This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft File: iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft (raw, json) Hash identifier: D+OuUxmLERuiE9c2qOGg9I7WzW69ZVSUe3+S5vNIZao= Subject key identifier: FD:8F:66:97:8D:65:F0:2D:26:84:60:EC:DC:9F:D7:BE:33:9F:C6:33 Authority key identifier: 89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44 Certificate issuer: /CN=897378126f55d96519553daa48e02e3282121644 Certificate serial: 019BFEE69FFCE67D5672648F7ABBD15E5701 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft Manifest number: 1048 Signing time: Tue 27 Jan 2026 10:01:25 +0000 Manifest this update: Tue 27 Jan 2026 10:01:25 +0000 Manifest next update: Wed 28 Jan 2026 10:01:25 +0000 Files and hashes: 1: ea_FcR8oSzWDCeMxrNhO2E40pkI.roa (hash: 5Y4/kc8eZcdfX1i5OXOAX6HvK4BEfWtdSIjWkgc/rvI=) 2: iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl (hash: fmioHksaA5vTx8Fv8nxs6p7+e4+QJ3gqv+2nWXsFEoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:e6:9f:fc:e6:7d:56:72:64:8f:7a:bb:d1:5e:57:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897378126f55d96519553daa48e02e3282121644 Validity Not Before: Jan 27 10:01:25 2026 GMT Not After : Jan 28 10:01:25 2026 GMT Subject: CN=fd8f66978d65f02d268460ecdc9fd7be339fc633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:da:a0:73:0d:a1:1b:43:17:ae:44:3f:15:d7: e4:05:cd:ef:63:58:fd:ed:f6:ed:fb:cf:02:f7:9b: 6d:2a:4c:d9:c9:20:0a:33:8f:b2:41:3c:64:83:e1: 10:ae:97:a1:17:7e:02:a1:53:e0:e1:2c:da:57:ec: ce:4c:72:70:77:39:5a:e0:05:34:03:51:94:3b:26: c4:e6:f4:59:5d:84:ed:cf:cd:99:ba:31:c6:9d:83: 88:09:67:ae:00:fc:ad:02:1e:55:0d:32:56:68:91: 87:9e:9e:73:09:71:bd:8b:93:bd:75:ad:f1:12:d3: 49:80:60:54:b9:7e:c9:0b:98:85:87:47:58:7c:56: 9b:30:2f:6b:00:e4:e0:fd:08:46:83:85:54:db:92: c2:2b:6d:12:eb:d0:3d:ac:69:21:d3:d3:31:7f:23: 97:a5:e4:f4:cc:f1:a7:12:8d:5e:b8:52:23:bf:1c: af:06:dd:fe:b4:34:03:38:b8:fe:cf:37:5e:53:c0: e4:8b:f6:c8:e1:ff:32:50:1a:74:dd:4c:87:12:23: b7:96:b7:fd:2e:b0:58:b9:6c:0f:24:8c:6c:4b:fb: ca:17:37:34:de:d9:3c:87:d6:b7:d0:fb:c4:c2:75: 5a:9c:47:0d:2c:53:84:35:ea:d4:8e:07:4c:bd:b2: 1f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8F:66:97:8D:65:F0:2D:26:84:60:EC:DC:9F:D7:BE:33:9F:C6:33 X509v3 Authority Key Identifier: keyid:89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:1a:52:c0:93:5d:f8:a3:a2:3c:6e:d9:2b:05:3a:7f:c9:ae: 