This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft File: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft (raw, json) Hash identifier: SjIkJWNZxUuPEWRPD9kCmyPk8RBnXVl/aQ7SP8uA388= Subject key identifier: 4A:60:45:FF:9E:FF:0F:70:02:F9:A0:7F:1E:63:E1:60:6D:26:DD:C9 Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2 Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2 Certificate serial: 019BF5AC208D74CFE0F7EC983853D408336F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft Manifest number: 0D64 Signing time: Sun 25 Jan 2026 15:00:56 +0000 Manifest this update: Sun 25 Jan 2026 15:00:56 +0000 Manifest next update: Mon 26 Jan 2026 15:00:56 +0000 Files and hashes: 1: 1bz4VaBV4zDNPpHlEQ4nHg2og7c.roa (hash: AW/6Peh9HLcmvxwe2ZPJ0WiX9tfpgRcCEnLYZpk1F4s=) 2: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl (hash: sNsQjA4FnZvlCle5KLzIQbfM8yfmp1MfBlRnA+/UyPY=) 3: LxAfqO9DJb5pX4Ib_IiY5pQ6IIs.roa (hash: YzoiNF9QrUDbASLIJfkxXS0XmPF5J0XBaYWRaRu5sbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:20:8d:74:cf:e0:f7:ec:98:38:53:d4:08:33:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2 Validity Not Before: Jan 25 15:00:56 2026 GMT Not After : Jan 26 15:00:56 2026 GMT Subject: CN=4a6045ff9eff0f7002f9a07f1e63e1606d26ddc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fb:97:47:84:a6:49:ba:21:cc:77:0f:96:d5: 9b:28:51:8b:a1:95:a9:a3:e4:5a:f2:b2:b5:1e:39: 99:32:ef:bc:c9:0e:32:ae:23:8d:5f:f1:ee:25:b6: cc:ca:d1:8d:92:e4:fa:e6:42:d7:c6:d5:f8:b5:55: c7:34:e3:bd:ce:f1:b8:0f:bd:9c:d1:13:f9:2b:81: 93:ad:f4:f3:7c:2b:63:dd:48:ed:49:39:38:fe:20: 7a:68:87:b7:d2:9f:9b:11:b0:b7:ed:7f:f0:55:87: e8:bb:b6:0e:47:ec:e8:5a:21:45:d1:74:30:7d:c0: ce:34:8c:f7:7b:e5:ab:23:ea:22:ff:1d:c8:3e:05: e6:60:0b:bb:16:e3:31:89:ad:14:12:b1:2f:c4:26: b5:b6:8b:e8:4b:88:01:ea:7d:75:14:1c:34:44:ad: dc:d6:e6:95:ae:62:03:11:08:df:c2:4e:e6:5a:50: ff:6b:60:be:2a:58:a9:7d:cd:2d:de:21:70:62:ea: 82:89:f4:59:9b:74:e8:ee:fa:ca:3b:22:b9:16:a9: 67:fe:dd:cf:31:7f:37:5e:4c:c6:0c:6c:d5:90:10: 7c:a8:78:18:ac:4e:8c:92:ef:8a:21:0c:ba:90:3d: 21:ea:6c:7e:67:00:a5:c9:92:6a:ae:bb:bc:2d:cd: dd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:60:45:FF:9E:FF:0F:70:02:F9:A0:7F:1E:63:E1:60:6D:26:DD:C9 X509v3 Authority Key Identifier: keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c6:b1:2e:cb:85:9c:89:ad:68:59:54:7d:21:f2:d5:2c:86: 