This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft File: iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json) Hash identifier: AonGXwJt6GBb6WSUtMtDMb32x7ijJGxxFrzV8pjMDIg= Subject key identifier: 2B:46:BE:93:52:4C:F4:12:CC:53:2B:72:AA:57:B5:BD:E1:B2:3C:48 Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa Certificate serial: 019BF2E2838DD15412B8BFF05A92F69E6F3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft Manifest number: 1393 Signing time: Sun 25 Jan 2026 02:01:29 +0000 Manifest this update: Sun 25 Jan 2026 02:01:29 +0000 Manifest next update: Mon 26 Jan 2026 02:01:29 +0000 Files and hashes: 1: 2dwCjqUUqCKWVJ6DvVzwdYlDvXQ.roa (hash: DPrgb6Kgdw0KIjv41bfjhUKWYAfrl79h2DWiUA8CcIQ=) 2: IMFLS8lmXO1X5kPh5brIEnkKfS4.roa (hash: w30MlBbSWaBo/k7+866HLmrY83fawU5Z9usPbYOh250=) 3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: fkYXNKq79L2x7WVLISNrmioGG9tTd2tT/CI3u3R7RUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:83:8d:d1:54:12:b8:bf:f0:5a:92:f6:9e:6f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa Validity Not Before: Jan 25 02:01:29 2026 GMT Not After : Jan 26 02:01:29 2026 GMT Subject: CN=2b46be93524cf412cc532b72aa57b5bde1b23c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5f:91:c3:a1:ab:64:ac:a9:f1:de:d7:47:71: ea:ba:5b:60:c3:15:34:0a:e9:5b:2c:9c:c7:f6:2a: 68:23:4a:1c:a0:78:a9:9f:9e:23:35:88:db:d0:bc: 5c:07:a8:d8:db:50:be:bf:d0:2d:52:34:38:ce:49: 05:cb:af:a5:40:aa:31:05:08:f6:d9:11:bf:24:73: 3e:22:3c:b7:f9:4f:82:8a:2c:9c:c2:03:dd:4a:a1: 36:78:ff:0a:73:b5:7c:a7:d1:af:fe:e2:d6:8a:9f: 01:cd:c1:7f:bf:76:6f:44:aa:58:99:28:00:27:89: fa:98:c0:27:e4:4c:13:5f:42:68:a2:7b:d0:a7:c0: 24:77:6a:b0:3c:a4:04:29:ae:40:ee:4b:cd:9e:e0: 86:cd:87:72:1f:cc:7f:b1:ef:50:4b:c3:34:a0:1e: 8f:0c:c5:f3:09:6a:12:d5:55:54:3f:bb:39:de:9e: 3c:69:c4:e0:92:84:0b:3d:61:7c:47:c3:49:25:36: cf:67:fe:cf:18:e8:84:81:df:4b:ff:ab:a9:91:e4: 23:13:98:1a:9c:b7:89:92:69:b3:9b:ce:70:e9:ba: c0:a0:4c:5b:a1:52:d9:55:6e:ff:b3:b5:12:80:75: bf:9d:1d:cd:01:f2:51:ad:ff:49:f0:7b:bb:d2:f6: 03:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:46:BE:93:52:4C:F4:12:CC:53:2B:72:AA:57:B5:BD:E1:B2:3C:48 X509v3 Authority Key Identifier: keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:05:78:e5:dc:df:f9:09:58:b2:88:4c:5b:fc:57:e5:6b:b6: 59:0a:92:fb:de:44:14:5e:83:da:8c:fa:a6:a0:92:32:c7:e4: