This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json) Hash identifier: WiP83MNKqIYnV1aVWA5Ts1cyehvMksiiw0Tcb/arfmE= Subject key identifier: 4A:0F:E0:56:87:FE:D2:1E:62:7D:D6:B5:CD:8B:52:69:F6:F4:34:2E Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11 Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411 Certificate serial: 019BF619D36C151E60C78640197A8015BE38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft Manifest number: 1286 Signing time: Sun 25 Jan 2026 17:00:46 +0000 Manifest this update: Sun 25 Jan 2026 17:00:46 +0000 Manifest next update: Mon 26 Jan 2026 17:00:46 +0000 Files and hashes: 1: Qt8hBCMlNLI8nIk_LiMf9y2OnJw.roa (hash: GjRUGfRDG86hd7K9wU5XQ1rme8zCmD1Q06yAXGf5F6Q=) 2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: OqWrUPe/CLtmBEwai9tXJeoyO+ouVZZUiRnETpG61mM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:d3:6c:15:1e:60:c7:86:40:19:7a:80:15:be:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411 Validity Not Before: Jan 25 17:00:46 2026 GMT Not After : Jan 26 17:00:46 2026 GMT Subject: CN=4a0fe05687fed21e627dd6b5cd8b5269f6f4342e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:be:d9:00:e3:f4:91:3f:86:46:0f:fd:33:b8: 16:b1:cf:1e:d6:3f:de:b4:60:6f:a7:98:80:66:55: e4:eb:38:6f:7c:98:dd:a2:34:d1:d9:81:5c:b0:60: 43:ab:b1:71:4d:cc:5b:a5:2f:48:9c:45:16:cd:95: 41:91:34:8b:f6:9b:2b:f9:3c:3d:6e:69:40:f9:f4: ef:89:df:21:5f:61:70:0f:fd:df:91:c2:8e:b9:97: c0:cb:0b:59:a4:97:8d:bb:bc:15:6e:af:c7:65:27: 1f:c1:a9:ec:6f:9d:df:a6:b6:3f:3b:91:cd:30:6b: 74:2e:86:ed:ff:88:ae:5e:91:e7:c7:84:9b:c0:24: 45:89:9f:f8:cb:15:f7:66:d1:68:8e:2d:f4:99:0e: dc:8e:50:20:90:3c:86:c4:71:75:08:36:a3:40:13: 95:d5:e0:ce:f3:6f:0e:43:25:d1:39:f9:8d:70:9c: 83:66:f1:0f:ce:fc:d3:71:9c:af:73:9e:79:02:d2: 94:8a:6d:4b:a4:34:f5:44:16:1c:89:ac:b1:e0:38: 28:f7:ca:e1:9f:47:4a:c7:0d:d2:db:ab:46:6d:04: 77:42:00:b3:ce:fc:35:39:d1:e2:09:b7:b5:10:61: 02:fe:3e:b4:b7:23:6f:b0:16:f4:43:c1:60:30:74: 4f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:0F:E0:56:87:FE:D2:1E:62:7D:D6:B5:CD:8B:52:69:F6:F4:34:2E X509v3 Authority Key Identifier: keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6b:33:ca:5b:c4:97:88:2b:1b:3f:5f:b4:ae:2d:95:62:8c: 5d:57:eb:34:d4:84:0e:2f:22:a9:a5:84:38:fa:1e:e4:f3:50: 51:13:90:a5:28:d6:a7:e7:05:6c:2c:02:1b:22:1f:9b:0b:d4: 76:69:4e:f7:aa:e5:a0:f8:55:f0:52:9a:bf:73:e6:4a:11:91: 66:27:d5:42:a5:03:b8:1a:7c:e2:1a:bc:cc:35:f7:0e:c2:1b: a0:91:16:f9:06:f3:07:b6:0c:9e:7a:14:c9:72:70:20:f7:19: 4f:6d:f4:9d:69:21:fd:b2:f7:2e:1f:84:11:07:1b:59:47:bd: da:db:b7:33:9e:3d:53:4c:95:2c:6f:b0:44:de:51:05:59:22: 9a:62:c1:b8:54:1d:2e:24:7c:bc:b7:82:7e:b0:d9:3d:8d:48: ce:0d:8c:fa:92:02:b1:ce:a8:db:f7:fd:4f:72:88:b2:b8:46: 22:a0:2d:d2:f8:5a:c6:03:2b:49:06:04:bb:8f:33:11:db:ba: 0e:23:3c:b5:e3:08:19:30:e1:c3:00:78:5e:1f:6b:4e:6d:68: 63:0b:2a:0e:73:e4:0f:fd:c2:a4:60:68:86:dc:5a:da:4a:0f: 15:7d:3e:6d:b2:c2:fa:e6:40:6b:5c:68:30:65:c7:9d:2a:f3: 07:63:0d:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GdNsFR5gx4ZAGXqAFb44MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiODg5ZmVlZDEzNWRjMDM0OTJkOGIzZTgyOGM3MzA5NTg3 ZDE0MTEwHhcNMjYwMTI1MTcwMDQ2WhcNMjYwMTI2MTcwMDQ2WjAzMTEwLwYDVQQD Eyg0YTBmZTA1Njg3ZmVkMjFlNjI3ZGQ2YjVjZDhiNTI2OWY2ZjQzNDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq77ZAOP0kT+GRg/9M7gWsc8e1j/e tGBvp5iAZlXk6zhvfJjdojTR2YFcsGBDq7FxTcxbpS9InEUWzZVBkTSL9psr+Tw9 bmlA+fTvid8hX2FwD/3fkcKOuZfAywtZpJeNu7wVbq/HZScfwansb53fprY/O5HN MGt0Lobt/4iuXpHnx4SbwCRFiZ/4yxX3ZtFoji30mQ7cjlAgkDyGxHF1CDajQBOV 1eDO828OQyXROfmNcJyDZvEPzvzTcZyvc555AtKUim1LpDT1RBYciayx4Dgo98rh n0dKxw3S26tGbQR3QgCzzvw1OdHiCbe1EGEC/j60tyNvsBb0Q8FgMHRPJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoP4FaH/tIeYn3Wtc2LUmn29DQuMB8GA1UdIwQY MBaAFMuIn+7RNdwDSS2LPoKMcwlYfRQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUt YzFmMTJlNThmZWRkLzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUtYzFmMTJlNThmZWRk LzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmszylvE l4grGz9ftK4tlWKMXVfrNNSEDi8iqaWEOPoe5PNQUROQpSjWp+cFbCwCGyIfmwvU dmlO96rloPhV8FKav3PmShGRZifVQqUDuBp84hq8zDX3DsIboJEW+QbzB7YMnnoU yXJwIPcZT230nWkh/bL3Lh+EEQcbWUe92tu3M549U0yVLG+wRN5RBVkimmLBuFQd LiR8vLeCfrDZPY1Izg2M+pICsc6o2/f9T3KIsrhGIqAt0vhaxgMrSQYEu48zEdu6 DiM8teMIGTDhwwB4Xh9rTm1oYwsqDnPkD/3CpGBohtxa2koPFX0+bbLC+uZAa1xo MGXHnSrzB2MNFw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:46 2026 by rpki-client