This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: s+Oxaj9CLiAhVOQNCtpay6EFXYfdfmBONBrOpspfI7E= Subject key identifier: BA:C2:40:B8:FE:F8:E8:27:BB:74:5C:24:82:7D:9C:63:68:1B:4C:1E Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 019BF53ECB8DF50F0C89B5A2D85AC1054F6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 17DD Signing time: Sun 25 Jan 2026 13:01:31 +0000 Manifest this update: Sun 25 Jan 2026 13:01:31 +0000 Manifest next update: Mon 26 Jan 2026 13:01:31 +0000 Files and hashes: 1: 16Y1yxGLE6UIufa5rH9U3RXAvAs.roa (hash: hVmSptnLaPbenQ9xb8iMn2l1+6sGRbct+J+Pmp6z9tk=) 2: F4LdvSuBLKoy58NMp2qP4-TZx2U.roa (hash: BFVQu+JaHlGGz8F88qjrXCmVUp4qOhDziCZpUN8E7E0=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: Jvny8U61LsurL0LeT+IakHvrqAvFxzGUKdwEodnHa6c=) 4: ODJrKCxhZJXL46-GyJpCGE1A_QM.roa (hash: +3sffUArpiGjIESwpid7XyaHYYYvbrxKYnkoG38bS64=) 5: SX9U68Arj-_uoekiWex6QgdNbwQ.roa (hash: joN8VUGdRybF07eLYHwoTuABQ2kur7JqOJpxlpvlHks=) 6: WjbQcTlDKpaAfqXkZDDiOvmh4dY.roa (hash: BUe0stMaaOWFp6WiIn+aiGaAl/vpI8FjtrNGbrBCxE0=) 7: gEhVWWVbCAuop-zcWZ0zv4pjLxE.roa (hash: xokrZ815d4gYLrLWpgPe6s/SM+gm8TEbsLKu7jgKc28=) 8: gGeNvgahudXxUPNz9yBFk3kYHS4.roa (hash: 8c8Cgq9i3zCtWdYo/SCuVm2tnZ6RLv62A6IykYPbs7Y=) 9: jLaFsD-7kv57uS82Ky9IjH2qI7s.roa (hash: GKSCCv4N+IaXAABFBigYWinS7vfCaNGsxXry11fPlQE=) 10: y1YWxB7Fy5s5YzamhDItkot32uM.roa (hash: 8TggUtk0Rbk0S6hBWI88A8FYg1Cv2yGjFHoHN2htAJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:cb:8d:f5:0f:0c:89:b5:a2:d8:5a:c1:05:4f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Jan 25 13:01:31 2026 GMT Not After : Jan 26 13:01:31 2026 GMT Subject: CN=bac240b8fef8e827bb745c24827d9c63681b4c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:99:c3:71:08:45:7c:23:74:10:43:8f:51:4a: d6:45:f2:cb:da:7c:e7:e4:6f:db:37:5b:30:45:47: 80:66:dc:3d:89:7d:03:a9:cb:49:c8:89:15:fc:6a: 36:39:fd:f5:b1:a5:0a:b9:89:84:c2:1c:5d:5e:51: e5:ec:e9:07:4f:31:08:57:03:5b:1c:b6:08:49:11: c7:e2:01:be:b6:57:6a:e6:4d:dc:7e:a6:6a:f9:e4: 36:cc:9c:98:d6:55:10:ea:3b:b1:1b:36:49:26:5e: 09:9f:36:e1:3e:4c:28:32:0c:fa:47:6a:a4:b4:d4: 16:d6:43:04:68:8e:89:36:f8:9a:75:8d:da:b0:ac: 35:d0:85:73:ea:bf:c5:d9:cb:79:eb:85:91:e3:3b: 28:5f:0d:91:29:60:f2:d4:d6:d8:4b:9e:a5:bd:f2: da:e4:0a:b0:c7:20:f9:e3:46:4e:23:34:ce:25:d6: 1b:d0:c6:73:db:3c:f6:6c:0f:78:37:f1:d9:08:69: