This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json) Hash identifier: J+fsovKF6jsZpTEeoURwdmHtTn64aXwo/GNn9DK9WI0= Subject key identifier: D9:82:7B:96:19:C8:1A:B3:50:54:EA:AF:94:75:90:8B:4D:F3:78:7E Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29 Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829 Certificate serial: 019BFC1BE71502F0EFF04252C0F97A872A6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft Manifest number: 0166 Signing time: Mon 26 Jan 2026 21:00:45 +0000 Manifest this update: Mon 26 Jan 2026 21:00:45 +0000 Manifest next update: Tue 27 Jan 2026 21:00:45 +0000 Files and hashes: 1: 6QjHcvrDTdo3Dcsfkn83V1tztM4.roa (hash: JFTixUtukhVNYIhWNk/M39c/BvDZEJR4o9D2y04PILQ=) 2: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: XaaN4YCRGNty7h812upZdAh9tk7bYJ6YpPtWw4RWaOU=) 3: gb5xNbtAgkWQqXbG8T17bUVHmq0.roa (hash: /1dOfhZa9TVQea6+UHGzLpaS8/QWnu27TA27EyKf3K4=) 4: wQ6vji0X6ZD_O1caODXBBWwmeVM.roa (hash: OPv6+WHAF3tKirx3Hv8PcnRMaiui/Hpy9DK4WYm8Hqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 21:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1b:e7:15:02:f0:ef:f0:42:52:c0:f9:7a:87:2a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829 Validity Not Before: Jan 26 21:00:45 2026 GMT Not After : Jan 27 21:00:45 2026 GMT Subject: CN=d9827b9619c81ab35054eaaf9475908b4df3787e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d3:d0:27:b3:4b:bf:43:6d:21:3d:40:90:40: 90:e7:06:b3:cf:7b:60:68:96:25:c4:88:ae:59:81: de:8c:c1:84:41:ef:27:57:1e:84:12:b5:45:2d:29: a3:0b:90:b8:69:ba:45:ec:c1:94:d5:99:ea:53:bb: 5c:b0:98:92:7a:e9:d9:8f:c0:46:dc:66:c9:59:31: f2:9c:97:56:1f:23:32:5d:d1:56:43:c2:85:54:1a: 79:a6:5b:4f:2a:1b:86:08:ad:d3:a7:56:1a:a3:97: 2d:36:ac:87:d1:5e:91:08:92:c6:02:ef:fb:70:99: 04:b3:6a:f1:5e:1a:1a:48:e7:7f:3f:85:e4:e5:88: 9e:19:82:20:7b:3f:2c:58:19:70:f9:4a:2f:63:fe: 70:17:e3:51:6c:89:12:30:0f:c5:27:00:c8:b4:ad: 80:9e:4b:bb:76:64:77:66:81:99:27:69:34:86:69: cc:d4:3e:10:c2:7c:69:e4:f8:1a:bf:82:15:9c:4f: 67:52:3a:cb:cf:c3:f4:4b:f2:7f:7f:53:98:a2:9f: 6f:f5:9d:ae:98:83:bf:3c:06:07:b3:52:bd:a3:f5: 5d:12:a5:dd:5e:e6:1c:d6:9b:1d:ce:5a:0c:1c:43: 79:a8:99:28:c1:ae:de:0f:83:00:c9:f2:d2:8a:ae: e9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:82:7B:96:19:C8:1A:B3:50:54:EA:AF:94:75:90:8B:4D:F3:78:7E X509v3 Authority Key Identifier: keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:4f:6d:41:cb:87:40:88:5d:60:45:90:cd:df:56:73:a2:b4: d3:33:1d:2c:b6:17:d8:de:64:70:61:56:2f:2a:60:8d:7b:2c: e2:19:d9:3d:5f:86:9a:a7:b1:7c:c8:21:af:50:d5:b4:e9:a8: 7d:d9:03:2d:86:59:e3:8f:44:c7:82:4d:e2:df:ad:82:0b:f4: fa:20:c9:7d:7c:f3:ad:bb:93:66:8d:17:a9:61:2d:04:5d:f5: 9f:0e:e6:71:41:18:b5:73:df:5a:10:37:52:d7:9f:b8:72:86: 30:1a:34:c2:fe:4c:10:f8:46:4c:4d:28:9d:8a:37:bb:3c:50: 64:17:8e:e5:3f:2a:7d:9c:15:d9:73:70:a8:6c:68:3c:72:c0: 7c:8e:ab:61:d5:ec:f9:14:37:e9:94:2e:f9:d6:91:ad:49:44: b5:fb:f3:ff:8e:4f:0f:1f:2c:4c:73:12:c0:f6:a1:08:0f:86: 98:33:47:5e:54:96:84:56:46:19:1a:c7:b3:6d:1a:5d:ca:db: ff:32:94:b0:a3:28:10:78:06:9c:77:08:57:97:89:6b:dd:b0: f6:b1:1f:11:cc:22:40:80:78:9a:35:ac:7b:15:43:9d:5f:19: 55:8d:bc:23:93:22:73:00:44:b7:3b:a7:34:bb:37:83:36:ee: 3d:3c:9b:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8G+cVAvDv8EJSwPl6hypvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZmE0ZWRkYjIxZjA5MDE5MjNjMTg5ZjQxZThmNWM3NDlh NjU4MjkwHhcNMjYwMTI2MjEwMDQ1WhcNMjYwMTI3MjEwMDQ1WjAzMTEwLwYDVQQD EyhkOTgyN2I5NjE5YzgxYWIzNTA1NGVhYWY5NDc1OTA4YjRkZjM3ODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9PQJ7NLv0NtIT1AkECQ5wazz3tg aJYlxIiuWYHejMGEQe8nVx6EErVFLSmjC5C4abpF7MGU1ZnqU7tcsJiSeunZj8BG 3GbJWTHynJdWHyMyXdFWQ8KFVBp5pltPKhuGCK3Tp1Yao5ctNqyH0V6RCJLGAu/7 cJkEs2rxXhoaSOd/P4Xk5YieGYIgez8sWBlw+UovY/5wF+NRbIkSMA/FJwDItK2A nku7dmR3ZoGZJ2k0hmnM1D4Qwnxp5Pgav4IVnE9nUjrLz8P0S/J/f1OYop9v9Z2u mIO/PAYHs1K9o/VdEqXdXuYc1psdzloMHEN5qJkowa7eD4MAyfLSiq7pgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmCe5YZyBqzUFTqr5R1kItN83h+MB8GA1UdIwQY MBaAFCD6Tt2yHwkBkjwYn0Ho9cdJplgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQt ZWQ1ZjAwYzk1MDY3LzEvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQtZWQ1ZjAwYzk1MDY3 LzEvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARk9tQcuH QIhdYEWQzd9Wc6K00zMdLLYX2N5kcGFWLypgjXss4hnZPV+GmqexfMghr1DVtOmo fdkDLYZZ449Ex4JN4t+tggv0+iDJfXzzrbuTZo0XqWEtBF31nw7mcUEYtXPfWhA3 UtefuHKGMBo0wv5MEPhGTE0onYo3uzxQZBeO5T8qfZwV2XNwqGxoPHLAfI6rYdXs +RQ36ZQu+daRrUlEtfvz/45PDx8sTHMSwPahCA+GmDNHXlSWhFZGGRrHs20aXcrb /zKUsKMoEHgGnHcIV5eJa92w9rEfEcwiQIB4mjWsexVDnV8ZVY28I5MicwBEtzun NLs3gzbuPTybnQ== -----END CERTIFICATE-----Generated at Tue Jan 27 07:16:51 2026 by rpki-client