This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft File: IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft (raw, json) Hash identifier: 1twf2ojHIGPYTpE8T3f+0YP34I4zErquRnZx2Q5Coc8= Subject key identifier: 15:71:CE:E5:1E:49:6D:D7:5B:3F:AC:F3:4F:94:D7:7B:51:DB:A0:DD Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9 Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9 Certificate serial: 019BD95A3E608429BBEF2F6DA1070B10D02E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft Manifest number: 13B7 Signing time: Tue 20 Jan 2026 03:02:08 +0000 Manifest this update: Tue 20 Jan 2026 03:02:08 +0000 Manifest next update: Wed 21 Jan 2026 03:02:08 +0000 Files and hashes: 1: IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl (hash: p98gYTZcHeX65+Rwn5JrVbLfZhopNsXh3DYLnvWiWOo=) 2: kUi761JvorzxQPc6oroU7qaYtPw.roa (hash: XgXtN6YXvVkYUj2ZwJZH9OZFn2FFfJDscz2MToxQBsE=) 3: vKzWTkyCndfo_e-WFuM4lo46Om4.roa (hash: uUt2P6Q/UvwwbueYtQZfYvgTlSK47768NeVIXmFmyeI=) 4: zvEFlkT2M3mxdWqxNCK3NYC9yq0.roa (hash: 76Wd5ccMPcmdx13UbO6HkhI0IhT17jbY/G+vma64Rgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:5a:3e:60:84:29:bb:ef:2f:6d:a1:07:0b:10:d0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9 Validity Not Before: Jan 20 03:02:08 2026 GMT Not After : Jan 21 03:02:08 2026 GMT Subject: CN=1571cee51e496dd75b3facf34f94d77b51dba0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:08:19:86:dd:2d:a0:40:14:3f:80:3c:74:22: 9a:a7:08:f1:48:77:a1:15:e0:6f:cb:a8:bf:22:0a: cb:de:94:c3:9c:76:9a:56:0e:a6:3b:77:cb:dc:f0: 21:f5:e9:f1:4c:61:8d:e1:54:c2:d1:8c:ff:b4:e3: da:7c:ba:1d:ac:de:27:ff:53:57:49:c7:de:05:db: 43:8a:74:07:2f:f5:13:b3:d6:09:a5:6b:0f:6c:75: f3:cd:65:21:fa:b7:43:f5:4d:ff:ae:be:0f:2d:7e: a1:19:29:b6:6d:24:5e:79:99:d2:d2:b0:75:5d:d6: 6d:b9:82:39:45:f8:57:a9:aa:0c:75:59:61:80:bf: da:d7:ac:85:ac:c6:81:87:83:da:1b:34:ba:68:36: da:26:8e:8a:c1:30:c8:c8:26:73:3f:b8:d2:a2:3c: f0:76:62:51:2b:57:f0:1e:5e:f4:ec:21:3f:28:ea: 36:11:03:6d:06:5b:f2:64:97:3a:73:bf:be:5a:a6: 04:77:a9:2b:e5:87:0f:c3:ef:2e:e5:3b:88:6e:0c: 7c:8d:f0:36:c1:a7:bb:62:24:9d:4a:01:76:c8:fc: d8:3b:80:43:79:6c:6d:e5:3c:d3:74:06:6d:37:23: 1d:93:12:54:b9:27:43:74:ca:38:24:9f:c4:6a:da: ef:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:71:CE:E5:1E:49:6D:D7:5B:3F:AC:F3:4F:94:D7:7B:51:DB:A0:DD X509v3 