This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft File: IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft (raw, json) Hash identifier: 1WvxCNQSh/89/EJsR+EjZl3WKr40Oj9RKNuDpS0YelM= Subject key identifier: 08:69:2C:EC:A1:E4:37:0C:A0:7A:B3:F4:77:B8:FB:CE:8B:81:DA:5D Authority key identifier: 21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9 Certificate issuer: /CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9 Certificate serial: 019BF875DC377986495C97E2A442800B32AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft Manifest number: 07DA Signing time: Mon 26 Jan 2026 04:00:32 +0000 Manifest this update: Mon 26 Jan 2026 04:00:32 +0000 Manifest next update: Tue 27 Jan 2026 04:00:32 +0000 Files and hashes: 1: IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl (hash: bNEWeFQpMex+CRZfT5xPlxuRBgablS2CAe+OmeZni50=) 2: hwKJwCCAFCL_7LuTGUs9t1cSL7E.roa (hash: 8W8T46xmoGGEFuN0xJIwYy5B+d+w5bYaaExN07s/4nM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:75:dc:37:79:86:49:5c:97:e2:a4:42:80:0b:32:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9 Validity Not Before: Jan 26 04:00:32 2026 GMT Not After : Jan 27 04:00:32 2026 GMT Subject: CN=08692ceca1e4370ca07ab3f477b8fbce8b81da5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bd:9c:33:41:60:8b:85:07:4a:9e:c4:43:c9: d0:d3:e8:7d:a4:70:2e:13:d2:b0:3e:10:7b:ad:3b: dc:0c:59:04:12:99:04:bc:0e:94:bc:3c:9d:09:bf: 53:a4:e6:04:2e:7b:6a:3e:97:91:4f:fc:6f:00:32: 70:cf:da:1b:3b:74:98:73:92:c8:02:2d:d8:9a:e4: 0a:ed:59:a4:e7:d3:7f:96:de:41:f5:66:37:57:28: 2a:f6:ee:84:83:b4:9c:6a:ed:1a:83:ad:40:ed:7e: 7a:72:7a:40:69:ce:61:d1:e9:76:72:f9:04:f5:a2: 15:cd:5a:55:3c:e2:f9:bf:c1:6f:17:6b:cc:bd:99: cf:89:8a:84:f0:f2:a3:e1:b4:20:a3:8f:3c:9d:94: 8e:da:a2:1f:55:93:9c:3e:be:e8:26:c9:7c:fa:d0: ff:cb:c0:d7:0f:06:74:2f:e9:07:e8:64:26:3d:a6: 24:a0:5f:7c:48:7c:f7:87:06:4c:69:a3:2a:20:65: 1f:56:d1:de:e4:ff:67:ef:29:78:39:1a:63:53:78: 09:fc:3b:56:53:6c:53:51:c4:fb:97:84:40:e9:35: ab:b0:1e:c9:f3:8d:2e:0b:52:be:b8:56:0b:99:26: 0a:8a:02:60:fd:fd:f2:6e:78:e4:b4:2e:36:06:bf: e2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:69:2C:EC:A1:E4:37:0C:A0:7A:B3:F4:77:B8:FB:CE:8B:81:DA:5D X509v3 Authority Key Identifier: keyid:21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4f:44:d9:13:10:a1:41:e3:a0:86:e8:44:49:b8:ea:d2:d4: db:c8:ef:94:3a:34:2f:78:91:8f:ce:fe:4f:b8:52:b6:41:ea: 