This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft File: itJAYD7G681i9y1G8dwAy34fCy4.mft (raw, json) Hash identifier: HOG+ymG6f8WlRlOj7w9EULUsBYjzKE/rmBAXg7NoWkk= Subject key identifier: 41:28:20:DC:28:EF:A3:37:29:B6:AF:E8:8A:42:EC:92:AE:93:0E:57 Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e Certificate serial: 019BFA9B5274BB1F3A17CFAAC2EEDF9958B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft Manifest number: 17F0 Signing time: Mon 26 Jan 2026 14:00:41 +0000 Manifest this update: Mon 26 Jan 2026 14:00:41 +0000 Manifest next update: Tue 27 Jan 2026 14:00:41 +0000 Files and hashes: 1: KpyePpi0BQOtPpSVVikAIl2skgo.roa (hash: Ukwdvn9MeAWiIbUvrqdNT9WEFPzcoAHZi8Gv9MxSNAs=) 2: _OkMfangRHHR3pkyqVAWkqY7mag.roa (hash: 4q+Nhgpids6AoAL8lqsvtN3qpgNozHDLR3s1mrSSncQ=) 3: a3zHXiytnxR6C7Yya8cqACPMcyc.roa (hash: T1Jty2//hchc0LCzlubxKMABR/tRMsPUV0k73TQ7gFM=) 4: itJAYD7G681i9y1G8dwAy34fCy4.crl (hash: JjNGK+pnTLoqzj2NN05pDrks+bq7tuGCdG0N8/JYdBk=) 5: m3UYalXj1FlItkx4Rfdvy-zoe3E.roa (hash: fRgZKtug12cWuESnK4ZE4YhyfFuUNO2BSLzpL2F6bjY=) 6: qwWdo-9lTcBvLCHf4H2oZNKYs8g.roa (hash: molpqRNT26EZTf8c40L3ZxZs9DbMAoqcJ+gd6HHZ1w4=) 7: x-EfdPPH41fBBpjZ7XVWx9BVt_s.roa (hash: GJIuPJGUowMmXdPxeaXLT8tgyWA+GgGHmT3ek3XlWMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:52:74:bb:1f:3a:17:cf:aa:c2:ee:df:99:58:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e Validity Not Before: Jan 26 14:00:41 2026 GMT Not After : Jan 27 14:00:41 2026 GMT Subject: CN=412820dc28efa33729b6afe88a42ec92ae930e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:6c:81:11:fd:53:ef:8e:c4:5d:c2:70:e5: 84:23:d5:92:ce:9d:e1:98:82:f7:29:6c:58:3f:58: 57:da:fc:a8:5f:8b:05:11:aa:48:0b:9e:c6:42:5f: 36:b4:e5:4d:a2:a4:d1:f0:0a:0c:8d:a5:b5:64:83: e6:57:e8:d7:31:50:d2:e0:39:14:8e:7a:09:31:4d: 2a:3f:2e:ea:2e:11:e4:5c:3c:ae:ee:88:5d:6d:bd: f4:af:34:be:f3:c0:56:40:6d:b0:85:52:29:ce:48: 02:60:99:5a:89:9a:b2:14:b1:e4:83:26:29:72:38: 89:dc:99:1e:83:95:59:a0:d0:bb:0f:ef:c5:53:3e: 25:5c:70:0a:3b:de:4b:07:f2:f0:d0:c8:1f:31:97: 7f:b5:57:0e:f2:c8:64:fe:0a:87:65:07:06:4c:bb: 0b:64:ff:92:a6:25:49:87:60:ad:f9:1f:ee:33:ca: 97:27:47:8f:ae:8a:5b:29:0a:16:90:67:4a:52:cd: 0b:e1:3a:6e:fd:d3:6a:da:af:f3:08:62:34:1e:f9: ab:d1:b2:d8:87:a2:fb:35:1e:a5:01:03:fb:13:ac: 27:7c:ea:24:c2:78:48:e7:1a:92:91:3a:7d:d4:0e: 7c:dc:7e:a7:17:fa:e5:59:7d:60:3e:7a:c4:96:c6: 24:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:28:20:DC:28:EF:A3:37:29:B6:AF:E8:8A:42:EC:92:AE:93:0E:57 