This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: PMi3Hc4x5c09yGd16B1Y+s4Y3ytwmBn5mvofpu4r+WY= Subject key identifier: C4:F5:84:C2:C0:22:59:0F:D6:CF:08:D6:17:C3:AD:8C:84:E7:EC:00 Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019BF5757CBC038DD078F76F4AA2186AA5C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 17F6 Signing time: Sun 25 Jan 2026 14:01:15 +0000 Manifest this update: Sun 25 Jan 2026 14:01:15 +0000 Manifest next update: Mon 26 Jan 2026 14:01:15 +0000 Files and hashes: 1: 0PS11i5r6_XriyYDfmzviKAWbi8.roa (hash: BRU05EVEvYBbrW5Q+knCe4k9JjLCUR0KR3nHL/L/63U=) 2: BE2mEMqXoD5W-rYoEN42UUzsleE.roa (hash: FSSNupkI6ZKtnmsSmt58MJHjD7OKdKEzjPUgRieAqHM=) 3: FzYQ8UfkOoXbLMAefaap0q8s5jo.roa (hash: uu0TxkfB1szooYSk1YRvasc+kONIbxD4r+CRWDgwPzQ=) 4: JcLTA0-qn4cquSouPyluInvPpYs.roa (hash: KJNyyHE6CpQFleLIlWbocpdXYFfQUGuvmGs2OkgCYQs=) 5: NjoBWFZasR4u5kKYBTzr17mcUXo.roa (hash: 5hFL56Dz1c0tBp4+xkoRBXQC3H4xXKPV9W/AB2fy/u0=) 6: Q6tmJsk2LzP8aKKZOFRvTtKlV7Y.roa (hash: 6O+cQ6PMg//nmlkDWEnYP8/rkGuPnhqX1I2FvbDOgXw=) 7: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: AlryPf0DSyqiijALKTQToJtjNeWYIWsnS625oqSyqh8=) 8: ZhVI6A7yr7ri4GCLLeKZeWj0x0g.roa (hash: RoqCMqDvqASNbsfdIC5YDSePIlxj7YcloZ7cYASt570=) 9: aB8YsQajO5vsG_dGMtQzCv70utE.roa (hash: ucgRD6r1Y1kDsBy85mHGSMRU5Fdf30W1uPDxejD/J18=) 10: i84_9A8NDIa-TzE1ChHrbwaZBN4.roa (hash: 7m4WiAjdci3msjrn9oh8ACKLzakLr8+uwG8wxrFXysE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:7c:bc:03:8d:d0:78:f7:6f:4a:a2:18:6a:a5:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Jan 25 14:01:15 2026 GMT Not After : Jan 26 14:01:15 2026 GMT Subject: CN=c4f584c2c022590fd6cf08d617c3ad8c84e7ec00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:56:b4:f0:03:82:f6:39:99:9b:42:ff:82:48: bb:6e:b1:d2:dd:9c:17:01:f8:77:9d:3d:1c:77:1c: d3:36:ef:ea:9c:fc:4b:80:88:e1:bc:f7:31:64:84: b8:7b:8c:53:c5:9d:cb:4f:6e:8a:51:b9:a4:57:5f: 95:2c:a2:12:ed:1b:d9:de:d8:66:f8:e1:04:74:8a: 55:ca:aa:57:69:76:fa:00:6f:62:19:2d:a1:0e:a0: 4f:7f:6e:1f:76:79:52:4c:34:45:f3:03:9e:02:76: b2:b8:dd:a9:b4:67:e6:d6:bc:37:6d:2e:ba:a6:18: 2c:b3:a8:4c:9c:4d:89:4e:e8:42:14:38:c0:a3:b3: 4b:c5:29:99:c4:a3:0c:17:c1:e4:6a:86:70:ce:49: cd:ec:6a:01:f8:c1:78:3b:fc:0a:da:ae:ff:99:2c: 84:f7:75:ae:9d:75:22:65:fd:89:d5:82:fb:41:fa: bd:42:52:9b:56:88:48:e2:22:24:1a:5e:2c:8f:fc: 