This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft File: I_IfcxbhvXj4bupkJdXCKbmA-aw.mft (raw, json) Hash identifier: swdMputfzBKDCY2B1Yytf6tonzfaRB+7Fh/ycqIJXbY= Subject key identifier: ED:C4:8F:72:47:CC:66:30:02:9F:6F:7F:AB:E7:27:DA:C4:09:9C:84 Authority key identifier: 23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC Certificate issuer: /CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac Certificate serial: 019BAE015FA81630205805A2DD51D7B2713E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft Manifest number: 17C4 Signing time: Sun 11 Jan 2026 17:01:24 +0000 Manifest this update: Sun 11 Jan 2026 17:01:24 +0000 Manifest next update: Mon 12 Jan 2026 17:01:24 +0000 Files and hashes: 1: 5nqAIjs4Map_dmOK-D_BzJ5dduI.roa (hash: YmgmK05MQj5RQuP0mkk06fEYlISXZEUPrlooDAX79Gc=) 2: I_IfcxbhvXj4bupkJdXCKbmA-aw.crl (hash: i7RSRopvKfYi2a6BFE7vk3mOuiKz2VNIdJ+7MRzjBCg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:01:5f:a8:16:30:20:58:05:a2:dd:51:d7:b2:71:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac Validity Not Before: Jan 11 17:01:24 2026 GMT Not After : Jan 12 17:01:24 2026 GMT Subject: CN=edc48f7247cc6630029f6f7fabe727dac4099c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7f:36:04:d4:d0:c0:6d:a0:19:87:69:5d:8b: 4f:63:da:89:2e:28:64:62:63:bd:ad:cd:11:b3:3a: a9:42:77:5a:5b:3c:20:cb:eb:63:4f:c3:b7:d1:82: a8:03:1f:ca:b3:fe:41:cf:23:65:9b:ce:bd:37:8c: 1d:ee:38:93:2e:e9:e4:7a:e7:af:26:4a:b6:f9:ce: 25:63:22:22:c8:bf:bc:2f:a2:33:40:eb:5f:88:ae: aa:c8:61:e5:af:66:13:b9:d2:db:f1:0b:b9:83:f5: bf:ee:1d:cd:87:16:7a:0c:80:c6:33:eb:56:44:d8: 99:0f:ac:43:59:8c:47:51:2d:f7:5d:1a:00:c5:76: ee:de:b7:4e:ec:82:dd:98:1b:e3:20:72:e1:74:d8: 0f:bd:32:cd:b0:f9:d9:cc:34:8d:a4:cd:75:d0:d5: 8d:d8:09:ab:61:07:9e:fa:8f:25:ef:96:db:44:1c: 18:58:ec:95:8b:d8:05:97:b3:ab:2d:93:85:bd:9a: 48:86:ee:25:74:be:8d:ee:67:07:ce:80:ad:50:d7: e4:33:8d:88:93:1a:f3:e3:4d:ca:9b:4a:87:79:ea: ac:6f:fe:a1:9a:01:c8:10:11:8d:70:ce:23:9b:b1: 7f:8f:1e:cb:c8:60:d9:5d:17:ce:23:be:c9:a6:ba: 71:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C4:8F:72:47:CC:66:30:02:9F:6F:7F:AB:E7:27:DA:C4:09:9C:84 X509v3 Authority Key Identifier: keyid:23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:6e:99:cd:73:b7:07:d5:85:54:bd:e5:0b:c4:c6:e8:97:62: 33:ad:b9:45:51:a1:49:39:e4:85:c1:2c:df:f9:0d:bf:ea:d1: 