This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: tB3D8PKQ7b8o7cIjL4/BMSAQ6OzsACu+l/kjUlzHIN4= Subject key identifier: 7D:CB:1F:27:A6:62:7B:99:26:15:BF:40:B6:94:2A:92:A3:32:4A:A8 Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 019BF72CD946C4533103A0C4677EB6B6B4A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 13C4 Signing time: Sun 25 Jan 2026 22:01:09 +0000 Manifest this update: Sun 25 Jan 2026 22:01:09 +0000 Manifest next update: Mon 26 Jan 2026 22:01:09 +0000 Files and hashes: 1: 0hcq4PZX-1xxmrjFSYjLo3wgxq8.roa (hash: fBvZPJmlkoGB3cHe8R1wzHuEiD2O7hJFr9Ij0HVMY1c=) 2: 4uhQK-ahMU-b686CpY3ebuHDcxA.roa (hash: jPmzy29N69ytvo0+nxFYwzpNOf0HZh68Epxb4V5zrHQ=) 3: AygaSJoY4X-N8pcfdiWT-0OzTH0.roa (hash: GpuGRR+uDCRH0KzkkUeOxZxQXmqHI/G6tCUG41o6giA=) 4: EHyHz9gbiIWU2Q5sl0TdaoAfeVE.roa (hash: xvfiNAM8dce9pnD+OcgFDuIEl8iG5dBrERTSonUjoY8=) 5: Gz0_KsyuxF_Mtua-1HhemOuZcQg.roa (hash: IbzaI7YpmiRgkQae6jLRwhProyJ2PzVbvEcbQ3Zj2TA=) 6: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: JHG2mR68myoTVf2ey55VzCSIZpUmYtHEZfhro5zyVHI=) 7: NYPoffrLoAbAwFWjaJWC9xF7tag.roa (hash: QYIkGHhsJbFCCKO0D05wYVkIDI1TsV96ppLPRrx2sEQ=) 8: ONFJ7LphZxOGZ2K2zbv66AhtweY.roa (hash: DDngO20oZwmh9SFw7vnZ3c/5+t8eB0azTMW7fa0PcqY=) 9: PuWzaWDPZdUuUrxGCiIHTaSNw1I.roa (hash: ZhpxPkZ5HeM7Cta+60eILIvsV0BXzirBM2q8c5C0MXo=) 10: iS9uo2CVpXEBFYokkCE8nbhbEMM.roa (hash: QeKvl9dlg12hw8xWR+4vV6LFMdl1MpdXqQH0ouyz7Vk=) 11: lwmtxoWx5clkivlnh1Kh10qANc8.roa (hash: aox9Sa8RSdnqNanp7vV3UK2GlMEf/ITdwIirj370CTo=) 12: pUjgfHpSLJEroItVeYdePetGeno.roa (hash: 3GHGFzGCi0a87nJzoUGj4P1u3SwU6ateFJ0oPnoaNEM=) 13: ygZyjuYzflVbHgfVvcHOxvuu0E4.roa (hash: IH0YWQaBGEjd+Nsl8K72F6uJWsgW3OOY75p4PPRBdZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:d9:46:c4:53:31:03:a0:c4:67:7e:b6:b6:b4:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Jan 25 22:01:09 2026 GMT Not After : Jan 26 22:01:09 2026 GMT Subject: CN=7dcb1f27a6627b992615bf40b6942a92a3324aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:31:93:5e:3f:2f:81:ce:1a:6a:98:b8:46: 31:8c:e5:d4:91:d3:0b:76:44:99:6f:41:b6:ea:d0: 7d:12:ed:92:09:57:37:1d:a7:e3:5f:25:80:88:97: de:3a:fd:cf:24:0f:70:f5:74:5f:b0:55:d5:f6:40: 73:60:e6:89:90:a7:90:8b:9c:e1:fe:03:fe:a2:83: 7f:e5:32:38:1f:92:90:53:5b:1f:ac:41:da:49:38: b8:ab:d5:3b:a6:14:4b:9e:a6:4a:ae:25:21:06:c3: 4c:35:13:b0:e9:34:8f:05:cb:0a:b7:9b:c3:fe:55: 99:37:25:45:e7:91:2e:26:d7:aa:81:c9:08:20:f2: 48:77:b4:76:ab:52:52:8d:9c:88:ee:be:50:51:bb: