This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft File: iPQfqz5j6vW98HFm31qmgWLq16Y.mft (raw, json) Hash identifier: YIWvcMOT1zgEh3vmCHlPCCCTyUWd12rP5agKhaxtQys= Subject key identifier: E6:0E:55:F1:63:2B:2F:26:B7:63:FA:48:53:14:10:1C:94:1C:B7:3D Authority key identifier: 88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6 Certificate issuer: /CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6 Certificate serial: 019B77C7F3D5A6FE40BB3C820141BB0B99B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft Manifest number: 17A8 Signing time: Thu 01 Jan 2026 04:19:11 +0000 Manifest this update: Thu 01 Jan 2026 04:19:11 +0000 Manifest next update: Fri 02 Jan 2026 04:19:11 +0000 Files and hashes: 1: gjzgYMADmxh6Q8pdc-WWoEw7shc.roa (hash: 0P8JuvcWmnVuYZSLeNadkGvm4K+4XLNVcmqTDBqXszk=) 2: iPQfqz5j6vW98HFm31qmgWLq16Y.crl (hash: D+L93vb+WqUy37uG+gdu0qWMHRZyxjqRvgkfkgABPgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:f3:d5:a6:fe:40:bb:3c:82:01:41:bb:0b:99:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6 Validity Not Before: Jan 1 04:19:11 2026 GMT Not After : Jan 2 04:19:11 2026 GMT Subject: CN=e60e55f1632b2f26b763fa485314101c941cb73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1a:1d:a9:6b:ca:a2:3e:f7:f9:3e:f7:99:28: 85:fc:68:76:1a:8f:82:d0:c6:49:f2:2a:49:cc:c9: 7f:a3:2e:d1:a6:e7:22:5d:c6:91:d7:03:f7:78:65: 5a:4b:d5:0b:e0:57:14:3b:25:f9:01:26:a7:d4:f5: c3:b1:69:95:2c:8b:0b:77:fa:63:13:3f:d7:d2:ee: 86:4d:1b:ea:cd:7a:ac:4e:64:36:a7:9f:e6:55:35: 03:21:b7:53:0d:ae:dc:38:5a:f8:0b:36:45:f5:3e: 83:4d:23:3a:b8:e0:b5:43:db:ec:dc:bc:dd:e0:70: d1:a3:89:1b:e3:c8:6b:4d:98:b1:56:9d:91:11:e7: ba:59:4b:1d:f1:29:3b:35:0c:ae:5d:aa:76:92:e8: d7:b0:b4:e6:89:28:65:8d:eb:4b:f1:b2:11:ff:0a: 68:c2:ae:d1:4b:bf:c5:dd:0c:10:82:5f:c2:ec:ef: 47:ba:23:eb:2c:29:64:8e:5e:f0:b8:0a:1f:0f:20: c7:d9:51:b7:7b:39:c7:dc:37:31:e5:ad:5f:0f:79: 5d:1c:44:1d:14:9a:e6:22:6d:9d:fe:1c:95:93:15: e6:ad:f6:21:22:07:25:ce:70:80:03:48:1b:ac:7c: 80:48:9f:a8:4d:aa:14:de:94:56:55:b6:68:74:30: e7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0E:55:F1:63:2B:2F:26:B7:63:FA:48:53:14:10:1C:94:1C:B7:3D X509v3 Authority Key Identifier: keyid:88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:02:fe:d5:27:86:97:65:97:aa:4d:bb:d7:f0:c4:d1:16:b8: a2:75:4b:e1:e8:31:0f:de:c0:03:1c:51:85:b8:29:19:62:48: 