This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json) Hash identifier: IEDvqSqhcLLUbGoQBisTogZ4AF0+0atKXbDGzB3ZGS8= Subject key identifier: F5:2B:78:70:81:04:67:6C:29:2F:B8:C5:32:A7:4E:F2:A7:3F:EF:AB Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d Certificate serial: 019BF72CE5354F3DC6FA59800003B9EDBD53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 22:01:13 +0000 Manifest this update: Sun 25 Jan 2026 22:01:13 +0000 Manifest next update: Mon 26 Jan 2026 22:01:13 +0000 Files and hashes: 1: MDOYojRzK_b13iyI5P24Yv-1OfI.roa (hash: 9C3SntnocakqcNtFoy8WdbT469VxGnuBBybMiDuCskI=) 2: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: DQhvPZFzs/w/WkrKd6meWdGVCBVtcr2zmIWkovmkTXw=) 3: tD3EeMEBT3yEWBttpsWGl0bRetk.roa (hash: ckduoJYFFvUfXMRG101fPH5je/+Pxdi1LergZOeIB/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:e5:35:4f:3d:c6:fa:59:80:00:03:b9:ed:bd:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9585c19915455835457413ef222a7d375b29901d Validity Not Before: Jan 25 22:01:13 2026 GMT Not After : Jan 26 22:01:13 2026 GMT Subject: CN=f52b78708104676c292fb8c532a74ef2a73fefab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:58:d4:62:d5:34:38:ad:9d:88:e1:e3:5f:ca: 36:ff:70:df:cf:33:8e:e1:72:58:93:d5:37:69:95: e9:05:ec:7f:2c:03:f0:bd:1b:b1:45:39:30:74:df: e2:e5:7c:21:43:b4:bb:6b:6e:23:24:04:ac:f5:7a: 78:59:84:23:f2:19:b3:bf:ab:87:0d:6d:29:4d:f3: 1c:20:d9:58:e3:75:0e:7b:ad:8b:d3:cc:58:60:e1: d6:b4:49:0a:08:55:dd:5f:37:02:6e:e6:8e:e2:6a: 23:5f:7a:80:05:11:c4:67:f8:c4:78:85:3a:f5:de: ee:66:e1:6e:0f:ce:61:0a:96:28:af:7e:d6:07:ef: 1c:e7:76:5c:58:f2:8a:f6:62:92:81:76:97:6c:22: 8b:48:c6:74:75:d8:ec:44:86:8d:f5:8f:c6:a3:6f: e0:dd:bc:81:ae:07:8b:73:f6:22:7c:0b:d1:bb:3c: 12:f4:62:85:9b:c3:86:9a:ef:29:9b:af:5b:d7:ea: fb:b4:43:1a:fc:33:e7:04:76:b2:26:f2:3f:e0:2c: 6b:99:08:f6:10:37:49:4b:62:50:c5:64:a5:d3:bd: ad:43:e2:17:cc:16:c0:b2:7a:50:82:ff:b6:fd:59: 6e:12:9f:ea:92:07:47:01:e0:3f:7a:5d:1d:27:93: 24:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2B:78:70:81:04:67:6C:29:2F:B8:C5:32:A7:4E:F2:A7:3F:EF:AB X509v3 Authority Key Identifier: keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:9f:87:15:fc:38:d9:3c:fe:59:e0:b6:95:86:e5:a8:19:6f: 7f:cd:d7:be:11:ba:f8:62:fb:cc:3f:21:8e:73:e7:3c:37:ef: 00:72:18:9c:53:9f:b3:60:bd:d5:c8:4a:e9:f8:c7:6b:6c:72: 