This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft File: IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft (raw, json) Hash identifier: eNdcF3aygJ3GUtc/DIiSa0J4QAvrOr9wG9K1ozZm2i8= Subject key identifier: 28:BC:8B:1D:5F:75:8B:3A:B3:D9:57:3F:88:1E:B0:E2:06:83:FC:B0 Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb Certificate serial: 019C1D5E5C4A9F04263CF47FC109AE8E88CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft Manifest number: 10D3 Signing time: Mon 02 Feb 2026 08:00:48 +0000 Manifest this update: Mon 02 Feb 2026 08:00:48 +0000 Manifest next update: Tue 03 Feb 2026 08:00:48 +0000 Files and hashes: 1: 3yOJ06gfUKk-2XYdWHLIAlWgfEc.roa (hash: nXcj7d6dSu1swvQGzGjJKVLnGkefzXVXrhP3pXEGcwM=) 2: 7rB4dVkLekdvJu2WV1aBm26tfk4.roa (hash: dQXlWyfYcUEq4/cQMbVBV+QLb2ARWgSkORhGuX+vIpo=) 3: BDnFJ4jYiW4UB0OWqHm0E81ZFGk.roa (hash: kHvW0Bcsv+dU2wBHMm0QcL2FR83ZCdT4yyeLFS4eeP8=) 4: IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl (hash: Ib0KWxP/RqFnMGiq8vKRD/SZ9/zgfPERwk2j53XiNKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:5e:5c:4a:9f:04:26:3c:f4:7f:c1:09:ae:8e:88:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215a409d27b9a69346324004694da11beae02dbb Validity Not Before: Feb 2 08:00:48 2026 GMT Not After : Feb 3 08:00:48 2026 GMT Subject: CN=28bc8b1d5f758b3ab3d9573f881eb0e20683fcb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:86:d4:d0:bd:8b:c1:13:b7:af:7e:10:fe: 10:1f:90:f9:8b:51:3e:52:93:f0:e1:b8:d9:b8:e5: 91:84:49:0a:11:09:5e:5a:79:d8:75:a4:c6:d6:01: c7:1b:f6:f1:49:71:ad:c0:91:0a:f1:fc:ed:51:45: 12:22:c9:83:d6:86:31:cf:69:44:1f:e5:24:6c:47: 59:94:d9:ad:7e:4b:a8:5f:ab:03:4d:90:4f:6a:99: ab:ee:4e:a6:bf:8d:b1:be:0a:89:7b:e5:09:47:af: b8:27:b7:fa:cf:16:ca:a0:6d:14:db:41:67:dd:e0: 1d:38:21:1f:5e:69:25:79:28:8a:ec:e9:82:5c:e3: ce:5b:f1:de:bf:db:33:fe:6e:59:5b:58:cc:cc:d9: 03:61:8e:ff:f3:11:bf:c2:d5:99:d8:ba:99:7a:ce: 26:c4:35:2c:20:2c:59:92:4b:49:74:b2:e8:00:b5: 0e:0d:af:9b:e4:d3:a3:c5:bb:f3:87:0c:91:63:4c: 79:08:69:ba:79:05:a0:0a:56:dc:a7:c2:1a:db:82: ae:66:a5:12:f5:69:56:07:d2:fe:2d:ed:7b:fa:51: 9b:ac:ab:5d:d7:57:f8:09:dc:6a:d5:fa:f7:e6:97: 90:53:43:74:1b:3d:24:ac:d9:41:92:18:17:31:a4: fd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BC:8B:1D:5F:75:8B:3A:B3:D9:57:3F:88:1E:B0:E2:06:83:FC:B0 X509v3 Authority Key Identifier: keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:04:c8:3d:c9:f2:11:81:bc:37:30:dc:26:2d:3e:a7:f9:92: c3:55:2a:55:2e:a7:c1:aa:65:fc:be:e3:de:46:fb:f1:2a:15: 78:dc:c3:03:a3:ca:af:ae:17:1a:d0:57:59:97:7a:bd:cd:65: 70:cd:52:25:f5:96:ca:0c:63:2c:cc:37:64:bc:a8:46:f2:ff: 79:25:4c:c9:25:54:0a:27:99:ab:0f:0c:77:e7:09:04:ec:5f: 34:41:0d:79:f0:e4:10:66:13:b9:00:81:43:68:9f:d9:43:00: 3c:5c:5e:b6:16:de:ae:fb:42:52:62:3d:1d:cb:b5:f1:8a:6c: 01:45:47:73:77:8b:2d:30:da:27:4f:ba:5a:9e:c1:e0:5a:d7: c9:8e:12:6c:5d:fd:de:cd:17:08:0c:ac:35:61:02:1a:7b:e7: a3:69:ce:a0:69:44:e9:87:44:ea:94:83:f6:66:1d:5b:65:7f: 4b:b8:8e:12:1f:b3:11:a0:4e:ae:a8:e7:5e:58:6c:9d:53:78: b6:67:a4:c6:fa:0e:95:5c:82:6e:16:1f:b7:1b:30:bf:21:5b: 12:f7:57:a0:61:5d:2d:fb:89:19:e4:da:10:28:0f:9d:9d:9d: 64:31:4f:60:28:4e:26:1f:c6:a5:23:1d:42:35:d9:bf:bf:6d: 91:d4:b3:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwdXlxKnwQmPPR/wQmujojPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNWE0MDlkMjdiOWE2OTM0NjMyNDAwNDY5NGRhMTFiZWFl MDJkYmIwHhcNMjYwMjAyMDgwMDQ4WhcNMjYwMjAzMDgwMDQ4WjAzMTEwLwYDVQQD EygyOGJjOGIxZDVmNzU4YjNhYjNkOTU3M2Y4ODFlYjBlMjA2ODNmY2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfyG1NC9i8ETt69+EP4QH5D5i1E+ UpPw4bjZuOWRhEkKEQleWnnYdaTG1gHHG/bxSXGtwJEK8fztUUUSIsmD1oYxz2lE H+UkbEdZlNmtfkuoX6sDTZBPapmr7k6mv42xvgqJe+UJR6+4J7f6zxbKoG0U20Fn 3eAdOCEfXmkleSiK7OmCXOPOW/Hev9sz/m5ZW1jMzNkDYY7/8xG/wtWZ2LqZes4m xDUsICxZkktJdLLoALUODa+b5NOjxbvzhwyRY0x5CGm6eQWgClbcp8Ia24KuZqUS 9WlWB9L+Le17+lGbrKtd11f4Cdxq1fr35peQU0N0Gz0krNlBkhgXMaT91QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCi8ix1fdYs6s9lXP4gesOIGg/ywMB8GA1UdIwQY MBaAFCFaQJ0nuaaTRjJABGlNoRvq4C27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mMGM5ZTMtMWM0MC00ZjMzLTk1Y2Ut OThkMmZlZTBmODdhLzEvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9mMGM5ZTMtMWM0MC00ZjMzLTk1Y2UtOThkMmZlZTBmODdh LzEvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgTIPcny EYG8NzDcJi0+p/mSw1UqVS6nwapl/L7j3kb78SoVeNzDA6PKr64XGtBXWZd6vc1l cM1SJfWWygxjLMw3ZLyoRvL/eSVMySVUCieZqw8Md+cJBOxfNEENefDkEGYTuQCB Q2if2UMAPFxethbervtCUmI9Hcu18YpsAUVHc3eLLTDaJ0+6Wp7B4FrXyY4SbF39 3s0XCAysNWECGnvno2nOoGlE6YdE6pSD9mYdW2V/S7iOEh+zEaBOrqjnXlhsnVN4 tmekxvoOlVyCbhYftxswvyFbEvdXoGFdLfuJGeTaECgPnZ2dZDFPYChOJh/GpSMd QjXZv79tkdSzUw== -----END CERTIFICATE-----Generated at Mon Feb 2 09:28:55 2026 by rpki-client