This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json) Hash identifier: pqKlhPY3LN1CV2NL3CMsVGEYClfM1MyM49RYsK0je3E= Subject key identifier: 3C:DE:51:8A:E2:18:BE:29:7A:78:99:F2:4C:CF:E4:76:52:59:7E:B5 Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64 Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64 Certificate serial: 019BF4993E58BC234FB9365CBEDB1487E781 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft Manifest number: 039B Signing time: Sun 25 Jan 2026 10:00:42 +0000 Manifest this update: Sun 25 Jan 2026 10:00:42 +0000 Manifest next update: Mon 26 Jan 2026 10:00:42 +0000 Files and hashes: 1: ILxA1XEGj58DPvCJ70R3V0QUW0o.roa (hash: 2pgTad0+RDSMUqb1cSCzcPHq0QPOVvclokToC+rjLTI=) 2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: S9mmwCfXG7JQPAOt86yHddD8TN2GLTpYDHMLL0Bh1F8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:3e:58:bc:23:4f:b9:36:5c:be:db:14:87:e7:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64 Validity Not Before: Jan 25 10:00:42 2026 GMT Not After : Jan 26 10:00:42 2026 GMT Subject: CN=3cde518ae218be297a7899f24ccfe47652597eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:37:3e:87:eb:10:f2:70:58:d8:94:55:09:8b: c6:38:46:dc:45:91:70:b3:2f:bc:2a:1b:4e:03:70: 6d:b8:0a:4f:38:13:8a:1a:8e:8f:21:54:14:db:36: 8c:33:28:ee:41:77:e4:ce:27:9d:10:36:42:68:69: 75:c8:bb:82:82:fa:0e:83:91:4a:cb:8e:7a:38:7d: a9:cc:af:25:ea:a2:6a:1a:8c:b4:06:03:2d:41:aa: 88:88:48:55:c0:f5:8b:d4:0e:9e:d8:a0:03:db:f1: 21:d5:cc:48:b6:f1:27:42:70:fd:96:cb:74:b1:77: 1b:35:d1:31:95:00:9e:76:2f:61:f9:a6:ff:7b:9f: 4f:35:65:80:97:1e:ff:09:3a:65:4b:a6:9c:13:d0: 51:79:74:b8:eb:b3:ce:67:d9:b1:d3:f0:90:12:56: 43:53:2f:9b:95:e6:60:ce:98:8b:eb:83:ca:cd:43: 30:22:7a:4f:2e:10:e4:b5:3f:60:e2:aa:f7:55:09: bf:d3:ed:d9:1d:ae:5b:5d:59:a1:ec:1b:f0:f2:58: 65:0f:1b:fa:7f:cf:da:0a:66:11:d7:66:30:d1:e8: 3a:57:b6:8e:8b:3d:8b:ad:34:80:be:24:ab:de:e3: dd:90:1d:6d:21:d0:5c:ed:6a:9c:ac:bc:a2:91:a0: 86:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:DE:51:8A:E2:18:BE:29:7A:78:99:F2:4C:CF:E4:76:52:59:7E:B5 X509v3 Authority Key Identifier: keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption eb:58:3d:e0:d9:02:7c:24:07:ab:03:9a:12:36:57:6e:b0:cb: 95:83:55:d3:60:0f:53:08:67:38:d6:23:19:c3:fd:e0:5c:07: 4b:01:7f:c0:f5:d2:a6:df:c2:68:e1:a0:68:c0:f4:79:c7:cf: 67:d1:05:c4:02:64:8f:ae:53:97:67:4b:36:d1:0d:da:46:25: 27:c8:02:a5:bc:cb:db:04:69:52:2d:85:7d:3a:00:6d:b3:78: cb:cc:a1:b6:40:ba:5e:df:6a:46:0d:ef:35:07:5c:34:3d:e2: 52:e7:b6:95:27:82:f1:95:7d:06:48:f0:f3:94:bc:77:55:69: f2:bf:fe:f5:bc:3e:76:23:16:51:07:06:10:1b:3f:dd:da:e3: 4b:f2:cd:be:b5:ea:6a:5e:66:b8:1f:4e:e3:c5:eb:0f:08:e3: 03:f8:05:18:1b:fc:b9:0f:93:18:16:09:55:d4:93:f1:0e:65: 94:da:d0:26:25:3c:1e:35:65:9b:7d:ae:d1:4c:3b:c9:57:8d: c5:92:a9:76:49:37:e2:f4:18:fc:b6:c5:39:2b:e4:ec:52:de: 95:c0:5d:60:98:2b:ee:6a:b9:24:5b:79:38:62:1b:d8:6e:0b: 2b:3e:58:f5:67:8d:7e:e6:27:ea:20:98:c6:6c:c7:1a:94:10: b9:e7:87:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mT5YvCNPuTZcvtsUh+eBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDdmYzEzZTE4MzZjMzk2Y2NhMjE3ODk3MDRhYjM5ZmQ5 ZTViNjQwHhcNMjYwMTI1MTAwMDQyWhcNMjYwMTI2MTAwMDQyWjAzMTEwLwYDVQQD EygzY2RlNTE4YWUyMThiZTI5N2E3ODk5ZjI0Y2NmZTQ3NjUyNTk3ZWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzc+h+sQ8nBY2JRVCYvGOEbcRZFw sy+8KhtOA3BtuApPOBOKGo6PIVQU2zaMMyjuQXfkziedEDZCaGl1yLuCgvoOg5FK y456OH2pzK8l6qJqGoy0BgMtQaqIiEhVwPWL1A6e2KAD2/Eh1cxItvEnQnD9lst0 sXcbNdExlQCedi9h+ab/e59PNWWAlx7/CTplS6acE9BReXS467POZ9mx0/CQElZD Uy+bleZgzpiL64PKzUMwInpPLhDktT9g4qr3VQm/0+3ZHa5bXVmh7Bvw8lhlDxv6 f8/aCmYR12Yw0eg6V7aOiz2LrTSAviSr3uPdkB1tIdBc7WqcrLyikaCGyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzeUYriGL4peniZ8kzP5HZSWX61MB8GA1UdIwQY MBaAFMvX/BPhg2w5bMoheJcEqzn9nltkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yMTRjOWEtMDk1MC00MGQ5LWE1ODYt ZTM1ZGI1MjU2N2YwLzEveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yMTRjOWEtMDk1MC00MGQ5LWE1ODYtZTM1ZGI1MjU2N2Yw LzEveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA61g94NkC fCQHqwOaEjZXbrDLlYNV02APUwhnONYjGcP94FwHSwF/wPXSpt/CaOGgaMD0ecfP Z9EFxAJkj65Tl2dLNtEN2kYlJ8gCpbzL2wRpUi2FfToAbbN4y8yhtkC6Xt9qRg3v NQdcND3iUue2lSeC8ZV9Bkjw85S8d1Vp8r/+9bw+diMWUQcGEBs/3drjS/LNvrXq al5muB9O48XrDwjjA/gFGBv8uQ+TGBYJVdST8Q5llNrQJiU8HjVlm32u0Uw7yVeN xZKpdkk34vQY/LbFOSvk7FLelcBdYJgr7mq5JFt5OGIb2G4LKz5Y9WeNfuYn6iCY xmzHGpQQueeHzQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:10 2026 by rpki-client