8b:09:2c:15:46:1d:81:37:db:ef:ef:ae:64:77:0f:ad:04:22: e2:9f:cd:49:d6:12:54:d3:0f:26:70:25:c7:fb:b5:62:b3:7f: a8:bb:c3:46:9f:16:da:c8:c1:59:71:ca:d7:ae:57:eb:92:1f: c2:c6:67:4b:ab:3b:83:dc:5d:c3:24:e4:8e:26:07:1e:83:80: 0d:e8:6d:e2:df:a9:70:76:f8:a5:ce:05:6b:e7:b4:25:be:7d: 2d:75:8d:cb:f6:1b:2c:26:b2:4d:56:5d:31:5b:e7:80:4e:16: a6:c5:be:cd:3f:53:c3:de:40:34:36:a0:72:c5:bb:f8:b1:34: 18:31:ca:a5:37:6d:dc:53:5e:78:22:7c:2f:b9:bd:ed:54:82: cd:1d:f8:c2:1a:57:38:7c:93:d7:6c:aa:28:5f:f5:28:a3:6d: 1d:a7:55:1c:51:83:f1:cc:89:e9:ea:e3:46:7f:18:53:fe:47: 5b:8f:74:1d:ee:fb:a7:d7:3f:ee:07:a4:18:61:76:06:87:a1: 48:74:2d:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LOU1Tz3G+lmAAAO57b1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ODVjMTk5MTU0NTU4MzU0NTc0MTNlZjIyMmE3ZDM3NWIy OTkwMWQwHhcNMjYwMTI1MjIwMTEzWhcNMjYwMTI2MjIwMTEzWjAzMTEwLwYDVQQD EyhmNTJiNzg3MDgxMDQ2NzZjMjkyZmI4YzUzMmE3NGVmMmE3M2ZlZmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVjUYtU0OK2diOHjX8o2/3DfzzOO 4XJYk9U3aZXpBex/LAPwvRuxRTkwdN/i5XwhQ7S7a24jJASs9Xp4WYQj8hmzv6uH DW0pTfMcINlY43UOe62L08xYYOHWtEkKCFXdXzcCbuaO4mojX3qABRHEZ/jEeIU6 9d7uZuFuD85hCpYor37WB+8c53ZcWPKK9mKSgXaXbCKLSMZ0ddjsRIaN9Y/Go2/g 3byBrgeLc/YifAvRuzwS9GKFm8OGmu8pm69b1+r7tEMa/DPnBHayJvI/4CxrmQj2 EDdJS2JQxWSl072tQ+IXzBbAsnpQgv+2/VluEp/qkgdHAeA/el0dJ5Mk3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUreHCBBGdsKS+4xTKnTvKnP++rMB8GA1UdIwQY MBaAFJWFwZkVRVg1RXQT7yIqfTdbKZAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFlYQm1SVkZXRFZGZEJQdklpcDlOMXNwa0IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZjU3NTgtYWZmNy00ZDg4LWI3ZGMt NzcyOTE4ZmZmNTQ0LzEvbFlYQm1SVkZXRFZGZEJQdklpcDlOMXNwa0IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jZjU3NTgtYWZmNy00ZDg4LWI3ZGMtNzcyOTE4ZmZmNTQ0 LzEvbFlYQm1SVkZXRFZGZEJQdklpcDlOMXNwa0IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJp+HFfw4 2Tz+WeC2lYblqBlvf83XvhG6+GL7zD8hjnPnPDfvAHIYnFOfs2C91chK6fjHa2xy iwksFUYdgTfb7++uZHcPrQQi4p/NSdYSVNMPJnAlx/u1YrN/qLvDRp8W2sjBWXHK 165X65IfwsZnS6s7g9xdwyTkjiYHHoOADeht4t+pcHb4pc4Fa+e0Jb59LXWNy/Yb LCayTVZdMVvngE4WpsW+zT9Tw95ANDagcsW7+LE0GDHKpTdt3FNeeCJ8L7m97VSC zR34whpXOHyT12yqKF/1KKNtHadVHFGD8cyJ6erjRn8YU/5HW490He77p9c/7gek GGF2BoehSHQtrA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:49 2026 by rpki-client