f:47: 29:20:b1:31:85:73:39:b3:19:07:61:9b:ac:a7:62: 57:0d:6e:53:1c:56:5d:e3:dd:49:a3:97:9a:3c:19: e3:0d:e8:fb:32:c0:00:c7:73:5f:59:70:8d:07:13: 4f:0b:86:d3:1b:a4:68:57:bc:36:d4:0e:01:97:5a: 1b:1a:24:ed:b8:ba:d8:c9:4e:16:0f:8e:4a:2e:40: 34:3f:1a:3d:be:f3:f2:ff:71:3d:3a:17:6b:5f:9c: ba:86:97:f6:67:ee:ed:56:6c:8b:ad:8f:72:d0:7f: e4:4a:79:46:93:28:28:ba:c3:89:a3:75:00:c5:02: 15:df:84:18:18:f7:b3:c0:56:ad:11:d6:13:d2:27: 8e:e0:a3:99:47:80:1c:12:29:dc:ba:37:11:42:34: 09:dd:80:ce:ef:a4:ba:5f:17:89:4a:b8:c9:52:8e: ee:93:d0:e6:e7:14:44:00:2a:94:b8:83:ae:40:ab: d6:94:4a:ac:31:c2:42:6f:c9:9c:dd:6d:a4:37:1d: a5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:55:34:91:10:3A:5A:02:76:EC:82:0A:FD:7F:D6:4C:58:91:AA:40 X509v3 Authority Key Identifier: keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:5e:7f:32:33:40:eb:93:1b:83:a4:a4:f6:50:da:e5:3b:92: ec:6c:e6:a9:5a:08:c4:ad:aa:51:be:a2:48:da:78:84:be:70: c9:04:e1:17:fe:d8:65:77:52:fe:46:4b:e4:d5:48:4c:af:a1: 73:9b:ed:cc:cb:82:dd:90:ba:b6:c0:ca:4b:f4:c6:fa:c0:7d: ab:cc:e3:75:84:df:a3:a3:f4:72:5c:28:1a:38:48:fc:0f:58: 5f:05:c0:eb:52:8f:77:4a:70:94:0b:b5:81:f0:6e:a5:32:50: 8f:c6:c7:ee:cd:00:69:cf:ea:5d:3f:ba:cc:3c:f4:b3:97:b7: e1:da:ca:2d:d3:40:35:70:e4:32:27:92:57:e8:59:90:71:c1: 3b:53:a0:cf:3a:07:12:36:0c:6c:72:25:52:22:96:67:30:66: eb:07:f9:ab:4b:7d:f4:66:d2:55:cd:f9:b0:ad:7e:e6:9e:37: c5:52:e7:51:a3:d4:d9:72:37:93:cb:a8:0a:0e:04:b8:68:56: 96:a2:ff:86:2b:b2:27:18:d4:02:04:3a:a5:ac:66:e0:8b:e7: 39:7e:47:30:80:a7:1d:6b:31:fa:08:d2:f5:94:db:19:85:e1: c0:8f:62:c1:6f:05:98:99:9a:d7:d6:23:ba:9f:9d:b7:47:8e: 37:c0:65:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h6OQtlYPtnjyIwZTfaaNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMTY2MThiNzFmZmM4MGUxYzNmNDFlZDBkZmM4OWFiNWU5 NjNmZDIwHhcNMjYwMTI1MTkwMDQyWhcNMjYwMTI2MTkwMDQyWjAzMTEwLwYDVQQD Eyg2NTU1MzQ5MTEwM2E1YTAyNzZlYzgyMGFmZDdmZDY0YzU4OTFhYTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9Ql3ULVt0KgwmWm6LUrO2/Ed3tA JvKxSeLLBDcYm+zW+IuctuXZnh1fqd96SD23Q8phRgj7kjdgD0cpILExhXM5sxkH YZusp2JXDW5THFZd491Jo5eaPBnjDej7MsAAx3NfWXCNBxNPC4bTG6RoV7w21A4B l1obGiTtuLrYyU4WD45KLkA0Pxo9vvPy/3E9OhdrX5y6hpf2Z+7tVmyLrY9y0H/k SnlGkygousOJo3UAxQIV34QYGPezwFatEdYT0ieO4KOZR4AcEincujcRQjQJ3YDO 76S6XxeJSrjJUo7uk9Dm5xREACqUuIOuQKvWlEqsMcJCb8mc3W2kNx2lFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVVNJEQOloCduyCCv1/1kxYkapAMB8GA1UdIwQY MBaAFIoWYYtx/8gOHD9B7Q38iatelj/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUt MjkxYWFlZGQ1OGNjLzEvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUtMjkxYWFlZGQ1OGNj LzEvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtl5/MjNA 65Mbg6Sk9lDa5TuS7GzmqVoIxK2qUb6iSNp4hL5wyQThF/7YZXdS/kZL5NVITK+h c5vtzMuC3ZC6tsDKS/TG+sB9q8zjdYTfo6P0clwoGjhI/A9YXwXA61KPd0pwlAu1 gfBupTJQj8bH7s0Aac/qXT+6zDz0s5e34drKLdNANXDkMieSV+hZkHHBO1OgzzoH EjYMbHIlUiKWZzBm6wf5q0t99GbSVc35sK1+5p43xVLnUaPU2XI3k8uoCg4EuGhW lqL/hiuyJxjUAgQ6paxm4IvnOX5HMICnHWsx+gjS9ZTbGYXhwI9iwW8FmJma19Yj up+dt0eON8Blyw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:33 2026 by rpki-client