This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft File: ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json) Hash identifier: 0dq6blsfV5B8LmWJDQTJ4oO21aH2UMaXcsxw1LYjwA0= Subject key identifier: C8:3D:A2:6D:B1:97:D5:17:52:DB:E0:94:64:CE:42:50:84:1A:93:4D Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb Certificate serial: 019C1F15E40F0D149E6E4F2B4127637FD506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft Manifest number: 0C72 Signing time: Mon 02 Feb 2026 16:00:54 +0000 Manifest this update: Mon 02 Feb 2026 16:00:54 +0000 Manifest next update: Tue 03 Feb 2026 16:00:54 +0000 Files and hashes: 1: PCk3nkxvRoLF1gDbkxnDCrjgGa0.roa (hash: /z0KQlvJI+XaH2sEgQieqsdlMwCig0WcE8tOTdtJWRQ=) 2: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: 7eEnpfiFcvO5M6gvKHkXQybWbiW31i/0WikhES5V040=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:15:e4:0f:0d:14:9e:6e:4f:2b:41:27:63:7f:d5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb Validity Not Before: Feb 2 16:00:54 2026 GMT Not After : Feb 3 16:00:54 2026 GMT Subject: CN=c83da26db197d51752dbe09464ce4250841a934d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:29:1f:31:29:f8:f6:25:1a:bd:9b:c3:b7:0c: 3c:d5:41:7b:11:da:ec:e3:4b:14:97:ca:5e:98:15: 81:cc:fb:9a:70:9c:b2:c3:f8:4f:43:95:a4:be:47: 1d:65:f7:8e:c6:67:6f:62:a2:01:eb:5c:5e:ef:46: e0:c6:af:0d:0f:25:aa:5d:5e:7e:c1:1d:7f:dd:df: 33:f5:1e:6b:8d:d8:b6:22:3d:46:54:cb:ab:72:23: 17:f6:ad:d0:2c:c3:71:f3:0b:f7:48:63:26:4f:60: 9e:06:81:a8:11:ed:2a:f8:e8:62:94:8f:89:ba:de: 37:dc:e1:33:33:19:43:5f:3d:60:20:dd:52:ce:fd: 7e:c0:b9:b5:b7:e4:84:aa:ae:7f:ba:9c:9b:fe:c4: 69:03:b6:4b:27:77:db:ca:6e:c7:ab:e4:7d:4d:10: 02:5e:ce:94:79:1b:b6:48:01:a4:65:55:d0:37:d6: cf:37:d8:8a:3b:f8:8e:10:2f:f4:f6:a3:71:6a:0f: 1f:b2:68:da:52:43:bd:48:0b:ed:09:15:36:7d:6a: ef:28:e0:cf:00:72:a2:28:23:c0:66:7d:11:67:80: 6d:80:d4:c9:50:9b:d4:a1:99:c6:cb:42:cf:d7:68: 77:d1:82:b8:1d:d5:50:ea:ad:41:32:f7:08:23:a6: 9b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3D:A2:6D:B1:97:D5:17:52:DB:E0:94:64:CE:42:50:84:1A:93:4D X509v3 Authority Key Identifier: keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:1c:29:47:4e:86:eb:9d:db:8e:f1:d9:ad:eb:f6:c4:62:6f: 50:72:e0:41:2e:d2:fa:58:3a:12:40:b3:43:8b:9f:06:6d:5f: 8a:e3:d8:c4:f9:da:2e:c5:cf:c7:15:93:b9:3d:29:63:39:ba: 28:de:48:63:43:e7:30:da:de:c1:11:74:24:bd:0c:45:c7:23: e2:11:87:b8:d8:de:3b:21:ab:a3:59:f7:27:31:64:d2:3c:ae: 3d:f1:b2:ff:8a:d5:dd:48:b6:e2:ee:d2:df:79:d7:b3:86:ec: 07:ca:6d:24:44:ed:2b:61:57:d6:20:a1:ec:b5:02:2d:fe:ae: 0b:d6:14:04:22:a0:1d:2d:05:d8:3c:83:84:56:74:5f:08:52: c0:40:91:c8:46:3e:a7:13:51:e4:24:50:71:27:94:ba:eb:f6: fb:74:fd:0f:bf:24:02:c9:7b:95:5e:5e:fc:62:49:03:f1:65: ab:8e:64:93:55:fb:88:85:03:6b:97:94:98:01:0a:91:fd:5b: 12:1d:41:00:64:10:4c:39:48:3a:b8:73:ca:31:f5:86:8e:39: b7:8d:35:e9:b6:06:03:3a:86:1e:4f:83:3b:e1:09:21:80:bd: e5:9b:a8:96:9a:71:66:29:bd:07:44:35:c3:b5:31:cb:bf:e7: 45:bc:70:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwfFeQPDRSebk8rQSdjf9UGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZWRmYTQxNDk0NGQwMTBhYzY5ZWU1YmZiMjI3NzNiMjRi MjdlZmIwHhcNMjYwMjAyMTYwMDU0WhcNMjYwMjAzMTYwMDU0WjAzMTEwLwYDVQQD EyhjODNkYTI2ZGIxOTdkNTE3NTJkYmUwOTQ2NGNlNDI1MDg0MWE5MzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SkfMSn49iUavZvDtww81UF7Edrs 40sUl8pemBWBzPuacJyyw/hPQ5WkvkcdZfeOxmdvYqIB61xe70bgxq8NDyWqXV5+ wR1/3d8z9R5rjdi2Ij1GVMurciMX9q3QLMNx8wv3SGMmT2CeBoGoEe0q+OhilI+J ut433OEzMxlDXz1gIN1Szv1+wLm1t+SEqq5/upyb/sRpA7ZLJ3fbym7Hq+R9TRAC Xs6UeRu2SAGkZVXQN9bPN9iKO/iOEC/09qNxag8fsmjaUkO9SAvtCRU2fWrvKODP AHKiKCPAZn0RZ4BtgNTJUJvUoZnGy0LP12h30YK4HdVQ6q1BMvcII6abZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMg9om2xl9UXUtvglGTOQlCEGpNNMB8GA1UdIwQY MBaAFInt+kFJRNAQrGnuW/sidzsksn77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85MzZjYmItYmFjNC00ZmRlLThkZWYt ZmViYzFlZDNjZWJhLzEvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC85MzZjYmItYmFjNC00ZmRlLThkZWYtZmViYzFlZDNjZWJh LzEvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehwpR06G 653bjvHZrev2xGJvUHLgQS7S+lg6EkCzQ4ufBm1fiuPYxPnaLsXPxxWTuT0pYzm6 KN5IY0PnMNrewRF0JL0MRccj4hGHuNjeOyGro1n3JzFk0jyuPfGy/4rV3Ui24u7S 33nXs4bsB8ptJETtK2FX1iCh7LUCLf6uC9YUBCKgHS0F2DyDhFZ0XwhSwECRyEY+ pxNR5CRQcSeUuuv2+3T9D78kAsl7lV5e/GJJA/Flq45kk1X7iIUDa5eUmAEKkf1b Eh1BAGQQTDlIOrhzyjH1ho45t4016bYGAzqGHk+DO+EJIYC95ZuolppxZim9B0Q1 w7Uxy7/nRbxw3A== -----END CERTIFICATE-----Generated at Tue Feb 3 00:28:09 2026 by rpki-client