This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft File: ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json) Hash identifier: DW3m7ex5EMKaENA6mYwUE862itzXmvljZWYrRCya+nU= Subject key identifier: 07:53:44:22:54:AE:F9:C5:AB:E1:61:2B:E4:0E:36:6C:50:E7:33:E9 Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33 Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33 Certificate serial: 019BF5ABD2CF2EE927C1734882F17EB8A78A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft Manifest number: 17CD Signing time: Sun 25 Jan 2026 15:00:37 +0000 Manifest this update: Sun 25 Jan 2026 15:00:37 +0000 Manifest next update: Mon 26 Jan 2026 15:00:37 +0000 Files and hashes: 1: 6knPf4Z_Yom73fZwtAX7TGmnwWI.roa (hash: uMucpBFGP9VTEQFIpmoToKJaaBVJ7Z0HhGQfxWsojaw=) 2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: nGfeW3Tomx441Y9/f7s0RlHWxahl/9USQOQa6tIfsoQ=) 3: jCfveam_XFqY1WaoDM8mc53l0-A.roa (hash: oYsXoD5qrvfH3xJxru02r9mxYtA0m3BelZFuFCg04Oc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:d2:cf:2e:e9:27:c1:73:48:82:f1:7e:b8:a7:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33 Validity Not Before: Jan 25 15:00:37 2026 GMT Not After : Jan 26 15:00:37 2026 GMT Subject: CN=0753442254aef9c5abe1612be40e366c50e733e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b9:6c:a5:3c:a2:bf:3e:57:8a:8d:09:1d:93: f8:39:f5:a2:4a:d7:41:4f:04:3d:c9:01:a4:72:c7: 93:23:75:20:00:83:36:4b:17:8b:a1:7f:63:8e:2d: 2e:ff:cc:46:4c:a7:e1:ca:cb:b4:62:2a:8a:14:a7: 28:75:79:c2:40:88:5b:76:36:d6:87:85:98:dd:a7: 52:e0:28:4f:47:49:05:a8:a4:b5:81:06:78:0b:d5: ce:f7:c0:e1:cc:3c:a9:72:7c:58:46:8d:a4:10:db: db:e7:3b:bf:93:1b:00:15:06:e0:33:01:8d:91:59: 41:84:f0:d1:37:b0:66:64:31:ad:15:be:f6:ff:1b: 76:31:32:e4:ac:90:7d:89:65:72:b5:6e:50:a2:0a: 90:03:85:5c:50:e9:4d:dd:71:4a:3c:19:b7:54:43: 46:ff:85:bf:12:27:01:49:51:6f:80:91:5f:9e:ce: f7:23:06:b2:27:9f:16:54:b7:7f:7c:93:47:53:09: b7:cf:72:00:9d:bc:d0:97:d1:53:8a:bd:9a:f3:2a: 7b:42:dd:bd:c9:93:1e:ac:5a:c9:37:08:31:a1:91: d6:39:cd:61:ee:b9:22:00:f9:4a:06:cf:87:66:2d: c8:d2:9b:53:52:c5:e6:a2:8e:90:dd:ff:19:dc:ac: 19:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:53:44:22:54:AE:F9:C5:AB:E1:61:2B:E4:0E:36:6C:50:E7:33:E9 X509v3 Authority Key Identifier: keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:29:8c:6e:1f:51:21:fa:85:dc:b8:6d:a8:89:a5:2e:c0:8c: 00:a0:0b:11:c3:61:a8:fa:a9:79:10:fe:c5:d9:2f:0a:7a:0a: 5e:29:81:dc:57:10:f5:b9:81:e0:a7:11:e0:97:1f:8f:b3:4e: 36:e6:31:f4:f5:e0:77:5f:9c:25:8d:ea:98:41:7d:3c:26:73: 99:2e:21:ed:b3:30:d9:5d:e3:20:e8:39:7a:51:9b:b2:f4:84: be:70:f6:f8:a6:01:0f:fa:ea:73:2b:31:54:e9:f8:c0:bd:c1: 40:fb:1a:89:8f:09:45:ae:4d:e2:89:ed:19:b9:d8:05:3d:b5: fa:a0:9d:1c:2c:6f:dd:8e:fa:23:f2:cb:9e:1a:6e:38:ce:e8: b3:11:6a:00:77:0b:f2:3f:fe:af:4f:38:92:e6:14:54:17:24: d4:04:82:7b:a3:10:cc:48:2c:dc:77:25:2b:d2:16:d1:79:37: 38:ae:94:af:31:c6:ec:38:c4:ea:9d:c3:f9:6d:a9:10:83:a2: 1b:23:e9:71:f4:7d:19:f3:20:13:9c:bd:1b:75:4f:0f:80:a4: 3d:ae:8b:5b:40:3b:21:4b:25:d7:79:f0:79:1d:29:fa:19:ac: ae:da:ad:31:70:0d:88:4e:25:04:c5:ed:9f:2e:71:c6:21:fc: d7:c5:49:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q9LPLuknwXNIgvF+uKeKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZjRjNzg3M2I3ZmVhNDlmZjZlYjkwZDUwMmMxZGJjM2E1 ZjhjMzMwHhcNMjYwMTI1MTUwMDM3WhcNMjYwMTI2MTUwMDM3WjAzMTEwLwYDVQQD EygwNzUzNDQyMjU0YWVmOWM1YWJlMTYxMmJlNDBlMzY2YzUwZTczM2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1blspTyivz5Xio0JHZP4OfWiStdB TwQ9yQGkcseTI3UgAIM2SxeLoX9jji0u/8xGTKfhysu0YiqKFKcodXnCQIhbdjbW h4WY3adS4ChPR0kFqKS1gQZ4C9XO98DhzDypcnxYRo2kENvb5zu/kxsAFQbgMwGN kVlBhPDRN7BmZDGtFb72/xt2MTLkrJB9iWVytW5QogqQA4VcUOlN3XFKPBm3VENG /4W/EicBSVFvgJFfns73IwayJ58WVLd/fJNHUwm3z3IAnbzQl9FTir2a8yp7Qt29 yZMerFrJNwgxoZHWOc1h7rkiAPlKBs+HZi3I0ptTUsXmoo6Q3f8Z3KwZZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdTRCJUrvnFq+FhK+QONmxQ5zPpMB8GA1UdIwQY MBaAFIn0x4c7f+pJ/265DVAsHbw6X4wzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMt YmM1MTdlMTIxZDU0LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMtYmM1MTdlMTIxZDU0 LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISmMbh9R IfqF3LhtqImlLsCMAKALEcNhqPqpeRD+xdkvCnoKXimB3FcQ9bmB4KcR4Jcfj7NO NuYx9PXgd1+cJY3qmEF9PCZzmS4h7bMw2V3jIOg5elGbsvSEvnD2+KYBD/rqcysx VOn4wL3BQPsaiY8JRa5N4ontGbnYBT21+qCdHCxv3Y76I/LLnhpuOM7osxFqAHcL 8j/+r084kuYUVBck1ASCe6MQzEgs3HclK9IW0Xk3OK6UrzHG7DjE6p3D+W2pEIOi GyPpcfR9GfMgE5y9G3VPD4CkPa6LW0A7IUsl13nweR0p+hmsrtqtMXANiE4lBMXt ny5xxiH818VJ5A== -----END CERTIFICATE-----Generated at Mon Jan 26 01:19:54 2026 by rpki-client