This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: yL/Kh8DniQ29Sn1gBhvaEQJ4WqQ6emygNvxfXRzh5fk= Subject key identifier: 34:9D:55:63:DD:BA:42:6A:73:41:DF:A8:20:F4:F5:47:DE:23:69:8F Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 019BDE128D785E963A61DD89D01CEF0FFFD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 1803 Signing time: Wed 21 Jan 2026 01:01:56 +0000 Manifest this update: Wed 21 Jan 2026 01:01:56 +0000 Manifest next update: Thu 22 Jan 2026 01:01:56 +0000 Files and hashes: 1: 82H1zOCTQDypvCqoPuf64HIGCNs.roa (hash: OjMqE4nBwVgcGVmO5TIDFN6XpFP5Ht4TkG9+jF5A/Lc=) 2: DZMUgwqZTew_AIq02ZLPKDpbTYE.roa (hash: zHfVpuiksrUGKB8ICNHjrDl5IxhuSu4hChZHL57TIOU=) 3: E_7ISSwzh-AzkcURcKG1UBHObwg.roa (hash: fZa0WBEUKgsquXMzv9u9jFUdHdw7HPHhLmdCS89OIG4=) 4: PMLPEEMeDaCa9G0bvEGYFmbkz4U.roa (hash: tkN/efywA+5kpM31KV+mqm28OwLiTj+XO+01vH0nfrA=) 5: PdhTLCzS94CSZKH6b3DIBk5Rvps.roa (hash: aEYKUEVb3YSj13VmPxeTpVeblAEFaCEyE+oxalL99hY=) 6: PdiLR6TNVHL1PiwB_9TjhY2_4Mw.roa (hash: fxJolf7HcMsKt8n4SeoLRKU0s9QwXZsLgW50Kw3yYQM=) 7: cJZ1eCq8wNMXKNwTEszQ8TczfTc.roa (hash: 0VY9Ph5RNw4cSf706jloXuKMKAZqhCe3Ib9xhrKBEjQ=) 8: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: 4AHAHtMxKwCqLj9a5bFHJqFdY6kO0fWDmR36bRIUCgw=) 9: ct7G4Mom5Boc802bEbFFnAVpv-0.roa (hash: adbr+0r2/YFext/ZvzXaEL0mKU5w0/dxwR1z36K4Lc4=) 10: mhTVQr4r3DZ7VGITyIG_xnJTKZ0.roa (hash: wCR6DC8Pqa4qxwOFxGkFj4Y4ZzJ+te0bBqmlHbBzVjQ=) 11: ty8paLCk4TaEs9kfb6irUZZ4p-g.roa (hash: E3jPnIGaX9YCeoKgK4OtXqPGRq5byhzJcS6QFpLOQV8=) 12: w54MSAoYkvWAhyocjd5urm0fs-o.roa (hash: Fxvw/XX9z5X/yBtzMmWjgC1aQmrGLx6Nw2e1Qr38xVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:12:8d:78:5e:96:3a:61:dd:89:d0:1c:ef:0f:ff:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Jan 21 01:01:56 2026 GMT Not After : Jan 22 01:01:56 2026 GMT Subject: CN=349d5563ddba426a7341dfa820f4f547de23698f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fc:2a:b8:d4:88:ff:ec:2b:dc:55:15:74:3a: 76:ff:fb:85:49:d9:a1:78:0f:db:06:44:8a:bc:a7: 76:d1:b5:f2:ea:ce:39:c7:bd:cd:c5:46:1a:a9:61: f8:c3:67:e6:1e:42:a4:fc:01:b7:60:d7:64:55:ba: 79:ed:dc:15:ef:54:99:22:27:89:25:72:98:60:9d: 91:4b:4c:10:cb:18:df:69:06:30:c6:e3:3b:4f:ff: fa:07:e3:64:27:ed:7b:b8:ea:e7:53:5d:ea:29:40: 5d:4e:0a:8c:0e:35:37:c8:44:5c:c7:1d:8f:95:db: 80:56:f8:e7:65:f8:61:bf:dd:17:14:a6:0a:73:33: 1c:96:89:81:11:f5:d9:16:89:d8:05:df:c5:16:e6: 36:8f:9e:b2:ae:5b:4f:9d:a4:13:32:d5:e5:22:f4: 