This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
File: ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft (raw, json)
Hash identifier: RvqU/qo8XxS60fm3zeC19Qcpni8PVvZ6YR0CXtAdDsw=
Subject key identifier: 09:93:50:D0:87:AC:78:90:44:44:0F:8B:04:E1:20:90:BF:14:86:21
Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
Certificate issuer: /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Certificate serial: 019BF4D0EB655A6B52EEBDFA77A1A0C4EEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
Manifest number: 0C79
Signing time: Sun 25 Jan 2026 11:01:30 +0000
Manifest this update: Sun 25 Jan 2026 11:01:30 +0000
Manifest next update: Mon 26 Jan 2026 11:01:30 +0000
Files and hashes: 1: ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl (hash: FmSVU0Zmd4nvEcjEzXziJk3pPMTlhRipYqb9I5EpJKg=)
2: XCW-xDXsF601ESY9TZp_fyTaJnw.roa (hash: +6CKCfe4xEWnYwPUH24hrBZ1Be9NFYUB4pofzwVgM4w=)
3: kVKI5bXvJSn5tyQySVxPr0YVjUw.roa (hash: NTL21PZSBGTNm7kCXsDwO+4tuqr/3MrAs0BKFoz5+1A=)
4: ob2dIMvAFz_1e-ITC5drlgyANfc.roa (hash: RMa1vlPHRMLHICeoN1/l3m1EGmSAhaN4Z4MknyBTWZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:d0:eb:65:5a:6b:52:ee:bd:fa:77:a1:a0:c4:ee:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Validity
Not Before: Jan 25 11:01:30 2026 GMT
Not After : Jan 26 11:01:30 2026 GMT
Subject: CN=099350d087ac789044440f8b04e12090bf148621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:a7:20:38:49:55:cf:e4:8a:37:5f:8e:fa:
c2:2e:2a:5c:32:f2:b5:11:98:dc:46:b9:45:7a:a1:
61:71:70:a4:01:cb:d8:99:8c:26:dd:2d:8f:0e:a3:
21:17:f6:92:a3:42:57:10:1c:50:f8:95:7d:55:84:
02:f0:a3:43:3f:0b:51:06:2d:38:de:d1:91:bd:3a:
c7:5c:39:e1:4a:58:05:b2:ba:2d:2e:f5:db:23:b5:
a2:ef:1f:dc:ae:cd:2a:3b:33:61:a0:f8:f5:d9:a6:
9d:8f:74:25:40:87:96:87:80:1f:62:5e:f1:90:f5:
a1:42:0c:35:db:78:f6:6a:27:25:88:7f:c4:79:2f:
09:0c:a5:c1:fd:a4:00:9b:c3:03:f9:fb:9b:e4:51:
16:b5:ec:cc:bc:5e:b8:fb:2b:9c:bd:14:cd:a3:e3:
2b:c4:04:8b:53:86:0b:ce:ae:ea:b6:26:cf:7f:d5:
c8:7d:2f:00:66:0d:cc:7a:d2:65:f5:3b:13:3e:3d:
51:99:00:76:f0:4a:11:2b:e1:2d:4c:a4:df:05:e4:
ca:d5:0c:0f:d7:40:e8:99:37:6f:35:40:3e:24:24:
b2:1c:9b:26:8c:54:75:e2:21:6f:d2:97:b2:5b:e8:
7f:e8:7d:31:cb:6b:ef:8e:21:08:47:b8:85:6c:8b:
d8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:93:50:D0:87:AC:78:90:44:44:0F:8B:04:E1:20:90:BF:14:86:21
