This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft File: rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json) Hash identifier: 60zfrKOIiXiPsQVGGhVyLevb2YGp8bKY6qwmqBKu6UI= Subject key identifier: 4E:08:9D:67:60:2B:CF:E8:D4:AB:AA:B3:E3:D3:CA:67:2E:02:CF:50 Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf Certificate serial: 019BF23DAE5A486BBA8743D95D59D45BD464 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft Manifest number: 17EF Signing time: Sat 24 Jan 2026 23:01:27 +0000 Manifest this update: Sat 24 Jan 2026 23:01:27 +0000 Manifest next update: Sun 25 Jan 2026 23:01:27 +0000 Files and hashes: 1: 1DSUQ0jxs6dG0EoFqfG91mFQyMw.roa (hash: iINHWWjQ7Nsnh6T5r2HUf93qqcUOuSqMNkps61w8OX0=) 2: BdsuDRm80ULk9aLfJ7zh20INiU8.roa (hash: 0BqcT0T81e3M/0LPrL5e9ii3yguHiKnmLWj00gesJkU=) 3: KLak6E7XOaljYL7i0cSZlIlCEqg.roa (hash: mJGksFMnjfzfVrg/g8a4mJkgqFzUtmtGPX7OdhiTIDg=) 4: VSskXdqgKe7CaDWuoatQnI_9KiE.roa (hash: ZdbXSqyDrBgEKdzaBPZgWnFmAfBPFOOQn34nK2NZEnk=) 5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: /UgkpUsVP9AM1KsU0vadGJgL1vxkMA+YKb2jUZk8AwE=) 6: vPgoZptW0KavIK_Hg1kzkfOF1WE.roa (hash: j7J2y1HSuKj72l6kVGUrAtD78gxcoUd5XdyBbZEybuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:3d:ae:5a:48:6b:ba:87:43:d9:5d:59:d4:5b:d4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf Validity Not Before: Jan 24 23:01:27 2026 GMT Not After : Jan 25 23:01:27 2026 GMT Subject: CN=4e089d67602bcfe8d4abaab3e3d3ca672e02cf50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9c:7a:86:53:99:69:8d:8b:93:b8:09:b2:46: 85:a1:0d:4b:eb:8c:4d:1a:14:a9:0b:78:2f:6f:a8: b8:58:c2:84:09:5b:e7:62:43:1e:6a:2c:7a:de:46: c3:48:ab:ed:17:09:6b:6c:e4:3e:c3:f9:ff:ed:f1: 59:74:1e:a4:98:f2:26:e1:c8:24:4e:79:b9:65:ce: 68:39:37:c5:8d:c8:cb:48:1a:c7:71:78:4b:1f:32: a1:29:62:85:fb:ed:77:69:16:ff:36:f2:1e:ba:b7: fe:27:a0:f9:16:2d:5b:6c:8d:a9:a2:e6:63:b4:9c: c8:79:25:a1:d7:3c:a3:80:3d:16:bd:43:23:87:db: b9:1c:51:54:c4:2c:95:f7:b5:d4:86:0d:d7:15:28: 95:05:28:9e:9f:4d:20:f6:8f:96:f9:50:3f:09:8e: a5:44:6a:4a:0b:bc:1d:16:8f:9e:41:83:57:57:95: 81:de:ff:6a:15:28:af:69:d7:2b:dd:b6:c8:dd:6a: f8:cd:d4:4b:03:0f:7e:fa:8a:a5:26:c0:37:bf:fc: 9f:a4:ea:4c:8e:b9:98:b9:4b:90:99:5b:e6:e1:d8: ed:4f:cb:c1:0d:80:3f:98:55:d4:8f:fe:d8:e2:85: b4:d8:fb:28:a0:14:36:fd:9b:36:9c:29:d6:20:9e: d2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:08:9D:67:60:2B:CF:E8:D4:AB:AA:B3:E3:D3:CA:67:2E:02:CF:50 