This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft File: IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft (raw, json) Hash identifier: mSAH3WDWaSGhNZOigWmmb3+v2+X1fqOEBiLFTjK+RM8= Subject key identifier: 6A:71:8A:64:C1:53:41:32:C6:62:B4:57:93:33:A4:47:86:08:16:CF Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24 Certificate issuer: /CN=20820f796481ac0e9637c962414597b1fe227c24 Certificate serial: 019BE782E9ADB98D928E05F00B9121421DFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft Manifest number: 02F5 Signing time: Thu 22 Jan 2026 21:01:14 +0000 Manifest this update: Thu 22 Jan 2026 21:01:14 +0000 Manifest next update: Fri 23 Jan 2026 21:01:14 +0000 Files and hashes: 1: IAWiQMEI7lBYE-yiLrq0N4vd600.roa (hash: 7MWeCmwerIQVPacLYiQfFeLxjpHdbEK+iRaLdCOlJtE=) 2: IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl (hash: AGf9nGY9K+ej4a0a4jjGGFQKmhDFps5kSjCeXjMo9Dw=) 3: jcJ1FEJq00hankjZHcjsw8w2u-s.roa (hash: Qo2AdracuK7vyRKsDuRBiYGss9rpdhbei/opc826d7Y=) 4: yZlYavUaF5ZkpQPJOyNlBAVw7XY.roa (hash: Mu3AswMCG2U7NEViX0UJQTVg05J0CMB40dFTF5KkWro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e7:82:e9:ad:b9:8d:92:8e:05:f0:0b:91:21:42:1d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24 Validity Not Before: Jan 22 21:01:14 2026 GMT Not After : Jan 23 21:01:14 2026 GMT Subject: CN=6a718a64c1534132c662b4579333a447860816cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d3:19:92:73:0c:6f:a8:3f:d4:83:5e:4f:32: 92:75:fb:9e:b8:a3:38:dc:69:48:df:d0:8e:cf:cd: 20:f5:3a:ba:22:8a:82:b2:19:5f:9d:97:fd:6c:04: 6e:9a:26:a9:84:4c:95:51:57:2f:08:f4:d8:fc:ac: 61:b2:17:f1:10:a8:6f:9b:99:04:0c:3f:f6:0a:c2: f2:f5:ca:ac:8d:e3:a6:0a:04:8f:2b:3e:e3:d4:db: e2:8c:2c:35:40:94:da:06:dc:0b:08:54:99:32:6e: fd:a6:e6:29:3c:2a:fa:76:30:83:73:58:24:85:06: d8:7e:53:31:67:ac:64:b8:b4:c2:ed:25:8b:9c:09: c7:08:a2:23:94:48:58:26:c7:b8:ba:1e:d0:74:9a: 5b:1a:03:1e:01:7f:e5:4b:09:e7:97:c8:81:fe:16: 5c:db:6d:42:21:a8:98:3f:a0:ca:a8:f0:8c:cf:38: 85:62:a9:27:68:6f:aa:fb:82:99:59:94:fb:f7:0c: 0d:10:30:7e:a0:04:96:e8:b7:ff:fd:79:fd:8f:85: d3:19:1f:91:77:d4:ff:58:5d:41:b2:c8:4b:09:40: b4:a3:6d:88:65:5b:2a:36:2b:a1:72:48:19:e3:a6: 79:35:77:4c:b1:09:17:28:74:84:41:99:ac:a7:9d: ce:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:71:8A:64:C1:53:41:32:C6:62:B4:57:93:33:A4:47:86:08:16:CF X509v3 Authority Key Identifier: keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:c9:ce:48:92:cc:b1:8a:6a:da:2b:66:42:29:f5:16:89:c9: 27:cd:96:8f:f1:ea:3b:bc:e6:29:05:d0:eb:e9:e7:0a:79:b7: 5c:37:61:e6:f4:17:a2:76:34:7f:84:a8:c6:21:dc:03:cf:fe: c2:61:3c:b7:aa:a2:1d:59:dc:8a:40:84:6f:9f:c3:6a:5e:45: 48:14:fb:57:1c:9e:cb:0c:2d:53:f3:44:ee:a6:55:12:b5:76: 4a:64:0c:66:7a:9a:93:a4:f2:7e:71:08:cc:9f:c4:5d:fb:97: 6a:aa:15:32:78:73:39:d7:c6:2f:65:5a:2d:f9:79:ee:fd:89: 54:d4:f2:33:12:c7:8d:03:7a:79:7e:55:0f:b6:f6:b1:b2:bf: 03:e8:12:ff:d0:9c:19:83:dd:88:40:ac:1d:78:e0:eb:1b:9b: ab:d8:d5:5a:2f:32:0f:18:f4:b5:3e:5e:34:a8:e4:79:c0:02: e2:36:47:f5:05:62:1b:99:f1:5d:7c:f4:fa:59:03:b2:bf:02: ee:be:36:8e:af:32:eb:4d:b0:f6:bf:06:81:fa:11:0a:fb:5b: 68:a8:52:20:88:d3:8f:42:5e:36:ab:97:35:40:42:8c:fd:44: 8c:11:e5:62:0e:7c:56:06:53:f6:9b:79:e4:cc:b9:00:8c:14: 5d:11:c4:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvngumtuY2SjgXwC5EhQh37MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwODIwZjc5NjQ4MWFjMGU5NjM3Yzk2MjQxNDU5N2IxZmUy MjdjMjQwHhcNMjYwMTIyMjEwMTE0WhcNMjYwMTIzMjEwMTE0WjAzMTEwLwYDVQQD Eyg2YTcxOGE2NGMxNTM0MTMyYzY2MmI0NTc5MzMzYTQ0Nzg2MDgxNmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztMZknMMb6g/1INeTzKSdfueuKM4 3GlI39COz80g9Tq6IoqCshlfnZf9bARumiaphEyVUVcvCPTY/KxhshfxEKhvm5kE DD/2CsLy9cqsjeOmCgSPKz7j1NvijCw1QJTaBtwLCFSZMm79puYpPCr6djCDc1gk hQbYflMxZ6xkuLTC7SWLnAnHCKIjlEhYJse4uh7QdJpbGgMeAX/lSwnnl8iB/hZc 221CIaiYP6DKqPCMzziFYqknaG+q+4KZWZT79wwNEDB+oASW6Lf//Xn9j4XTGR+R d9T/WF1BsshLCUC0o22IZVsqNiuhckgZ46Z5NXdMsQkXKHSEQZmsp53O1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpximTBU0EyxmK0V5MzpEeGCBbPMB8GA1UdIwQY MBaAFCCCD3lkgawOljfJYkFFl7H+InwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iOThiOWYtYjU4MS00ZTNlLWFlOGEt OTg3ZDg2OTU2NmY2LzEvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9iOThiOWYtYjU4MS00ZTNlLWFlOGEtOTg3ZDg2OTU2NmY2 LzEvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8nOSJLM sYpq2itmQin1FonJJ82Wj/HqO7zmKQXQ6+nnCnm3XDdh5vQXonY0f4SoxiHcA8/+ wmE8t6qiHVncikCEb5/Dal5FSBT7VxyeywwtU/NE7qZVErV2SmQMZnqak6TyfnEI zJ/EXfuXaqoVMnhzOdfGL2VaLfl57v2JVNTyMxLHjQN6eX5VD7b2sbK/A+gS/9Cc GYPdiECsHXjg6xubq9jVWi8yDxj0tT5eNKjkecAC4jZH9QViG5nxXXz0+lkDsr8C 7r42jq8y602w9r8GgfoRCvtbaKhSIIjTj0JeNquXNUBCjP1EjBHlYg58VgZT9pt5 5My5AIwUXRHEkw== -----END CERTIFICATE-----Generated at Thu Jan 22 23:35:18 2026 by rpki-client