This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json) Hash identifier: 6GYsKitg83KoJg3TwfTvZkCXKyHkBH38VISGIDbzfYE= Subject key identifier: 56:71:F5:21:9A:EA:43:73:02:69:40:01:7C:99:CD:04:3B:56:D0:8D Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c Certificate serial: 019BF8E3F10EB79F3AE9CB5903B9831EF92E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft Manifest number: 1515 Signing time: Mon 26 Jan 2026 06:00:46 +0000 Manifest this update: Mon 26 Jan 2026 06:00:46 +0000 Manifest next update: Tue 27 Jan 2026 06:00:46 +0000 Files and hashes: 1: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: GafB9cp+DQ3Npd/+0nz3NxB+snQ96uBeyT+RGBD2VKo=) 2: w5wexF-hJcvTksgksSednww4z4E.roa (hash: e+qIfWqcWPWmwyJXZsE4ITGx8fFJ1s+k83g6vuyixn8=) 3: wEDppBCkxMeXKCmEIpLC-dW_mTc.roa (hash: +v+EfzVXLmYVPjpd5/ZRf8OaEefwLkjG3ANx8qenK0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e3:f1:0e:b7:9f:3a:e9:cb:59:03:b9:83:1e:f9:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c Validity Not Before: Jan 26 06:00:46 2026 GMT Not After : Jan 27 06:00:46 2026 GMT Subject: CN=5671f5219aea4373026940017c99cd043b56d08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2f:92:0c:43:ad:05:eb:a8:f3:20:bb:49:ca: d0:fb:81:87:59:de:c2:71:5c:66:eb:99:fa:8f:b9: 1c:f3:d0:8e:30:cd:5f:9b:d4:de:3a:5d:38:b9:b0: 0d:43:80:7a:f7:90:07:3d:87:24:f4:3f:6a:3e:4c: 98:ff:32:10:e6:fe:cb:7e:33:74:72:70:e8:52:1d: df:b3:2c:61:0b:9a:f2:b1:cb:dc:5a:55:35:9d:cc: 98:06:14:51:db:1e:29:29:e9:66:29:6b:b7:4c:e3: 37:4c:80:13:52:06:42:82:ff:b0:93:b2:5a:51:ce: 18:8d:74:36:06:37:bc:9a:af:67:64:bc:f3:95:48: fd:c6:72:6f:ac:9f:e9:eb:25:c7:32:42:b3:47:a1: 2d:cb:a5:45:4e:4b:d7:0f:61:2b:78:29:67:5e:16: ba:0f:30:7a:57:78:2c:03:02:8b:fc:c8:26:31:86: 19:a2:ac:2b:28:69:32:5f:09:b2:ea:0b:c1:f9:41: 85:c2:06:6c:d0:3f:74:06:68:72:28:52:3b:cc:4a: 16:09:7f:4f:2c:67:27:ec:d1:12:83:4f:d9:a0:f0: c2:0d:f2:fa:d3:95:1a:9e:29:37:d6:94:56:88:73: 06:17:aa:9a:55:b0:89:d2:a5:37:57:ae:ba:03:e2: f3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:71:F5:21:9A:EA:43:73:02:69:40:01:7C:99:CD:04:3B:56:D0:8D X509v3 Authority Key Identifier: keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e1:19:5f:d2:af:3f:73:b8:b9:56:05:59:f1:95:15:23:fe: 06:a6:12:05:9f:85:bc:c2:59:aa:4a:d5:51:6c:94:a1:48:94: 1d:cb:3a:87:97:51:2c:13:3e:bd:ef:c0:42:fb:9d:b2:45:15: c0:04:58:75:43:3b:9f:96:6b:0d:ce:5d:02:48:03:ba:b0:11: 5b:f4:ac:28:86:a0:79:db:4c:7e:0b:e1:d1:54:d1:78:a2:60: 40:24:e2:8d:5d:5d:b4:90:7a:84:f9:e1:a8:01:1c:8b:a3:f5: 22:c5:62:20:25:79:e9:b3:86:1b:9a:b6:50:c7:aa:d5:f9:da: 32:a2:c8:8c:32:93:6c:f9:7e:b5:cb:b6:d7:cd:1e:d4:35:af: 42:4c:d3:fb:6c:49:5b:37:ff:75:4b:3c:6e:b1:8d:31:c3:8b: c6:74:4e:1f:24:c3:74:ef:d5:ae:04:6b:a4:7f:cb:e5:92:7b: 4f:7f:e1:94:ce:96:ee:ec:ee:c3:05:ad:bc:03:70:38:24:dd: f8:9c:e2:8f:f8:02:c7:74:e7:68:40:2e:3e:e6:0f:fe:1a:a3: 68:83:05:20:81:d5:bc:36:79:7f:01:96:4f:2f:82:24:a5:0e: 5a:a2:59:20:e8:bb:25:96:94:5e:66:a4:12:d7:e4:1e:fe:cc: 4d:2f:c0:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv44/EOt5866ctZA7mDHvkuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MmQxNzhjOGU1M2Y1MjEzMWMxZmI2NDc0M2M5NjBjZjg5 N2ZkMGMwHhcNMjYwMTI2MDYwMDQ2WhcNMjYwMTI3MDYwMDQ2WjAzMTEwLwYDVQQD Eyg1NjcxZjUyMTlhZWE0MzczMDI2OTQwMDE3Yzk5Y2QwNDNiNTZkMDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry+SDEOtBeuo8yC7ScrQ+4GHWd7C cVxm65n6j7kc89COMM1fm9TeOl04ubANQ4B695AHPYck9D9qPkyY/zIQ5v7LfjN0 cnDoUh3fsyxhC5ryscvcWlU1ncyYBhRR2x4pKelmKWu3TOM3TIATUgZCgv+wk7Ja Uc4YjXQ2Bje8mq9nZLzzlUj9xnJvrJ/p6yXHMkKzR6Ety6VFTkvXD2EreClnXha6 DzB6V3gsAwKL/MgmMYYZoqwrKGkyXwmy6gvB+UGFwgZs0D90BmhyKFI7zEoWCX9P LGcn7NESg0/ZoPDCDfL605Uanik31pRWiHMGF6qaVbCJ0qU3V666A+LzKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZx9SGa6kNzAmlAAXyZzQQ7VtCNMB8GA1UdIwQY MBaAFKctF4yOU/UhMcH7ZHQ8lgz4l/0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xYjgxM2EtNWU4Ni00NWIwLTk5Y2Qt MjhiOWQyNjFlY2IxLzEvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xYjgxM2EtNWU4Ni00NWIwLTk5Y2QtMjhiOWQyNjFlY2Ix LzEvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+EZX9Kv P3O4uVYFWfGVFSP+BqYSBZ+FvMJZqkrVUWyUoUiUHcs6h5dRLBM+ve/AQvudskUV wARYdUM7n5ZrDc5dAkgDurARW/SsKIagedtMfgvh0VTReKJgQCTijV1dtJB6hPnh qAEci6P1IsViICV56bOGG5q2UMeq1fnaMqLIjDKTbPl+tcu2180e1DWvQkzT+2xJ Wzf/dUs8brGNMcOLxnROHyTDdO/VrgRrpH/L5ZJ7T3/hlM6W7uzuwwWtvANwOCTd +Jzij/gCx3TnaEAuPuYP/hqjaIMFIIHVvDZ5fwGWTy+CJKUOWqJZIOi7JZaUXmak EtfkHv7MTS/A+w== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:47 2026 by rpki-client