This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft File: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json) Hash identifier: js8iBOMy2qQe1z0zCLdfQvqu1q/9O+/9WEDk/hyit2M= Subject key identifier: EE:9D:69:41:72:3D:6C:FE:3D:8E:12:E1:52:3A:2F:3F:9C:9B:D8:2A Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0 Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0 Certificate serial: 019BD8468922B85EAEB1B5A7B496B5C2C2FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft Manifest number: 17DF Signing time: Mon 19 Jan 2026 22:00:59 +0000 Manifest this update: Mon 19 Jan 2026 22:00:59 +0000 Manifest next update: Tue 20 Jan 2026 22:00:59 +0000 Files and hashes: 1: F9LtIp7aRZvTu10CPCfjgsVeCH4.roa (hash: lyI0E0/eZw0Stmmyys17aMBQvOW4Meb+VaWbd7L0/zA=) 2: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: 2pFEx27NNh5bZxdDd6RsWDkhDePHG/5dKKELE0MEM+Q=) 3: UPey1Iuc4KMtyO1x8bek9due93Y.roa (hash: KVMCzWDHAl6h2diMgEjiCZzLxzK2gigmEPW2UtR5si4=) 4: VWwoUGBYya7dT91k9xew3HleyiE.roa (hash: anOodm7+F8Ug5vPU/y7WyVSFPtcBXGPmpebjW6VOHsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:46:89:22:b8:5e:ae:b1:b5:a7:b4:96:b5:c2:c2:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0 Validity Not Before: Jan 19 22:00:59 2026 GMT Not After : Jan 20 22:00:59 2026 GMT Subject: CN=ee9d6941723d6cfe3d8e12e1523a2f3f9c9bd82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:3d:f5:f3:2d:2d:31:c0:25:77:0d:a7:90: c8:ae:e6:01:cc:09:af:f1:00:d3:b7:25:2d:42:5d: b2:e7:53:78:5f:4b:a3:8c:8b:2e:fb:51:b0:cf:1b: 95:ab:c8:3c:13:09:50:73:d3:df:f8:b0:fa:85:4a: bb:4a:3e:6a:0a:27:c0:46:44:f0:bd:26:44:9e:c6: 3a:30:21:69:14:2a:69:35:07:35:7b:20:85:45:75: 99:24:68:f8:38:8a:85:2f:c5:f7:15:37:fc:56:c4: ad:f9:a3:71:a1:6f:f5:44:a9:08:83:80:02:30:88: 64:6f:7d:c2:6e:84:7b:f8:f7:c3:23:ee:0f:d3:e0: 6e:27:5b:f6:2d:d5:96:d9:73:3e:c1:0f:85:f9:8a: 0a:5c:13:f2:9b:18:f1:2e:c3:25:99:1f:27:a3:19: 0c:be:c6:9a:ce:d3:0e:9e:85:9c:d4:e5:fd:40:27: d7:9f:89:8d:f6:c3:2f:ab:98:71:22:13:bc:1f:38: 64:5a:54:78:df:00:46:e7:d9:fb:b9:e7:31:35:65: 16:5c:16:72:b8:04:2f:d8:0d:36:d3:45:5b:3b:92: d0:3a:7a:05:cc:35:10:6a:8e:cc:f8:a8:cc:c1:21: bb:05:16:3f:75:3a:b2:e0:6c:5a:3e:7d:8a:47:ce: 00:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9D:69:41:72:3D:6C:FE:3D:8E:12:E1:52:3A:2F:3F:9C:9B:D8:2A X509v3 Authority Key Identifier: keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:d7:ba:aa:8a:1f:5a:5f:ad:2f:f4:b0:40:09:e4:53:55:06: a4:2a:29:b4:eb:19:7b:62:8e:43:a4:6f:6d:8a:73:1b:22:bb: fb:49:2f:76:32:01:8d:66:6d:a7:cb:91:5a:64:8c:4e:72:19: 75:01:8b:0a:18:37:5a:25:7f:62:e3:21:38:3e:ab:24:3c:87: ca:8f:e9:56:ef:65:53:73:ba:7e:00:11:c8:04:75:05:cf:31: bb:d3:8d:8f:d8:1e:68:77:07:7b:ed:43:19:5a:cc:2d:53:8d: e4:1b:9b:8b:75:80:f0:0e:37:3c:88:c8:ed:49:5b:7e:b8:f5: ff:7d:7b:81:90:5d:e9:7b:74:c8:28:52:b2:0a:5f:14:63:c0: b9:ec:c5:f9:e5:c5:84:a4:cb:51:f6:11:8e:c0:55:4d:56:f2: 82:f0:a5:54:c9:dc:92:fc:a9:60:67:27:88:f3:ed:1d:e8:75: 91:41:48:8b:01:6a:f0:34:a4:3e:5b:62:9e:49:45:35:28:93: 13:38:aa:4b:c7:30:41:b7:47:be:23:5d:90:94:5d:38:93:a5: 21:a3:52:d3:03:05:5d:3b:d1:da:37:5e:e5:6a:8f:54:36:97: de:8b:76:89:8c:97:24:1a:72:e7:68:c7:22:01:ea:34:eb:e4: c4:f3:ff:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYRokiuF6usbWntJa1wsL/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMGY0MTNmYjBhZjBiZDhmZTEzMDgyMGQzMDQ5ZDBlNzFl ZDRiYjAwHhcNMjYwMTE5MjIwMDU5WhcNMjYwMTIwMjIwMDU5WjAzMTEwLwYDVQQD EyhlZTlkNjk0MTcyM2Q2Y2ZlM2Q4ZTEyZTE1MjNhMmYzZjljOWJkODJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxE99fMtLTHAJXcNp5DIruYBzAmv 8QDTtyUtQl2y51N4X0ujjIsu+1GwzxuVq8g8EwlQc9Pf+LD6hUq7Sj5qCifARkTw vSZEnsY6MCFpFCppNQc1eyCFRXWZJGj4OIqFL8X3FTf8VsSt+aNxoW/1RKkIg4AC MIhkb33CboR7+PfDI+4P0+BuJ1v2LdWW2XM+wQ+F+YoKXBPymxjxLsMlmR8noxkM vsaaztMOnoWc1OX9QCfXn4mN9sMvq5hxIhO8HzhkWlR43wBG59n7uecxNWUWXBZy uAQv2A0200VbO5LQOnoFzDUQao7M+KjMwSG7BRY/dTqy4GxaPn2KR84A3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6daUFyPWz+PY4S4VI6Lz+cm9gqMB8GA1UdIwQY MBaAFCIPQT+wrwvY/hMIINMEnQ5x7UuwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjM1N2QtYjE3MC00MGE1LWE2Njkt ODJlYmEwY2IzYjBkLzEvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjM1N2QtYjE3MC00MGE1LWE2NjktODJlYmEwY2IzYjBk LzEvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdte6qoof Wl+tL/SwQAnkU1UGpCoptOsZe2KOQ6RvbYpzGyK7+0kvdjIBjWZtp8uRWmSMTnIZ dQGLChg3WiV/YuMhOD6rJDyHyo/pVu9lU3O6fgARyAR1Bc8xu9ONj9geaHcHe+1D GVrMLVON5Bubi3WA8A43PIjI7Ulbfrj1/317gZBd6Xt0yChSsgpfFGPAuezF+eXF hKTLUfYRjsBVTVbygvClVMnckvypYGcniPPtHeh1kUFIiwFq8DSkPltinklFNSiT EziqS8cwQbdHviNdkJRdOJOlIaNS0wMFXTvR2jde5WqPVDaX3ot2iYyXJBpy52jH IgHqNOvkxPP/rQ== -----END CERTIFICATE-----Generated at Tue Jan 20 04:34:38 2026 by rpki-client