99:6a:fa:99:86:5a:e8:be:29:3b:38:92:06:18:a1:b1:67:99: 5f:db:69:ba:db:c1:10:3f:e9:93:4c:de:70:34:2f:80:7b:2d: 6e:87:67:6f:bd:21:a5:dd:1e:94:3e:ef:56:70:cb:b6:2a:78: 91:3a:1a:26:b6:06:62:41:12:2c:41:76:c0:17:da:cc:6f:78: 9a:96:cb:03:ad:b8:0b:06:48:50:45:49:60:8e:91:96:d5:77: ec:8f:7a:36:7c:fc:22:9d:90:8a:3c:ad:90:3c:62:3f:da:ca: 80:76:69:67:14:9f:ad:49:ec:51:a5:a1:85:75:c6:df:9f:15: 88:b0:d3:87:9f:e9:3b:07:cc:f1:7e:9a:19:dd:8f:56:a1:a6: ca:a2:79:cf:9c:9a:c3:1f:66:d6:78:1e:e9:b3:0e:ab:d3:af: fa:c8:0e:8a:d7:29:49:eb:a4:46:1e:b1:61:d7:40:1d:90:ba: 1d:32:fd:80:df:6c:ae:5f:28:91:26:62:21:74:92:18:d1:ea: 4c:b3:a0:d7:41:f5:d7:ee:53:42:94:6c:ec:9f:2a:7d:93:fe: d0:22:04:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3x/PVpv5AuzyCAUG7C5m3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZjQxZmFiM2U2M2VhZjViZGYwNzE2NmRmNWFhNjgxNjJl YWQ3YTYwHhcNMjYwMTAxMDQxOTExWhcNMjYwMTAyMDQxOTExWjAzMTEwLwYDVQQD EyhlNjBlNTVmMTYzMmIyZjI2Yjc2M2ZhNDg1MzE0MTAxYzk0MWNiNzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xodqWvKoj73+T73mSiF/Gh2Go+C 0MZJ8ipJzMl/oy7RpuciXcaR1wP3eGVaS9UL4FcUOyX5ASan1PXDsWmVLIsLd/pj Ez/X0u6GTRvqzXqsTmQ2p5/mVTUDIbdTDa7cOFr4CzZF9T6DTSM6uOC1Q9vs3Lzd 4HDRo4kb48hrTZixVp2REee6WUsd8Sk7NQyuXap2kujXsLTmiShljetL8bIR/wpo wq7RS7/F3QwQgl/C7O9HuiPrLClkjl7wuAofDyDH2VG3eznH3Dcx5a1fD3ldHEQd FJrmIm2d/hyVkxXmrfYhIgclznCAA0gbrHyASJ+oTaoU3pRWVbZodDDnuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYOVfFjKy8mt2P6SFMUEByUHLc9MB8GA1UdIwQY MBaAFIj0H6s+Y+r1vfBxZt9apoFi6temMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVBRZnF6NWo2dlc5OEhGbTMxcW1nV0xxMTZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDZkOGItYzc1OC00YjkzLWI5ZjMt ODk3Y2I2YTQzMGQ3LzEvaVBRZnF6NWo2dlc5OEhGbTMxcW1nV0xxMTZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDZkOGItYzc1OC00YjkzLWI5ZjMtODk3Y2I2YTQzMGQ3 LzEvaVBRZnF6NWo2dlc5OEhGbTMxcW1nV0xxMTZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvQL+1SeG l2WXqk271/DE0Ra4onVL4egxD97AAxxRhbgpGWJImWr6mYZa6L4pOziSBhihsWeZ X9tputvBED/pk0zecDQvgHstbodnb70hpd0elD7vVnDLtip4kToaJrYGYkESLEF2 wBfazG94mpbLA624CwZIUEVJYI6RltV37I96Nnz8Ip2QijytkDxiP9rKgHZpZxSf rUnsUaWhhXXG358ViLDTh5/pOwfM8X6aGd2PVqGmyqJ5z5yawx9m1nge6bMOq9Ov +sgOitcpSeukRh6xYddAHZC6HTL9gN9srl8okSZiIXSSGNHqTLOg10H11+5TQpRs 7J8qfZP+0CIE1A== -----END CERTIFICATE-----Generated at Thu Jan 1 07:32:59 2026 by rpki-client