7f:99:31:e6:ed:1a:a2:f9:a5:04:7b:cd:5f:1e:81:6d:49:7d: be:e4:d7:60:f2:71:4d:a8:9e:94:a0:1f:aa:57:ce:33:7f:31: 16:79:8f:6f:cd:3a:97:bf:ef:f2:b5:8e:eb:cc:48:54:e1:9d: 94:ed:c5:86:b8:f5:d6:f0:96:b5:46:24:b9:1c:ec:6b:0c:17: 66:ea:26:7d:91:10:34:0b:bb:9c:12:cd:cc:0b:1c:50:73:19: 92:d6:92:e5:e4:44:9b:3e:70:47:74:65:bd:83:e2:c0:76:c8: ba:5c:21:29:3b:28:88:19:2a:5c:0e:1c:50:b1:e2:04:b4:a8: 96:de:21:f8:e4:52:59:e6:0b:0a:ec:8a:b5:15:4c:83:e7:c6: 5f:cc:ae:51:c1:04:5c:a9:e0:20:18:21:ea:b8:82:60:6c:03: c9:9f:98:ec:ca:6b:2a:50:f7:89:b7:7a:e1:51:28:ff:aa:82: f9:5f:72:ed:7f:e2:02:aa:8e:22:79:dd:e2:3c:58:a9:74:f0: e6:4a:16:c1:08:e4:fc:64:72:8d:bb:ab:f1:ef:65:95:06:15: 09:4c:96:d0:82:7e:85:2a:a5:c7:de:e7:7b:3e:c9:00:7d:76: b7:9a:13:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rCCNdM/g9+yYOFPUCDNvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMzBlMjYwNjA5MTNjNzU4MTM3NDg4YmZkN2FiMWJmZTll MTBhZTIwHhcNMjYwMTI1MTUwMDU2WhcNMjYwMTI2MTUwMDU2WjAzMTEwLwYDVQQD Eyg0YTYwNDVmZjllZmYwZjcwMDJmOWEwN2YxZTYzZTE2MDZkMjZkZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPuXR4SmSbohzHcPltWbKFGLoZWp o+Ra8rK1HjmZMu+8yQ4yriONX/HuJbbMytGNkuT65kLXxtX4tVXHNOO9zvG4D72c 0RP5K4GTrfTzfCtj3UjtSTk4/iB6aIe30p+bEbC37X/wVYfou7YOR+zoWiFF0XQw fcDONIz3e+WrI+oi/x3IPgXmYAu7FuMxia0UErEvxCa1tovoS4gB6n11FBw0RK3c 1uaVrmIDEQjfwk7mWlD/a2C+Klipfc0t3iFwYuqCifRZm3To7vrKOyK5Fqln/t3P MX83XkzGDGzVkBB8qHgYrE6Mku+KIQy6kD0h6mx+ZwClyZJqrru8Lc3dFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpgRf+e/w9wAvmgfx5j4WBtJt3JMB8GA1UdIwQY MBaAFCMw4mBgkTx1gTdIi/16sb/p4QriMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXpEaVlHQ1JQSFdCTjBpTF9YcXh2LW5oQ3VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NjkwYzAtMGI5MS00MzIyLTk0Yjkt NzA2NzgyY2ZhMDNiLzEvSXpEaVlHQ1JQSFdCTjBpTF9YcXh2LW5oQ3VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80NjkwYzAtMGI5MS00MzIyLTk0YjktNzA2NzgyY2ZhMDNi LzEvSXpEaVlHQ1JQSFdCTjBpTF9YcXh2LW5oQ3VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcaxLsuF nImtaFlUfSHy1SyGf5kx5u0aovmlBHvNXx6BbUl9vuTXYPJxTaielKAfqlfOM38x FnmPb806l7/v8rWO68xIVOGdlO3Fhrj11vCWtUYkuRzsawwXZuomfZEQNAu7nBLN zAscUHMZktaS5eREmz5wR3RlvYPiwHbIulwhKTsoiBkqXA4cULHiBLSolt4h+ORS WeYLCuyKtRVMg+fGX8yuUcEEXKngIBgh6riCYGwDyZ+Y7MprKlD3ibd64VEo/6qC +V9y7X/iAqqOInnd4jxYqXTw5koWwQjk/GRyjbur8e9llQYVCUyW0IJ+hSqlx97n ez7JAH12t5oTug== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:31 2026 by rpki-client