This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json) Hash identifier: M0aSOWE5jV+G2TQXGSvPDW28i5aac6/+0c+/aq7Gxk8= Subject key identifier: D5:07:FF:32:73:11:86:1E:32:7C:53:21:4E:08:43:46:4E:D3:7E:2F Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb Certificate serial: 019BFCC12FE4A50AAF7118697CFE11A12BA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft Manifest number: 177E Signing time: Tue 27 Jan 2026 00:01:17 +0000 Manifest this update: Tue 27 Jan 2026 00:01:17 +0000 Manifest next update: Wed 28 Jan 2026 00:01:17 +0000 Files and hashes: 1: acesTEBAVC0cVWi453r9ACpaESE.roa (hash: 9ko+Tn763E3lcLVJtQufJSq7vf3ntZ16gqwRW1zNS8M=) 2: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: 0WAxxHmGs6KU6MTZEkDBb9apYkkp7gqyJP4QPygZhL8=) 3: xprf9hKWmDKmzxOI9xfKALFxhlg.roa (hash: hsTTKyf96bo2EPivv2gWUEgt0xfeks/ANKB2DMdcXyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:2f:e4:a5:0a:af:71:18:69:7c:fe:11:a1:2b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb Validity Not Before: Jan 27 00:01:17 2026 GMT Not After : Jan 28 00:01:17 2026 GMT Subject: CN=d507ff327311861e327c53214e0843464ed37e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8e:24:2e:b1:9c:d1:89:8b:d9:42:42:9c:a6: 23:89:52:3b:f4:e0:89:bb:4f:25:52:18:a7:ae:73: 99:f3:54:b1:78:03:a9:e5:09:cf:a3:a3:59:3a:a0: 6d:ea:39:94:6f:30:90:cd:b8:55:0e:a7:73:1a:93: 4c:af:6f:de:4d:e3:ac:70:a4:55:03:a0:2c:dc:21: 3c:57:b1:e4:3b:22:82:81:e8:f5:68:06:34:d3:0b: 68:01:79:65:9f:42:89:91:3a:66:e5:38:70:cb:d0: 80:c8:fc:09:13:61:2c:28:1e:55:9f:24:4c:c5:68: 88:ba:e7:a6:2a:07:6a:04:ec:d1:53:01:9a:7d:96: 35:2b:0d:f5:b3:0d:39:dd:49:62:5a:85:fd:98:ca: 26:81:63:c6:dc:02:e1:ae:b5:c2:ab:f1:21:ee:91: 5b:1f:df:03:fa:6d:32:ca:61:5b:82:f3:ab:77:3c: 7b:bc:8e:b8:ab:ca:e8:b0:73:49:36:98:67:68:24: 97:04:2f:dd:88:34:cd:67:34:8f:53:d8:37:93:ba: 39:24:a4:f0:4f:be:ad:e0:3f:60:1f:f0:05:15:1a: 8d:86:eb:c5:27:e6:13:f8:eb:eb:32:3c:bb:44:ca: fe:ce:c9:c5:33:21:01:1a:06:2e:f0:a4:e0:14:19: 28:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:07:FF:32:73:11:86:1E:32:7C:53:21:4E:08:43:46:4E:D3:7E:2F X509v3 Authority Key Identifier: keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:7f:aa:ac:7d:9c:34:15:02:5a:76:36:cb:b4:77:d5:a2:18: d2:23:65:cc:4d:04:86:3d:fc:b7:1b:be:f0:60:92:61:a5:83: 1b:65:7a:a2:8f:ff:8f:ef:71:a5:cf:11:d8:35:60:f2:b8:1c: 8e:67:fd:2e:53:46:3c:64:f2:b5:83:18:8a:52:9e:f2:6e:dd: 68:00:95:4b:14:7b:fe:e6:7a:ba:c4:1a:37:d3:0f:48:b1:19: cf:3a:85:f8:14:0e:35:9f:42:6b:08:04:e5:71:e5:ba:9f:62: 6f:84:0f:b2:df:6e:2c:b9:74:f7:c0:39:f9:ca:b5:ec:bf:30: 1a:76:fc:0a:48:f6:30:f1:6c:ef:fa:8d:5b:93:e7:fb:5e:60: cd:98:34:4f:e1:48:d1:07:35:ff:82:40:8a:bd:3d:f5:ac:a2: d2:a2:88:0e:67:c4:a8:69:c7:f2:7f:1f:78:99:d9:ea:6b:8a: 59:b2:2d:f5:27:af:1f:4f:2f:eb:58:e2:bd:f7:5d:ed:9b:62: 44:30:2a:95:85:98:e1:07:65:f9:d3:3e:c7:cc:0f:03:d8:87: d3:fd:c6:56:f7:af:7d:83:91:e8:00:2d:80:0e:63:a9:ba:59: ed:b8:5e:7d:22:c3:7b:91:d9:4e:c8:38:08:4e:98:0e:7a:e9: 4d:ee:86:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wS/kpQqvcRhpfP4RoSunMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMGNkNjk2YWRhODkxMTMwMjU2M2JhNGU0NDJlNmNmYTZh MjhmZmIwHhcNMjYwMTI3MDAwMTE3WhcNMjYwMTI4MDAwMTE3WjAzMTEwLwYDVQQD EyhkNTA3ZmYzMjczMTE4NjFlMzI3YzUzMjE0ZTA4NDM0NjRlZDM3ZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo4kLrGc0YmL2UJCnKYjiVI79OCJ u08lUhinrnOZ81SxeAOp5QnPo6NZOqBt6jmUbzCQzbhVDqdzGpNMr2/eTeOscKRV A6As3CE8V7HkOyKCgej1aAY00wtoAXlln0KJkTpm5Thwy9CAyPwJE2EsKB5VnyRM xWiIuuemKgdqBOzRUwGafZY1Kw31sw053UliWoX9mMomgWPG3ALhrrXCq/Eh7pFb H98D+m0yymFbgvOrdzx7vI64q8rosHNJNphnaCSXBC/diDTNZzSPU9g3k7o5JKTw T76t4D9gH/AFFRqNhuvFJ+YT+OvrMjy7RMr+zsnFMyEBGgYu8KTgFBkowQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUH/zJzEYYeMnxTIU4IQ0ZO034vMB8GA1UdIwQY MBaAFIsM1patqJETAlY7pORC5s+moo/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iM2M0NDMtYjE5OS00MDQxLTgyNDct YjQwM2QxMGMzZTkxLzEvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iM2M0NDMtYjE5OS00MDQxLTgyNDctYjQwM2QxMGMzZTkx LzEvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADn+qrH2c NBUCWnY2y7R31aIY0iNlzE0Ehj38txu+8GCSYaWDG2V6oo//j+9xpc8R2DVg8rgc jmf9LlNGPGTytYMYilKe8m7daACVSxR7/uZ6usQaN9MPSLEZzzqF+BQONZ9CawgE 5XHlup9ib4QPst9uLLl098A5+cq17L8wGnb8Ckj2MPFs7/qNW5Pn+15gzZg0T+FI 0Qc1/4JAir099ayi0qKIDmfEqGnH8n8feJnZ6muKWbIt9SevH08v61jivfdd7Zti RDAqlYWY4Qdl+dM+x8wPA9iH0/3GVvevfYOR6AAtgA5jqbpZ7bhefSLDe5HZTsg4 CE6YDnrpTe6GxQ== -----END CERTIFICATE-----Generated at Tue Jan 27 07:49:01 2026 by rpki-client