50:e5:29:46:73:35:90:fc:b0:9a:b8:9d:c3:25:d3:ad:28:e9: e1:9b:d7:1b:01:c3:e5:55:51:30:68:bd:00:5a:cb:64:18:1b: c0:bb:2d:61:0d:55:1c:cf:ca:5c:2f:a1:36:a7:47:09:0d:89: 7c:c4:1a:c9:59:8e:10:cb:4c:ef:2a:d3:82:fc:d4:3e:dd:f2: 2d:f2:9a:07:6c:13:39:13:c1:f6:c8:1c:19:7e:a1:92:14:12: ef:8b:8e:00:d3:40:29:c1:22:5b:36:be:29:d5:76:1e:55:67: 50:3f:af:fb:60:60:7e:75:e8:51:37:b9:d9:f8:6d:d4:64:b6: b5:ce:76:98:34:14:9a:a5:0f:83:72:a7:28:d3:38:25:e3:68: 1c:6d:ce:35:6b:3e:50:59:c2:fd:11:3a:37:7b:38:9e:d3:57: e8:17:43:b9:c1:d8:1c:96:f9:1d:21:7e:df:38:65:a0:b8:22: 33:8b:0d:d9:cf:fd:b9:18:6f:df:6e:37:09:f9:8a:42:2d:47: 13:9e:0b:66:21:42:4d:13:0f:c4:17:d5:12:aa:6a:06:ca:78: d9:64:ee:a2:f7:15:87:a1:0f:48:6e:cc:82:e7:7e:ce:9f:0c: 14:9a:1c:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+5p/85n1WcmSPervRXlcBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NzM3ODEyNmY1NWQ5NjUxOTU1M2RhYTQ4ZTAyZTMyODIx MjE2NDQwHhcNMjYwMTI3MTAwMTI1WhcNMjYwMTI4MTAwMTI1WjAzMTEwLwYDVQQD EyhmZDhmNjY5NzhkNjVmMDJkMjY4NDYwZWNkYzlmZDdiZTMzOWZjNjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNqgcw2hG0MXrkQ/FdfkBc3vY1j9 7fbt+88C95ttKkzZySAKM4+yQTxkg+EQrpehF34CoVPg4SzaV+zOTHJwdzla4AU0 A1GUOybE5vRZXYTtz82ZujHGnYOICWeuAPytAh5VDTJWaJGHnp5zCXG9i5O9da3x EtNJgGBUuX7JC5iFh0dYfFabMC9rAOTg/QhGg4VU25LCK20S69A9rGkh09MxfyOX peT0zPGnEo1euFIjvxyvBt3+tDQDOLj+zzdeU8Dki/bI4f8yUBp03UyHEiO3lrf9 LrBYuWwPJIxsS/vKFzc03tk8h9a30PvEwnVanEcNLFOENerUjgdMvbIf6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2PZpeNZfAtJoRg7Nyf174zn8YzMB8GA1UdIwQY MBaAFIlzeBJvVdllGVU9qkjgLjKCEhZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVhONEVtOVYyV1VaVlQycVNPQXVNb0lTRmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mMmQwY2ItYzNkNC00OWJlLWIwZjIt MzA1ZmIwOTU1NmM5LzEvaVhONEVtOVYyV1VaVlQycVNPQXVNb0lTRmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mMmQwY2ItYzNkNC00OWJlLWIwZjItMzA1ZmIwOTU1NmM5 LzEvaVhONEVtOVYyV1VaVlQycVNPQXVNb0lTRmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhpSwJNd +KOiPG7ZKwU6f8muUOUpRnM1kPywmridwyXTrSjp4ZvXGwHD5VVRMGi9AFrLZBgb wLstYQ1VHM/KXC+hNqdHCQ2JfMQayVmOEMtM7yrTgvzUPt3yLfKaB2wTORPB9sgc GX6hkhQS74uOANNAKcEiWza+KdV2HlVnUD+v+2BgfnXoUTe52fht1GS2tc52mDQU mqUPg3KnKNM4JeNoHG3ONWs+UFnC/RE6N3s4ntNX6BdDucHYHJb5HSF+3zhloLgi M4sN2c/9uRhv3243CfmKQi1HE54LZiFCTRMPxBfVEqpqBsp42WTuovcVh6EPSG7M gud+zp8MFJoc4A== -----END CERTIFICATE-----Generated at Tue Jan 27 12:44:23 2026 by rpki-client