This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json) Hash identifier: ctdPtzwWbj0oM8Jyo7cdiZgnt4OxvK2bdI+J9ozi0Q0= Subject key identifier: 1A:CE:73:BC:9B:AB:53:88:66:95:1A:C8:8A:C1:78:8D:37:F6:8D:57 Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37 Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37 Certificate serial: 019BFCF8093558F3A766CFD9B5CE1219EFFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft Manifest number: 1732 Signing time: Tue 27 Jan 2026 01:01:12 +0000 Manifest this update: Tue 27 Jan 2026 01:01:12 +0000 Manifest next update: Wed 28 Jan 2026 01:01:12 +0000 Files and hashes: 1: HsV1-It2Vhjq2cDbN1ymEmHr3mA.roa (hash: ZVFHRFWMeJx4DHLQrAuB5vx15xZkiNisCuu65Cr1geI=) 2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: 2jL4tyJRcAUcOmTTqUCmUeRwCuFxPSwWuTYSLGuDGUI=) 3: ybTxR0x2jRWWGn2w__zXIUaPJIc.roa (hash: ETJae5pzCeijYgD++SmhhmIykHq3ChLRMibSEkvYURQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:09:35:58:f3:a7:66:cf:d9:b5:ce:12:19:ef:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37 Validity Not Before: Jan 27 01:01:12 2026 GMT Not After : Jan 28 01:01:12 2026 GMT Subject: CN=1ace73bc9bab538866951ac88ac1788d37f68d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a7:cf:95:2f:e0:d1:fb:5c:e1:86:37:f5:c7: e9:e4:b2:d7:ee:fe:6d:7b:14:9f:75:c5:d8:be:a0: d5:28:2a:7f:b0:4a:ad:81:f6:ae:dc:70:09:3f:42: e7:fd:1a:49:24:70:b6:2f:76:30:4e:ad:15:d8:b2: e9:3d:26:52:0a:97:85:bd:e5:e1:b0:3e:ec:59:61: 43:64:82:b4:41:e0:50:76:35:8f:ed:8c:0c:d1:51: ea:0d:63:cf:61:0c:58:94:20:47:a2:65:e3:a5:c7: da:e1:00:03:2f:00:41:28:22:2b:55:50:c0:ae:ca: 90:c2:0d:23:1c:89:3b:26:49:46:3e:65:78:5c:5b: 72:ee:80:1b:51:69:2d:64:55:11:bf:c5:82:1d:b6: ca:2e:5e:2f:8b:08:0b:69:bb:b3:03:76:7f:6b:3b: 97:29:d3:27:d7:29:b1:d2:99:ac:62:52:a9:51:e6: 07:32:0c:19:6f:ed:e7:d0:a5:38:32:07:c4:57:97: 66:04:7f:3a:8b:cc:4a:59:c2:03:22:5d:d4:39:05: 76:5a:08:f4:a4:56:94:5c:eb:30:17:81:f0:f3:ac: fb:a0:65:bd:6f:c8:55:10:b0:e4:f9:61:29:e1:0a: e2:81:48:f0:ea:34:b3:11:16:b1:bf:ea:af:42:14: 14:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CE:73:BC:9B:AB:53:88:66:95:1A:C8:8A:C1:78:8D:37:F6:8D:57 X509v3 Authority Key Identifier: keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:c9:1c:08:cd:a3:c3:b9:87:63:e8:3f:b4:7d:be:16:44:e4: 10:92:c5:36:b8:fc:e7:c3:4c:81:e8:90:08:95:89:d1:fb:57: 4d:8c:d0:5e:fd:f0:ab:30:6d:92:16:b8:ea:33:cc:c4:8f:b9: 41:43:f5:58:a7:4b:84:ec:45:16:a5:72:17:52:2d:17:ee:d3: 41:69:ae:99:84:de:52:d7:82:d8:f4:3d:3a:8a:47:c8:1d:24: fb:bc:45:52:68:2b:4b:9f:4f:cc:33:be:d6:d8:57:08:d7:33: ef:fe:48:7f:b3:9e:a3:43:a7:da:4f:ba:b7:13:24:24:40:bf: b2:25:8d:20:a5:93:e9:a3:a3:d3:02:d4:fb:d9:ea:86:4c:20: a9:15:06:42:32:00:16:b5:7b:22:da:e0:19:a8:63:49:49:ac: 4d:19:c8:83:5e:81:f0:99:de:d6:d8:4d:2a:3a:63:ea:b9:0e: 63:f0:17:fd:dd:9b:be:8a:9d:6f:89:f8:17:31:f4:c3:54:d4: 6d:62:6f:f6:49:77:19:6c:88:9f:fd:c8:7f:f5:f6:ea:3c:ba: 7a:31:cb:ad:c8:95:3a:d0:8b:7f:99:a9:d1:2a:a8:dc:43:2c: 77:41:ba:ae:ea:aa:df:06:44:45:55:c7:8c:ec:37:6e:59:8b: 9a:64:d8:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+Ak1WPOnZs/Ztc4SGe/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDQ3YmFhOWFhNmUwYTIwYWQ5OTVhNzljMmE4ZGU2MDRm OWFhMzcwHhcNMjYwMTI3MDEwMTEyWhcNMjYwMTI4MDEwMTEyWjAzMTEwLwYDVQQD EygxYWNlNzNiYzliYWI1Mzg4NjY5NTFhYzg4YWMxNzg4ZDM3ZjY4ZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qfPlS/g0ftc4YY39cfp5LLX7v5t exSfdcXYvqDVKCp/sEqtgfau3HAJP0Ln/RpJJHC2L3YwTq0V2LLpPSZSCpeFveXh sD7sWWFDZIK0QeBQdjWP7YwM0VHqDWPPYQxYlCBHomXjpcfa4QADLwBBKCIrVVDA rsqQwg0jHIk7JklGPmV4XFty7oAbUWktZFURv8WCHbbKLl4viwgLabuzA3Z/azuX KdMn1ymx0pmsYlKpUeYHMgwZb+3n0KU4MgfEV5dmBH86i8xKWcIDIl3UOQV2Wgj0 pFaUXOswF4Hw86z7oGW9b8hVELDk+WEp4QrigUjw6jSzERaxv+qvQhQU6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrOc7ybq1OIZpUayIrBeI039o1XMB8GA1UdIwQY MBaAFIrUe6qapuCiCtmVp5wqjeYE+ao3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MzU1YjktNzNkNC00YzRjLTk2MDEt ZjAxYTJmNThlZjg4LzEvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85MzU1YjktNzNkNC00YzRjLTk2MDEtZjAxYTJmNThlZjg4 LzEvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMkcCM2j w7mHY+g/tH2+FkTkEJLFNrj858NMgeiQCJWJ0ftXTYzQXv3wqzBtkha46jPMxI+5 QUP1WKdLhOxFFqVyF1ItF+7TQWmumYTeUteC2PQ9OopHyB0k+7xFUmgrS59PzDO+ 1thXCNcz7/5If7Oeo0On2k+6txMkJEC/siWNIKWT6aOj0wLU+9nqhkwgqRUGQjIA FrV7ItrgGahjSUmsTRnIg16B8Jne1thNKjpj6rkOY/AX/d2bvoqdb4n4FzH0w1TU bWJv9kl3GWyIn/3If/X26jy6ejHLrciVOtCLf5mp0Sqo3EMsd0G6ruqq3wZERVXH jOw3blmLmmTYnQ== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:39 2026 by rpki-client