13:ee:e7:74:53:6b:89:13:1c:7e:dc:64:2d:18:60: 4f:7b:be:d1:53:40:2d:15:4a:33:a3:a4:d2:9b:4c: 03:c4:4f:ad:01:37:57:50:01:2a:a7:2e:49:53:cc: fa:45:c4:5a:f3:f1:35:4d:af:45:b4:68:a4:f4:f6: ff:3a:78:ba:ea:34:99:51:15:82:43:fb:8d:f1:48: 9d:f3:3e:a3:8b:ce:bf:d1:3c:44:1c:26:5f:53:69: 01:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9D:55:63:DD:BA:42:6A:73:41:DF:A8:20:F4:F5:47:DE:23:69:8F X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:83:68:0b:42:f3:90:16:e2:f6:ea:73:cc:50:95:15:21:95: 08:c0:81:dd:5f:90:27:5a:0f:e2:61:ce:fd:26:24:29:c9:f3: ae:2d:a7:20:bd:c7:c7:7a:2f:51:aa:54:66:8a:ae:d0:70:b4: 8f:3a:b2:d4:89:6b:61:d9:25:f5:e1:36:f1:05:7f:94:1f:7d: 5d:66:de:c9:5a:57:84:51:68:c1:10:d3:ab:9e:7a:cd:63:51: f4:2c:95:f7:b9:91:4a:15:21:75:69:2e:2b:b8:45:fa:fc:54: 21:48:6a:1a:d1:b4:41:5a:b6:db:89:d1:73:19:82:53:be:fc: 86:09:37:5c:72:38:25:94:8c:82:ab:89:3c:59:a8:5f:25:c8: 9d:02:5b:75:75:0f:35:6f:a4:6b:fc:2d:c4:c5:81:8e:8b:66: 04:47:4d:c5:44:a8:78:f9:e2:e1:1f:c6:9b:18:99:e6:5b:30: 82:e3:ad:53:1c:f6:08:0f:0d:79:cc:0b:37:a4:47:69:ca:e1: f5:10:aa:80:be:04:34:58:74:31:88:94:a5:ad:67:06:7a:1f: 24:44:10:1c:bf:07:88:01:ef:8a:41:0b:a3:a7:1c:28:76:c7: 4d:9a:03:98:bb:eb:46:7e:80:46:8f:62:04:98:64:18:30:67: e7:3b:0e:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZveEo14XpY6Yd2J0BzvD//SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjYwMTIxMDEwMTU2WhcNMjYwMTIyMDEwMTU2WjAzMTEwLwYDVQQD EygzNDlkNTU2M2RkYmE0MjZhNzM0MWRmYTgyMGY0ZjU0N2RlMjM2OThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvwquNSI/+wr3FUVdDp2//uFSdmh eA/bBkSKvKd20bXy6s45x73NxUYaqWH4w2fmHkKk/AG3YNdkVbp57dwV71SZIieJ JXKYYJ2RS0wQyxjfaQYwxuM7T//6B+NkJ+17uOrnU13qKUBdTgqMDjU3yERcxx2P lduAVvjnZfhhv90XFKYKczMclomBEfXZFonYBd/FFuY2j56yrltPnaQTMtXlIvQT 7ud0U2uJExx+3GQtGGBPe77RU0AtFUozo6TSm0wDxE+tATdXUAEqpy5JU8z6RcRa 8/E1Ta9FtGik9Pb/Oni66jSZURWCQ/uN8Uid8z6ji86/0TxEHCZfU2kBcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSdVWPdukJqc0HfqCD09UfeI2mPMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4NoC0Lz kBbi9upzzFCVFSGVCMCB3V+QJ1oP4mHO/SYkKcnzri2nIL3Hx3ovUapUZoqu0HC0 jzqy1IlrYdkl9eE28QV/lB99XWbeyVpXhFFowRDTq556zWNR9CyV97mRShUhdWku K7hF+vxUIUhqGtG0QVq224nRcxmCU778hgk3XHI4JZSMgquJPFmoXyXInQJbdXUP NW+ka/wtxMWBjotmBEdNxUSoePni4R/GmxiZ5lswguOtUxz2CA8NecwLN6RHacrh 9RCqgL4ENFh0MYiUpa1nBnofJEQQHL8HiAHvikELo6ccKHbHTZoDmLvrRn6ARo9i BJhkGDBn5zsOZA== -----END CERTIFICATE-----Generated at Wed Jan 21 06:52:18 2026 by rpki-client