This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json) Hash identifier: ipI6ThfNsbcFOqVmF+gkKu8d18pTVH+39/WT2kmuMQY= Subject key identifier: 84:D9:C2:8C:03:F8:8A:17:2A:FD:C8:C6:62:F2:B1:3C:1A:B5:EC:6C Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6 Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6 Certificate serial: 019BF499AAEFA567367CA04CB39FFA5A043F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft Manifest number: 0B9F Signing time: Sun 25 Jan 2026 10:01:09 +0000 Manifest this update: Sun 25 Jan 2026 10:01:09 +0000 Manifest next update: Mon 26 Jan 2026 10:01:09 +0000 Files and hashes: 1: Ha1zzuR5phsP43HrNuYV02K8JmM.roa (hash: OIS0Kv+EMSNX8skAuIawL3We9Kkncv5+iFQyWWdpmbk=) 2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: Zc/vQnUorXWsd2neDk8AqKPX3VXz2Y53HgQRL8zMJAg=) 3: SqHxe2uwvaoACopO4_oazg_nels.roa (hash: 9zPi+ENkqVQXBQ+5cr5nLO5x0488pkDK6RTbeEiOUlc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:aa:ef:a5:67:36:7c:a0:4c:b3:9f:fa:5a:04:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6 Validity Not Before: Jan 25 10:01:09 2026 GMT Not After : Jan 26 10:01:09 2026 GMT Subject: CN=84d9c28c03f88a172afdc8c662f2b13c1ab5ec6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fb:4d:e5:17:85:cf:01:88:13:ee:e6:5a:bd: 9a:48:d0:f4:d6:65:23:c5:15:2a:5a:f4:7b:05:0e: 90:a5:d3:2a:c0:4e:1f:8b:d6:5c:7e:a8:70:0b:c2: cd:2e:ec:0a:44:84:2b:22:57:56:2e:c8:51:c9:07: 7f:83:ed:d8:1a:36:f9:aa:52:ec:f3:27:5a:5b:09: 8c:79:e0:37:99:26:6c:ad:61:5c:dd:ed:56:44:c8: 14:39:e8:b4:a0:5c:d3:52:ab:fe:a3:be:44:57:ac: 4d:c8:d9:c0:4b:c0:60:72:d5:3e:ec:a4:45:2c:21: 32:1d:05:5f:71:32:1a:49:02:aa:ca:cc:c9:3e:09: ef:09:24:81:57:4a:7b:fc:21:4e:5a:91:eb:b8:a1: 05:b9:e0:1d:86:49:30:3b:d2:2f:95:51:1d:06:34: 87:38:a0:78:c0:54:80:6e:6c:96:05:b7:43:35:df: 20:5a:95:5a:bd:f4:8e:23:09:25:0d:50:f4:c8:a9: 4e:72:e0:7d:15:73:37:a2:fb:09:ef:48:68:ef:df: 5c:34:42:c7:8f:15:29:30:0d:40:12:fb:6e:4d:bb: b6:47:0a:2f:13:20:87:4a:c1:c4:ad:4e:65:46:f7: 9c:8d:69:6f:76:a6:4c:c4:e0:9c:43:0c:54:05:11: d7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D9:C2:8C:03:F8:8A:17:2A:FD:C8:C6:62:F2:B1:3C:1A:B5:EC:6C X509v3 Authority Key Identifier: keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:91:7d:83:cf:ca:1b:62:38:25:ca:23:c0:6c:0b:f6:e1:26: 3d:1d:24:75:e0:5b:60:ab:8d:ae:08:cd:f1:c3:7b:60:17:3d: 43:1a:72:53:2b:bb:d6:14:1e:be:39:bc:b0:55:a1:a9:88:42: 89:67:7b:51:ad:f8:88:86:65:e6:de:6e:ce:16:49:8e:19:5d: e1:b9:27:53:5e:cd:fb:10:d0:16:ca:66:98:0b:e4:43:16:9a: ca:2e:1f:92:b1:28:46:59:94:8c:e3:86:8f:46:c6:d3:bf:c3: 86:95:5f:2f:38:3c:11:f7:9b:a1:d4:19:4a:69:01:3b:cf:ae: d9:89:2d:09:85:f4:7b:1d:16:7a:f7:f2:1f:98:03:2d:c5:20: 87:7d:4e:ce:c5:1b:11:57:63:19:3d:91:a2:07:d7:2a:0e:e8: ee:56:cc:62:c8:31:b8:f1:ea:d5:51:23:50:87:88:f3:5e:e2: 91:07:74:61:87:9b:6d:e3:9c:f1:65:b5:01:a5:2d:de:22:f1: d4:3a:f0:3c:04:9e:2a:82:b1:35:eb:40:70:80:c9:e1:27:a1: 18:31:33:1c:79:3b:a1:5f:d9:89:90:7f:1f:1d:ba:05:10:c9: ee:51:4d:16:29:8a:29:ab:69:19:4d:65:11:40:e8:83:e1:44: 6f:01:e1:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0marvpWc2fKBMs5/6WgQ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxN2I3YWIwNjJiYzgyOGIzNDhkMDUzMDZlNjUzNTQ3NDhi OWQ2ZDYwHhcNMjYwMTI1MTAwMTA5WhcNMjYwMTI2MTAwMTA5WjAzMTEwLwYDVQQD Eyg4NGQ5YzI4YzAzZjg4YTE3MmFmZGM4YzY2MmYyYjEzYzFhYjVlYzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPtN5ReFzwGIE+7mWr2aSND01mUj xRUqWvR7BQ6QpdMqwE4fi9ZcfqhwC8LNLuwKRIQrIldWLshRyQd/g+3YGjb5qlLs 8ydaWwmMeeA3mSZsrWFc3e1WRMgUOei0oFzTUqv+o75EV6xNyNnAS8BgctU+7KRF LCEyHQVfcTIaSQKqyszJPgnvCSSBV0p7/CFOWpHruKEFueAdhkkwO9IvlVEdBjSH OKB4wFSAbmyWBbdDNd8gWpVavfSOIwklDVD0yKlOcuB9FXM3ovsJ70ho799cNELH jxUpMA1AEvtuTbu2RwovEyCHSsHErU5lRvecjWlvdqZMxOCcQwxUBRHXswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITZwowD+IoXKv3IxmLysTwatexsMB8GA1UdIwQY MBaAFCF7erBivIKLNI0FMG5lNUdIudbWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYt NTViNjU5Y2Q4MmJiLzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYtNTViNjU5Y2Q4MmJi LzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpF9g8/K G2I4JcojwGwL9uEmPR0kdeBbYKuNrgjN8cN7YBc9QxpyUyu71hQevjm8sFWhqYhC iWd7Ua34iIZl5t5uzhZJjhld4bknU17N+xDQFspmmAvkQxaayi4fkrEoRlmUjOOG j0bG07/DhpVfLzg8EfebodQZSmkBO8+u2YktCYX0ex0WevfyH5gDLcUgh31OzsUb EVdjGT2RogfXKg7o7lbMYsgxuPHq1VEjUIeI817ikQd0YYebbeOc8WW1AaUt3iLx 1DrwPASeKoKxNetAcIDJ4SehGDEzHHk7oV/ZiZB/Hx26BRDJ7lFNFimKKatpGU1l EUDog+FEbwHhKA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:45:53 2026 by rpki-client