X509v3 Authority Key Identifier: keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:3e:93:fe:fa:b5:91:43:f2:52:df:7d:05:69:5e:24:d3:e7: a6:9b:68:20:09:70:e3:53:55:f8:e2:bd:07:b1:11:e5:a8:ee: 28:19:39:66:7e:e8:f8:1b:61:7a:12:d4:25:6f:fc:8a:4f:7c: 9b:79:18:00:83:d7:42:f9:3d:20:7d:81:38:a5:c3:20:80:93: 2b:4a:fb:d3:ea:10:a6:cd:dc:5a:e1:4d:bb:af:70:c5:fe:fc: 04:4c:53:ab:e9:c0:01:a9:e7:3f:98:e9:b9:96:ca:c7:8b:f7: c3:72:87:a2:28:41:d1:17:a2:3f:23:47:73:2c:a5:e6:5a:a7: 54:c5:dc:a4:79:ff:ea:57:37:e7:a3:16:8f:3c:a8:84:b6:24: 65:9d:47:76:4d:a6:dd:36:a7:8f:f2:6a:7e:63:5a:f1:ba:c1: 33:97:e5:eb:db:68:4d:3d:d1:34:76:05:04:dd:8b:14:ab:0c: 89:54:83:b1:af:7e:9c:62:b6:bb:08:73:e8:62:55:17:4b:35: 72:ac:91:5e:ce:2e:64:2b:7d:27:09:be:83:12:be:a5:89:96: 06:13:c5:c5:47:ca:e8:d1:9d:ee:95:2c:a9:ff:67:fe:ff:ce: 7b:22:3a:ac:4b:2b:ca:b9:10:a1:3a:76:ea:19:da:e9:d1:3b: 61:90:d3:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m1J0ux86F8+qwu7fmVi0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDI0MDYwM2VjNmViY2Q2MmY3MmQ0NmYxZGMwMGNiN2Ux ZjBiMmUwHhcNMjYwMTI2MTQwMDQxWhcNMjYwMTI3MTQwMDQxWjAzMTEwLwYDVQQD Eyg0MTI4MjBkYzI4ZWZhMzM3MjliNmFmZTg4YTQyZWM5MmFlOTMwZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ5sgRH9U++OxF3CcOWEI9WSzp3h mIL3KWxYP1hX2vyoX4sFEapIC57GQl82tOVNoqTR8AoMjaW1ZIPmV+jXMVDS4DkU jnoJMU0qPy7qLhHkXDyu7ohdbb30rzS+88BWQG2whVIpzkgCYJlaiZqyFLHkgyYp cjiJ3Jkeg5VZoNC7D+/FUz4lXHAKO95LB/Lw0MgfMZd/tVcO8shk/gqHZQcGTLsL ZP+SpiVJh2Ct+R/uM8qXJ0ePropbKQoWkGdKUs0L4Tpu/dNq2q/zCGI0Hvmr0bLY h6L7NR6lAQP7E6wnfOokwnhI5xqSkTp91A583H6nF/rlWX1gPnrElsYkPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEoINwo76M3Kbav6IpC7JKukw5XMB8GA1UdIwQY MBaAFIrSQGA+xuvNYvctRvHcAMt+HwsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80MjUxNDktOWM2OC00MWZiLTgwMzUt ZDc2YzhjNzM5ODYxLzEvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy80MjUxNDktOWM2OC00MWZiLTgwMzUtZDc2YzhjNzM5ODYx LzEvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFj6T/vq1 kUPyUt99BWleJNPnpptoIAlw41NV+OK9B7ER5ajuKBk5Zn7o+BthehLUJW/8ik98 m3kYAIPXQvk9IH2BOKXDIICTK0r70+oQps3cWuFNu69wxf78BExTq+nAAannP5jp uZbKx4v3w3KHoihB0ReiPyNHcyyl5lqnVMXcpHn/6lc356MWjzyohLYkZZ1Hdk2m 3Tanj/JqfmNa8brBM5fl69toTT3RNHYFBN2LFKsMiVSDsa9+nGK2uwhz6GJVF0s1 cqyRXs4uZCt9Jwm+gxK+pYmWBhPFxUfK6NGd7pUsqf9n/v/OeyI6rEsryrkQoTp2 6hna6dE7YZDTbQ== -----END CERTIFICATE-----Generated at Mon Jan 26 21:11:53 2026 by rpki-client