This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft File: IaqfF_jMpH37krSQLSwrMgPb7aY.mft (raw, json) Hash identifier: cx6LxRJIXV3Kbe7Xv4QSqvaon337/4TecIufdd85ik0= Subject key identifier: 27:35:07:5A:62:76:54:2F:F0:24:B9:86:01:2F:47:13:1C:D0:F2:1E Authority key identifier: 21:AA:9F:17:F8:CC:A4:7D:FB:92:B4:90:2D:2C:2B:32:03:DB:ED:A6 Certificate issuer: /CN=21aa9f17f8cca47dfb92b4902d2c2b3203dbeda6 Certificate serial: 019BB24C4F3EE92C381D9C2CA34B36887E66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaqfF_jMpH37krSQLSwrMgPb7aY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft Manifest number: 0861 Signing time: Mon 12 Jan 2026 13:01:43 +0000 Manifest this update: Mon 12 Jan 2026 13:01:43 +0000 Manifest next update: Tue 13 Jan 2026 13:01:43 +0000 Files and hashes: 1: IaqfF_jMpH37krSQLSwrMgPb7aY.crl (hash: RASaDLhyCbuStfQRc0uPNGTzNAC3/OTKBSguIuYNI8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.crl rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft rsync://rpki.ripe.net/repository/DEFAULT/IaqfF_jMpH37krSQLSwrMgPb7aY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:4c:4f:3e:e9:2c:38:1d:9c:2c:a3:4b:36:88:7e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21aa9f17f8cca47dfb92b4902d2c2b3203dbeda6 Validity Not Before: Jan 12 13:01:43 2026 GMT Not After : Jan 13 13:01:43 2026 GMT Subject: CN=2735075a6276542ff024b986012f47131cd0f21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cd:65:16:00:7f:31:43:b8:53:b3:2c:d4:b1: 0c:0f:d8:4d:12:27:3a:83:7e:85:b1:e2:79:46:7b: 30:63:25:3f:fb:b8:f8:e5:73:86:1a:82:30:81:1e: e8:8b:5d:8f:16:34:15:b0:52:0a:7f:ea:db:0d:19: ef:c4:09:e9:45:1f:69:ba:84:6a:9a:89:c4:46:48: 58:e5:49:2f:ff:91:57:42:32:fa:62:e5:ef:49:7f: 3c:b9:9b:3a:46:c3:8d:d0:10:4e:39:95:6c:ca:26: b2:b5:0c:15:25:e1:8f:0f:02:36:38:bc:a8:b1:76: d1:e3:86:27:6c:55:c8:1a:64:20:90:3b:b9:07:78: 54:27:55:35:41:72:44:07:53:a6:28:f7:12:e4:33: a0:b6:8c:10:f8:ba:2c:40:74:61:4f:e3:b9:3c:50: 21:01:d8:52:5e:a0:1c:21:d1:44:25:8e:1e:96:83: db:a2:a8:79:b6:cf:0c:c2:71:f9:33:73:cf:ed:f1: 6d:d4:ca:ed:be:2c:24:64:58:ec:aa:3c:7e:61:67: b1:95:c9:01:e3:1d:3a:43:7f:07:83:f8:c5:4e:06: f8:83:c6:9c:86:8e:8b:b6:54:86:b5:f6:6a:41:8e: a3:be:d4:7b:b1:65:7e:ab:d9:25:fc:0e:24:41:f2: 8c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:35:07:5A:62:76:54:2F:F0:24:B9:86:01:2F:47:13:1C:D0:F2:1E X509v3 Authority Key Identifier: keyid:21:AA:9F:17:F8:CC:A4:7D:FB:92:B4:90:2D:2C:2B:32:03:DB:ED:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaqfF_jMpH37krSQLSwrMgPb7aY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:2c:55:c4:0c:77:30:81:a6:f5:1f:2e:49:7e:74:cb:74:86: 