c3:8c:30:c3:32:d4:36:5d:78:19:86:c9:36:5b:7e:45:ef:6d: ac:1f:1b:4b:9f:9c:10:88:7a:c2:a6:e8:be:91:a1:a8:d6:b2: 99:82:48:a9:21:57:fa:ab:98:cf:ad:37:e2:5c:9a:8f:b4:c9: 0f:12:61:c6:3a:2d:1b:9b:e2:12:1e:c8:a9:48:9b:cd:fe:43: 14:62:d7:81:5b:f7:9e:59:9e:53:4b:5c:e3:95:5a:cc:61:83: 84:d8:08:34:6b:78:0a:41:45:8c:f8:7b:eb:b5:f9:80:4f:24: 90:e6:85:de:fa:ad:23:6c:42:09:d5:10:e8:4a:73:cb:63:df: c8:f5:68:81:ab:66:79:e5:57:e2:ae:b7:c3:34:8e:4b:b8:59: 71:34:46:af:83:7c:f1:7f:cc:cc:94:30:f4:f1:2e:03:df:73: b7:f7:fb:0d:fa:80:0f:75:b0:be:57:4a:76:0c:1f:c9:d1:94: 47:c1:cf:a4:08:9c:0e:75:0a:47:9f:a2:62:3a:3b:ec:2a:3e: 35:f1:dd:bb:90:8c:15:72:cc:9e:07:5c:3b:b4:26:86:85:4c: 22:51:39:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4oON0VQSuL/wWpL2nm88MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NzhmZjVkYWIzM2M0MmRhNjVmZTRlMWFiZmJjYTRlYWZi ZGQyYWEwHhcNMjYwMTI1MDIwMTI5WhcNMjYwMTI2MDIwMTI5WjAzMTEwLwYDVQQD EygyYjQ2YmU5MzUyNGNmNDEyY2M1MzJiNzJhYTU3YjViZGUxYjIzYzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4V+Rw6GrZKyp8d7XR3HqultgwxU0 CulbLJzH9ipoI0ocoHipn54jNYjb0LxcB6jY21C+v9AtUjQ4zkkFy6+lQKoxBQj2 2RG/JHM+Ijy3+U+CiiycwgPdSqE2eP8Kc7V8p9Gv/uLWip8BzcF/v3ZvRKpYmSgA J4n6mMAn5EwTX0JoonvQp8Akd2qwPKQEKa5A7kvNnuCGzYdyH8x/se9QS8M0oB6P DMXzCWoS1VVUP7s53p48acTgkoQLPWF8R8NJJTbPZ/7PGOiEgd9L/6upkeQjE5ga nLeJkmmzm85w6brAoExboVLZVW7/s7USgHW/nR3NAfJRrf9J8Hu70vYDXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtGvpNSTPQSzFMrcqpXtb3hsjxIMB8GA1UdIwQY MBaAFIl4/12rM8Qtpl/k4av7yk6vvdKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVhqX1hhc3p4QzJtWC1UaHFfdktUcS05MHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yZTgzNDctZDljNy00ZTUxLTliMTQt ZDAyZDk2YzM2Y2EzLzEvaVhqX1hhc3p4QzJtWC1UaHFfdktUcS05MHFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yZTgzNDctZDljNy00ZTUxLTliMTQtZDAyZDk2YzM2Y2Ez LzEvaVhqX1hhc3p4QzJtWC1UaHFfdktUcS05MHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwV45dzf +QlYsohMW/xX5Wu2WQqS+95EFF6D2oz6pqCSMsfkw4wwwzLUNl14GYbJNlt+Re9t rB8bS5+cEIh6wqbovpGhqNaymYJIqSFX+quYz6034lyaj7TJDxJhxjotG5viEh7I qUibzf5DFGLXgVv3nlmeU0tc45VazGGDhNgINGt4CkFFjPh767X5gE8kkOaF3vqt I2xCCdUQ6Epzy2PfyPVogatmeeVX4q63wzSOS7hZcTRGr4N88X/MzJQw9PEuA99z t/f7DfqAD3WwvldKdgwfydGUR8HPpAicDnUKR5+iYjo77Co+NfHdu5CMFXLMngdc O7QmhoVMIlE5Ew== -----END CERTIFICATE-----Generated at Sun Jan 25 12:25:16 2026 by rpki-client