f3:5c:a5:02:40:24:65:f0:59:f3:a7:c3:de:9d:1e: 4b:5f:02:8f:81:24:c4:d8:84:a1:e2:4e:b2:f8:78: 97:81:73:cc:9c:eb:fb:be:54:ba:f4:34:c9:a1:63: 0c:dd:62:9b:d2:e1:70:e8:4c:a8:98:d8:55:43:c3: 6e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C2:40:B8:FE:F8:E8:27:BB:74:5C:24:82:7D:9C:63:68:1B:4C:1E X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:cd:80:ff:eb:7b:f3:c0:03:ba:66:9e:af:f9:73:63:fa:1a: 41:3f:88:b8:ea:ec:ce:6c:75:14:df:4c:9a:20:c2:cb:f4:0d: e2:84:e1:41:a9:54:8a:31:42:bd:1d:a8:3e:a4:01:15:53:d4: d7:17:bf:99:95:d9:26:d3:88:32:9a:b9:68:ed:d1:0d:b1:7a: 7a:95:6b:6a:70:21:fe:e0:4d:12:30:0d:8e:32:10:fa:77:6a: 1a:ae:59:26:dc:ea:c6:e9:f5:76:92:c6:99:13:fc:89:5e:76: 95:da:3d:4a:92:67:cc:e4:4e:95:9c:04:d6:d5:5e:ee:cc:a2: ee:87:29:c4:8e:1a:88:dc:03:29:78:ef:72:cc:68:fc:75:7c: e7:3c:4d:2e:a4:64:2f:a5:2c:22:62:f2:7b:81:99:0f:42:e1: 7c:ff:9f:e4:01:18:e4:f2:5f:50:b9:45:d4:5f:bc:2f:7d:40: 65:84:cd:c4:bf:2c:f6:b1:03:a0:63:31:e8:4f:eb:41:8b:0f: ca:fc:aa:0f:2c:7a:f6:bb:54:71:35:2a:84:6c:bf:e2:ed:2b: f6:48:55:4d:37:ac:a8:a7:89:9f:22:a8:85:45:2a:80:25:cf: 5e:17:d2:82:a8:82:08:45:84:17:c9:d9:39:69:3b:42:94:12: 5c:97:43:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PsuN9Q8MibWi2FrBBU9sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjYwMTI1MTMwMTMxWhcNMjYwMTI2MTMwMTMxWjAzMTEwLwYDVQQD EyhiYWMyNDBiOGZlZjhlODI3YmI3NDVjMjQ4MjdkOWM2MzY4MWI0YzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpnDcQhFfCN0EEOPUUrWRfLL2nzn 5G/bN1swRUeAZtw9iX0DqctJyIkV/Go2Of31saUKuYmEwhxdXlHl7OkHTzEIVwNb HLYISRHH4gG+tldq5k3cfqZq+eQ2zJyY1lUQ6juxGzZJJl4JnzbhPkwoMgz6R2qk tNQW1kMEaI6JNviadY3asKw10IVz6r/F2ct564WR4zsoXw2RKWDy1NbYS56lvfLa 5AqwxyD540ZOIzTOJdYb0MZz2zz2bA94N/HZCGnzXKUCQCRl8Fnzp8PenR5LXwKP gSTE2ISh4k6y+HiXgXPMnOv7vlS69DTJoWMM3WKb0uFw6EyomNhVQ8NuswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrCQLj++Ognu3RcJIJ9nGNoG0weMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgM2A/+t7 88ADumaer/lzY/oaQT+IuOrszmx1FN9MmiDCy/QN4oThQalUijFCvR2oPqQBFVPU 1xe/mZXZJtOIMpq5aO3RDbF6epVranAh/uBNEjANjjIQ+ndqGq5ZJtzqxun1dpLG mRP8iV52ldo9SpJnzOROlZwE1tVe7syi7ocpxI4aiNwDKXjvcsxo/HV85zxNLqRk L6UsImLye4GZD0LhfP+f5AEY5PJfULlF1F+8L31AZYTNxL8s9rEDoGMx6E/rQYsP yvyqDyx69rtUcTUqhGy/4u0r9khVTTesqKeJnyKohUUqgCXPXhfSgqiCCEWEF8nZ OWk7QpQSXJdDag== -----END CERTIFICATE-----Generated at Sun Jan 25 18:14:55 2026 by rpki-client