This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json) Hash identifier: JH5xgNBhfOtTklpnVHFV0yCvxlu0GhHJXV+hkhpi5jA= Subject key identifier: E7:29:5C:C5:6F:74:E9:03:1C:4E:88:D7:89:A0:28:1A:CA:CE:DF:BD Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01 Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201 Certificate serial: 019BA610A6E00221556DA238E7ADC0AFBCBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft Manifest number: 1752 Signing time: Sat 10 Jan 2026 04:01:07 +0000 Manifest this update: Sat 10 Jan 2026 04:01:07 +0000 Manifest next update: Sun 11 Jan 2026 04:01:07 +0000 Files and hashes: 1: 46TfkgzFvsJA-mkb18CtoR7-ZNU.roa (hash: UwZqgkhkMSRcZLQ/mfRr2bDwJWvzPxqmUX74IwjVtQk=) 2: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: OjfXbyeJJRUlYInyxIIBQiCNMX5tBvglPii7UZgIku0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a6:10:a6:e0:02:21:55:6d:a2:38:e7:ad:c0:af:bc:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201 Validity Not Before: Jan 10 04:01:07 2026 GMT Not After : Jan 11 04:01:07 2026 GMT Subject: CN=e7295cc56f74e9031c4e88d789a0281acacedfbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c0:25:32:de:b2:3e:89:16:9a:eb:6a:93:7a: 6a:97:60:38:2b:a8:02:49:da:e3:9a:52:57:a7:46: de:27:44:54:78:04:24:b6:4e:60:bc:c4:90:27:aa: 31:60:7d:5a:61:25:3b:34:d1:61:c0:59:03:58:5e: 8e:ec:cd:05:8e:68:70:5d:e3:0a:20:1b:b9:44:d1: a6:fa:21:83:e3:5d:ee:4b:c9:0a:74:16:ea:3b:c1: f4:c2:25:f8:da:b1:59:db:b7:6d:4c:3d:da:a2:ab: ca:23:1c:d4:41:c3:24:f1:d7:d8:c9:71:f9:0d:31: b6:f8:ee:f2:0a:48:f7:7e:49:36:4a:20:c4:d1:05: 81:64:01:62:7e:47:68:bd:84:5d:61:90:7a:28:46: b8:b8:20:a3:3a:c1:75:76:b7:ca:2e:d0:a0:ee:d9: 59:e9:66:42:e7:28:92:08:21:d7:70:09:a1:77:38: 96:d7:c9:4b:84:30:ef:44:f1:f5:1c:c8:84:ad:1f: 76:21:ad:c4:d4:a3:3d:88:ae:bd:c9:53:5f:b0:c7: 85:be:79:f4:8a:6f:64:c2:96:bc:69:4e:02:08:ad: af:46:84:2e:50:6c:77:bb:1b:b0:54:18:8b:34:f9: cd:8d:eb:b2:67:ad:25:4e:dd:c7:30:1f:17:ac:34: ab:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:29:5C:C5:6F:74:E9:03:1C:4E:88:D7:89:A0:28:1A:CA:CE:DF:BD X509v3 Authority Key Identifier: keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:02:b9:ad:2a:ff:4c:e1:89:cb:7b:8a:73:92:1c:29:1f:0c: e3:05:4e:7e:fb:1e:92:dc:93:80:1b:0c:70:08:2d:f1:b4:79: 52:cb:f4:b2:f7:02:97:02:ca:50:90:a2:4b:52:9f:2f:42:a3: ac:26:a9:dc:d1:c2:b1:5f:db:83:86:7f:64:f6:a3:a2:75:9b: e4:40:e5:2b:e5:21:e9:01:e2:45:67:e0:0d:d8:3f:b7:98:b8: 94:02:d6:7c:ca:bf:73:15:ad:5e:88:d5:d4:18:19:41:c4:72: 3a:01:05:d4:c8:59:8e:f3:52:99:17:f7:f4:e4:e7:0d:fa:3a: 11:90:61:6c:24:c8:cc:c4:01:c7:aa:8c:10:ba:56:30:b6:c6: cd:16:20:25:1e:96:0e:c6:50:01:2b:2b:9e:8e:51:69:68:94: 06:8a:0e:e0:45:fd:dc:76:1d:58:99:c2:93:fc:ac:c2:1e:91: 3b:68:a4:17:18:f4:f5:6c:59:55:ea:16:65:2d:90:47:7e:e4: 1d:79:af:c1:dd:2b:da:af:47:fe:5e:70:76:12:b5:7d:2e:e6: 68:93:cf:c7:cf:3b:f4:8e:04:2a:c1:cf:13:a0:1f:25:f6:22: 90:1a:37:28:12:b4:31:38:e8:ed:38:f5:3a:95:ff:14:a2:41: 8f:5e:2e:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZumEKbgAiFVbaI4563Ar7y8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMThlZjA4YjU1ZGRiMjBjODgxNmE2MjFhNDU5Y2RiOTI3 YjMyMDEwHhcNMjYwMTEwMDQwMTA3WhcNMjYwMTExMDQwMTA3WjAzMTEwLwYDVQQD EyhlNzI5NWNjNTZmNzRlOTAzMWM0ZTg4ZDc4OWEwMjgxYWNhY2VkZmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sAlMt6yPokWmutqk3pql2A4K6gC SdrjmlJXp0beJ0RUeAQktk5gvMSQJ6oxYH1aYSU7NNFhwFkDWF6O7M0FjmhwXeMK IBu5RNGm+iGD413uS8kKdBbqO8H0wiX42rFZ27dtTD3aoqvKIxzUQcMk8dfYyXH5 DTG2+O7yCkj3fkk2SiDE0QWBZAFifkdovYRdYZB6KEa4uCCjOsF1drfKLtCg7tlZ 6WZC5yiSCCHXcAmhdziW18lLhDDvRPH1HMiErR92Ia3E1KM9iK69yVNfsMeFvnn0 im9kwpa8aU4CCK2vRoQuUGx3uxuwVBiLNPnNjeuyZ60lTt3HMB8XrDSrpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcpXMVvdOkDHE6I14mgKBrKzt+9MB8GA1UdIwQY MBaAFCAY7wi1XdsgyIFqYhpFnNuSezIBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yOGQ3Y2YtMjJmOC00MzYzLWFkMDIt YTBhYzQ5YWQzNDNmLzEvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yOGQ3Y2YtMjJmOC00MzYzLWFkMDItYTBhYzQ5YWQzNDNm LzEvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwK5rSr/ TOGJy3uKc5IcKR8M4wVOfvsektyTgBsMcAgt8bR5Usv0svcClwLKUJCiS1KfL0Kj rCap3NHCsV/bg4Z/ZPajonWb5EDlK+Uh6QHiRWfgDdg/t5i4lALWfMq/cxWtXojV 1BgZQcRyOgEF1MhZjvNSmRf39OTnDfo6EZBhbCTIzMQBx6qMELpWMLbGzRYgJR6W DsZQASsrno5RaWiUBooO4EX93HYdWJnCk/yswh6RO2ikFxj09WxZVeoWZS2QR37k HXmvwd0r2q9H/l5wdhK1fS7maJPPx8879I4EKsHPE6AfJfYikBo3KBK0MTjo7Tj1 OpX/FKJBj14uVg== -----END CERTIFICATE-----Generated at Sat Jan 10 07:02:59 2026 by rpki-client