This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json) Hash identifier: bOxB7/MP24jk9JNVggCDgg/Cuf6kezv5cHwtMNRVs7A= Subject key identifier: 92:3D:4D:DF:F3:70:7C:18:BE:82:1E:50:69:1C:A2:73:45:06:18:05 Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe Certificate serial: 019BF876984F017EF43FF43CB476151EE1EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft Manifest number: 1335 Signing time: Mon 26 Jan 2026 04:01:20 +0000 Manifest this update: Mon 26 Jan 2026 04:01:20 +0000 Manifest next update: Tue 27 Jan 2026 04:01:20 +0000 Files and hashes: 1: 7YpkD0KfUd6GvtssKEAM5COaSjg.roa (hash: WV0BukIXTVr1fBZ0Z/X4lkuf8IyCGzCcom5E1ZYckgc=) 2: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: HeSpZLBm7lnf28O4bzwrPVG5oC+DoGPQxB2b95Uuf5k=) 3: NJVMWOrligqTcr-rcvI2msW0lWg.roa (hash: h/rbFp7XU21SARi1YVpy4hQ7ylKq7LqNyiG5q+Csv/s=) 4: PZ3DvBnBZEzRJV1pn3nJOWDaINo.roa (hash: kJlVCfKZcI1/z1HhlgFzXn1hqpVcX/my4yK+JhAitIM=) 5: RWueY0qSJBqdnyfoUjIKJBQ4tBM.roa (hash: bpFMaHQ2+HH7JzdJGHBSYoDlCYd8W8QG7hNLlWzI4Y4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:98:4f:01:7e:f4:3f:f4:3c:b4:76:15:1e:e1:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213e1d50d52288bee80eea435577018712409bbe Validity Not Before: Jan 26 04:01:20 2026 GMT Not After : Jan 27 04:01:20 2026 GMT Subject: CN=923d4ddff3707c18be821e50691ca27345061805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:a4:bc:16:9f:ae:a5:43:36:9d:8b:42:00: 5c:3c:6d:52:00:4b:2b:3b:fd:24:15:bf:9a:4d:ee: 12:d9:83:90:e4:f9:9e:46:85:63:66:15:5e:74:32: ce:cd:d8:6b:ef:0b:d9:8f:58:3f:a2:ef:3e:33:e4: fc:19:c3:a3:db:91:9d:60:f6:80:bc:1d:da:b7:c0: d8:fd:69:2d:02:8b:6b:9c:42:ac:d3:17:2e:fe:79: fb:5a:b9:7c:58:90:41:d3:01:40:01:53:ee:a2:e2: d0:c4:1c:df:4f:6b:cf:e2:18:0f:c8:21:88:cb:6d: d5:03:cb:b4:48:84:ec:1d:0e:63:63:01:be:cc:97: c8:1e:cf:41:94:fd:c6:7e:c6:eb:07:30:00:f8:bb: eb:c9:ba:b2:6c:bc:f5:43:5b:62:d6:61:87:ba:7b: 52:de:30:f9:2c:11:25:46:54:7e:5c:44:f6:f9:4d: 9f:0f:29:a3:97:df:80:49:06:72:c7:e4:aa:d7:f3: 62:46:bf:7a:2c:2b:4d:c7:3c:1a:19:77:7e:b1:98: 55:69:30:84:6e:0d:c9:dd:00:23:c1:f2:11:20:2b: 9e:7c:b7:8d:a3:b3:8c:42:8e:f2:7f:23:77:80:93: 18:0c:65:21:d7:e8:be:b8:88:ea:12:3b:8c:4d:99: 84:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3D:4D:DF:F3:70:7C:18:BE:82:1E:50:69:1C:A2:73:45:06:18:05 X509v3 