This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft File: I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft (raw, json) Hash identifier: 5ovl3mVt6k/miktb1ZaX4d3OU8ZioXXK5UP3oA/S1tY= Subject key identifier: 72:1D:F9:A9:57:69:9D:33:CD:9B:0D:52:8D:F1:AD:E9:A9:09:AE:37 Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d Certificate serial: 019BF6F57045B7CDF993B5338F052E71FA79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft Manifest number: 1524 Signing time: Sun 25 Jan 2026 21:00:38 +0000 Manifest this update: Sun 25 Jan 2026 21:00:38 +0000 Manifest next update: Mon 26 Jan 2026 21:00:38 +0000 Files and hashes: 1: 9YF16HvuKYLcL13wHeATYsXN82s.roa (hash: x57QLMLkh1jP3PBY1PELztc5Sql/RrM2e/M9QhgtYsY=) 2: I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl (hash: p3QSk3/Re1nefv95gUGjtM8vkjZ/1AfoY3wFMHQ08ow=) 3: OEUQTsVKrLP-lQTQ6AZOPlYIssY.roa (hash: y4n6H8QWfTANHQ4V6doqPirRmfV8G8F5c8X9riuhcaE=) 4: Q11uKj3FZslGnPxLmnv1hIW3b48.roa (hash: czmZUe0UuJfveUL66FQWbR/8EoerZBPm+456KZ7ESgU=) 5: Yqdl2ckpwtXnbxiFNcXWwRDh9cI.roa (hash: PI5nHqQq8jZqisC8+hZEzS0n7ByrBt+NTZFOvSELpKY=) 6: kprspPA2Qu5boxnWzJ_lU9Ab0AE.roa (hash: gEFYkhBGdlaWlWOzwy8lZShF5geJiJozavQlsbuA1Tk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:70:45:b7:cd:f9:93:b5:33:8f:05:2e:71:fa:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d Validity Not Before: Jan 25 21:00:38 2026 GMT Not After : Jan 26 21:00:38 2026 GMT Subject: CN=721df9a957699d33cd9b0d528df1ade9a909ae37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9f:83:ba:99:9f:39:c1:3c:60:52:77:63:e6: a1:32:5a:98:25:b9:a2:25:94:b3:fe:f4:7d:b7:45: 56:ce:3d:63:ff:04:b0:0f:0c:48:f0:4e:6c:b0:9f: 84:8b:f9:a0:d5:8b:1c:cf:2b:f5:10:cd:f3:b0:7a: 49:53:0c:ff:f8:d6:8b:0e:b7:b0:76:1d:d8:fc:0d: 25:37:4f:60:d0:34:07:85:c9:ed:be:78:f4:dd:06: 04:5e:66:d2:ec:d8:11:52:3f:58:32:a8:5d:43:63: 67:fd:05:51:5c:7e:f8:70:e2:69:41:4e:fa:03:f9: a6:ac:e5:d2:89:ff:6f:09:f0:62:a0:a4:96:dd:0a: 70:95:96:d3:04:bf:a6:e8:87:43:80:08:e6:17:2e: 43:a7:c5:85:44:c2:19:6b:0f:50:ac:00:78:33:57: bf:18:81:d5:a8:88:b4:81:3b:8d:60:f9:ee:8d:2f: 13:be:dc:33:eb:73:de:4c:00:ad:30:86:c6:4e:16: fc:6a:84:f2:2a:b2:31:1c:d2:61:76:dc:a2:5f:54: 6d:e3:81:77:c5:45:12:76:86:e6:1c:1e:fb:53:50: e5:97:39:f3:3c:c1:55:40:a3:5f:84:b4:35:8a:71: f7:18:e6:59:2e:5f:1d:7e:a3:d0:04:0f:d1:fa:1f: 93:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1D:F9:A9:57:69:9D:33:CD:9B:0D:52:8D:F1:AD:E9:A9:09:AE:37 