This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json) Hash identifier: hfXoLRai8N5OoTDeYo/i4vSbSJqifWTP+98Z+ZQSF8M= Subject key identifier: 53:F5:B7:42:5B:01:F6:DB:AE:DE:DE:02:52:E9:32:2A:34:8C:01:F2 Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83 Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83 Certificate serial: 019BFA2DFF98569ADCCD6CF85091E88A0483 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft Manifest number: 0F3C Signing time: Mon 26 Jan 2026 12:01:16 +0000 Manifest this update: Mon 26 Jan 2026 12:01:16 +0000 Manifest next update: Tue 27 Jan 2026 12:01:16 +0000 Files and hashes: 1: 2bVvxRffnJ6GQKgs2LoPDWvUcK4.roa (hash: er7wIVOxtiLCvuKAAvSBfYTSBvkd5n1t/IW0taeZM7Y=) 2: EKwGj8cGWTKa1emZfvaG-_KFnug.roa (hash: 0WqMi3eKQHHkupGYUjixsLx2D37mbsIXi9Fsl7hZLiw=) 3: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: j7Wt0zJknB8WlaqRFWZPgzahsCiiXv4ArF2IGUdsKbM=) 4: QdRrKIrH4mGJmO4pGdzpank3gew.roa (hash: uL5ZvBd0SOggdi3Ll3eXsAHR4s6R5DvUqu2sa+EiNtI=) 5: TruqXXhyrBV8Cwe5yzCBt7QLsCE.roa (hash: Ab+jWWB0kPKqVoiUmBfNBgr0bDHAA/s+gzbI3fKh/Jo=) 6: YIiAdksRfvM2tL27jCCRXB5ju3Q.roa (hash: QClgQMgXCLixY3zPZ3xGliorGs5EkE6bJGcMO+wqsBg=) 7: hD3IqorNDrlwkzGUmybhJLv5L2k.roa (hash: ZaWNL4A6CBZBDeNroOwIUO67tG+ZeiSsCvPL+QQ5od4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:ff:98:56:9a:dc:cd:6c:f8:50:91:e8:8a:04:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83 Validity Not Before: Jan 26 12:01:16 2026 GMT Not After : Jan 27 12:01:16 2026 GMT Subject: CN=53f5b7425b01f6dbaedede0252e9322a348c01f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cc:6b:fa:19:21:08:8f:fe:aa:91:74:dd:38: 30:07:e5:c7:20:9f:64:9b:89:a0:07:9f:89:5b:9a: 30:72:41:c6:90:b8:85:ef:b8:38:a8:dd:51:17:fa: b1:34:f9:20:30:a6:e4:3e:2d:ce:65:1e:44:1a:31: ee:e4:78:8a:2f:e2:4f:4d:10:9d:d9:b3:61:a5:26: 1d:17:50:fa:ce:3a:d8:cc:b1:64:f0:65:a7:c4:eb: c1:42:74:e8:63:4c:44:50:85:c0:55:c1:5f:5b:a8: 76:f5:90:35:65:35:cc:95:15:67:18:d8:dc:e6:fd: b1:0e:c4:26:f4:3b:9e:94:62:0c:fd:bd:5f:a6:53: 61:2f:3b:f3:4e:f4:53:fb:e9:e2:9f:c8:ff:53:88: 82:b4:af:df:ff:80:7c:5d:4f:da:58:b2:21:66:19: 30:c1:ac:a9:64:9c:c0:27:57:8e:f3:17:d3:10:65: aa:00:e9:08:2f:a3:f6:5e:a1:e8:e6:1e:b8:c8:5e: a4:95:39:73:f2:ae:cb:d7:8c:8f:ea:a6:51:49:67: 18:bd:59:1a:60:4e:78:02:35:ce:4c:17:80:4f:69: b2:a6:8f:ce:86:78:ee:d7:17:d5:c9:69:de:75:7d: 35:f1:33:f6:cc:97:02:9e:b9:69:cc:b6:85:be:70: 