This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft File: ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json) Hash identifier: YpCAM4UHrTXBywpusS2XTEcC8k5U73opZpZus0tf2xc= Subject key identifier: 94:3C:4D:D0:97:85:B0:7B:87:78:F0:AA:5C:DD:21:04:FC:B8:51:FA Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88 Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88 Certificate serial: 019BF8AD2E465E2501A3371298C21B68CCDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft Manifest number: 17F4 Signing time: Mon 26 Jan 2026 05:00:57 +0000 Manifest this update: Mon 26 Jan 2026 05:00:57 +0000 Manifest next update: Tue 27 Jan 2026 05:00:57 +0000 Files and hashes: 1: KuMp-T9rHWOUUL9bo8UBMERxJdY.roa (hash: h2sZnCOwhT2tqn40Qa1cfFPCyVBeCwa6Egkx9SNG7y8=) 2: W_9CizajI-Jq4yu8EOHAH-58qn0.roa (hash: ak8K9GcxXdSZ7IyX+XNEN4b3nMc5HWmOv+1OxaewRRQ=) 3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: iVrvi2IBcBVBpayq04CQzTIC4GuuH0sVboOVdA2jpq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:2e:46:5e:25:01:a3:37:12:98:c2:1b:68:cc:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88 Validity Not Before: Jan 26 05:00:57 2026 GMT Not After : Jan 27 05:00:57 2026 GMT Subject: CN=943c4dd09785b07b8778f0aa5cdd2104fcb851fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9c:5b:a8:4b:44:c5:19:32:79:38:7d:69:e1: 71:c2:b1:60:b7:ba:30:a4:df:64:21:0c:e4:10:ad: d9:a6:ef:a2:26:ea:26:bc:7d:b2:53:ca:55:18:6f: 76:26:54:ea:f4:41:f9:8d:97:0e:d4:6a:56:83:17: 83:51:22:49:35:2c:39:c7:dc:2d:7e:6c:99:87:f8: 80:9a:61:2e:64:75:f2:cf:72:6d:e6:04:c2:f6:f4: a6:03:b4:b2:ef:02:c9:11:d9:69:1a:5a:87:8a:14: 0b:90:f3:5f:5b:d0:ed:79:e6:d2:76:7e:ce:0c:cc: a4:b5:1d:41:b5:60:b2:ac:b9:fc:42:25:e8:2e:38: b1:ed:df:26:6e:bb:ce:29:68:30:75:4a:40:83:b3: 10:ae:95:c5:83:07:0d:31:1b:88:c7:44:fa:fd:d9: 0c:2d:3e:86:34:bd:01:38:d5:31:2a:f8:f1:cd:79: 34:51:21:59:2c:23:9f:62:cd:7b:a2:bf:10:ca:6a: ec:0d:ea:44:80:4d:78:03:24:9c:36:8d:53:59:7b: 00:34:f1:bc:11:79:2c:a4:b2:45:aa:f3:f2:f2:a3: ad:db:cc:6b:24:40:fe:f9:4c:c8:bf:80:bb:80:c1: c7:87:0e:1f:ba:18:a9:74:c3:c0:86:44:70:11:49: 14:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3C:4D:D0:97:85:B0:7B:87:78:F0:AA:5C:DD:21:04:FC:B8:51:FA X509v3 Authority Key Identifier: keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8c:6b:f4:1d:07:d9:69:33:8a:6c:3a:6f:4d:62:5a:cf:5f: 40:38:b5:2b:43:10:1e:98:f9:98:fb:3b:44:e3:07:44:e3:8f: 8b:90:a7:78:2f:91:26:a8:ee:9e:12:d1:05:12:e4:94:68:30: 1b:69:d6:7e:c2:c1:ea:c4:e4:3a:8c:7e:c8:dd:dd:d8:1e:a4: 87:62:ef:02:3e:9a:f9:31:b3:01:ec:64:58:2d:2f:19:60:a2: cc:ea:dd:d5:49:b0:df:63:98:68:ff:6e:0a:ca:c3:f0:1c:d1: 66:98:67:3f:5f:2f:90:69:89:ad:bf:3b:aa:2f:b3:43:cc:f7: 16:88:a5:32:80:c8:d8:d2:47:75:67:43:98:dd:05:01:84:20: 72:06:1a:38:0e:7d:16:d3:6c:93:e1:30:fd:07:56:e5:3d:98: c9:0e:52:12:0f:c3:88:60:c1:0e:19:60:90:65:7a:6b:31:61: ea:fa:cb:29:e3:1c:9d:af:49:4f:7e:2f:59:4e:e3:09:ee:85: 9d:4e:fb:f1:e5:cb:17:7e:33:33:24:15:e7:0d:55:c7:7e:5c: df:a5:5a:bb:82:ac:72:02:a5:96:20:e7:68:33:94:c0:0a:b7: 01:de:c5:5a:21:48:ac:5a:dd:36:6d:d0:ff:54:87:43:0b:71: fa:b9:c2:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rS5GXiUBozcSmMIbaMzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YjMzMmQ1N2NlMTRmYWIxZWJkNzQ2ODE3ZGQ3MDEwNjJj NzRhODgwHhcNMjYwMTI2MDUwMDU3WhcNMjYwMTI3MDUwMDU3WjAzMTEwLwYDVQQD Eyg5NDNjNGRkMDk3ODViMDdiODc3OGYwYWE1Y2RkMjEwNGZjYjg1MWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJxbqEtExRkyeTh9aeFxwrFgt7ow pN9kIQzkEK3Zpu+iJuomvH2yU8pVGG92JlTq9EH5jZcO1GpWgxeDUSJJNSw5x9wt fmyZh/iAmmEuZHXyz3Jt5gTC9vSmA7Sy7wLJEdlpGlqHihQLkPNfW9DteebSdn7O DMyktR1BtWCyrLn8QiXoLjix7d8mbrvOKWgwdUpAg7MQrpXFgwcNMRuIx0T6/dkM LT6GNL0BONUxKvjxzXk0USFZLCOfYs17or8QymrsDepEgE14AyScNo1TWXsANPG8 EXkspLJFqvPy8qOt28xrJED++UzIv4C7gMHHhw4fuhipdMPAhkRwEUkUKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQ8TdCXhbB7h3jwqlzdIQT8uFH6MB8GA1UdIwQY MBaAFImzMtV84U+rHr10aBfdcBBix0qIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQt NDZhMGRmNzc0ZmUxLzEvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQtNDZhMGRmNzc0ZmUx LzEvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWoxr9B0H 2Wkzimw6b01iWs9fQDi1K0MQHpj5mPs7ROMHROOPi5CneC+RJqjunhLRBRLklGgw G2nWfsLB6sTkOox+yN3d2B6kh2LvAj6a+TGzAexkWC0vGWCizOrd1Umw32OYaP9u CsrD8BzRZphnP18vkGmJrb87qi+zQ8z3FoilMoDI2NJHdWdDmN0FAYQgcgYaOA59 FtNsk+Ew/QdW5T2YyQ5SEg/DiGDBDhlgkGV6azFh6vrLKeMcna9JT34vWU7jCe6F nU778eXLF34zMyQV5w1Vx35c36Vau4KscgKlliDnaDOUwAq3Ad7FWiFIrFrdNm3Q /1SHQwtx+rnC7Q== -----END CERTIFICATE-----Generated at Mon Jan 26 07:48:43 2026 by rpki-client