This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft File: i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json) Hash identifier: 5iduic632b2EeWGxl1OYWG3lAQZagwt6Aj7lVNVHfuk= Subject key identifier: 94:12:FA:7C:F5:3D:2D:87:37:AD:7E:19:96:94:3E:4D:BC:0C:87:EA Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3 Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3 Certificate serial: 019BFAD26D0725766D231B3CA7934845828F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft Manifest number: 0D58 Signing time: Mon 26 Jan 2026 15:00:52 +0000 Manifest this update: Mon 26 Jan 2026 15:00:52 +0000 Manifest next update: Tue 27 Jan 2026 15:00:52 +0000 Files and hashes: 1: Eo8KA9T6HD9p4ZSTDc0r_PeW2ik.roa (hash: 6EGWa/823S4j3qzNZzVNi7+aLxh9oMMF178PdW3UF1g=) 2: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: r/iURy1sroSqEyVqCuBv+TBqKNC/6NkpTwarBmzSEfg=) 3: uR6qk5DeglUWNbzyA8X_zxBn_Us.roa (hash: 7cX65e6MFwNlQSj+gYDD5WGRNzvo97dTNPuyxMqN7k4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:6d:07:25:76:6d:23:1b:3c:a7:93:48:45:82:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3 Validity Not Before: Jan 26 15:00:52 2026 GMT Not After : Jan 27 15:00:52 2026 GMT Subject: CN=9412fa7cf53d2d8737ad7e1996943e4dbc0c87ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c1:b7:f1:66:01:1d:e0:08:7a:de:af:59:ed: 0f:6e:f3:be:98:fb:e1:a1:18:f3:5e:b7:7d:f0:bc: 05:de:d8:24:e4:0c:44:da:e4:80:3a:1d:28:c0:ea: e1:b8:f9:53:b1:87:5b:08:b8:d1:26:95:63:84:b2: 5d:60:04:b5:84:72:9c:06:69:e8:25:e4:0f:d6:df: 53:f5:97:94:5d:f9:f3:30:01:0a:c8:d9:cb:6c:0d: b7:10:24:55:61:e6:0f:6e:a8:00:c8:ee:6a:45:15: 13:3d:90:bc:12:b6:d5:89:cc:8f:df:cc:43:c6:5f: 71:2c:cd:43:b0:f2:54:5b:e6:9e:3a:8a:a6:92:c1: 16:e5:a0:1d:23:aa:bf:45:9e:3f:2d:d4:38:1f:97: 6d:57:ff:1c:45:49:ef:c5:4b:0a:d5:81:b1:48:4f: d1:e4:1f:a5:41:95:d3:99:df:34:b7:a8:98:31:f0: f2:79:d4:4e:cc:a7:15:cc:c7:51:b4:2d:e4:cc:69: e1:20:98:6b:69:c1:13:53:e0:42:1a:fd:fd:b2:ba: 25:ff:ff:eb:70:5c:7d:28:50:a7:b1:95:9d:35:57: 53:f8:6f:74:5f:76:ed:d7:a2:2a:d2:27:e9:12:24: b6:06:20:f4:54:90:48:8f:5a:f2:10:20:30:e4:10: ad:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:12:FA:7C:F5:3D:2D:87:37:AD:7E:19:96:94:3E:4D:BC:0C:87:EA X509v3 Authority Key Identifier: keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d6:c2:8c:e1:5a:44:21:47:49:41:9c:ba:59:1f:c0:c4:7b: 