This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft File: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft (raw, json) Hash identifier: WpugcYf0eUXnSlevtXw/3tNCqxc1NnkF1ggb3en915w= Subject key identifier: 40:C0:E4:F0:65:36:18:88:39:BA:04:15:68:D0:EF:91:39:8D:44:A9 Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09 Certificate issuer: /CN=cbf74cd846493138f522c57c0065b5c60512dd09 Certificate serial: 019BF2AB439020BD7933364D9F02055DAC8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft Manifest number: 16F4 Signing time: Sun 25 Jan 2026 01:01:08 +0000 Manifest this update: Sun 25 Jan 2026 01:01:08 +0000 Manifest next update: Mon 26 Jan 2026 01:01:08 +0000 Files and hashes: 1: 7wFOH7ecwAxbcPrjKMH8DMVlPm4.roa (hash: oDFpn/TpGeL3vgneJ/VQgGBHX/EOeGEzI4ysPf7pfaY=) 2: QLOd9vMTP4FPhghSPou0JbJuhUE.roa (hash: RwuImmn6QOcjTBNhpw2cK0vTsfjOTjWE/72ESbcTKQg=) 3: Y-pJ0zt5xFwsfApM5zD_msTaIqQ.roa (hash: a+YKFLuDobsKmaDDpSgIi2ckC2hwZqdDdY5fKql5U+8=) 4: oBXcY9E5U1GBb72h8m09mGmm-Vo.roa (hash: 9fw2PFDyEVoaxUE4CEIY7mthU2LIqsQo2HGJzEoheK4=) 5: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl (hash: 0N9dT1pbL3XJ6xv30NVYIQ9Y4yoWOAdLBTMXfFmc1mM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:ab:43:90:20:bd:79:33:36:4d:9f:02:05:5d:ac:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09 Validity Not Before: Jan 25 01:01:08 2026 GMT Not After : Jan 26 01:01:08 2026 GMT Subject: CN=40c0e4f06536188839ba041568d0ef91398d44a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cf:4d:51:bf:a0:c0:6c:1e:93:b0:d8:00:8c: d8:30:5d:34:c4:68:e1:7c:a0:b4:ac:0f:c9:1d:69: 20:b1:0d:ec:02:1d:6c:b3:3f:9e:80:d9:88:1d:19: 68:9d:b2:4f:b9:f7:61:7b:b4:0c:40:de:5b:24:16: e7:7d:bd:f0:85:79:47:91:74:12:57:6b:17:81:b8: dd:a1:c2:1a:b2:6d:2c:55:2f:0b:70:18:03:5d:38: 04:8e:d2:b2:2d:4e:61:52:a1:fe:3d:ca:51:2a:d0: cb:c4:0e:97:dd:12:3e:37:fc:4a:50:e6:08:ec:0d: 98:35:18:a3:82:cd:9b:e6:42:c1:6a:8c:ae:b2:e0: 93:0e:86:37:a7:c1:a9:9f:94:25:d3:cc:ba:2c:b7: a4:87:86:60:f0:72:c1:8d:a7:6c:5a:2f:4c:79:17: 7e:ce:bc:7c:14:c5:60:e0:b9:91:99:ca:b2:af:7b: f4:e4:5b:42:0d:c6:9b:52:2a:20:65:ae:68:90:68: 23:f3:68:53:70:17:70:74:c1:c1:f1:8a:b6:0d:09: 01:c4:82:2c:32:b5:d7:38:2d:29:37:64:55:6b:3c: dc:e3:46:af:67:cb:9b:72:20:8c:91:a9:56:73:2c: 2f:c4:03:46:bc:0e:df:e3:5f:4e:f6:fb:89:8c:27: 30:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C0:E4:F0:65:36:18:88:39:BA:04:15:68:D0:EF:91:39:8D:44:A9 