This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json) Hash identifier: cd4QsCtRaGROs2OHrzNmXznqdzdy+iT5hykmitApR9s= Subject key identifier: 97:31:7F:09:70:15:F2:54:D0:E8:8F:C2:38:CC:75:ED:57:06:84:D0 Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d Certificate serial: 019BF6BEF6B535DE95F40B58E82BFDCAE879 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft Manifest number: 0D12 Signing time: Sun 25 Jan 2026 20:01:08 +0000 Manifest this update: Sun 25 Jan 2026 20:01:08 +0000 Manifest next update: Mon 26 Jan 2026 20:01:08 +0000 Files and hashes: 1: 04FKSiNEBSVxxBYiPtE8VcsRvqM.roa (hash: iIsFB+u1yXou/MBTJQN92523XOZ49HIi4J+JzBjc0Vk=) 2: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: bhvRHheGnMYQAei5+fvDjMFmYkAh+sh/t4z/7SvJTEc=) 3: yUZd6eY1ILFj_NVgWnntQzVJiGs.roa (hash: aYbs72JfiEw4WjwVxwNiVwxvegvGGWCTaf1wWunmceE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:f6:b5:35:de:95:f4:0b:58:e8:2b:fd:ca:e8:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d Validity Not Before: Jan 25 20:01:08 2026 GMT Not After : Jan 26 20:01:08 2026 GMT Subject: CN=97317f097015f254d0e88fc238cc75ed570684d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a7:fb:ae:bb:f1:9d:9b:35:16:ce:df:0c:7f: 48:f7:5a:b0:66:5c:a0:53:b2:fc:60:af:a9:31:be: 01:2f:02:47:d7:06:a8:ac:ae:7a:65:59:ea:49:52: 05:38:44:86:47:82:65:38:04:9a:6d:eb:cb:0a:b3: f4:25:01:5c:51:67:90:d7:bd:fe:4c:d5:37:de:5f: f3:14:3a:be:d1:6d:8d:e7:d4:23:98:b9:25:6c:22: 20:2e:1f:9f:c6:0d:dd:a9:a0:67:f9:f1:82:76:96: c7:ab:72:9b:ba:42:eb:b9:06:22:6d:c8:02:b9:48: ea:e3:7f:7b:79:4e:26:40:d3:16:04:b8:9e:e3:d2: 68:f5:b9:08:17:45:d3:51:47:62:af:d5:ba:fe:30: 38:16:e9:c4:75:5d:91:ca:33:4b:2d:eb:bb:f4:b7: c2:9f:92:35:0e:0a:2f:09:2a:a5:de:1c:40:a8:24: af:65:8a:be:0d:39:60:4d:40:62:1c:cd:d8:92:dc: 2c:94:d5:e2:4e:7b:19:a8:33:1f:b7:49:5b:36:ba: b0:28:bc:c1:b5:d9:ed:95:44:8f:d8:97:d4:74:47: 00:b3:08:b0:60:19:6c:a6:f1:18:2b:d5:6d:59:0e: cd:02:0f:82:4e:cc:56:f6:41:42:0a:d7:86:9d:47: 7a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:31:7F:09:70:15:F2:54:D0:E8:8F:C2:38:CC:75:ED:57:06:84:D0 X509v3 Authority Key Identifier: keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:2d:8f:52:54:cf:11:9e:66:6a:85:25:1b:f2:b8:5d:53:22: 60:b2:1e:dc:fc:18:41:81:4e:a0:26:27:d7:2a:c6:71:22:f4: 80:4c:d9:9d:8c:a5:d2:12:8a:62:3a:db:f8:d6:94:7c:2b:13: 50:e6:b9:f5:a8:dc:25:89:a3:25:bd:b0:d7:50:b8:06:99:09: 44:d7:2d:78:d0:3c:4d:fd:ee:45:93:46:73:9a:2b:ab:21:33: e8:84:ce:cd:ee:3a:84:b9:de:90:49:9e:39:40:b6:72:eb:89: d4:c4:51:05:58:7a:43:d9:d9:35:d6:99:76:e7:b3:eb:c0:a6: 19:2e:91:89:8d:da:2b:b7:60:25:55:de:2d:ad:64:10:5f:a7: 14:b7:29:14:d9:af:5c:41:f1:2d:d1:e6:93:20:52:4a:d9:34: 4b:1e:0e:2d:cd:76:67:50:1c:22:73:0b:81:aa:ac:fe:43:c7: 4b:77:c7:0d:d3:fb:b8:62:2c:6f:dc:5b:f0:e1:81:cb:a5:ca: c3:19:3b:b6:ec:59:2f:02:06:74:4a:fa:ba:c2:e4:1e:43:b0: 2b:95:62:69:20:d8:c5:4f:4e:cc:38:6f:72:21:ec:10:51:b4: 21:3c:99:36:88:63:9f:0f:d9:1f:f5:f3:38:3e:83:ca:19:a6: d2:02:01:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vva1Nd6V9AtY6Cv9yuh5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NTU0NzgwZGIyNWIyNDNjMGEyZDM2MTk3OWIxMzBhN2Yx M2M2MGQwHhcNMjYwMTI1MjAwMTA4WhcNMjYwMTI2MjAwMTA4WjAzMTEwLwYDVQQD Eyg5NzMxN2YwOTcwMTVmMjU0ZDBlODhmYzIzOGNjNzVlZDU3MDY4NGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaf7rrvxnZs1Fs7fDH9I91qwZlyg U7L8YK+pMb4BLwJH1waorK56ZVnqSVIFOESGR4JlOASabevLCrP0JQFcUWeQ173+ TNU33l/zFDq+0W2N59QjmLklbCIgLh+fxg3dqaBn+fGCdpbHq3KbukLruQYibcgC uUjq4397eU4mQNMWBLie49Jo9bkIF0XTUUdir9W6/jA4FunEdV2RyjNLLeu79LfC n5I1DgovCSql3hxAqCSvZYq+DTlgTUBiHM3YktwslNXiTnsZqDMft0lbNrqwKLzB tdntlUSP2JfUdEcAswiwYBlspvEYK9VtWQ7NAg+CTsxW9kFCCteGnUd6MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcxfwlwFfJU0OiPwjjMde1XBoTQMB8GA1UdIwQY MBaAFIlVR4DbJbJDwKLTYZebEwp/E8YNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zZTIwNzctYmMxMC00NjIxLWFiMGIt ZGJhNGM5Yjg3MDZiLzEvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zZTIwNzctYmMxMC00NjIxLWFiMGItZGJhNGM5Yjg3MDZi LzEvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUC2PUlTP EZ5maoUlG/K4XVMiYLIe3PwYQYFOoCYn1yrGcSL0gEzZnYyl0hKKYjrb+NaUfCsT UOa59ajcJYmjJb2w11C4BpkJRNcteNA8Tf3uRZNGc5orqyEz6ITOze46hLnekEme OUC2cuuJ1MRRBVh6Q9nZNdaZduez68CmGS6RiY3aK7dgJVXeLa1kEF+nFLcpFNmv XEHxLdHmkyBSStk0Sx4OLc12Z1AcInMLgaqs/kPHS3fHDdP7uGIsb9xb8OGBy6XK wxk7tuxZLwIGdEr6usLkHkOwK5ViaSDYxU9OzDhvciHsEFG0ITyZNohjnw/ZH/Xz OD6Dyhmm0gIB8Q== -----END CERTIFICATE-----Generated at Sun Jan 25 22:36:28 2026 by rpki-client