X509v3 Authority Key Identifier:
keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:53:74:a6:63:93:03:b4:49:59:f8:5f:75:df:63:6a:0f:5c:
0b:e5:51:79:e1:b1:62:a4:b4:b8:c6:6a:3e:0a:8d:b0:6e:5a:
de:c3:bb:34:64:4c:5d:49:91:90:a9:7e:84:14:a3:10:52:a2:
ce:22:03:b8:b4:1f:0f:99:3e:40:9e:87:b0:ae:8b:6a:e7:e2:
1f:d3:78:ce:ee:97:fe:a1:9d:b4:b1:d6:40:43:b9:23:0f:0c:
a6:77:05:14:a6:7d:95:b0:dd:54:57:56:a0:ec:82:dd:db:78:
d8:16:c3:09:68:50:2b:15:2f:17:01:25:2e:20:10:8d:b2:9c:
60:1c:eb:2b:e5:d1:45:a7:69:56:20:89:67:4f:ba:c8:76:92:
d4:6d:bf:1a:33:9a:e1:9f:5b:9a:39:7e:f8:71:22:ef:bf:c6:
e4:fa:aa:dc:03:5d:00:ae:d7:3b:96:cb:ee:ca:2a:4d:04:c7:
c2:9f:72:61:7b:8a:4b:70:29:49:f5:9d:4c:3d:f0:7b:28:95:
87:7c:22:9e:59:25:a0:20:25:2b:fd:60:56:d8:bb:8a:c5:40:
69:8c:c1:03:c5:4e:43:c2:cf:91:77:a3:22:0b:e0:31:28:7f:
6a:16:83:b2:dc:c9:19:43:25:20:db:db:4a:5e:3f:14:af:db:
78:20:19:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv00OtlWmtS7r36d6GgxO7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYjUxMDBlNzk4ZmFiNzU3N2JmNzI1YWM5NTY5ZWE4MGU2
YzJhMDQwHhcNMjYwMTI1MTEwMTMwWhcNMjYwMTI2MTEwMTMwWjAzMTEwLwYDVQQD
EygwOTkzNTBkMDg3YWM3ODkwNDQ0NDBmOGIwNGUxMjA5MGJmMTQ4NjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXOnIDhJVc/kijdfjvrCLipcMvK1
EZjcRrlFeqFhcXCkAcvYmYwm3S2PDqMhF/aSo0JXEBxQ+JV9VYQC8KNDPwtRBi04
3tGRvTrHXDnhSlgFsrotLvXbI7Wi7x/crs0qOzNhoPj12aadj3QlQIeWh4AfYl7x
kPWhQgw123j2aicliH/EeS8JDKXB/aQAm8MD+fub5FEWtezMvF64+yucvRTNo+Mr
xASLU4YLzq7qtibPf9XIfS8AZg3MetJl9TsTPj1RmQB28EoRK+EtTKTfBeTK1QwP
10DomTdvNUA+JCSyHJsmjFR14iFv0peyW+h/6H0xy2vvjiEIR7iFbIvYawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmTUNCHrHiQREQPiwThIJC/FIYhMB8GA1UdIwQY
MBaAFCC1EA55j6t1d79yWslWnqgObCoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQt
ODAzNzk2NTY5M2EyLzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQtODAzNzk2NTY5M2Ey
LzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlN0pmOT
A7RJWfhfdd9jag9cC+VReeGxYqS0uMZqPgqNsG5a3sO7NGRMXUmRkKl+hBSjEFKi
ziIDuLQfD5k+QJ6HsK6LaufiH9N4zu6X/qGdtLHWQEO5Iw8MpncFFKZ9lbDdVFdW
oOyC3dt42BbDCWhQKxUvFwElLiAQjbKcYBzrK+XRRadpViCJZ0+6yHaS1G2/GjOa
4Z9bmjl++HEi77/G5Pqq3ANdAK7XO5bL7soqTQTHwp9yYXuKS3ApSfWdTD3weyiV
h3winlkloCAlK/1gVti7isVAaYzBA8VOQ8LPkXejIgvgMSh/ahaDstzJGUMlINvb
Sl4/FK/beCAZMw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:24:19 2026 by rpki-client