6b:d7:c7:0f:d9:29:aa:61:1a:43:57:e6:20:4c:31:4c:54:80: 99:4c:c0:f5:13:53:54:bc:dc:9d:1e:a7:0e:48:42:ad:4e:f8: a3:ec:e0:98:61:80:cd:63:38:ab:79:75:c1:4e:21:12:17:4c: 71:23:d8:aa:e8:11:29:b1:c2:65:5b:f0:62:c7:77:b7:47:89: 37:9b:cf:f6:ce:32:e2:7e:f5:38:77:e1:5b:85:56:c8:d3:69: 0f:43:b8:49:72:f3:c7:77:4f:a0:4e:ff:db:52:0a:71:c6:07: 78:5e:c6:c9:12:f5:a9:d4:ee:2b:6e:4b:da:7d:4b:24:e2:41: 72:73:9a:fa:f5:4b:07:be:10:3d:85:da:7f:83:9b:5f:e9:37: 3d:52:6e:97:f6:25:c2:32:09:db:6d:2c:af:71:f0:8a:99:5c: 8d:08:ab:f7:4b:f9:75:a4:af:30:b2:83:c5:3c:45:0d:13:39: a5:78:52:a0:1a:dd:74:24:9e:0f:fe:67:5e:1c:63:4f:23:a5: 3f:73:c8:c5:de:2e:85:d7:68:24:07:de:b1:14:90:0a:20:95: 84:e0:82:c3:3e:6a:91:c6:18:65:6c:d5:6b:99:7c:7e:50:ba: 2a:45:19:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuyTE8+6Sw4HZwso0s2iH5mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYWE5ZjE3ZjhjY2E0N2RmYjkyYjQ5MDJkMmMyYjMyMDNk YmVkYTYwHhcNMjYwMTEyMTMwMTQzWhcNMjYwMTEzMTMwMTQzWjAzMTEwLwYDVQQD EygyNzM1MDc1YTYyNzY1NDJmZjAyNGI5ODYwMTJmNDcxMzFjZDBmMjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc1lFgB/MUO4U7Ms1LEMD9hNEic6 g36FseJ5RnswYyU/+7j45XOGGoIwgR7oi12PFjQVsFIKf+rbDRnvxAnpRR9puoRq monERkhY5Ukv/5FXQjL6YuXvSX88uZs6RsON0BBOOZVsyiaytQwVJeGPDwI2OLyo sXbR44YnbFXIGmQgkDu5B3hUJ1U1QXJEB1OmKPcS5DOgtowQ+LosQHRhT+O5PFAh AdhSXqAcIdFEJY4eloPboqh5ts8MwnH5M3PP7fFt1MrtviwkZFjsqjx+YWexlckB 4x06Q38Hg/jFTgb4g8acho6LtlSGtfZqQY6jvtR7sWV+q9kl/A4kQfKM0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCc1B1pidlQv8CS5hgEvRxMc0PIeMB8GA1UdIwQY MBaAFCGqnxf4zKR9+5K0kC0sKzID2+2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWFxZkZfak1wSDM3a3JTUUxTd3JNZ1BiN2FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kNjhkZmYtOTVlMS00YzkwLTllYzYt NTUwMjkyODBmZWMxLzEvSWFxZkZfak1wSDM3a3JTUUxTd3JNZ1BiN2FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kNjhkZmYtOTVlMS00YzkwLTllYzYtNTUwMjkyODBmZWMx LzEvSWFxZkZfak1wSDM3a3JTUUxTd3JNZ1BiN2FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXyxVxAx3 MIGm9R8uSX50y3SGa9fHD9kpqmEaQ1fmIEwxTFSAmUzA9RNTVLzcnR6nDkhCrU74 o+zgmGGAzWM4q3l1wU4hEhdMcSPYqugRKbHCZVvwYsd3t0eJN5vP9s4y4n71OHfh W4VWyNNpD0O4SXLzx3dPoE7/21IKccYHeF7GyRL1qdTuK25L2n1LJOJBcnOa+vVL B74QPYXaf4ObX+k3PVJul/YlwjIJ220sr3HwiplcjQir90v5daSvMLKDxTxFDRM5 pXhSoBrddCSeD/5nXhxjTyOlP3PIxd4uhddoJAfesRSQCiCVhOCCwz5qkcYYZWzV a5l8flC6KkUZ5Q== -----END CERTIFICATE-----Generated at Mon Jan 12 16:04:23 2026 by rpki-client