This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json) Hash identifier: yunm6iZCwiPg8J9r0XC6D5jg1mD7dfoM+H5g2ahrzV4= Subject key identifier: B9:F3:66:96:01:29:51:40:4A:D5:8C:D3:B9:2A:E3:A6:6B:70:FD:A7 Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d Certificate serial: 019BFC8A10FB5F78A89CBB22F39FAC24D63E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft Manifest number: 0D15 Signing time: Mon 26 Jan 2026 23:01:05 +0000 Manifest this update: Mon 26 Jan 2026 23:01:05 +0000 Manifest next update: Tue 27 Jan 2026 23:01:05 +0000 Files and hashes: 1: 04FKSiNEBSVxxBYiPtE8VcsRvqM.roa (hash: iIsFB+u1yXou/MBTJQN92523XOZ49HIi4J+JzBjc0Vk=) 2: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: plvDVnNEQTWlZZcv4wXBKj2JOGuJ79hOA8YTS1nzEkc=) 3: yUZd6eY1ILFj_NVgWnntQzVJiGs.roa (hash: aYbs72JfiEw4WjwVxwNiVwxvegvGGWCTaf1wWunmceE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:10:fb:5f:78:a8:9c:bb:22:f3:9f:ac:24:d6:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d Validity Not Before: Jan 26 23:01:05 2026 GMT Not After : Jan 27 23:01:05 2026 GMT Subject: CN=b9f36696012951404ad58cd3b92ae3a66b70fda7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cd:a0:c3:1d:f5:8a:d4:7d:c2:bf:70:8f:ed: fb:b7:ec:bf:69:34:fe:b4:8f:68:fa:24:9a:d6:a8: ed:e3:67:39:54:4b:fe:41:f5:03:d2:a6:b0:78:52: b7:af:07:ef:12:da:56:2e:a1:8e:9d:37:45:9d:1e: ff:a2:99:6d:80:d7:61:65:ef:c7:cc:27:7b:e4:c5: cd:e0:1d:51:0c:05:7e:d8:30:8b:a4:c4:20:51:aa: 5c:3e:30:5d:36:a7:c0:d9:e4:8d:51:f6:5e:ab:b7: c1:f1:09:39:52:6e:00:9d:21:69:aa:7b:ca:c2:09: a4:39:99:6e:db:1b:a2:d5:6d:01:c2:9c:b6:a4:90: 1a:6f:18:92:87:9c:f1:04:ac:ff:bb:72:0a:53:45: c0:0c:42:49:1f:84:3f:4a:98:0d:df:ed:e1:a6:d0: 58:05:de:41:49:d3:da:f6:32:1b:67:cf:63:1f:e5: b6:c7:57:7b:4e:8b:99:06:42:06:12:83:be:0d:63: b9:93:09:ff:80:35:38:34:87:b0:9f:5e:75:65:bd: c3:0b:2e:7f:47:2d:26:c6:88:63:e6:b5:8f:50:c4: 7d:58:55:a9:a5:24:12:31:b0:27:7d:27:54:49:b5: 50:de:0f:3d:56:bc:9b:e5:82:cd:5f:c9:d6:30:44: 46:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F3:66:96:01:29:51:40:4A:D5:8C:D3:B9:2A:E3:A6:6B:70:FD:A7 X509v3 Authority Key Identifier: keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e8:fe:4f:79:f5:5e:f8:f4:dd:1a:91:6e:7a:b2:ad:79:94: 90:15:20:78:f1:6d:93:59:f6:86:10:0b:67:71:bf:c8:f9:0a: 64:ed:fb:51:11:09:50:fb:bb:5b:1b:ad:22:6b:e0:c3:28:35: 02:b9:c4:5b:83:a1:4f:9a:fe:8b:95:24:e2:69:0b:e2:40:77: 6c:51:bc:0f:53:3a:34:83:57:86:42:50:df:5d:a4:ad:97:19: 28:5f:f5:06:04:bf:74:96:89:e0:c2:c0:76:a6:17:c2:a0:2b: f1:75:6d:2c:ab:28:e4:9d:cd:e3:a4:c5:32:1d:f7:b8:1b:4e: 27:9c:e6:9d:e4:38:c2:c5:7b:0e:37:cf:18:cc:95:f9:7d:6c: ca:7a:03:d1:54:eb:7f:e0:2d:89:5a:f3:0e:24:f4:8f:38:d9: 2f:4f:6f:74:6a:e5:c9:c4:33:bb:38:de:09:ca:e0:86:79:b3: 22:fa:f3:94:2c:e6:1a:9b:3e:b7:26:7c:d4:64:64:24:fc:ed: bc:6c:1c:95:6d:7e:f5:45:93:db:0a:f6:56:d3:83:9c:d0:a4: 6c:82:3b:40:3d:9e:45:b3:ab:5e:a9:42:c9:e4:36:64:5e:e3: 93:b6:dc:7b:1b:6c:7e:9f:3b:bc:e9:82:dd:34:b0:b3:1e:d4: 47:1f:19:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ihD7X3ionLsi85+sJNY+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NTU0NzgwZGIyNWIyNDNjMGEyZDM2MTk3OWIxMzBhN2Yx M2M2MGQwHhcNMjYwMTI2MjMwMTA1WhcNMjYwMTI3MjMwMTA1WjAzMTEwLwYDVQQD EyhiOWYzNjY5NjAxMjk1MTQwNGFkNThjZDNiOTJhZTNhNjZiNzBmZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs82gwx31itR9wr9wj+37t+y/aTT+ tI9o+iSa1qjt42c5VEv+QfUD0qaweFK3rwfvEtpWLqGOnTdFnR7/opltgNdhZe/H zCd75MXN4B1RDAV+2DCLpMQgUapcPjBdNqfA2eSNUfZeq7fB8Qk5Um4AnSFpqnvK wgmkOZlu2xui1W0Bwpy2pJAabxiSh5zxBKz/u3IKU0XADEJJH4Q/SpgN3+3hptBY Bd5BSdPa9jIbZ89jH+W2x1d7TouZBkIGEoO+DWO5kwn/gDU4NIewn151Zb3DCy5/ Ry0mxohj5rWPUMR9WFWppSQSMbAnfSdUSbVQ3g89Vryb5YLNX8nWMERGJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnzZpYBKVFAStWM07kq46ZrcP2nMB8GA1UdIwQY MBaAFIlVR4DbJbJDwKLTYZebEwp/E8YNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zZTIwNzctYmMxMC00NjIxLWFiMGIt ZGJhNGM5Yjg3MDZiLzEvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zZTIwNzctYmMxMC00NjIxLWFiMGItZGJhNGM5Yjg3MDZi LzEvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfej+T3n1 Xvj03RqRbnqyrXmUkBUgePFtk1n2hhALZ3G/yPkKZO37UREJUPu7WxutImvgwyg1 ArnEW4OhT5r+i5Uk4mkL4kB3bFG8D1M6NINXhkJQ312krZcZKF/1BgS/dJaJ4MLA dqYXwqAr8XVtLKso5J3N46TFMh33uBtOJ5zmneQ4wsV7DjfPGMyV+X1synoD0VTr f+AtiVrzDiT0jzjZL09vdGrlycQzuzjeCcrghnmzIvrzlCzmGps+tyZ81GRkJPzt vGwclW1+9UWT2wr2VtODnNCkbII7QD2eRbOrXqlCyeQ2ZF7jk7bcextsfp87vOmC 3TSwsx7URx8Zew== -----END CERTIFICATE-----Generated at Tue Jan 27 07:47:35 2026 by rpki-client