This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json) Hash identifier: Ikn4kC/eh5Aw42yHIM2494VRdJJ7fqf7n0nuoc3RFkA= Subject key identifier: 25:0B:D2:59:3E:09:5B:E7:52:B2:AF:F9:52:C6:B9:FD:42:D1:AB:B2 Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf Certificate serial: 019BFCC1207F284A7C891D40101D4BD28110 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft Manifest number: 0E59 Signing time: Tue 27 Jan 2026 00:01:13 +0000 Manifest this update: Tue 27 Jan 2026 00:01:13 +0000 Manifest next update: Wed 28 Jan 2026 00:01:13 +0000 Files and hashes: 1: 3WRLx1VuX3gbe6p64zEcEnwmqRA.roa (hash: zZW/QliS8IhUkuGq5vajhjknN/w+jV0LcSSoeJYbhoo=) 2: 9fFw95Cybth4GETJe2yAAXzh3Lg.roa (hash: RFaVbBJ4uRdaLpkejPLIR6g3AGGwcr9EgyJxlcIstBY=) 3: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: ZJfEfHrhyScJWzFdx0z5vZrrdE25RRMNJNspG5wmEYY=) 4: wxOuW6uaBSUfZQJAyDa3cXRxGUQ.roa (hash: Pz77EIV3Gj7kY2omUaQaKNw7jVmZkVQ/MftdSPOET0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:20:7f:28:4a:7c:89:1d:40:10:1d:4b:d2:81:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf Validity Not Before: Jan 27 00:01:13 2026 GMT Not After : Jan 28 00:01:13 2026 GMT Subject: CN=250bd2593e095be752b2aff952c6b9fd42d1abb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:30:20:c8:bd:f7:23:85:8d:cd:08:2e:34:ea: cf:59:fe:36:38:6b:c0:62:09:8a:c5:3b:52:a4:f8: fb:1f:c0:8a:f2:4a:01:8c:4f:03:54:70:f5:ad:d6: 52:e4:c9:71:0c:0b:f6:ed:ac:dc:3f:9f:3e:c4:96: aa:34:b0:e8:ff:6d:f2:51:15:b5:17:31:a7:89:55: 20:c7:51:96:f9:07:84:42:4f:cb:bf:0c:90:09:ee: f5:00:80:f3:5a:c5:d4:24:26:d5:51:77:3f:f6:0c: 55:d7:9b:fe:d0:8d:88:ba:17:40:e0:7a:2e:6c:a9: 65:c1:08:d4:ea:cb:d6:ac:fd:96:c8:84:5d:76:13: b9:fa:b2:9b:c9:f6:d2:fc:9a:2e:a5:27:ba:41:57: 4b:d5:91:63:32:95:43:2e:25:ee:99:24:4e:08:27: 73:25:a3:ea:b3:e7:aa:a8:06:0f:e6:db:f0:6b:d8: dd:e5:5d:34:12:4b:3c:fc:bd:1b:35:f8:1e:f3:f3: c5:c0:42:e0:c5:5f:82:7b:2d:79:1b:df:71:99:94: 1d:e4:63:51:e9:99:19:b2:a2:23:15:f4:85:9d:9e: 58:cd:4f:2c:ec:0e:f1:53:12:85:02:8d:f0:9a:b3: bf:cc:bb:af:6e:ab:df:58:46:53:f5:1a:46:d6:90: c7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0B:D2:59:3E:09:5B:E7:52:B2:AF:F9:52:C6:B9:FD:42:D1:AB:B2 X509v3 Authority Key Identifier: keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:53:e0:2d:0d:8c:da:a6:ec:c7:81:83:cb:ab:bf:eb:42:d6: 3c:47:f6:7c:fb:4e:92:f6:64:f5:34:dd:ad:cf:b6:51:c1:aa: 47:a4:06:2b:a7:2e:7f:e8:bc:b6:7b:c4:91:09:d6:91:b3:42: 1e:96:43:8d:2e:49:08:48:0f:5d:19:72:fd:6b:10:27:55:a5: 9a:0c:79:8f:da:6d:6c:a4:42:fc:67:b2:62:fb:31:6a:5a:d9: 7f:dd:1f:29:0a:63:0f:3d:6c:51:80:01:6d:0c:61:1f:e7:21: 5f:66:3c:bb:d4:37:4f:80:24:32:7b:25:99:31:de:8a:1b:e3: ab:6f:33:00:b9:fe:f0:4a:59:a2:a4:e9:48:9d:9f:fa:f1:f5: d6:ef:6a:04:d3:70:0e:fb:b4:64:c5:66:0a:0a:15:84:3b:10: 76:d1:85:7f:bb:86:79:d0:7a:50:67:9b:71:36:fa:d1:5d:65: c5:59:ec:27:8f:43:cd:52:89:89:5f:21:e9:ac:db:70:03:ba: c9:d9:64:38:87:db:59:78:c1:bf:71:05:b4:9c:7a:17:db:fd: f5:fd:d7:d9:10:0f:9f:73:78:d9:63:be:83:a7:af:30:5b:14: d4:f2:45:db:d7:14:18:ea:6b:5e:1c:5d:cb:40:3f:75:f1:0e: d3:25:16:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wSB/KEp8iR1AEB1L0oEQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YTVhYjY2OWZhYmU3MmRlYzJlODM3ODQ3NmE3ZTkxNWMy NGVkY2YwHhcNMjYwMTI3MDAwMTEzWhcNMjYwMTI4MDAwMTEzWjAzMTEwLwYDVQQD EygyNTBiZDI1OTNlMDk1YmU3NTJiMmFmZjk1MmM2YjlmZDQyZDFhYmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zAgyL33I4WNzQguNOrPWf42OGvA YgmKxTtSpPj7H8CK8koBjE8DVHD1rdZS5MlxDAv27azcP58+xJaqNLDo/23yURW1 FzGniVUgx1GW+QeEQk/LvwyQCe71AIDzWsXUJCbVUXc/9gxV15v+0I2IuhdA4Hou bKllwQjU6svWrP2WyIRddhO5+rKbyfbS/JoupSe6QVdL1ZFjMpVDLiXumSROCCdz JaPqs+eqqAYP5tvwa9jd5V00Eks8/L0bNfge8/PFwELgxV+Cey15G99xmZQd5GNR 6ZkZsqIjFfSFnZ5YzU8s7A7xUxKFAo3wmrO/zLuvbqvfWEZT9RpG1pDHRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUL0lk+CVvnUrKv+VLGuf1C0auyMB8GA1UdIwQY MBaAFIilq2afq+ct7C6DeEdqfpFcJO3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTkt MTVhMDIwN2Q0NjA5LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTktMTVhMDIwN2Q0NjA5 LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVPgLQ2M 2qbsx4GDy6u/60LWPEf2fPtOkvZk9TTdrc+2UcGqR6QGK6cuf+i8tnvEkQnWkbNC HpZDjS5JCEgPXRly/WsQJ1Wlmgx5j9ptbKRC/GeyYvsxalrZf90fKQpjDz1sUYAB bQxhH+chX2Y8u9Q3T4AkMnslmTHeihvjq28zALn+8EpZoqTpSJ2f+vH11u9qBNNw Dvu0ZMVmCgoVhDsQdtGFf7uGedB6UGebcTb60V1lxVnsJ49DzVKJiV8h6azbcAO6 ydlkOIfbWXjBv3EFtJx6F9v99f3X2RAPn3N42WO+g6evMFsU1PJF29cUGOprXhxd y0A/dfEO0yUWEg== -----END CERTIFICATE-----Generated at Tue Jan 27 07:42:36 2026 by rpki-client