91:75:48:7d:59:73:52:be:6d:39:6b:4f:40:59:23:ff:31:f2: 52:8d:b5:52:b7:9e:5d:ad:05:25:f7:9f:d8:8a:0d:95:73:c0: cc:4b:c2:13:42:93:26:4a:39:a3:2e:a0:c0:ef:2c:df:01:91: b4:ae:94:cc:0d:04:6b:c6:0c:94:fa:59:28:99:42:07:97:af: 8f:d0:a7:9b:99:2c:fa:98:25:1c:7b:79:67:77:2f:c1:dd:b2: a6:87:1b:d0:14:c4:ef:d5:89:74:62:3e:22:df:93:8e:63:ff: 05:92:f9:a0:34:f8:a8:9d:6f:7d:9c:0c:34:2d:0d:c5:ba:e2: 76:13:ed:82:6c:9a:28:5d:b7:8f:08:84:c1:c1:6d:44:4e:a9: b2:2d:89:b5:9d:5a:dd:51:f1:da:08:14:02:16:3b:11:10:ea: 6e:7c:1e:7c:db:7f:a1:33:7b:ea:67:4c:48:1b:19:0c:07:98: 0c:8c:78:90:64:3e:d4:a9:10:8c:6e:58:c8:0a:41:ea:59:7f: 2e:fe:b8:a4:60:f4:c5:8e:27:19:f9:d9:a1:23:e0:29:e4:cf: 82:7c:bd:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuuAV+oFjAgWAWi3VHXsnE+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZjIxZjczMTZlMWJkNzhmODZlZWE2NDI1ZDVjMjI5Yjk4 MGY5YWMwHhcNMjYwMTExMTcwMTI0WhcNMjYwMTEyMTcwMTI0WjAzMTEwLwYDVQQD EyhlZGM0OGY3MjQ3Y2M2NjMwMDI5ZjZmN2ZhYmU3MjdkYWM0MDk5Yzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon82BNTQwG2gGYdpXYtPY9qJLihk YmO9rc0RszqpQndaWzwgy+tjT8O30YKoAx/Ks/5BzyNlm869N4wd7jiTLunkeuev Jkq2+c4lYyIiyL+8L6IzQOtfiK6qyGHlr2YTudLb8Qu5g/W/7h3NhxZ6DIDGM+tW RNiZD6xDWYxHUS33XRoAxXbu3rdO7ILdmBvjIHLhdNgPvTLNsPnZzDSNpM110NWN 2AmrYQee+o8l75bbRBwYWOyVi9gFl7OrLZOFvZpIhu4ldL6N7mcHzoCtUNfkM42I kxrz403Km0qHeeqsb/6hmgHIEBGNcM4jm7F/jx7LyGDZXRfOI77JprpxfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3Ej3JHzGYwAp9vf6vnJ9rECZyEMB8GA1UdIwQY MBaAFCPyH3MW4b14+G7qZCXVwim5gPmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSV9JZmN4Ymh2WGo0YnVwa0pkWENLYm1BLWF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YTU5Y2YtNTA5Mi00NzRkLTgxY2Yt OTc0YzMxZjI2NjBiLzEvSV9JZmN4Ymh2WGo0YnVwa0pkWENLYm1BLWF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84YTU5Y2YtNTA5Mi00NzRkLTgxY2YtOTc0YzMxZjI2NjBi LzEvSV9JZmN4Ymh2WGo0YnVwa0pkWENLYm1BLWF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE26ZzXO3 B9WFVL3lC8TG6JdiM625RVGhSTnkhcEs3/kNv+rRkXVIfVlzUr5tOWtPQFkj/zHy Uo21UreeXa0FJfef2IoNlXPAzEvCE0KTJko5oy6gwO8s3wGRtK6UzA0Ea8YMlPpZ KJlCB5evj9Cnm5ks+pglHHt5Z3cvwd2ypocb0BTE79WJdGI+It+TjmP/BZL5oDT4 qJ1vfZwMNC0NxbridhPtgmyaKF23jwiEwcFtRE6psi2JtZ1a3VHx2ggUAhY7ERDq bnwefNt/oTN76mdMSBsZDAeYDIx4kGQ+1KkQjG5YyApB6ll/Lv64pGD0xY4nGfnZ oSPgKeTPgny9vw== -----END CERTIFICATE-----Generated at Sun Jan 11 20:06:40 2026 by rpki-client