This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft File: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft (raw, json) Hash identifier: s86icel8nkK5BV83FovoBlMr1mDr90CZoqgDI0uNYDs= Subject key identifier: 91:F8:21:58:1A:F6:C7:DA:24:5D:65:50:35:93:72:59:C5:E8:B9:58 Authority key identifier: CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C Certificate issuer: /CN=cbc83c392c5421c595cd5fb79428e8275bdb594c Certificate serial: 019BF2743D65DCF9EBD36BAF812C39412255 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft Manifest number: 01D5 Signing time: Sun 25 Jan 2026 00:01:02 +0000 Manifest this update: Sun 25 Jan 2026 00:01:02 +0000 Manifest next update: Mon 26 Jan 2026 00:01:02 +0000 Files and hashes: 1: 8MxTJlqau9S1ZV5fA_n_hiU2OjQ.roa (hash: ZFi66z5+x2HZHjEf8Mnf2qe4zKNsSEknPsHvSK6VhIc=) 2: DNbiYi8RnmHbs53ufR4Wo4EOQD4.roa (hash: 1O4zlMEhLqsXNNh16SOVPGWJLESJzqVd3J7KSAE8smE=) 3: EBV1N0nyc3uDjy8VuxK9uZr58ys.roa (hash: Ua/lKqQMivBauR1brwmNmnYyYEQG+PCmKakmmH7OZoQ=) 4: wgW5ViWtyw-hcjNoVsfmKE4EIG8.roa (hash: HhTkFaNAcVHstP72WGd6nJS+mIOkBQF6lfIRGmZJYHI=) 5: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl (hash: riVHJf5VO1N876vNFBw1FiD+LZwDJQomrpDdRwW2l5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:74:3d:65:dc:f9:eb:d3:6b:af:81:2c:39:41:22:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbc83c392c5421c595cd5fb79428e8275bdb594c Validity Not Before: Jan 25 00:01:02 2026 GMT Not After : Jan 26 00:01:02 2026 GMT Subject: CN=91f821581af6c7da245d655035937259c5e8b958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:42:17:5d:3f:f5:b9:ef:1c:08:29:d0:ce:36: 14:2d:42:ad:3f:d4:f4:84:61:59:2d:58:29:19:80: 78:dd:d0:a8:08:2c:05:93:9b:d9:51:b0:76:86:12: 6c:87:77:3b:7a:f6:40:13:83:97:b4:e2:5c:9f:4f: 2a:8e:d2:a3:ed:4c:a1:ea:23:da:85:de:18:61:c4: 0e:50:e7:a4:d5:a6:73:ac:6a:0d:5c:0b:78:e0:22: cf:86:97:c3:81:e5:25:05:14:b5:e2:67:d6:b3:51: f9:ff:ac:a0:76:eb:3d:74:b9:ac:ee:1d:b5:bb:48: 4e:ec:1c:0a:e1:84:58:65:5f:9d:ce:9f:e1:ae:ac: ac:1f:c6:e9:93:a7:df:e5:0c:b5:d0:5c:4d:9c:ff: 95:68:08:82:dd:e6:ff:fa:b7:3a:2b:95:08:f5:98: eb:2b:5e:15:70:4d:15:12:a8:7d:02:8c:56:5c:45: 15:4e:17:6f:76:bf:21:0a:66:5b:22:69:b8:d5:62: 88:33:93:1f:0d:44:d9:9c:0a:75:17:ab:87:52:4a: 40:e3:b9:d2:fb:8e:68:84:58:a6:fe:dc:29:ee:1d: be:88:41:d1:44:67:b8:c4:63:0a:b7:2a:0b:8e:f4: 56:01:7f:d7:36:d0:a6:bb:a9:9f:b4:65:a0:45:3d: 39:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F8:21:58:1A:F6:C7:DA:24:5D:65:50:35:93:72:59:C5:E8:B9:58 