This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft File: y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json) Hash identifier: /NhrtDa/GTVHhwbGKFuKIpb8PqAFoIKYlZs/IIMycSA= Subject key identifier: E5:52:0F:D6:5B:57:87:D9:14:75:42:4B:15:F0:70:68:11:73:60:DB Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE Certificate issuer: /CN=cb425fde747aa7fea8e7b335b46c88d238850abe Certificate serial: 019BF72C98288A976F8A42BE996080F3A745 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft Manifest number: 147E Signing time: Sun 25 Jan 2026 22:00:53 +0000 Manifest this update: Sun 25 Jan 2026 22:00:53 +0000 Manifest next update: Mon 26 Jan 2026 22:00:53 +0000 Files and hashes: 1: u2N7udWHL38xXKaM9zlWB4W-ME4.roa (hash: SRPpRQyERN5FsdBAYlcVxUC95a7rxraNn372ElkInaA=) 2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: A0sTEZ3sO7ly2Xb4dMteyQijCeE38uLH47HkrM2iqzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:98:28:8a:97:6f:8a:42:be:99:60:80:f3:a7:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe Validity Not Before: Jan 25 22:00:53 2026 GMT Not After : Jan 26 22:00:53 2026 GMT Subject: CN=e5520fd65b5787d91475424b15f07068117360db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c0:e7:f7:de:27:b8:3a:51:b5:2e:dc:fc:a8: 87:7a:0c:03:53:85:3b:52:77:4d:06:98:3a:90:e1: 0d:3e:b2:cd:68:94:32:dd:ed:3a:56:a1:d6:37:56: fd:6f:88:96:96:ea:11:03:e8:aa:48:6c:f2:f5:02: f2:bb:e0:c9:b6:94:71:79:f4:ec:55:59:b2:a0:a0: fd:49:c7:04:0e:cb:82:2a:37:27:e1:16:b2:81:f3: 08:38:31:53:03:e9:f4:41:8d:97:08:97:60:4d:e7: b6:dd:8c:7f:cf:fc:61:63:49:1e:1f:00:f2:0a:22: c7:39:5d:4c:91:aa:de:e7:69:7c:7d:53:a1:e6:1a: 44:95:cd:ef:ac:70:12:fa:30:2c:68:e1:c9:d3:75: 53:e0:10:1a:90:9c:80:45:9a:3b:50:70:9c:b0:e7: 1b:96:06:12:d4:f7:4f:14:2b:db:02:af:f2:18:a8: 88:6a:4f:4e:65:3f:f6:df:e1:74:78:ec:13:5c:f3: f1:33:6e:c2:f3:97:a9:6b:9e:ca:2a:f1:bf:17:c4: 3f:d3:b5:89:72:7b:8b:3c:f6:6a:6e:72:c4:5f:6f: 14:14:a0:ee:96:d7:80:5a:e8:bf:4e:e5:44:a4:7a: d5:64:1d:7e:99:26:e3:4f:34:2f:a0:4d:0b:05:0c: ca:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:52:0F:D6:5B:57:87:D9:14:75:42:4B:15:F0:70:68:11:73:60:DB X509v3 Authority Key Identifier: keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:04:1e:36:e0:a4:c0:ab:b1:80:44:86:de:fe:db:9e:91:56: 61:ef:fa:34:e3:5b:c2:95:2f:e9:55:42:2a:72:28:9d:dc:cf: 1e:88:98:43:70:60:56:b2:db:70:c8:da:a1:1d:a8:93:fb:29: cf:a4:9b:74:01:f6:f7:93:e8:de:f7:3d:8a:52:94:b7:96:ae: 08:14:c4:92:c8:d3:9d:3c:9c:ba:bb:05:17:e2:01:45:32:83: fe:86:3a:54:3b:06:c5:50:da:f4:8f:db:48:a4:81:f1:8e:dd: 46:21:d6:43:07:b5:f7:a6:d4:e0:b3:0f:31:ce:47:e2:d5:33: c8:f8:30:15:83:d0:e2:75:de:e7:cd:c9:ba:6d:88:5d:c7:de: 1e:d7:42:24:31:5c:c9:34:00:7b:75:e4:51:29:f6:02:fa:1e: e4:9b:0d:37:c7:c3:a8:18:94:27:37:85:b4:8f:f2:86:74:51: 52:54:ec:90:49:f1:45:29:e1:da:16:b9:a2:f9:cd:54:e0:7c: a1:60:8b:e8:39:39:90:29:dc:8b:01:76:5a:5f:99:a6:dd:d7: 67:78:50:c5:56:af:b2:f5:ad:3f:0f:80:d5:49:62:16:b3:3f: 37:98:51:c0:b5:82:0b:32:7d:7c:26:2f:aa:0e:d9:ba:c9:2d: 81:16:2d:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LJgoipdvikK+mWCA86dFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNDI1ZmRlNzQ3YWE3ZmVhOGU3YjMzNWI0NmM4OGQyMzg4 NTBhYmUwHhcNMjYwMTI1MjIwMDUzWhcNMjYwMTI2MjIwMDUzWjAzMTEwLwYDVQQD EyhlNTUyMGZkNjViNTc4N2Q5MTQ3NTQyNGIxNWYwNzA2ODExNzM2MGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68Dn994nuDpRtS7c/KiHegwDU4U7 UndNBpg6kOENPrLNaJQy3e06VqHWN1b9b4iWluoRA+iqSGzy9QLyu+DJtpRxefTs VVmyoKD9SccEDsuCKjcn4RaygfMIODFTA+n0QY2XCJdgTee23Yx/z/xhY0keHwDy CiLHOV1Mkare52l8fVOh5hpElc3vrHAS+jAsaOHJ03VT4BAakJyARZo7UHCcsOcb lgYS1PdPFCvbAq/yGKiIak9OZT/23+F0eOwTXPPxM27C85epa57KKvG/F8Q/07WJ cnuLPPZqbnLEX28UFKDulteAWui/TuVEpHrVZB1+mSbjTzQvoE0LBQzKQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVSD9ZbV4fZFHVCSxXwcGgRc2DbMB8GA1UdIwQY MBaAFMtCX950eqf+qOezNbRsiNI4hQq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYt YmJmNzE5YzNjYTc0LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYtYmJmNzE5YzNjYTc0 LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQQeNuCk wKuxgESG3v7bnpFWYe/6NONbwpUv6VVCKnIondzPHoiYQ3BgVrLbcMjaoR2ok/sp z6SbdAH295Po3vc9ilKUt5auCBTEksjTnTycursFF+IBRTKD/oY6VDsGxVDa9I/b SKSB8Y7dRiHWQwe196bU4LMPMc5H4tUzyPgwFYPQ4nXe583Jum2IXcfeHtdCJDFc yTQAe3XkUSn2Avoe5JsNN8fDqBiUJzeFtI/yhnRRUlTskEnxRSnh2ha5ovnNVOB8 oWCL6Dk5kCnciwF2Wl+Zpt3XZ3hQxVavsvWtPw+A1UliFrM/N5hRwLWCCzJ9fCYv qg7ZusktgRYtrw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:19:35 2026 by rpki-client