This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json) Hash identifier: hKbYUzMfZYEcRaXAPVeTsLdLszJ2Bk/wZU1apCTsJ7k= Subject key identifier: 40:84:EF:56:10:BD:3B:F0:21:93:A6:9C:11:39:39:61:87:D7:AA:24 Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02 Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802 Certificate serial: 019BFC8991BED715E690C058C00870098B69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft Manifest number: 0E68 Signing time: Mon 26 Jan 2026 23:00:32 +0000 Manifest this update: Mon 26 Jan 2026 23:00:32 +0000 Manifest next update: Tue 27 Jan 2026 23:00:32 +0000 Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: g5oetIXaYvp+zMGl/lPiTjG7YEEn75oWbn5aaOkZBrU=) 2: Rcr1rF06ss6zsR-k7_lYhZLvbFA.roa (hash: 5S/JlLF6tLEV2uH6cVuwpWmcaMewRgyHJdvM6XbNwdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:89:91:be:d7:15:e6:90:c0:58:c0:08:70:09:8b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802 Validity Not Before: Jan 26 23:00:32 2026 GMT Not After : Jan 27 23:00:32 2026 GMT Subject: CN=4084ef5610bd3bf02193a69c1139396187d7aa24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:22:92:10:ff:0c:6c:95:3c:e7:71:12:5d:48: 48:7c:8c:82:82:39:f6:01:63:2c:63:51:b4:14:18: 10:3b:79:f7:c4:cc:12:33:ad:de:ef:b5:61:90:9f: 8c:54:00:3d:a5:ed:7c:3d:8c:09:36:70:75:a1:e7: 20:c4:9c:15:ac:f2:86:ae:99:1d:26:67:5c:6d:a5: 5f:51:8d:76:ad:1e:70:e4:69:7c:c3:26:b4:b5:e1: 64:eb:36:26:ee:72:56:4a:75:37:ce:9a:98:ce:80: f8:58:10:97:f9:26:85:e6:62:28:4f:d4:7f:62:18: 15:9c:a2:78:f8:9b:bf:a8:e0:b2:21:74:4f:12:70: a7:56:a6:9f:4c:47:9c:14:f8:11:b3:4a:18:8b:bc: 32:0a:1a:df:99:6e:f0:e3:61:1f:d5:3a:fd:34:9c: c9:a3:3c:e2:e6:ef:ca:7e:8e:c8:67:d6:78:b0:3c: 62:e6:d3:e8:f2:de:c2:b5:d2:5a:3a:91:3c:82:d9: a8:88:13:36:bc:f2:5b:55:49:e9:ff:1b:61:80:3a: 42:f9:f1:ba:42:f7:5b:5e:e7:78:1f:02:44:59:dc: 86:03:3e:47:87:b5:2e:f5:c3:52:50:5b:37:4a:2c: 9c:d5:82:4b:af:3b:dc:33:1a:fe:bb:bd:09:0b:af: 80:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:84:EF:56:10:BD:3B:F0:21:93:A6:9C:11:39:39:61:87:D7:AA:24 X509v3 Authority Key Identifier: keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ce:62:ec:d8:d3:81:65:05:74:92:5f:8d:c2:51:61:5c:21: 68:d7:f4:ce:cd:34:c7:b9:34:e1:71:e3:e5:81:ca:6b:9c:e2: 07:00:24:7e:ce:14:bf:df:c5:3a:59:1d:d5:70:0b:50:56:03: 06:f4:4e:4e:ee:5a:64:16:d6:82:e1:78:40:a0:ae:f3:6b:ef: 97:0c:00:32:3b:c9:d6:50:88:38:c2:cc:81:cf:7e:9d:23:95: c2:af:d8:8c:33:c5:91:aa:e6:b0:56:0b:70:81:33:84:35:59: eb:b1:59:6d:56:56:f8:22:da:7b:f4:a4:23:f1:ec:19:84:31: 30:61:67:e5:63:f6:69:68:d4:e1:b2:20:e4:69:f9:d1:42:89: 0a:1f:18:d9:d7:24:bd:97:42:9e:0c:ba:b7:2a:88:80:37:65: 78:b9:f2:48:cc:ac:e3:d4:97:a4:d8:c2:9c:82:ef:5b:ed:5e: 82:37:e7:8c:d8:ae:d5:79:e7:f8:68:4f:17:18:2a:d1:14:29: a4:77:16:70:7c:62:70:f1:12:d0:78:a7:98:e7:55:eb:b7:e0: 6c:cd:c2:b4:aa:92:5d:a4:b3:74:3e:05:2c:c8:9e:90:7d:3e: 64:59:f9:46:34:bc:80:f0:9a:fc:13:4e:59:9e:9e:86:9f:aa: 51:9c:dd:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8iZG+1xXmkMBYwAhwCYtpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmZiOWUyMTllMTVmZWRhNmFkZDI5NjM5YjhkNzNmNWMy Y2Q4MDIwHhcNMjYwMTI2MjMwMDMyWhcNMjYwMTI3MjMwMDMyWjAzMTEwLwYDVQQD Eyg0MDg0ZWY1NjEwYmQzYmYwMjE5M2E2OWMxMTM5Mzk2MTg3ZDdhYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSKSEP8MbJU853ESXUhIfIyCgjn2 AWMsY1G0FBgQO3n3xMwSM63e77VhkJ+MVAA9pe18PYwJNnB1oecgxJwVrPKGrpkd JmdcbaVfUY12rR5w5Gl8wya0teFk6zYm7nJWSnU3zpqYzoD4WBCX+SaF5mIoT9R/ YhgVnKJ4+Ju/qOCyIXRPEnCnVqafTEecFPgRs0oYi7wyChrfmW7w42Ef1Tr9NJzJ ozzi5u/Kfo7IZ9Z4sDxi5tPo8t7CtdJaOpE8gtmoiBM2vPJbVUnp/xthgDpC+fG6 QvdbXud4HwJEWdyGAz5Hh7Uu9cNSUFs3Siyc1YJLrzvcMxr+u70JC6+AnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECE71YQvTvwIZOmnBE5OWGH16okMB8GA1UdIwQY MBaAFCG/ueIZ4V/tpq3Sljm41z9cLNgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODIt NzNmZDJjMDM1ZWI1LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODItNzNmZDJjMDM1ZWI1 LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS85i7NjT gWUFdJJfjcJRYVwhaNf0zs00x7k04XHj5YHKa5ziBwAkfs4Uv9/FOlkd1XALUFYD BvROTu5aZBbWguF4QKCu82vvlwwAMjvJ1lCIOMLMgc9+nSOVwq/YjDPFkarmsFYL cIEzhDVZ67FZbVZW+CLae/SkI/HsGYQxMGFn5WP2aWjU4bIg5Gn50UKJCh8Y2dck vZdCngy6tyqIgDdleLnySMys49SXpNjCnILvW+1egjfnjNiu1Xnn+GhPFxgq0RQp pHcWcHxicPES0HinmOdV67fgbM3CtKqSXaSzdD4FLMiekH0+ZFn5RjS8gPCa/BNO WZ6ehp+qUZzdKQ== -----END CERTIFICATE-----Generated at Tue Jan 27 07:16:30 2026 by rpki-client