This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft File: iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json) Hash identifier: B0NwaFvQgLxELTrjEYXE9b6vs6t2DDejC2DqMkDoKW0= Subject key identifier: 5B:1C:61:60:63:D2:AF:9F:23:58:FB:FB:36:BD:37:06:8F:D1:B1:95 Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0 Certificate issuer: /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0 Certificate serial: 019BF9C030878CE7F800B867B0031D21BEAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft Manifest number: 0EA2 Signing time: Mon 26 Jan 2026 10:01:20 +0000 Manifest this update: Mon 26 Jan 2026 10:01:20 +0000 Manifest next update: Tue 27 Jan 2026 10:01:20 +0000 Files and hashes: 1: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: fl7LiIhv5Ap7LcHmdvxSnbZpSV0Z7Jv2XwgC05niuzY=) 2: jzAkYuzy0NM24DLxJG0nO2NEr2U.roa (hash: wNAWGH60q5oOPI5elDbJUeO2WCg0rkQsTkxovsLZh+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c0:30:87:8c:e7:f8:00:b8:67:b0:03:1d:21:be:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0 Validity Not Before: Jan 26 10:01:20 2026 GMT Not After : Jan 27 10:01:20 2026 GMT Subject: CN=5b1c616063d2af9f2358fbfb36bd37068fd1b195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:00:bb:2d:e9:d0:5a:c8:c2:a7:0c:19:25:c6: e3:8a:1b:fc:7b:fc:24:12:1b:9d:cd:1b:0a:3f:00: e7:8d:f3:6c:a6:29:41:f7:46:6c:d3:1d:5e:ad:60: 46:82:69:cd:7e:26:9f:9e:02:28:0a:9e:58:36:65: c3:c9:af:10:03:8a:97:9e:5f:e9:7a:8e:36:bf:18: 37:e0:44:28:c8:44:1e:ad:cf:fa:7c:31:cd:a6:e2: f8:fa:03:11:bc:9a:4b:92:62:71:55:11:13:01:1a: ce:d8:3f:f8:2a:7e:77:0d:37:0b:7e:0b:0d:8f:3f: ba:6c:e5:0d:a7:90:60:62:b9:9b:54:05:1b:b0:87: 02:62:60:7a:60:b7:24:c4:e5:e2:0f:d7:40:7f:fd: 26:bb:ea:e9:9b:46:3a:2f:91:d9:2e:44:c8:be:3c: cd:66:46:7c:7b:b8:7b:47:35:fb:af:8a:d9:96:1e: 12:a5:88:3a:a6:41:75:ea:27:7c:88:37:a1:0e:dd: 0f:f5:16:06:c0:1c:1e:50:f3:4d:7b:8e:04:31:1e: f3:b5:b0:7b:45:bc:dc:74:03:7b:74:d8:4e:85:06: 1c:12:be:97:0f:08:38:48:b1:f9:bd:fc:0d:3a:8a: 1f:f4:2f:09:c7:16:3c:fb:21:91:1f:4c:fa:63:73: a7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1C:61:60:63:D2:AF:9F:23:58:FB:FB:36:BD:37:06:8F:D1:B1:95 X509v3 Authority Key Identifier: keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d1:6b:b9:7b:79:5c:75:3e:b6:85:49:8b:ea:12:73:34:22: db:3c:d7:4d:7a:d5:83:6b:2d:08:ad:d0:37:2c:cb:2d:49:4f: 74:e1:c1:88:33:27:40:43:40:18:75:a5:ce:bb:5e:a7:46:4f: a9:1c:16:a5:de:2f:ba:12:33:ca:83:a8:28:fe:09:51:e5:7b: d5:45:79:b8:e5:06:9e:c3:0b:ce:7e:72:d8:84:9c:0a:70:0e: 1e:af:5a:5c:ec:81:4f:c9:59:4d:19:95:bb:30:cc:e6:9c:09: 27:a7:a9:41:df:d5:97:89:74:e6:69:7f:42:67:93:40:80:62: 5d:50:86:66:f0:ad:79:22:7c:18:87:91:2c:81:1d:b5:a0:c6: e5:8d:0e:c2:cb:81:2b:1f:f6:aa:dc:eb:24:69:64:ab:f1:41: 81:9c:c5:6b:a8:81:e8:ea:20:8c:d1:d0:55:2e:1e:d8:f0:10: 31:09:0d:d6:87:3d:8f:bb:f6:27:3b:db:e0:c2:c2:bc:72:9a: 7b:95:65:c0:86:04:30:20:3a:ef:5f:65:0e:7a:f1:03:b7:ce: 2a:f8:e0:b6:a7:0f:77:9e:85:00:41:c5:22:07:83:48:74:64: ff:b0:d6:64:38:7d:8a:d3:09:a2:ac:b3:ae:6b:bb:7b:9b:67: 81:6b:17:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5wDCHjOf4ALhnsAMdIb6qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZTEzOWFmMDg5OWY1ZDZiNWIzMjU4MTM3M2VkYTMwMzdl YTMwYzAwHhcNMjYwMTI2MTAwMTIwWhcNMjYwMTI3MTAwMTIwWjAzMTEwLwYDVQQD Eyg1YjFjNjE2MDYzZDJhZjlmMjM1OGZiZmIzNmJkMzcwNjhmZDFiMTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgC7LenQWsjCpwwZJcbjihv8e/wk EhudzRsKPwDnjfNspilB90Zs0x1erWBGgmnNfiafngIoCp5YNmXDya8QA4qXnl/p eo42vxg34EQoyEQerc/6fDHNpuL4+gMRvJpLkmJxVRETARrO2D/4Kn53DTcLfgsN jz+6bOUNp5BgYrmbVAUbsIcCYmB6YLckxOXiD9dAf/0mu+rpm0Y6L5HZLkTIvjzN ZkZ8e7h7RzX7r4rZlh4SpYg6pkF16id8iDehDt0P9RYGwBweUPNNe44EMR7ztbB7 RbzcdAN7dNhOhQYcEr6XDwg4SLH5vfwNOoof9C8JxxY8+yGRH0z6Y3On+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFscYWBj0q+fI1j7+za9NwaP0bGVMB8GA1UdIwQY MBaAFIrhOa8ImfXWtbMlgTc+2jA36jDAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iMjAzZjQtODI3MS00NmU3LThhNGEt ZjllMmMyZmRiZjM1LzEvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9iMjAzZjQtODI3MS00NmU3LThhNGEtZjllMmMyZmRiZjM1 LzEvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNFruXt5 XHU+toVJi+oSczQi2zzXTXrVg2stCK3QNyzLLUlPdOHBiDMnQENAGHWlzrtep0ZP qRwWpd4vuhIzyoOoKP4JUeV71UV5uOUGnsMLzn5y2IScCnAOHq9aXOyBT8lZTRmV uzDM5pwJJ6epQd/Vl4l05ml/QmeTQIBiXVCGZvCteSJ8GIeRLIEdtaDG5Y0OwsuB Kx/2qtzrJGlkq/FBgZzFa6iB6OogjNHQVS4e2PAQMQkN1oc9j7v2Jzvb4MLCvHKa e5VlwIYEMCA6719lDnrxA7fOKvjgtqcPd56FAEHFIgeDSHRk/7DWZDh9itMJoqyz rmu7e5tngWsXvw== -----END CERTIFICATE-----Generated at Mon Jan 26 15:21:15 2026 by rpki-client