X509v3 Authority Key Identifier: keyid:CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:63:ce:af:14:82:c9:7d:da:26:13:a5:7d:0e:a4:26:6b:82: a4:66:38:3f:6f:0c:06:d0:40:c1:29:8a:c4:0e:0d:ea:fc:4f: bd:55:d3:b0:8a:b8:14:9e:9d:c9:f4:ad:07:f4:cd:a8:8b:ca: 62:2e:3d:bc:80:7f:fc:9a:a8:9a:41:3a:a7:41:20:7d:94:c8: 63:fb:a7:84:30:af:a4:18:c6:7b:78:c5:ca:bd:3e:cb:7f:c7: 4d:60:e0:37:85:d9:ef:8a:9b:e5:e7:93:89:f9:35:c2:5d:66: e8:e5:ab:0e:ee:c1:47:13:1f:06:75:e3:1b:09:31:d2:e2:c2: 1f:f4:bf:52:3c:f6:23:da:d2:cc:be:41:21:ff:e5:5b:c9:a1: bd:48:d0:7c:97:85:65:8e:15:d2:1a:ef:0f:5d:33:f2:f8:19: a4:4e:44:6c:07:df:78:4f:e8:ab:ea:7c:c8:04:78:5e:84:fe: eb:21:3c:3e:cb:d9:ba:f1:f4:10:05:78:86:f5:c2:52:c9:32: 42:a1:b2:20:6e:8e:9d:77:88:a4:3a:86:a8:00:38:7d:1c:c6: c1:d5:bb:c0:a2:47:9b:43:b8:7c:00:f8:41:57:08:cf:dd:a8: b7:78:45:52:04:c5:6a:ac:0f:fa:c9:15:e0:54:d0:42:06:79: 30:69:f4:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvydD1l3Pnr02uvgSw5QSJVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYzgzYzM5MmM1NDIxYzU5NWNkNWZiNzk0MjhlODI3NWJk YjU5NGMwHhcNMjYwMTI1MDAwMTAyWhcNMjYwMTI2MDAwMTAyWjAzMTEwLwYDVQQD Eyg5MWY4MjE1ODFhZjZjN2RhMjQ1ZDY1NTAzNTkzNzI1OWM1ZThiOTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0IXXT/1ue8cCCnQzjYULUKtP9T0 hGFZLVgpGYB43dCoCCwFk5vZUbB2hhJsh3c7evZAE4OXtOJcn08qjtKj7Uyh6iPa hd4YYcQOUOek1aZzrGoNXAt44CLPhpfDgeUlBRS14mfWs1H5/6ygdus9dLms7h21 u0hO7BwK4YRYZV+dzp/hrqysH8bpk6ff5Qy10FxNnP+VaAiC3eb/+rc6K5UI9Zjr K14VcE0VEqh9AoxWXEUVThdvdr8hCmZbImm41WKIM5MfDUTZnAp1F6uHUkpA47nS +45ohFim/twp7h2+iEHRRGe4xGMKtyoLjvRWAX/XNtCmu6mftGWgRT05SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJH4IVga9sfaJF1lUDWTclnF6LlYMB8GA1UdIwQY MBaAFMvIPDksVCHFlc1ft5Qo6Cdb21lMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zMDUyZGUtNTU4Yi00MzM0LThhNzAt OWFkMzNhZTY1M2FkLzEveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zMDUyZGUtNTU4Yi00MzM0LThhNzAtOWFkMzNhZTY1M2Fk LzEveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2POrxSC yX3aJhOlfQ6kJmuCpGY4P28MBtBAwSmKxA4N6vxPvVXTsIq4FJ6dyfStB/TNqIvK Yi49vIB//JqomkE6p0EgfZTIY/unhDCvpBjGe3jFyr0+y3/HTWDgN4XZ74qb5eeT ifk1wl1m6OWrDu7BRxMfBnXjGwkx0uLCH/S/Ujz2I9rSzL5BIf/lW8mhvUjQfJeF ZY4V0hrvD10z8vgZpE5EbAffeE/oq+p8yAR4XoT+6yE8PsvZuvH0EAV4hvXCUsky QqGyIG6OnXeIpDqGqAA4fRzGwdW7wKJHm0O4fAD4QVcIz92ot3hFUgTFaqwP+skV 4FTQQgZ5MGn05g== -----END CERTIFICATE-----Generated at Sun Jan 25 06:08:27 2026 by rpki-client