This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft File: onIAVE-TpnX8jHhBhWmA44o1Kcs.mft (raw, json) Hash identifier: 6SAPLvq6d6NR54EW1EI+waEMbHixxccAYzqj4udtNlM= Subject key identifier: 8B:22:7F:D1:A2:EA:9A:66:62:0A:C4:18:50:45:E2:82:59:73:74:FC Authority key identifier: A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB Certificate issuer: /CN=a27200544f93a675fc8c7841856980e38a3529cb Certificate serial: 019C09A16169BA5EFE342A1C07A0B9D2CA8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft Manifest number: 128E Signing time: Thu 29 Jan 2026 12:01:36 +0000 Manifest this update: Thu 29 Jan 2026 12:01:36 +0000 Manifest next update: Fri 30 Jan 2026 12:01:36 +0000 Files and hashes: 1: Z2uEQbE7L2pDV1J90F-WHp-FeRc.roa (hash: gG4qjMeD/GD4iye01V4m4U9isqUINl3gT+i69LWAi7I=) 2: onIAVE-TpnX8jHhBhWmA44o1Kcs.crl (hash: 2iGTGQIv/OKGrCCNHYSRmIyiMgGqewZwoxKvTNWWreM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:a1:61:69:ba:5e:fe:34:2a:1c:07:a0:b9:d2:ca:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a27200544f93a675fc8c7841856980e38a3529cb Validity Not Before: Jan 29 12:01:36 2026 GMT Not After : Jan 30 12:01:36 2026 GMT Subject: CN=8b227fd1a2ea9a66620ac4185045e282597374fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ce:80:0d:62:1c:58:8a:0d:5f:0b:24:22:47: 91:97:4a:a4:2f:68:48:1e:1f:94:6e:76:d3:7b:64: fc:85:01:50:52:75:41:f5:f6:d6:d6:3f:da:b4:8e: 92:2f:8e:4a:62:41:5d:93:92:be:e9:65:a8:89:d6: 2e:39:00:77:6f:36:f4:09:4a:d1:fd:91:97:2a:38: fe:c2:fc:d8:b9:2c:a3:d1:d5:fd:3f:72:62:73:5d: 3f:be:67:b1:4e:dd:75:e0:1f:d7:1e:79:9f:27:a3: b1:ab:10:0a:da:4c:2e:27:7f:24:5a:94:e4:43:e7: 88:50:14:80:94:28:3a:63:a7:9a:33:57:80:8e:96: 37:94:ec:82:3b:95:0b:65:c8:61:d7:f0:31:2d:22: 3b:bf:82:92:06:9a:2d:8c:ef:96:a2:36:b9:cf:da: 73:35:b3:6c:d3:6b:94:66:1e:1c:d8:fb:dc:ee:fb: 3f:c4:53:f3:36:9d:30:3b:21:7c:80:ce:b1:2d:bd: e6:47:bb:ed:7e:b4:f8:47:78:37:13:9c:51:eb:48: e6:02:ba:e0:42:96:95:8a:8c:61:60:14:d0:ea:5a: e1:33:44:af:83:23:9d:f5:83:ab:f9:bc:bb:25:5e: 74:ac:4a:9f:06:00:83:e2:b2:75:47:71:43:fe:f8: cd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:22:7F:D1:A2:EA:9A:66:62:0A:C4:18:50:45:E2:82:59:73:74:FC X509v3 Authority Key Identifier: keyid:A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:95:ac:66:85:0f:ef:ac:be:6b:0a:b8:f3:09:f7:d1:03:cc: 40:ed:7e:53:f5:31:e5:9a:c4:d6:f5:e0:bc:5d:92:6b:00:e9: 