97:7b:4e:97:11:01:c3:63:33:c2:4d:6f:55:af:63: 43:d3:a2:8a:0f:a2:35:49:78:83:22:ab:63:b6:ee: c7:64:9a:93:33:ee:38:42:a6:41:a3:7b:ee:3b:02: 9f:d3:de:4b:b8:75:83:8d:b3:6f:10:56:ef:33:4f: aa:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F5:84:C2:C0:22:59:0F:D6:CF:08:D6:17:C3:AD:8C:84:E7:EC:00 X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:8f:c4:a3:f3:02:78:0a:7f:a2:bd:6a:02:1d:7a:79:af:e0: 99:e8:e7:07:97:51:ae:e4:31:d9:cd:bd:e2:53:18:24:8c:1e: 32:f3:65:fd:70:10:a1:b2:5d:2f:7e:a2:27:d2:28:25:7e:4a: ad:c5:ba:fd:26:19:ea:0e:63:53:eb:04:e4:3b:59:8c:14:ed: a2:4c:2e:41:f9:86:e2:37:72:c5:9a:17:38:62:a1:78:82:49: 09:50:44:57:63:06:cd:3a:98:11:cf:ab:3d:76:09:70:16:84: 84:f1:cb:6a:77:df:73:d4:b2:94:70:a6:5a:80:fa:ac:ca:e2: 03:c9:84:68:91:2b:3f:48:be:a0:61:38:76:e0:b4:c4:1f:90: 77:f6:17:0b:06:5b:a8:9b:d1:0f:81:a6:31:7b:1c:ea:39:f4: 5a:97:2d:42:0a:91:7f:40:d0:b6:f0:0a:76:e0:0c:bd:8d:12: 84:d6:e3:90:e6:e7:b8:9f:ad:69:73:f4:54:6c:96:f0:b7:7f: 05:d5:7d:dd:d3:9c:c6:04:83:e7:ad:24:ab:60:85:8f:7d:8b: ce:1e:ae:60:14:1b:5e:bf:49:11:16:57:f2:f6:00:af:79:40: ad:42:3f:84:be:e6:40:d0:e7:f2:ae:91:1a:58:aa:83:8a:e3: 34:66:90:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dXy8A43QePdvSqIYaqXIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjYwMTI1MTQwMTE1WhcNMjYwMTI2MTQwMTE1WjAzMTEwLwYDVQQD EyhjNGY1ODRjMmMwMjI1OTBmZDZjZjA4ZDYxN2MzYWQ4Yzg0ZTdlYzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1a08AOC9jmZm0L/gki7brHS3ZwX Afh3nT0cdxzTNu/qnPxLgIjhvPcxZIS4e4xTxZ3LT26KUbmkV1+VLKIS7RvZ3thm +OEEdIpVyqpXaXb6AG9iGS2hDqBPf24fdnlSTDRF8wOeAnayuN2ptGfm1rw3bS66 phgss6hMnE2JTuhCFDjAo7NLxSmZxKMMF8HkaoZwzknN7GoB+MF4O/wK2q7/mSyE 93WunXUiZf2J1YL7Qfq9QlKbVohI4iIkGl4sj/yXe06XEQHDYzPCTW9Vr2ND06KK D6I1SXiDIqtjtu7HZJqTM+44QqZBo3vuOwKf095LuHWDjbNvEFbvM0+q1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMT1hMLAIlkP1s8I1hfDrYyE5+wAMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgY/Eo/MC eAp/or1qAh16ea/gmejnB5dRruQx2c294lMYJIweMvNl/XAQobJdL36iJ9IoJX5K rcW6/SYZ6g5jU+sE5DtZjBTtokwuQfmG4jdyxZoXOGKheIJJCVBEV2MGzTqYEc+r PXYJcBaEhPHLanffc9SylHCmWoD6rMriA8mEaJErP0i+oGE4duC0xB+Qd/YXCwZb qJvRD4GmMXsc6jn0WpctQgqRf0DQtvAKduAMvY0ShNbjkObnuJ+taXP0VGyW8Ld/ BdV93dOcxgSD560kq2CFj32Lzh6uYBQbXr9JERZX8vYAr3lArUI/hL7mQNDn8q6R Gliqg4rjNGaQSQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:00 2026 by rpki-client