Authority Key Identifier: keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:81:91:c0:ff:81:dd:12:79:bc:e8:7d:55:01:fa:a2:41:83: ff:ec:8b:76:db:3e:e6:bf:e0:c2:5f:0b:e7:82:87:e0:71:08: c8:89:85:ee:60:2b:65:25:a4:b2:cf:21:db:bd:ef:d6:6d:aa: ea:01:b8:1c:1e:88:93:14:20:26:98:fd:6a:9f:6a:4c:ca:e5: 9b:8e:21:5f:89:34:1e:3f:68:8c:57:c1:0b:a9:8e:c3:0c:cc: a4:97:df:71:c5:95:89:76:4b:fd:de:82:d2:75:54:df:23:d4: 2e:9c:73:2b:6c:33:6e:db:3d:34:59:c3:97:d5:ad:10:e0:cd: e9:ab:42:fe:57:8c:b1:bb:72:5b:07:62:c8:d7:74:d0:ef:40: cb:54:a9:80:93:f6:9c:08:9d:5d:05:c9:d0:09:b7:61:b5:d2: fc:4a:35:b6:41:4f:9d:a8:49:fa:1a:cb:ad:45:b5:a4:05:7e: 65:5b:85:d5:dd:c7:29:ff:03:53:21:87:24:df:66:68:01:14: 64:38:93:e2:3b:46:2c:90:3a:56:74:82:2d:6e:4b:4a:9b:7b: 6e:1d:98:7c:c4:57:a8:40:76:68:50:d4:31:9d:cb:33:54:52: 1c:1e:f7:2c:d9:b6:34:5a:73:43:54:40:b4:fd:80:3c:46:94: e5:1f:5d:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dphPAX70P/Q8tHYVHuHrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxM2UxZDUwZDUyMjg4YmVlODBlZWE0MzU1NzcwMTg3MTI0 MDliYmUwHhcNMjYwMTI2MDQwMTIwWhcNMjYwMTI3MDQwMTIwWjAzMTEwLwYDVQQD Eyg5MjNkNGRkZmYzNzA3YzE4YmU4MjFlNTA2OTFjYTI3MzQ1MDYxODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwqkvBafrqVDNp2LQgBcPG1SAEsr O/0kFb+aTe4S2YOQ5PmeRoVjZhVedDLOzdhr7wvZj1g/ou8+M+T8GcOj25GdYPaA vB3at8DY/WktAotrnEKs0xcu/nn7Wrl8WJBB0wFAAVPuouLQxBzfT2vP4hgPyCGI y23VA8u0SITsHQ5jYwG+zJfIHs9BlP3GfsbrBzAA+LvrybqybLz1Q1ti1mGHuntS 3jD5LBElRlR+XET2+U2fDymjl9+ASQZyx+Sq1/NiRr96LCtNxzwaGXd+sZhVaTCE bg3J3QAjwfIRICuefLeNo7OMQo7yfyN3gJMYDGUh1+i+uIjqEjuMTZmENwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJI9Td/zcHwYvoIeUGkconNFBhgFMB8GA1UdIwQY MBaAFCE+HVDVIoi+6A7qQ1V3AYcSQJu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYt MzE2ZWYyNjFmNGE1LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYtMzE2ZWYyNjFmNGE1 LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4GRwP+B 3RJ5vOh9VQH6okGD/+yLdts+5r/gwl8L54KH4HEIyImF7mArZSWkss8h273v1m2q 6gG4HB6IkxQgJpj9ap9qTMrlm44hX4k0Hj9ojFfBC6mOwwzMpJffccWViXZL/d6C 0nVU3yPULpxzK2wzbts9NFnDl9WtEODN6atC/leMsbtyWwdiyNd00O9Ay1SpgJP2 nAidXQXJ0Am3YbXS/Eo1tkFPnahJ+hrLrUW1pAV+ZVuF1d3HKf8DUyGHJN9maAEU ZDiT4jtGLJA6VnSCLW5LSpt7bh2YfMRXqEB2aFDUMZ3LM1RSHB73LNm2NFpzQ1RA tP2APEaU5R9dxQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:17 2026 by rpki-client