25:ea:8f:f8:36:d6:7f:d7:94:12:75:b9:75:0e:76:25:02:9f: 6b:8d:31:52:2d:91:3f:e8:15:be:1e:c3:0f:c4:1c:f6:de:2c: ef:73:7f:64:63:55:73:a1:7c:7b:34:bf:cb:4c:ca:65:ea:46: a8:d7:1b:11:59:70:92:3c:c1:64:cd:5f:eb:86:e6:cb:34:77: cd:d1:96:e7:67:65:29:85:b9:b4:b8:94:74:12:78:93:1f:51: 78:6c:a6:77:64:c6:00:07:0e:1c:98:2d:47:4c:13:eb:5a:5b: bc:10:4b:de:d0:d2:8a:28:97:f2:9e:a3:2f:a4:a0:17:13:49: 48:c4:2d:65:30:3f:0e:10:8b:19:7d:fb:a5:c0:35:f4:4a:98: bd:1e:c4:c7:e7:c7:1d:9a:bf:29:63:7c:5e:ae:cf:c3:28:7e: ce:b2:68:e1:39:92:cb:03:25:fd:b2:1d:83:40:ee:06:17:79: 90:9f:d1:4e:77:ed:fd:16:d6:e7:89:56:04:7d:40:5c:58:d6: 86:b2:31:4b:b8:6b:bf:c9:19:62:d8:f6:9d:e5:70:10:70:df: 2d:c9:bb:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwJoWFpul7+NCocB6C50sqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNzIwMDU0NGY5M2E2NzVmYzhjNzg0MTg1Njk4MGUzOGEz NTI5Y2IwHhcNMjYwMTI5MTIwMTM2WhcNMjYwMTMwMTIwMTM2WjAzMTEwLwYDVQQD Eyg4YjIyN2ZkMWEyZWE5YTY2NjIwYWM0MTg1MDQ1ZTI4MjU5NzM3NGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy86ADWIcWIoNXwskIkeRl0qkL2hI Hh+UbnbTe2T8hQFQUnVB9fbW1j/atI6SL45KYkFdk5K+6WWoidYuOQB3bzb0CUrR /ZGXKjj+wvzYuSyj0dX9P3Jic10/vmexTt114B/XHnmfJ6OxqxAK2kwuJ38kWpTk Q+eIUBSAlCg6Y6eaM1eAjpY3lOyCO5ULZchh1/AxLSI7v4KSBpotjO+Woja5z9pz NbNs02uUZh4c2Pvc7vs/xFPzNp0wOyF8gM6xLb3mR7vtfrT4R3g3E5xR60jmArrg QpaVioxhYBTQ6lrhM0SvgyOd9YOr+by7JV50rEqfBgCD4rJ1R3FD/vjNhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsif9Gi6ppmYgrEGFBF4oJZc3T8MB8GA1UdIwQY MBaAFKJyAFRPk6Z1/Ix4QYVpgOOKNSnLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb25JQVZFLVRwblg4akhoQmhXbUE0NG8xS2NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iYzFjNzQtMWUwYS00MDU1LTgwYjgt ZWZhN2Y4OWJkMGI5LzEvb25JQVZFLVRwblg4akhoQmhXbUE0NG8xS2NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iYzFjNzQtMWUwYS00MDU1LTgwYjgtZWZhN2Y4OWJkMGI5 LzEvb25JQVZFLVRwblg4akhoQmhXbUE0NG8xS2NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApWsZoUP 76y+awq48wn30QPMQO1+U/Ux5ZrE1vXgvF2SawDpJeqP+DbWf9eUEnW5dQ52JQKf a40xUi2RP+gVvh7DD8Qc9t4s73N/ZGNVc6F8ezS/y0zKZepGqNcbEVlwkjzBZM1f 64bmyzR3zdGW52dlKYW5tLiUdBJ4kx9ReGymd2TGAAcOHJgtR0wT61pbvBBL3tDS iiiX8p6jL6SgFxNJSMQtZTA/DhCLGX37pcA19EqYvR7Ex+fHHZq/KWN8Xq7Pwyh+ zrJo4TmSywMl/bIdg0DuBhd5kJ/RTnft/RbW54lWBH1AXFjWhrIxS7hrv8kZYtj2 neVwEHDfLcm7cA== -----END CERTIFICATE-----Generated at Thu Jan 29 20:54:36 2026 by rpki-client