This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft File: ydWxKeBvlSRoXnABAoQfctaRXDM.mft (raw, json) Hash identifier: 13A4DCyzlQDBvNoK0cF+ZeCYoXKJrnEYk28UnBHKHWc= Subject key identifier: 9E:9C:35:BB:80:92:13:C9:A5:D9:F5:EE:EF:8F:E1:96:B0:4F:7B:68 Authority key identifier: C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33 Certificate issuer: /CN=c9d5b129e06f9524685e700102841f72d6915c33 Certificate serial: 019BF5E390B572B68CE72ACC15A82197AC5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft Manifest number: 05CB Signing time: Sun 25 Jan 2026 16:01:30 +0000 Manifest this update: Sun 25 Jan 2026 16:01:30 +0000 Manifest next update: Mon 26 Jan 2026 16:01:30 +0000 Files and hashes: 1: kwFPG9hW2RnxD_y7iGiEkD7ds7s.roa (hash: oBOX2hL6Q0voGuCACiRactuFniCHTuH8t84KLSlEN9Y=) 2: ydWxKeBvlSRoXnABAoQfctaRXDM.crl (hash: sNcQO5Me4Lp+Lr1vBrctU2sk8GceplENeuULOr3/Zwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:90:b5:72:b6:8c:e7:2a:cc:15:a8:21:97:ac:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d5b129e06f9524685e700102841f72d6915c33 Validity Not Before: Jan 25 16:01:30 2026 GMT Not After : Jan 26 16:01:30 2026 GMT Subject: CN=9e9c35bb809213c9a5d9f5eeef8fe196b04f7b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:81:be:75:8e:33:4f:f5:a0:ae:bb:9f:23:56: a9:74:bc:1f:03:9e:d2:99:84:0d:74:ec:b9:01:d3: 72:2f:0f:dd:c9:13:51:44:23:8e:2b:43:f0:55:d1: 60:ce:85:21:f3:82:15:69:e4:77:bd:f1:ce:59:66: 67:36:47:ca:7d:27:b3:ee:95:ea:9e:ff:60:b1:52: 33:0d:e2:37:a9:2d:6a:e6:5a:de:28:4f:4a:5f:8f: 63:85:85:6a:7d:9d:68:89:fe:81:9f:5f:19:fe:c0: 7b:08:8d:0a:b5:ff:25:c4:af:c2:73:3d:7e:27:cf: 8d:74:86:d5:17:83:43:c5:e8:ae:99:d4:b2:e3:5a: 5a:7d:a8:63:16:4e:ac:ad:3a:89:df:3e:17:18:5d: a0:bf:4b:2a:9f:0c:aa:04:9e:9d:54:0a:7e:5c:34: 07:c4:7d:9d:e2:fe:65:13:3b:dd:c4:27:f0:f8:80: 9c:4b:ce:fc:65:d6:16:4f:2d:5d:33:26:42:f4:03: 02:39:7d:79:f2:5c:1d:53:9f:a2:8e:b4:0e:14:8c: f0:0a:d4:f9:29:05:21:76:f9:aa:09:a4:40:60:2f: 2a:08:16:c8:04:60:63:36:3d:c2:9c:59:05:3d:ac: a1:d6:29:2d:24:65:12:7b:7f:38:0b:5b:c8:4c:9a: 02:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9C:35:BB:80:92:13:C9:A5:D9:F5:EE:EF:8F:E1:96:B0:4F:7B:68 X509v3 Authority Key Identifier: keyid:C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:ff:1d:bd:fa:3e:f6:71:cf:34:a5:a7:3a:e5:18:1e:46:d5: 1a:dd:08:25:d1:ba:20:69:e0:72:d2:03:27:06:b4:dc:41:bb: 