d7:6c:4e:11:da:f7:4c:ad:60:aa:9f:23:d0:84:af: 3a:5b:35:58:d7:ea:56:17:a8:88:74:66:9b:b1:2f: f1:04:7c:c9:28:ca:2f:4c:30:ca:2e:66:9b:94:65: 00:ea:83:ec:89:bf:ea:76:f2:5b:94:49:1d:bf:33: 4b:c5:0b:25:c7:03:53:f4:dd:a5:51:50:6f:fa:ef: cd:6f:a0:3e:8b:0e:db:d9:4e:c9:55:71:db:3a:73: 14:7c:d0:48:14:3a:50:b1:5e:55:4b:25:10:90:04: 36:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CB:1F:27:A6:62:7B:99:26:15:BF:40:B6:94:2A:92:A3:32:4A:A8 X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:03:28:69:3f:ec:7d:35:30:f2:fa:9f:ba:67:be:4b:5a:57: c1:bd:aa:be:40:b6:e0:05:82:02:30:9c:05:74:b1:49:66:80: bb:4f:2d:e8:32:f6:95:e3:8f:c0:15:2f:84:48:e7:fb:6d:d3: 85:37:7d:bc:f8:e0:b7:14:32:c5:57:bf:d7:bb:01:ab:69:4f: 55:e6:a2:1b:f3:65:56:66:e4:bd:52:4d:e2:9b:49:60:d5:75: b3:30:f1:5e:6b:60:9c:53:0d:c9:82:82:89:df:33:41:90:d5: 09:83:cf:a0:d3:ac:f3:60:b1:bd:d2:e4:12:c4:ab:97:db:9c: 4c:61:a4:0d:a7:ee:bb:95:09:37:da:b0:db:dc:63:9e:60:5a: dd:b0:af:49:d7:e0:51:d0:a8:d1:3f:77:49:75:b4:c5:27:5d: 6f:82:82:54:a8:eb:a0:8c:16:a5:f4:ba:6b:0e:25:b6:aa:f1: 2d:91:0d:12:5c:84:39:66:39:3c:47:e0:1b:22:30:7c:d3:a5: fe:29:b8:fa:72:d4:28:e6:35:b1:c7:eb:0b:0a:4f:4a:35:36: 2c:7c:d6:be:f3:f2:17:78:b7:4b:09:56:3b:e3:b7:f5:3f:04: 92:58:41:d1:4e:86:23:d2:07:c0:08:60:12:68:c2:c9:3b:8d: 36:49:1f:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LNlGxFMxA6DEZ362trSlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjYwMTI1MjIwMTA5WhcNMjYwMTI2MjIwMTA5WjAzMTEwLwYDVQQD Eyg3ZGNiMWYyN2E2NjI3Yjk5MjYxNWJmNDBiNjk0MmE5MmEzMzI0YWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKAxk14/L4HOGmqYuEYxjOXUkdML dkSZb0G26tB9Eu2SCVc3HafjXyWAiJfeOv3PJA9w9XRfsFXV9kBzYOaJkKeQi5zh /gP+ooN/5TI4H5KQU1sfrEHaSTi4q9U7phRLnqZKriUhBsNMNROw6TSPBcsKt5vD /lWZNyVF55EuJteqgckIIPJId7R2q1JSjZyI7r5QUbvXbE4R2vdMrWCqnyPQhK86 WzVY1+pWF6iIdGabsS/xBHzJKMovTDDKLmablGUA6oPsib/qdvJblEkdvzNLxQsl xwNT9N2lUVBv+u/Nb6A+iw7b2U7JVXHbOnMUfNBIFDpQsV5VSyUQkAQ2/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3LHyemYnuZJhW/QLaUKpKjMkqoMB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgMoaT/s fTUw8vqfume+S1pXwb2qvkC24AWCAjCcBXSxSWaAu08t6DL2leOPwBUvhEjn+23T hTd9vPjgtxQyxVe/17sBq2lPVeaiG/NlVmbkvVJN4ptJYNV1szDxXmtgnFMNyYKC id8zQZDVCYPPoNOs82CxvdLkEsSrl9ucTGGkDafuu5UJN9qw29xjnmBa3bCvSdfg UdCo0T93SXW0xSddb4KCVKjroIwWpfS6aw4ltqrxLZENElyEOWY5PEfgGyIwfNOl /im4+nLUKOY1scfrCwpPSjU2LHzWvvPyF3i3SwlWO+O39T8EklhB0U6GI9IHwAhg EmjCyTuNNkkfKQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:40:52 2026 by rpki-client