1d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F5:B7:42:5B:01:F6:DB:AE:DE:DE:02:52:E9:32:2A:34:8C:01:F2 X509v3 Authority Key Identifier: keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:bd:b4:63:fd:03:db:70:18:19:37:4a:65:ef:af:f8:56:75: 14:84:cc:14:6f:2b:62:2b:cc:39:66:5b:99:a6:d8:96:c4:23: 84:44:a6:13:d7:8f:b2:44:a7:0e:d1:c9:70:51:03:2f:4d:8d: a1:69:72:02:f9:8e:27:26:70:cc:a5:67:c3:11:e6:1c:00:0e: d9:97:22:ae:20:ac:c1:13:ba:48:d0:8e:0c:c4:f1:2e:f0:83: 68:15:ac:5b:8e:10:c5:6a:e5:23:ad:e6:e1:a7:dd:bf:9f:00: 5c:c1:2f:de:49:6c:4d:a3:6b:09:02:dd:dc:6a:bb:62:1a:29: 47:54:be:f4:33:7b:0c:94:6c:d9:17:b3:31:5e:a2:12:eb:2f: 74:69:14:9a:e8:de:14:6c:1a:27:ee:5b:cb:11:ba:92:6b:6b: ae:43:85:46:ce:d0:6a:03:08:a3:08:e0:5b:d8:61:c6:4e:de: e7:d1:ee:76:2d:9b:6b:c5:d2:46:1a:64:55:63:70:e6:6b:a6: d6:c5:d6:40:b7:f9:21:a8:60:d2:04:d8:16:69:19:df:d1:d7: 93:cf:12:7a:9d:a9:dd:19:c3:1a:0c:73:4c:d3:e4:7f:64:d3: 44:67:e7:fc:46:47:f0:d3:72:ec:e6:ca:95:57:60:01:ec:08: 21:0e:8f:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6Lf+YVprczWz4UJHoigSDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMmM0NTg1YmQ4OGZiMjdjYWRmMjllZTViYjk1ZDY1NzVm Y2VmODMwHhcNMjYwMTI2MTIwMTE2WhcNMjYwMTI3MTIwMTE2WjAzMTEwLwYDVQQD Eyg1M2Y1Yjc0MjViMDFmNmRiYWVkZWRlMDI1MmU5MzIyYTM0OGMwMWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58xr+hkhCI/+qpF03TgwB+XHIJ9k m4mgB5+JW5owckHGkLiF77g4qN1RF/qxNPkgMKbkPi3OZR5EGjHu5HiKL+JPTRCd 2bNhpSYdF1D6zjrYzLFk8GWnxOvBQnToY0xEUIXAVcFfW6h29ZA1ZTXMlRVnGNjc 5v2xDsQm9DuelGIM/b1fplNhLzvzTvRT++nin8j/U4iCtK/f/4B8XU/aWLIhZhkw waypZJzAJ1eO8xfTEGWqAOkIL6P2XqHo5h64yF6klTlz8q7L14yP6qZRSWcYvVka YE54AjXOTBeAT2mypo/Ohnju1xfVyWnedX018TP2zJcCnrlpzLaFvnAdWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFP1t0JbAfbbrt7eAlLpMio0jAHyMB8GA1UdIwQY MBaAFCIsRYW9iPsnyt8p7lu5XWV1/O+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUt YzY0N2E4YzFkZGZhLzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUtYzY0N2E4YzFkZGZh LzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACr20Y/0D 23AYGTdKZe+v+FZ1FITMFG8rYivMOWZbmabYlsQjhESmE9ePskSnDtHJcFEDL02N oWlyAvmOJyZwzKVnwxHmHAAO2ZciriCswRO6SNCODMTxLvCDaBWsW44QxWrlI63m 4afdv58AXMEv3klsTaNrCQLd3Gq7YhopR1S+9DN7DJRs2RezMV6iEusvdGkUmuje FGwaJ+5byxG6kmtrrkOFRs7QagMIowjgW9hhxk7e59Hudi2ba8XSRhpkVWNw5mum 1sXWQLf5Iahg0gTYFmkZ39HXk88Sep2p3RnDGgxzTNPkf2TTRGfn/EZH8NNy7ObK lVdgAewIIQ6PRA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:02:34 2026 by rpki-client