10:84:41:f5:8b:30:1c:b9:70:9b:8e:aa:41:a5:16:b3:7e:6e: 10:de:e9:92:4a:2c:83:a8:92:d3:03:bc:32:51:b7:a8:f2:04: 9c:ca:26:47:64:7a:8e:ea:95:db:44:1a:27:4f:a3:07:76:d7: 79:91:72:33:59:0a:8c:fb:c5:9c:b3:6a:95:0c:5a:90:14:4d: 7a:50:e7:f6:73:95:cb:14:a7:49:49:0f:6c:02:51:66:ef:31: d1:b0:1e:b8:92:58:a4:24:60:76:e6:8a:d5:9b:fc:42:37:64: de:1a:6a:af:85:bc:f0:cb:ae:bb:44:ae:69:09:ad:40:b0:19: da:29:7f:34:97:7b:eb:cb:77:27:78:1c:ca:fa:b2:63:45:08: 74:6a:57:b5:91:fe:fc:21:15:16:29:2c:8d:45:cc:da:a4:29: 13:02:35:0c:93:df:f6:1b:32:50:3e:a1:b5:36:d0:96:33:f3: fb:27:55:04:44:91:8b:ea:b7:84:97:db:d7:8c:45:49:1e:e7: 23:d5:d8:4c:75:52:b5:99:64:e5:2c:ff:99:07:f5:0e:1b:b6: 8b:1a:a2:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4ddw3eYZJXJfipEKACzKtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMGQxYzBkYjVhYTE4ODBkNzc0N2UyMmYxZGJmNDcxNmQz MTAxYTkwHhcNMjYwMTI2MDQwMDMyWhcNMjYwMTI3MDQwMDMyWjAzMTEwLwYDVQQD EygwODY5MmNlY2ExZTQzNzBjYTA3YWIzZjQ3N2I4ZmJjZThiODFkYTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr2cM0Fgi4UHSp7EQ8nQ0+h9pHAu E9KwPhB7rTvcDFkEEpkEvA6UvDydCb9TpOYELntqPpeRT/xvADJwz9obO3SYc5LI Ai3YmuQK7Vmk59N/lt5B9WY3Vygq9u6Eg7Scau0ag61A7X56cnpAac5h0el2cvkE 9aIVzVpVPOL5v8FvF2vMvZnPiYqE8PKj4bQgo488nZSO2qIfVZOcPr7oJsl8+tD/ y8DXDwZ0L+kH6GQmPaYkoF98SHz3hwZMaaMqIGUfVtHe5P9n7yl4ORpjU3gJ/DtW U2xTUcT7l4RA6TWrsB7J840uC1K+uFYLmSYKigJg/f3ybnjktC42Br/iqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhpLOyh5DcMoHqz9He4+86LgdpdMB8GA1UdIwQY MBaAFCENHA21qhiA13R+IvHb9HFtMQGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVEwY0RiV3FHSURYZEg0aThkdjBjVzB4QWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wOWM5ODAtMzhlYi00MjIyLWIyMjUt ZDcxMTMwYzZjMGY5LzEvSVEwY0RiV3FHSURYZEg0aThkdjBjVzB4QWFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wOWM5ODAtMzhlYi00MjIyLWIyMjUtZDcxMTMwYzZjMGY5 LzEvSVEwY0RiV3FHSURYZEg0aThkdjBjVzB4QWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbE9E2RMQ oUHjoIboREm46tLU28jvlDo0L3iRj87+T7hStkHqEIRB9YswHLlwm46qQaUWs35u EN7pkkosg6iS0wO8MlG3qPIEnMomR2R6juqV20QaJ0+jB3bXeZFyM1kKjPvFnLNq lQxakBRNelDn9nOVyxSnSUkPbAJRZu8x0bAeuJJYpCRgduaK1Zv8Qjdk3hpqr4W8 8Muuu0SuaQmtQLAZ2il/NJd768t3J3gcyvqyY0UIdGpXtZH+/CEVFiksjUXM2qQp EwI1DJPf9hsyUD6htTbQljPz+ydVBESRi+q3hJfb14xFSR7nI9XYTHVStZlk5Sz/ mQf1Dhu2ixqieQ== -----END CERTIFICATE-----Generated at Mon Jan 26 13:30:33 2026 by rpki-client