This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json) Hash identifier: X9Sm2DBIaqQp7vehsnaFWbTpD7h1zE3gYA9ziRG9KBc= Subject key identifier: 45:C7:E5:3B:BC:92:07:8C:BF:07:68:18:52:B6:4D:98:4E:6C:A7:0A Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91 Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091 Certificate serial: 019BFBE54EA525C15B44B497CD06CD54C3E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft Manifest number: 04C0 Signing time: Mon 26 Jan 2026 20:01:07 +0000 Manifest this update: Mon 26 Jan 2026 20:01:07 +0000 Manifest next update: Tue 27 Jan 2026 20:01:07 +0000 Files and hashes: 1: 6Vq6nX6qZxxpHxLNn7nD2R9p3vg.roa (hash: cCFRmS9OiVLkCF1BaRT3CqFY4I6S01WCAYWaFPvUJRM=) 2: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: 7R9W0lyJJZtDg1JedepPn6KnTSrH4knQbPx0SjX/l9k=) 3: T3pwpqAx_LdJ9PA4OdxVsrjZotQ.roa (hash: Iv53mpeLIF4jhLKuNnWEt8LtAUDhecBCNu6Oav+UHYA=) 4: odsSUTtPJPY75I9Zu_ls8a1wvOc.roa (hash: 8zQ2Vdy6wu34NWAET+jUEJ6+Fe7oiwnmUhMA5ElAuFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e5:4e:a5:25:c1:5b:44:b4:97:cd:06:cd:54:c3:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091 Validity Not Before: Jan 26 20:01:07 2026 GMT Not After : Jan 27 20:01:07 2026 GMT Subject: CN=45c7e53bbc92078cbf07681852b64d984e6ca70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0a:de:a2:02:33:ae:f7:19:b0:eb:6b:68:82: 31:65:15:7b:32:84:03:e0:89:a5:10:14:53:60:e8: 61:db:b9:a8:5a:05:c0:e7:02:39:e7:6e:69:cf:e5: 62:b3:32:13:b8:34:92:a1:31:94:81:bd:97:f7:4b: 4f:63:91:bb:14:5a:58:22:4f:0e:1d:49:44:ee:49: f0:f0:ed:5c:f4:5d:2e:e0:0a:07:6d:87:5f:1f:6e: 54:32:dc:35:2e:a2:21:4f:7e:1f:65:d0:5b:ac:dd: e5:54:f4:22:6a:2e:c4:e1:f3:cb:ac:e7:d1:b2:ab: 0c:bb:61:07:8a:54:bd:d2:03:ad:fb:de:5f:21:97: ab:ed:fe:53:41:28:27:0a:28:96:fc:0f:c8:8f:f5: 11:cd:df:df:89:4f:42:63:ec:54:11:e8:d0:f1:99: 22:dd:45:3a:f1:da:28:7a:db:69:52:f7:70:68:ef: bf:29:a8:61:f1:7f:3d:f8:9d:75:43:43:2d:44:a8: 50:70:c2:bd:97:0a:52:5d:6f:28:a9:4d:67:ae:14: a5:70:8b:05:6f:65:1c:1c:8c:78:bd:35:2a:45:5d: 0d:60:bf:f9:90:92:77:d8:58:68:b4:e1:07:e3:53: 23:83:eb:24:f8:52:51:8c:51:6f:41:cf:6d:6d:c0: 3a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C7:E5:3B:BC:92:07:8C:BF:07:68:18:52:B6:4D:98:4E:6C:A7:0A X509v3 Authority Key Identifier: keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c5:95:ea:da:85:3a:d0:36:1f:8c:56:c9:88:43:57:cf:b0: 31:57:c0:bb:8f:5b:53:d2:57:f2:b6:b8:2a:9b:2c:eb:90:1a: 09:9e:51:dc:a5:ce:27:23:d3:3c:97:37:3e:c6:94:a9:55:73: 9b:ce:45:95:76:5e:1f:4a:c2:ae:71:8e:86:b6:18:45:06:50: a8:01:26:b9:33:db:f7:cb:01:6b:ec:c8:f8:45:95:a9:d1:47: 25:31:9b:52:ac:c3:a7:50:1a:7e:52:a0:91:43:43:7f:76:51: 68:2e:76:18:b1:71:99:08:35:4d:a9:19:2f:b3:82:d3:2e:e0: 59:e2:44:92:84:63:d2:91:a0:3b:ba:89:3e:03:ae:42:1b:d7: 85:89:40:16:c2:02:de:f5:38:98:51:ad:9d:1c:92:89:f0:1e: 80:76:5c:94:b2:8a:3b:c7:5d:52:10:5c:a9:e2:25:36:e9:fb: 7c:e6:97:df:1d:79:14:70:68:22:bf:76:9e:4d:89:49:69:88: 36:3a:4f:03:6a:d4:3e:03:eb:a7:76:c1:6b:b6:18:fb:90:1f: ce:ad:e4:21:25:0c:e5:8e:cb:27:5d:05:3e:03:00:c5:7c:ea: c8:43:b8:95:4e:f9:80:9d:e4:50:c0:05:eb:9e:64:94:00:68: f9:63:6e:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75U6lJcFbRLSXzQbNVMPoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMGFiMGQ3YWUwMWM3YmE3ZGE2OWQ3MWE5MTQ3MmIzOTBj ZDcwOTEwHhcNMjYwMTI2MjAwMTA3WhcNMjYwMTI3MjAwMTA3WjAzMTEwLwYDVQQD Eyg0NWM3ZTUzYmJjOTIwNzhjYmYwNzY4MTg1MmI2NGQ5ODRlNmNhNzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAreogIzrvcZsOtraIIxZRV7MoQD 4ImlEBRTYOhh27moWgXA5wI5525pz+ViszITuDSSoTGUgb2X90tPY5G7FFpYIk8O HUlE7knw8O1c9F0u4AoHbYdfH25UMtw1LqIhT34fZdBbrN3lVPQiai7E4fPLrOfR sqsMu2EHilS90gOt+95fIZer7f5TQSgnCiiW/A/Ij/URzd/fiU9CY+xUEejQ8Zki 3UU68dooettpUvdwaO+/Kahh8X89+J11Q0MtRKhQcMK9lwpSXW8oqU1nrhSlcIsF b2UcHIx4vTUqRV0NYL/5kJJ32FhotOEH41Mjg+sk+FJRjFFvQc9tbcA6AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXH5Tu8kgeMvwdoGFK2TZhObKcKMB8GA1UdIwQY MBaAFCIKsNeuAce6faadcakUcrOQzXCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mMDQ2NTgtZmFkNy00MjNjLWJiNDIt ODJmYTNkMjYwODY5LzEvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mMDQ2NTgtZmFkNy00MjNjLWJiNDItODJmYTNkMjYwODY5 LzEvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcWV6tqF OtA2H4xWyYhDV8+wMVfAu49bU9JX8ra4Kpss65AaCZ5R3KXOJyPTPJc3PsaUqVVz m85FlXZeH0rCrnGOhrYYRQZQqAEmuTPb98sBa+zI+EWVqdFHJTGbUqzDp1AaflKg kUNDf3ZRaC52GLFxmQg1TakZL7OC0y7gWeJEkoRj0pGgO7qJPgOuQhvXhYlAFsIC 3vU4mFGtnRySifAegHZclLKKO8ddUhBcqeIlNun7fOaX3x15FHBoIr92nk2JSWmI NjpPA2rUPgPrp3bBa7YY+5Afzq3kISUM5Y7LJ10FPgMAxXzqyEO4lU75gJ3kUMAF 655klABo+WNuMw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:35:27 2026 by rpki-client