This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft File: ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json) Hash identifier: L8HhmXnxhuBv9am5cWxWBYYMpNDBRb3ncYbpuA9cEzk= Subject key identifier: 65:EC:FB:2E:F6:A5:85:13:E7:B8:01:E8:76:55:FC:1E:C7:BE:21:E0 Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD Certificate issuer: /CN=8b19f3d7ffea957261501e91664ff6823ed936ad Certificate serial: 019BF951DD77A2722742D1864CA8589AD9A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 08:00:50 +0000 Manifest this update: Mon 26 Jan 2026 08:00:50 +0000 Manifest next update: Tue 27 Jan 2026 08:00:50 +0000 Files and hashes: 1: LKiMBkWlsSF8nkXRXmyS63T3H-0.roa (hash: uU/CIMuftQCInpgJK21Hi0O0qaPghLirmvKHuuIzMmY=) 2: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: YX9qOf2ePaQG69CdiI9u609VxXdyZsgDj22FgTxvpcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:dd:77:a2:72:27:42:d1:86:4c:a8:58:9a:d9:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad Validity Not Before: Jan 26 08:00:50 2026 GMT Not After : Jan 27 08:00:50 2026 GMT Subject: CN=65ecfb2ef6a58513e7b801e87655fc1ec7be21e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:71:cb:ba:7a:23:32:7d:f7:ab:15:92:39:c3: cd:76:25:dd:31:b6:9f:96:87:f1:02:54:1a:be:6b: 35:5a:19:67:c3:0c:59:9e:1f:30:75:97:47:b4:46: de:98:32:13:3d:9b:9b:2c:1d:72:e5:5c:36:2f:f0: 98:d7:25:f4:66:d3:db:43:9c:3d:00:1c:b5:f0:9a: 5a:09:d6:c4:10:5b:d2:13:3c:82:3a:6b:f7:11:1e: 93:f0:42:9b:97:4b:50:c4:99:85:25:6f:a8:2c:b0: 3f:a8:84:68:6c:d3:62:3f:62:5f:2f:3d:f8:a9:db: 97:d2:a9:eb:67:f7:77:08:bf:1c:c5:09:a7:d5:09: fa:d6:0a:6b:3f:c1:97:fb:f8:88:3c:a1:93:be:b5: 4a:f5:d6:74:10:7b:13:b4:d8:14:da:1b:ba:e3:fd: 95:63:49:4b:1e:e9:37:84:e8:85:19:c4:2a:ac:60: f1:0e:f1:07:f9:4d:e1:d1:4f:0e:26:cc:fc:33:32: 20:43:b8:d0:25:48:f8:00:b5:c7:af:86:22:f0:27: 18:f9:08:3d:6a:29:de:2d:1d:80:84:1c:7c:25:88: a3:d2:57:23:a3:42:8e:1e:dd:fc:a3:9a:a7:f6:ff: 02:a7:68:3d:99:7b:e2:dd:31:6e:79:d5:64:59:5b: dd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EC:FB:2E:F6:A5:85:13:E7:B8:01:E8:76:55:FC:1E:C7:BE:21:E0 X509v3 Authority Key Identifier: keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c9:ca:e0:98:9f:76:cb:08:35:e1:2b:70:79:0b:4b:2e:bc: 36:aa:7f:5d:d0:d0:f0:4b:92:09:98:3a:53:58:69:96:df:22: 38:c0:a5:a8:6c:1c:2c:73:76:65:8e:50:94:c7:a5:11:62:f1: 2b:fc:90:5e:39:2e:87:78:93:8d:47:8a:b4:86:9b:2d:40:dc: 89:32:88:f5:53:7a:89:a0:57:d9:f4:ee:26:a0:1b:fc:21:cf: 40:3b:91:30:07:25:ee:7b:de:f8:45:e1:16:d8:4d:48:6f:c4: a3:1b:8d:92:eb:9c:76:9d:01:2d:52:92:ee:9a:dd:4b:80:fb: f0:bd:4f:ed:94:dc:e3:c8:92:22:08:3a:f5:9c:8e:1f:0d:3c: ae:06:ae:48:e0:70:27:15:f4:ac:47:ea:41:fb:ed:c3:62:32: f3:18:84:b7:5e:ac:f2:05:1f:25:e8:88:88:89:00:62:e2:42: 23:bc:3a:fa:ff:68:94:00:63:58:e1:cd:18:65:98:e9:2d:d7: d4:11:93:86:4f:34:87:47:82:3c:3f:66:3f:1f:a7:7d:91:37: 87:f3:63:5c:61:22:37:59:8a:d2:ff:f0:15:e2:2e:36:fa:cf: 6d:de:54:ab:0d:db:18:92:33:be:58:c0:24:02:d4:9e:f2:dd: eb:26:00:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5Ud13onInQtGGTKhYmtmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMTlmM2Q3ZmZlYTk1NzI2MTUwMWU5MTY2NGZmNjgyM2Vk OTM2YWQwHhcNMjYwMTI2MDgwMDUwWhcNMjYwMTI3MDgwMDUwWjAzMTEwLwYDVQQD Eyg2NWVjZmIyZWY2YTU4NTEzZTdiODAxZTg3NjU1ZmMxZWM3YmUyMWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHHLunojMn33qxWSOcPNdiXdMbaf lofxAlQavms1WhlnwwxZnh8wdZdHtEbemDITPZubLB1y5Vw2L/CY1yX0ZtPbQ5w9 ABy18JpaCdbEEFvSEzyCOmv3ER6T8EKbl0tQxJmFJW+oLLA/qIRobNNiP2JfLz34 qduX0qnrZ/d3CL8cxQmn1Qn61gprP8GX+/iIPKGTvrVK9dZ0EHsTtNgU2hu64/2V Y0lLHuk3hOiFGcQqrGDxDvEH+U3h0U8OJsz8MzIgQ7jQJUj4ALXHr4Yi8CcY+Qg9 aineLR2AhBx8JYij0lcjo0KOHt38o5qn9v8Cp2g9mXvi3TFuedVkWVvd2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXs+y72pYUT57gB6HZV/B7HviHgMB8GA1UdIwQY MBaAFIsZ89f/6pVyYVAekWZP9oI+2TatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEt YjY1NDJlNjQ0N2EwLzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEtYjY1NDJlNjQ0N2Ew LzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8nK4Jif dssINeErcHkLSy68Nqp/XdDQ8EuSCZg6U1hplt8iOMClqGwcLHN2ZY5QlMelEWLx K/yQXjkuh3iTjUeKtIabLUDciTKI9VN6iaBX2fTuJqAb/CHPQDuRMAcl7nve+EXh FthNSG/EoxuNkuucdp0BLVKS7prdS4D78L1P7ZTc48iSIgg69ZyOHw08rgauSOBw JxX0rEfqQfvtw2Iy8xiEt16s8gUfJeiIiIkAYuJCI7w6+v9olABjWOHNGGWY6S3X 1BGThk80h0eCPD9mPx+nfZE3h/NjXGEiN1mK0v/wFeIuNvrPbd5Uqw3bGJIzvljA JALUnvLd6yYAcA== -----END CERTIFICATE-----Generated at Mon Jan 26 14:48:19 2026 by rpki-client