X509v3 Authority Key Identifier: keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:03:9f:a2:5c:27:3e:12:fa:28:a9:44:c6:d2:38:b8:7a:aa: 3f:6a:61:0a:72:e1:a4:ef:47:b6:e2:e8:69:0e:8f:f7:2f:50: a6:5f:f4:dd:38:39:a4:46:33:f4:ce:ec:f8:b9:c3:17:f1:1d: ac:d2:ba:cc:b8:15:ca:e3:4d:f9:28:bd:6d:1f:b6:af:27:a1: 47:2d:c6:0c:9a:79:b8:e6:40:87:c0:89:1c:b6:c7:70:c6:b8: e6:ea:c0:42:27:c8:a7:ce:db:f2:8e:27:e5:80:6e:64:06:03: d9:82:ff:e6:8d:de:76:53:c2:05:92:06:be:a0:dd:b7:4f:71: 63:18:8f:1a:47:0e:69:5d:08:81:4d:eb:a3:20:49:13:92:30: df:02:22:67:96:b4:67:b8:28:cd:3a:dc:bd:3f:b5:a5:9d:f1: 2f:88:6a:78:72:96:d9:1d:02:b2:91:0e:67:26:ce:9c:a8:59: 05:3f:ef:77:d0:32:b4:40:42:da:74:eb:f0:91:87:71:fb:01: 5a:35:33:b8:c2:b1:90:93:d1:88:36:38:68:3d:07:fb:b6:fc: be:c5:c9:51:e0:59:91:b3:41:7a:c6:36:4b:59:8c:bc:96:29: 61:76:a7:17:90:03:68:a4:8f:dc:2c:98:02:8f:dc:23:d4:78: ee:b8:6c:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyq0OQIL15MzZNnwIFXayLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZjc0Y2Q4NDY0OTMxMzhmNTIyYzU3YzAwNjViNWM2MDUx MmRkMDkwHhcNMjYwMTI1MDEwMTA4WhcNMjYwMTI2MDEwMTA4WjAzMTEwLwYDVQQD Eyg0MGMwZTRmMDY1MzYxODg4MzliYTA0MTU2OGQwZWY5MTM5OGQ0NGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw89NUb+gwGwek7DYAIzYMF00xGjh fKC0rA/JHWkgsQ3sAh1ssz+egNmIHRlonbJPufdhe7QMQN5bJBbnfb3whXlHkXQS V2sXgbjdocIasm0sVS8LcBgDXTgEjtKyLU5hUqH+PcpRKtDLxA6X3RI+N/xKUOYI 7A2YNRijgs2b5kLBaoyusuCTDoY3p8Gpn5Ql08y6LLekh4Zg8HLBjadsWi9MeRd+ zrx8FMVg4LmRmcqyr3v05FtCDcabUiogZa5okGgj82hTcBdwdMHB8Yq2DQkBxIIs MrXXOC0pN2RVazzc40avZ8ubciCMkalWcywvxANGvA7f419O9vuJjCcwewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDA5PBlNhiIOboEFWjQ75E5jUSpMB8GA1UdIwQY MBaAFMv3TNhGSTE49SLFfABltcYFEt0JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zNDg3ODktMzIwOC00ODQ3LTljM2Yt OTgyZDFmMjFhMzJiLzEveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zNDg3ODktMzIwOC00ODQ3LTljM2YtOTgyZDFmMjFhMzJi LzEveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQOfolwn PhL6KKlExtI4uHqqP2phCnLhpO9HtuLoaQ6P9y9Qpl/03Tg5pEYz9M7s+LnDF/Ed rNK6zLgVyuNN+Si9bR+2ryehRy3GDJp5uOZAh8CJHLbHcMa45urAQifIp87b8o4n 5YBuZAYD2YL/5o3edlPCBZIGvqDdt09xYxiPGkcOaV0IgU3royBJE5Iw3wIiZ5a0 Z7gozTrcvT+1pZ3xL4hqeHKW2R0CspEOZybOnKhZBT/vd9AytEBC2nTr8JGHcfsB WjUzuMKxkJPRiDY4aD0H+7b8vsXJUeBZkbNBesY2S1mMvJYpYXanF5ADaKSP3CyY Ao/cI9R47rhsAw== -----END CERTIFICATE-----Generated at Sun Jan 25 07:54:54 2026 by rpki-client