0f:bb:4e:98:f4:c2:74:7c:65:9a:85:7c:42:28:ea:01:57:a8: 8a:9c:ec:63:c9:3d:58:12:9d:3e:b8:5c:dd:f4:e7:82:4d:2e: 03:62:79:c7:bc:bd:ef:2c:5a:4c:a0:a4:17:e8:bf:90:18:57: 0f:94:98:9b:7d:44:dd:48:1d:3e:53:75:76:c5:7a:b0:9d:27: 95:0f:4d:4d:00:6d:9a:31:80:98:6d:e8:e5:44:9d:5b:e5:28: ed:4f:06:47:0d:a2:32:bf:6d:d7:15:77:e7:53:80:d1:a2:e9: 39:63:f0:51:21:64:0c:96:df:22:68:ab:f7:90:0b:3d:71:74: e9:b7:fe:8b:47:c7:af:a3:09:6b:5b:cd:37:c3:97:c1:bd:63: 97:7e:a6:6f:6d:e8:21:4d:37:f0:4e:41:a3:b5:8a:14:42:90: 2f:90:cb:ae:70:5f:2e:bd:ea:78:d8:07:9c:62:34:24:1b:c6: 0f:89:1b:35:2f:de:be:12:97:30:00:6a:4b:3e:ab:39:b8:82: 23:37:b0:c6:e4:d5:4c:1a:e1:2f:77:3f:a7:70:86:b9:f3:bb: b9:42:07:9e:50:dc:83:be:59:c8:ca:65:63:15:78:21:d0:8d: 6d:2b:2c:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60m0HJXZtIxs8p5NIRYKPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOGQ4NTk4MDY0ZGI1YThlZGIzYTYwODQwNjRjZDJhMWFk OGM2ZTMwHhcNMjYwMTI2MTUwMDUyWhcNMjYwMTI3MTUwMDUyWjAzMTEwLwYDVQQD Eyg5NDEyZmE3Y2Y1M2QyZDg3MzdhZDdlMTk5Njk0M2U0ZGJjMGM4N2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsG38WYBHeAIet6vWe0PbvO+mPvh oRjzXrd98LwF3tgk5AxE2uSAOh0owOrhuPlTsYdbCLjRJpVjhLJdYAS1hHKcBmno JeQP1t9T9ZeUXfnzMAEKyNnLbA23ECRVYeYPbqgAyO5qRRUTPZC8ErbVicyP38xD xl9xLM1DsPJUW+aeOoqmksEW5aAdI6q/RZ4/LdQ4H5dtV/8cRUnvxUsK1YGxSE/R 5B+lQZXTmd80t6iYMfDyedROzKcVzMdRtC3kzGnhIJhracETU+BCGv39srol///r cFx9KFCnsZWdNVdT+G90X3bt16Iq0ifpEiS2BiD0VJBIj1ryECAw5BCt8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQS+nz1PS2HN61+GZaUPk28DIfqMB8GA1UdIwQY MBaAFIuNhZgGTbWo7bOmCEBkzSoa2MbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTQyRm1BWk50YWp0czZZSVFHVE5LaHJZeHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MjNlOWMtNDQyNS00OTZlLWIyMzct NmIwZWY5MTA4Njg4LzEvaTQyRm1BWk50YWp0czZZSVFHVE5LaHJZeHVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MjNlOWMtNDQyNS00OTZlLWIyMzctNmIwZWY5MTA4Njg4 LzEvaTQyRm1BWk50YWp0czZZSVFHVE5LaHJZeHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtbCjOFa RCFHSUGculkfwMR7D7tOmPTCdHxlmoV8QijqAVeoipzsY8k9WBKdPrhc3fTngk0u A2J5x7y97yxaTKCkF+i/kBhXD5SYm31E3UgdPlN1dsV6sJ0nlQ9NTQBtmjGAmG3o 5USdW+Uo7U8GRw2iMr9t1xV351OA0aLpOWPwUSFkDJbfImir95ALPXF06bf+i0fH r6MJa1vNN8OXwb1jl36mb23oIU038E5Bo7WKFEKQL5DLrnBfLr3qeNgHnGI0JBvG D4kbNS/evhKXMABqSz6rObiCIzewxuTVTBrhL3c/p3CGufO7uUIHnlDcg75ZyMpl YxV4IdCNbSssXg== -----END CERTIFICATE-----Generated at Mon Jan 26 18:58:28 2026 by rpki-client