57:63:c1:5e:a9:cb:4d:18:22:85:2b:13:f9:3a:68:75:1b:8a: f5:6e:b4:82:96:12:39:fa:ac:5f:dd:95:42:c1:b0:37:44:10: c6:89:85:17:88:7d:a5:f0:ae:ba:d9:b8:a8:e2:fa:49:aa:53: 4c:9a:20:d3:42:3b:42:2e:85:39:78:93:c6:89:d3:75:dc:fe: b1:1c:26:3c:b3:c9:5d:70:e8:44:d0:97:ee:b8:7c:49:bf:ed: 66:18:34:33:09:6c:9d:7c:4a:b2:c3:47:79:e1:e5:2c:cf:5f: 2b:4c:a9:b0:85:65:cc:fe:a7:56:dc:54:b5:1f:31:27:3d:42: 9e:da:a5:5c:5f:e7:3f:29:a3:d5:1c:84:90:94:b4:c9:c6:d3: 74:2d:f9:99:9c:37:97:b3:4d:a5:95:68:1f:3b:7c:03:e5:91: 11:6a:fa:e5:3d:b9:3b:f8:4a:f8:96:c2:ad:81:bc:f1:4e:e2: b4:d2:33:c8:cf:dd:a1:fe:19:38:dd:8e:17:92:c3:63:82:0b: 92:6e:14:c6:ad:07:54:5d:7b:47:d6:36:48:da:94:e8:79:b4: 78:67:29:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv145C1craM5yrMFaghl6xfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDViMTI5ZTA2Zjk1MjQ2ODVlNzAwMTAyODQxZjcyZDY5 MTVjMzMwHhcNMjYwMTI1MTYwMTMwWhcNMjYwMTI2MTYwMTMwWjAzMTEwLwYDVQQD Eyg5ZTljMzViYjgwOTIxM2M5YTVkOWY1ZWVlZjhmZTE5NmIwNGY3YjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIG+dY4zT/WgrrufI1apdLwfA57S mYQNdOy5AdNyLw/dyRNRRCOOK0PwVdFgzoUh84IVaeR3vfHOWWZnNkfKfSez7pXq nv9gsVIzDeI3qS1q5lreKE9KX49jhYVqfZ1oif6Bn18Z/sB7CI0Ktf8lxK/Ccz1+ J8+NdIbVF4NDxeiumdSy41pafahjFk6srTqJ3z4XGF2gv0sqnwyqBJ6dVAp+XDQH xH2d4v5lEzvdxCfw+ICcS878ZdYWTy1dMyZC9AMCOX158lwdU5+ijrQOFIzwCtT5 KQUhdvmqCaRAYC8qCBbIBGBjNj3CnFkFPayh1iktJGUSe384C1vITJoCsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6cNbuAkhPJpdn17u+P4ZawT3toMB8GA1UdIwQY MBaAFMnVsSngb5UkaF5wAQKEH3LWkVwzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRXeEtlQnZsU1JvWG5BQkFvUWZjdGFSWERNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xOWY5ZDctNDQzOC00ZDYxLWJlNzct YzJlYWRkNWVmM2YxLzEveWRXeEtlQnZsU1JvWG5BQkFvUWZjdGFSWERNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8xOWY5ZDctNDQzOC00ZDYxLWJlNzctYzJlYWRkNWVmM2Yx LzEveWRXeEtlQnZsU1JvWG5BQkFvUWZjdGFSWERNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANf8dvfo+ 9nHPNKWnOuUYHkbVGt0IJdG6IGngctIDJwa03EG7V2PBXqnLTRgihSsT+TpodRuK 9W60gpYSOfqsX92VQsGwN0QQxomFF4h9pfCuutm4qOL6SapTTJog00I7Qi6FOXiT xonTddz+sRwmPLPJXXDoRNCX7rh8Sb/tZhg0MwlsnXxKssNHeeHlLM9fK0ypsIVl zP6nVtxUtR8xJz1CntqlXF/nPymj1RyEkJS0ycbTdC35mZw3l7NNpZVoHzt8A+WR EWr65T25O/hK+JbCrYG88U7itNIzyM/dof4ZON2OF5LDY4ILkm4Uxq0HVF17R9Y2 SNqU6Hm0eGcpbQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:35:09 2026 by rpki-client