X509v3 Authority Key Identifier: keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:11:ba:3d:11:64:4a:31:51:b3:0c:c5:39:9c:58:7c:ea:b8: d7:42:5d:5a:e2:38:4d:af:08:63:a7:6a:67:96:86:3c:a7:4c: 29:b3:8d:80:4b:de:b2:e3:80:19:88:05:01:9a:4b:40:c8:8c: 75:30:8f:18:18:e1:36:7e:34:68:82:71:a7:b9:12:9a:d2:39: 9b:f1:f4:d1:77:01:76:ee:e8:67:8e:a4:35:e0:3f:70:50:8f: 77:14:ec:f4:35:e7:b6:6e:a4:50:fa:82:fc:93:ca:d3:14:15: 7e:3c:5d:05:b9:18:15:98:c6:a8:ef:77:bc:10:8a:42:dc:39: 89:53:ea:64:82:3d:46:92:fb:99:ed:b4:72:45:ed:9d:1c:0f: c4:ac:98:29:e0:aa:eb:79:c0:86:80:30:12:96:e0:d9:38:b6: 9c:69:19:fb:84:b0:ad:09:09:fa:d1:0c:4b:0c:c7:7e:14:30: 2f:ac:6b:db:fe:92:70:59:46:a6:04:22:01:7b:ac:3e:dd:16: 75:47:2a:72:4b:45:5e:79:18:31:41:93:73:38:7a:ca:04:3c: e1:07:b4:f7:e1:b7:7a:d7:96:b0:52:da:dd:92:e6:0d:02:48: 78:d2:e9:e2:3e:43:53:31:21:0f:4a:ac:08:f8:bb:c4:24:58: ec:bb:9f:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyPa5aSGu6h0PZXVnUW9RkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkODA2NzliOTZjYTMyMmJmYTg1NTAwY2FiMjA2YzZkNDc0 MTJlZGYwHhcNMjYwMTI0MjMwMTI3WhcNMjYwMTI1MjMwMTI3WjAzMTEwLwYDVQQD Eyg0ZTA4OWQ2NzYwMmJjZmU4ZDRhYmFhYjNlM2QzY2E2NzJlMDJjZjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75x6hlOZaY2Lk7gJskaFoQ1L64xN GhSpC3gvb6i4WMKECVvnYkMeaix63kbDSKvtFwlrbOQ+w/n/7fFZdB6kmPIm4cgk Tnm5Zc5oOTfFjcjLSBrHcXhLHzKhKWKF++13aRb/NvIeurf+J6D5Fi1bbI2pouZj tJzIeSWh1zyjgD0WvUMjh9u5HFFUxCyV97XUhg3XFSiVBSien00g9o+W+VA/CY6l RGpKC7wdFo+eQYNXV5WB3v9qFSivadcr3bbI3Wr4zdRLAw9++oqlJsA3v/yfpOpM jrmYuUuQmVvm4djtT8vBDYA/mFXUj/7Y4oW02PsooBQ2/Zs2nCnWIJ7SQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4InWdgK8/o1Kuqs+PTymcuAs9QMB8GA1UdIwQY MBaAFK2AZ5uWyjIr+oVQDKsgbG1HQS7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hMTM5OWEtZWE2Yi00YTA5LThiNDAt OTBjMGJkZTA5ODY5LzEvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hMTM5OWEtZWE2Yi00YTA5LThiNDAtOTBjMGJkZTA5ODY5 LzEvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxG6PRFk SjFRswzFOZxYfOq410JdWuI4Ta8IY6dqZ5aGPKdMKbONgEvesuOAGYgFAZpLQMiM dTCPGBjhNn40aIJxp7kSmtI5m/H00XcBdu7oZ46kNeA/cFCPdxTs9DXntm6kUPqC /JPK0xQVfjxdBbkYFZjGqO93vBCKQtw5iVPqZII9RpL7me20ckXtnRwPxKyYKeCq 63nAhoAwEpbg2Ti2nGkZ+4SwrQkJ+tEMSwzHfhQwL6xr2/6ScFlGpgQiAXusPt0W dUcqcktFXnkYMUGTczh6ygQ84Qe09+G3eteWsFLa3ZLmDQJIeNLp4j5DUzEhD0qs CPi7xCRY7Luf1w== -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:02 2026 by rpki-client