This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft File: IW66tPRvJU2V9JZbhKjPJBlrnJU.mft (raw, json) Hash identifier: couccNCKnCOKFkgC+pblUhg+oYv/e/lN0tPOAWNOZdQ= Subject key identifier: 63:EC:6E:1E:4C:67:F6:20:47:84:2B:A0:8C:19:35:4D:CE:0D:0A:53 Authority key identifier: 21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95 Certificate issuer: /CN=216ebab4f46f254d95f4965b84a8cf24196b9c95 Certificate serial: 019BF23D4F1DBFE8FD9564B00DFC5547CC7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft Manifest number: 0700 Signing time: Sat 24 Jan 2026 23:01:02 +0000 Manifest this update: Sat 24 Jan 2026 23:01:02 +0000 Manifest next update: Sun 25 Jan 2026 23:01:02 +0000 Files and hashes: 1: IW66tPRvJU2V9JZbhKjPJBlrnJU.crl (hash: q0FYCe3Ii2sdgx1Y69FoxBdV54nl1KmP7I8eSBWbNR8=) 2: TGA4vVujs0yD_obPFPyktqNpDgc.roa (hash: 5S5Kx8RY4RfrsLwFClyqoZagN1DyIRqE+8qw4ESGtGA=) 3: vYa3Ih6LXEOuOYMk9rXJWrFe8TQ.roa (hash: cUJ90bZFPukFANzteUEP/DKwx2ymm3AfgIUKRxH9Byw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:3d:4f:1d:bf:e8:fd:95:64:b0:0d:fc:55:47:cc:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=216ebab4f46f254d95f4965b84a8cf24196b9c95 Validity Not Before: Jan 24 23:01:02 2026 GMT Not After : Jan 25 23:01:02 2026 GMT Subject: CN=63ec6e1e4c67f62047842ba08c19354dce0d0a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d9:60:28:50:bd:f1:d3:e6:f9:c0:98:57:ff: ac:37:68:a4:22:0b:27:b8:ba:3a:32:60:93:d5:31: 4c:11:c3:24:a0:c0:05:79:bf:fb:5c:aa:c8:7e:e0: 3f:79:b4:32:99:14:83:13:69:24:0a:7c:28:5e:c0: 36:48:c3:61:bd:18:2a:0c:79:77:58:3a:8c:5f:fb: 53:9e:18:27:57:0d:9f:cd:c9:f2:7d:d2:c3:5d:8c: 94:70:1f:4d:b4:cf:bd:b4:9f:d7:23:06:d1:33:07: 45:aa:c7:b8:ca:9c:34:bc:04:20:42:eb:8c:b2:6a: f7:95:3c:c5:78:7c:ee:3b:08:36:88:f8:f4:54:77: 6e:37:4e:76:15:26:8e:39:1e:8c:08:c3:6d:9f:ae: 54:e0:be:64:a8:78:ed:ed:ee:6f:aa:02:89:0b:3d: c7:0c:0b:00:9a:fc:ab:49:28:9d:b5:8b:05:0e:24: 4c:62:eb:77:f8:f8:63:9d:70:f1:93:4e:1c:95:86: e5:3f:23:c2:3e:00:fe:f0:19:53:45:67:f4:64:c6: 0f:8a:27:b5:90:5f:c2:11:83:a0:a0:5e:53:bc:a6: 03:76:e0:a9:57:e1:50:8d:23:93:60:1a:19:89:0c: b4:4b:3e:8a:9f:96:86:92:05:9b:14:b9:58:83:95: 28:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:EC:6E:1E:4C:67:F6:20:47:84:2B:A0:8C:19:35:4D:CE:0D:0A:53 X509v3 Authority Key Identifier: keyid:21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ea:9d:6b:8f:6f:fc:fa:1f:48:14:44:64:9d:c4:b6:f9:ce: 