This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json) Hash identifier: Mclkj8gEFDQD8nCVfx+3T/hw+4g1nejNQNwI55Jj0lg= Subject key identifier: 9B:3F:0B:CE:DF:2C:07:19:06:8F:F9:BE:AE:DB:A6:3B:91:1D:03:57 Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47 Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847 Certificate serial: 019B81CCF8DBD1B67095848BEC3CF783C537 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft Manifest number: 17B3 Signing time: Sat 03 Jan 2026 03:00:52 +0000 Manifest this update: Sat 03 Jan 2026 03:00:52 +0000 Manifest next update: Sun 04 Jan 2026 03:00:52 +0000 Files and hashes: 1: 5qofx5kn-ofCIj9o3NGivX2oyoc.roa (hash: 7NfNoXJjBTrvr3E7539ztDCcU2EbYZAvEuO82OgvQXg=) 2: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: AKZgNfV4QmjPYrbicNQiYDDuDQLBCnhHGChQplAe0eA=) 3: mWpfuNKr59RM8vs6VkBzUlnVMDw.roa (hash: NvT/WJHbjfkyULAS3B3qYEFqcvvfoazpHQgER185/rQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 23:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:cc:f8:db:d1:b6:70:95:84:8b:ec:3c:f7:83:c5:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847 Validity Not Before: Jan 3 03:00:52 2026 GMT Not After : Jan 4 03:00:52 2026 GMT Subject: CN=9b3f0bcedf2c0719068ff9beaedba63b911d0357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:af:54:16:ba:51:7f:3d:2c:03:33:35:ee:f8: 7f:ab:05:82:10:a6:49:ee:39:1d:50:9b:9b:b1:29: 18:74:97:cc:33:1b:e1:59:ca:6b:44:e5:56:a0:d0: e1:78:25:c1:fa:56:15:b2:29:62:eb:df:21:dd:53: 7e:5a:d2:3e:b0:90:0b:0b:d6:1a:b4:da:bb:9e:2c: ed:4e:d2:68:a0:29:67:1a:1a:7a:9e:e1:d7:d4:57: 03:32:8d:f7:55:e6:ac:4f:df:99:40:ca:fe:ae:f2: 5d:ac:a4:99:50:8c:0e:9c:95:80:55:a9:12:f0:27: e1:9a:f4:4d:a6:26:ba:30:8b:6e:72:28:05:09:3c: 8e:ce:8c:44:99:46:0d:b5:a3:25:d4:f9:0c:2a:4d: 96:94:5d:fd:c9:d2:b5:57:cd:b1:b1:e8:32:35:c1: bb:27:ad:90:d1:b9:6c:71:76:19:5e:d1:cc:3e:fa: d1:60:69:9b:6e:e4:0c:fb:ab:4b:34:b4:91:21:af: ea:fd:c8:84:ad:67:24:f0:75:20:84:da:ab:07:56: 04:a7:3e:87:f3:8e:45:92:42:82:95:25:ae:0c:ab: 38:2a:26:3c:1a:cc:6e:8a:2d:b1:ca:e2:bd:05:7a: 21:0d:e1:33:a5:17:0d:80:80:46:bb:1a:a3:ce:81: 0f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3F:0B:CE:DF:2C:07:19:06:8F:F9:BE:AE:DB:A6:3B:91:1D:03:57 X509v3 Authority Key Identifier: keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e5:73:13:80:a3:1e:17:6a:9c:0b:86:01:ad:e2:a4:1a:03: 37:aa:ae:82:2c:a6:bb:ad:75:ed:8a:6f:d5:c2:38:fd:49:10: ce:9d:7a:4f:58:bd:ef:73:5a:d8:8e:0e:22:be:79:ed:e2:f5: 59:6e:f1:cb:7b:21:ca:e5:d8:ac:6f:42:88:52:b5:e7:f3:3d: 0e:c2:49:96:56:1d:e6:6b:bd:72:f4:a0:36:6a:45:85:5c:dc: cc:84:43:af:db:0b:24:97:3a:71:f7:d0:71:14:9f:bf:d5:be: d3:a1:91:a9:a2:77:53:83:f0:1b:74:77:cb:17:c6:2b:ce:0f: 5d:ca:6f:83:fc:d8:6b:86:bb:db:c2:59:ad:f2:86:fe:5e:af: 81:d5:4e:3c:f0:ce:1a:b5:12:b6:35:c4:88:a9:a9:a3:ec:6d: 6b:7e:02:2f:25:d4:62:28:58:5f:42:98:a2:0a:ba:3b:56:36: 16:5c:fc:ad:40:73:88:ca:40:6f:af:c1:11:76:b6:ec:f7:c3: 97:53:be:99:6d:47:53:74:31:70:45:df:3d:b9:77:00:d3:f3: c9:97:e2:0a:00:a5:8d:92:53:69:12:0d:cd:71:a3:0e:4d:ec: ce:90:42:af:89:b9:f1:bf:10:9b:b5:66:d7:eb:72:0b:b5:b2: 1b:fc:38:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuBzPjb0bZwlYSL7Dz3g8U3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMGRhOWU3YWYwMWRlNzU0NDhmNDkwNmFhYzQxYmQyOTY0 ZTg4NDcwHhcNMjYwMTAzMDMwMDUyWhcNMjYwMTA0MDMwMDUyWjAzMTEwLwYDVQQD Eyg5YjNmMGJjZWRmMmMwNzE5MDY4ZmY5YmVhZWRiYTYzYjkxMWQwMzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK9UFrpRfz0sAzM17vh/qwWCEKZJ 7jkdUJubsSkYdJfMMxvhWcprROVWoNDheCXB+lYVsili698h3VN+WtI+sJALC9Ya tNq7niztTtJooClnGhp6nuHX1FcDMo33VeasT9+ZQMr+rvJdrKSZUIwOnJWAVakS 8CfhmvRNpia6MItucigFCTyOzoxEmUYNtaMl1PkMKk2WlF39ydK1V82xsegyNcG7 J62Q0blscXYZXtHMPvrRYGmbbuQM+6tLNLSRIa/q/ciErWck8HUghNqrB1YEpz6H 845FkkKClSWuDKs4KiY8Gsxuii2xyuK9BXohDeEzpRcNgIBGuxqjzoEPRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJs/C87fLAcZBo/5vq7bpjuRHQNXMB8GA1UdIwQY MBaAFCENqeevAd51RI9JBqrEG9KWTohHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUt NmUxMjc3NGY4NTFlLzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUtNmUxMjc3NGY4NTFl LzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+VzE4Cj HhdqnAuGAa3ipBoDN6qugiymu6117Ypv1cI4/UkQzp16T1i973Na2I4OIr557eL1 WW7xy3shyuXYrG9CiFK15/M9DsJJllYd5mu9cvSgNmpFhVzczIRDr9sLJJc6cffQ cRSfv9W+06GRqaJ3U4PwG3R3yxfGK84PXcpvg/zYa4a728JZrfKG/l6vgdVOPPDO GrUStjXEiKmpo+xta34CLyXUYihYX0KYogq6O1Y2Flz8rUBziMpAb6/BEXa27PfD l1O+mW1HU3QxcEXfPbl3ANPzyZfiCgCljZJTaRINzXGjDk3szpBCr4m58b8Qm7Vm 1+tyC7WyG/w4Kg== -----END CERTIFICATE-----Generated at Sat Jan 3 08:21:13 2026 by rpki-client