Authority Key Identifier: keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:1f:a0:ae:86:f7:a2:b3:ec:cc:1a:a1:1c:35:57:da:2b:1d: 98:37:0f:a8:8e:b5:7c:2f:c4:f1:a5:1b:bf:34:b9:5f:dc:ad: b3:34:75:26:75:f4:35:01:e7:91:a5:26:88:e1:54:2c:51:63: 59:2b:e5:a0:a1:56:e1:89:d8:6e:c6:27:a8:26:80:0a:5b:6a: 39:e1:ac:01:d8:d7:c3:6b:b1:5c:12:38:79:f1:3c:bf:fa:fb: 86:b6:cc:cc:df:8f:02:7a:ae:de:e2:75:f0:3d:3b:50:9d:19: 11:99:c6:c7:b8:f6:90:65:34:b4:52:1c:4e:ea:16:ba:7f:12: 8b:85:6e:d1:46:32:41:40:5c:97:ca:d8:37:96:14:09:3a:fa: 49:5d:a9:72:dc:c3:f7:c8:11:b9:8f:6a:c5:7b:23:f9:0c:9f: a6:11:ad:a2:c0:b5:f5:fd:98:6b:6a:e9:3f:ec:dc:f6:14:ac: f1:d9:3c:45:2f:9e:9a:41:b3:33:f7:62:b2:78:c8:7c:12:b1: a3:bf:24:24:5a:73:2b:90:f8:73:6c:4e:ad:16:c3:6c:20:b2: a3:17:1e:f9:2b:90:09:f7:c5:47:e3:96:75:3a:78:cb:ce:42: 4e:cc:e8:10:cd:e0:db:e4:c3:1e:d9:bf:4f:49:00:d8:93:d7: b6:b0:e7:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZWj5ghCm77y9toQcLENAuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM1YzYxMWMyOTIzNGJmNGI0MGIzNTk5MGRkZmEyOTNh NTM3ZjkwHhcNMjYwMTIwMDMwMjA4WhcNMjYwMTIxMDMwMjA4WjAzMTEwLwYDVQQD EygxNTcxY2VlNTFlNDk2ZGQ3NWIzZmFjZjM0Zjk0ZDc3YjUxZGJhMGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQgZht0toEAUP4A8dCKapwjxSHeh FeBvy6i/IgrL3pTDnHaaVg6mO3fL3PAh9enxTGGN4VTC0Yz/tOPafLodrN4n/1NX ScfeBdtDinQHL/UTs9YJpWsPbHXzzWUh+rdD9U3/rr4PLX6hGSm2bSReeZnS0rB1 XdZtuYI5RfhXqaoMdVlhgL/a16yFrMaBh4PaGzS6aDbaJo6KwTDIyCZzP7jSojzw dmJRK1fwHl707CE/KOo2EQNtBlvyZJc6c7++WqYEd6kr5YcPw+8u5TuIbgx8jfA2 wae7YiSdSgF2yPzYO4BDeWxt5TzTdAZtNyMdkxJUuSdDdMo4JJ/EatrvvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVxzuUeSW3XWz+s80+U13tR26DdMB8GA1UdIwQY MBaAFCLzXGEcKSNL9LQLNZkN36KTpTf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUt MTYzMjQ3ZWIwZTA3LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUtMTYzMjQ3ZWIwZTA3 LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaR+grob3 orPszBqhHDVX2isdmDcPqI61fC/E8aUbvzS5X9ytszR1JnX0NQHnkaUmiOFULFFj WSvloKFW4YnYbsYnqCaACltqOeGsAdjXw2uxXBI4efE8v/r7hrbMzN+PAnqu3uJ1 8D07UJ0ZEZnGx7j2kGU0tFIcTuoWun8Si4Vu0UYyQUBcl8rYN5YUCTr6SV2pctzD 98gRuY9qxXsj+QyfphGtosC19f2Ya2rpP+zc9hSs8dk8RS+emkGzM/disnjIfBKx o78kJFpzK5D4c2xOrRbDbCCyoxce+SuQCffFR+OWdTp4y85CTszoEM3g2+TDHtm/ T0kA2JPXtrDnBg== -----END CERTIFICATE-----Generated at Tue Jan 20 09:10:19 2026 by rpki-client