X509v3 Authority Key Identifier: keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b0:e7:b9:23:cb:32:aa:27:de:54:c3:41:2c:12:e5:ae:37: e4:36:4a:19:50:23:ec:69:34:48:dc:b7:0b:7b:f3:9b:27:ea: 08:ab:a9:cb:c8:88:01:f0:3e:61:d3:de:8b:71:dd:1a:cf:9a: ce:03:49:8d:ba:8b:0a:ae:12:e4:78:cf:e3:02:a9:41:3b:62: 12:e4:b0:51:b7:81:12:e6:f2:b6:20:4a:27:5c:3f:d2:61:96: 7e:a4:83:e7:4e:79:26:e1:b3:f1:e9:26:be:be:df:a0:14:67: 00:1e:cc:89:4e:bc:55:af:a5:19:04:0f:73:70:18:73:c7:4d: 15:b4:7d:3c:11:e8:2d:0a:d8:98:0c:15:a2:8a:b3:09:2b:f7: d2:a1:4a:d4:35:62:6d:4c:60:29:40:27:b2:8e:99:1e:84:d2: 96:3d:4c:4b:8a:c0:75:a1:96:49:2b:4b:da:f1:44:0d:13:20: 90:3a:ff:b4:41:e2:94:de:3a:fe:de:9c:b4:57:ee:91:d4:d6: 86:71:3e:29:67:34:c4:7d:f1:b3:fb:51:31:f6:57:1d:7a:cd: d1:52:2d:d2:f7:d5:9b:49:ad:26:f7:93:7c:2c:a3:72:9c:52: c3:66:58:e8:2c:53:92:b4:db:46:0b:a4:8a:80:d4:b4:ca:58: 5b:cf:0c:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29XBFt835k7UzjwUucfp5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzN2M4MzQ0N2QxNzE4MzM4MGY0ODliYzk0NmM4YjllMzAw ZmZiMWQwHhcNMjYwMTI1MjEwMDM4WhcNMjYwMTI2MjEwMDM4WjAzMTEwLwYDVQQD Eyg3MjFkZjlhOTU3Njk5ZDMzY2Q5YjBkNTI4ZGYxYWRlOWE5MDlhZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ+DupmfOcE8YFJ3Y+ahMlqYJbmi JZSz/vR9t0VWzj1j/wSwDwxI8E5ssJ+Ei/mg1Ysczyv1EM3zsHpJUwz/+NaLDrew dh3Y/A0lN09g0DQHhcntvnj03QYEXmbS7NgRUj9YMqhdQ2Nn/QVRXH74cOJpQU76 A/mmrOXSif9vCfBioKSW3QpwlZbTBL+m6IdDgAjmFy5Dp8WFRMIZaw9QrAB4M1e/ GIHVqIi0gTuNYPnujS8Tvtwz63PeTACtMIbGThb8aoTyKrIxHNJhdtyiX1Rt44F3 xUUSdobmHB77U1DllznzPMFVQKNfhLQ1inH3GOZZLl8dfqPQBA/R+h+TZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHId+alXaZ0zzZsNUo3xrempCa43MB8GA1UdIwQY MBaAFCN8g0R9FxgzgPSJvJRsi54wD/sdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEt OGIzMzcyMjM0ZGMwLzEvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEtOGIzMzcyMjM0ZGMw LzEvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLDnuSPL Mqon3lTDQSwS5a435DZKGVAj7Gk0SNy3C3vzmyfqCKupy8iIAfA+YdPei3HdGs+a zgNJjbqLCq4S5HjP4wKpQTtiEuSwUbeBEubytiBKJ1w/0mGWfqSD5055JuGz8ekm vr7foBRnAB7MiU68Va+lGQQPc3AYc8dNFbR9PBHoLQrYmAwVooqzCSv30qFK1DVi bUxgKUAnso6ZHoTSlj1MS4rAdaGWSStL2vFEDRMgkDr/tEHilN46/t6ctFfukdTW hnE+KWc0xH3xs/tRMfZXHXrN0VIt0vfVm0mtJveTfCyjcpxSw2ZY6CxTkrTbRguk ioDUtMpYW88MQw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:08:46 2026 by rpki-client