2d:73:95:64:27:c8:a5:66:fc:ee:1b:be:f8:97:4c:8a:b9:d1: 76:fa:0b:b3:5e:9f:91:06:71:79:37:c9:89:80:5e:70:78:c9: e1:63:e3:50:4b:4e:99:87:e6:2d:08:de:98:c4:74:54:21:b6: 6c:fc:08:82:dd:99:11:6d:b4:24:84:56:09:2e:d4:70:d2:41: 70:5b:95:02:4a:52:d4:f8:87:a9:79:b0:91:07:a9:09:36:e1: 81:fb:b1:39:0e:42:93:88:6e:87:25:72:50:40:43:35:e4:c4: d6:04:c1:33:c8:bb:8f:9c:9d:b1:2d:11:cc:2c:9a:32:c9:01: 21:fd:1a:32:7e:53:2a:82:74:64:c9:8b:36:48:7c:7f:d6:b9: d1:ce:84:50:e7:4d:96:67:2d:1f:1a:05:b2:18:8b:fd:6f:ef: ca:a5:3a:c6:44:05:8c:7b:17:c2:66:bf:fc:0c:d1:2f:a7:ba: d2:45:e2:39:0f:d4:5c:90:16:80:b8:4d:2f:53:05:b7:c9:95: 89:b8:17:4e:71:1d:e8:f1:b7:dd:57:eb:5d:2d:43:27:9a:c9: 81:8f:01:24:a8:9b:62:d7:e5:24:bb:b1:ff:a6:59:19:85:e2: b0:76:f3:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyPU8dv+j9lWSwDfxVR8x9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNmViYWI0ZjQ2ZjI1NGQ5NWY0OTY1Yjg0YThjZjI0MTk2 YjljOTUwHhcNMjYwMTI0MjMwMTAyWhcNMjYwMTI1MjMwMTAyWjAzMTEwLwYDVQQD Eyg2M2VjNmUxZTRjNjdmNjIwNDc4NDJiYTA4YzE5MzU0ZGNlMGQwYTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29lgKFC98dPm+cCYV/+sN2ikIgsn uLo6MmCT1TFMEcMkoMAFeb/7XKrIfuA/ebQymRSDE2kkCnwoXsA2SMNhvRgqDHl3 WDqMX/tTnhgnVw2fzcnyfdLDXYyUcB9NtM+9tJ/XIwbRMwdFqse4ypw0vAQgQuuM smr3lTzFeHzuOwg2iPj0VHduN052FSaOOR6MCMNtn65U4L5kqHjt7e5vqgKJCz3H DAsAmvyrSSidtYsFDiRMYut3+PhjnXDxk04clYblPyPCPgD+8BlTRWf0ZMYPiie1 kF/CEYOgoF5TvKYDduCpV+FQjSOTYBoZiQy0Sz6Kn5aGkgWbFLlYg5UoJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPsbh5MZ/YgR4QroIwZNU3ODQpTMB8GA1UdIwQY MBaAFCFuurT0byVNlfSWW4SozyQZa5yVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVc2NnRQUnZKVTJWOUpaYmhLalBKQmxybkpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82ZDhhMmMtZTIyOC00ZDQwLThkOTAt ZGVjMjBkZGM3M2FhLzEvSVc2NnRQUnZKVTJWOUpaYmhLalBKQmxybkpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82ZDhhMmMtZTIyOC00ZDQwLThkOTAtZGVjMjBkZGM3M2Fh LzEvSVc2NnRQUnZKVTJWOUpaYmhLalBKQmxybkpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuqda49v /PofSBREZJ3EtvnOLXOVZCfIpWb87hu++JdMirnRdvoLs16fkQZxeTfJiYBecHjJ 4WPjUEtOmYfmLQjemMR0VCG2bPwIgt2ZEW20JIRWCS7UcNJBcFuVAkpS1PiHqXmw kQepCTbhgfuxOQ5Ck4huhyVyUEBDNeTE1gTBM8i7j5ydsS0RzCyaMskBIf0aMn5T KoJ0ZMmLNkh8f9a50c6EUOdNlmctHxoFshiL/W/vyqU6xkQFjHsXwma//AzRL6e6 0kXiOQ/UXJAWgLhNL1MFt8mVibgXTnEd6PG33VfrXS1DJ5rJgY8BJKibYtflJLux /6ZZGYXisHbzGw== -----END CERTIFICATE-----Generated at Sun Jan 25 06:03:57 2026 by rpki-client