This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json) Hash identifier: h3E8kvkzdFvdHsE7FtR8wHRtgq2LssqzBOx+FjGJ7X0= Subject key identifier: B5:FB:33:47:C3:B9:8B:DE:AF:D0:14:1C:96:EC:6B:14:82:B5:A4:63 Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d Certificate serial: 019BF53EC3C8D23A9A183DCC3851D2C9F51C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft Manifest number: 0916 Signing time: Sun 25 Jan 2026 13:01:29 +0000 Manifest this update: Sun 25 Jan 2026 13:01:29 +0000 Manifest next update: Mon 26 Jan 2026 13:01:29 +0000 Files and hashes: 1: kqpRs8PQ33xnPlP-Fdc6LgO-EXI.roa (hash: oPLgkHy5uqEh77+OXee0sAfzK1xOwlBFgn/lM+qBthY=) 2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: N5e6rVPcnQYrSP1qR1jHkjOLbV1ePMmRhp5N5yu8B8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:c3:c8:d2:3a:9a:18:3d:cc:38:51:d2:c9:f5:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d Validity Not Before: Jan 25 13:01:29 2026 GMT Not After : Jan 26 13:01:29 2026 GMT Subject: CN=b5fb3347c3b98bdeafd0141c96ec6b1482b5a463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d2:b9:ee:60:db:89:48:c5:52:13:4e:94:f0: a4:2f:8e:52:21:2d:a8:d3:e2:c9:88:15:75:41:6f: 22:3e:6e:41:7e:95:b5:50:c4:5b:2c:e6:31:78:7b: ef:f6:20:6a:d8:58:72:d3:67:4a:d3:e8:a3:ac:bb: f8:4a:6a:5c:93:70:3a:ee:bc:d1:3f:6d:e8:72:81: 89:6f:32:64:66:2e:34:7f:94:ca:8a:96:9e:06:88: ba:00:4a:78:19:8d:30:17:d2:ae:2d:4d:fc:e9:1d: a4:5b:db:fd:64:62:fb:41:9e:0a:f8:d9:28:8a:ee: 4a:b3:d5:b4:f9:3e:01:60:46:a4:3e:c5:39:ad:11: 96:fd:15:65:e4:51:6e:2d:26:87:b3:7e:53:4a:c7: 82:3d:1e:77:96:15:1e:0e:2d:8c:f1:a1:9b:6d:ac: 76:fa:02:6a:f1:e0:47:6c:f4:9c:52:91:2f:5a:e6: 99:6d:25:95:27:34:f6:6f:23:69:73:46:54:c1:91: c8:a7:15:fc:ed:12:0e:d3:e2:54:b9:82:1e:51:6a: 16:f3:65:9e:81:22:a4:8f:71:76:77:ce:d2:b5:cc: 5c:14:69:87:44:9f:06:d7:9e:98:7b:d4:f8:c6:ef: a5:24:ee:3f:9c:b4:1a:c3:1e:93:02:b3:63:cc:d4: 89:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FB:33:47:C3:B9:8B:DE:AF:D0:14:1C:96:EC:6B:14:82:B5:A4:63 X509v3 Authority Key Identifier: keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:89:e7:6d:33:c8:f9:0e:68:2e:3f:f4:1c:e2:4e:4b:8a:0d: 83:2a:d6:5f:49:6a:6d:2d:d1:cd:04:5a:31:9d:59:16:f9:65: 0a:d2:7f:b9:b9:66:c7:3d:2a:cd:1e:f2:20:5e:3d:ba:39:2e: 17:3a:59:25:7e:48:67:23:25:76:e7:f3:31:68:37:ce:fb:4b: 51:03:6a:2e:2a:ca:a2:f6:73:ad:57:23:2e:8e:58:2e:f9:75: fd:82:74:cb:40:ca:48:d3:99:bd:f8:c8:7d:44:06:8b:ed:c0: da:9b:26:39:95:55:da:e8:75:e5:76:df:35:b6:01:c2:4a:e8: 5a:6e:e8:17:f5:0d:ed:ce:e1:c4:1b:2b:02:56:2f:df:3c:08: d5:38:e9:ba:7d:a6:dd:09:bf:42:6b:d2:81:8b:23:35:93:29: bb:a3:e7:06:79:f7:0f:48:11:d9:e8:fc:44:de:33:fe:fc:09: b9:b0:f2:6d:d9:d9:69:38:a5:f4:8b:c4:cc:03:f6:a2:6c:b8: 00:b6:d6:64:64:49:fa:85:a9:1f:50:cc:29:81:6b:b0:0d:22: 77:c2:fe:27:ea:38:56:85:77:20:81:70:b7:49:58:81:77:55: 0f:21:eb:f1:30:89:fc:68:b9:ba:9c:3a:10:da:92:39:b1:4b: 09:0a:77:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PsPI0jqaGD3MOFHSyfUcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDIxNmIwMDU3NDRjMThjYjM4NGQzZDA5ZDEyNDA2NmQ1 NWY2MmQwHhcNMjYwMTI1MTMwMTI5WhcNMjYwMTI2MTMwMTI5WjAzMTEwLwYDVQQD EyhiNWZiMzM0N2MzYjk4YmRlYWZkMDE0MWM5NmVjNmIxNDgyYjVhNDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodK57mDbiUjFUhNOlPCkL45SIS2o 0+LJiBV1QW8iPm5BfpW1UMRbLOYxeHvv9iBq2Fhy02dK0+ijrLv4Smpck3A67rzR P23ocoGJbzJkZi40f5TKipaeBoi6AEp4GY0wF9KuLU386R2kW9v9ZGL7QZ4K+Nko iu5Ks9W0+T4BYEakPsU5rRGW/RVl5FFuLSaHs35TSseCPR53lhUeDi2M8aGbbax2 +gJq8eBHbPScUpEvWuaZbSWVJzT2byNpc0ZUwZHIpxX87RIO0+JUuYIeUWoW82We gSKkj3F2d87StcxcFGmHRJ8G156Ye9T4xu+lJO4/nLQawx6TArNjzNSJUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLX7M0fDuYver9AUHJbsaxSCtaRjMB8GA1UdIwQY MBaAFMvSFrAFdEwYyzhNPQnRJAZtVfYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2Qt MDViYmU0ZWYwNmMwLzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2QtMDViYmU0ZWYwNmMw LzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYnnbTPI +Q5oLj/0HOJOS4oNgyrWX0lqbS3RzQRaMZ1ZFvllCtJ/ublmxz0qzR7yIF49ujku FzpZJX5IZyMldufzMWg3zvtLUQNqLirKovZzrVcjLo5YLvl1/YJ0y0DKSNOZvfjI fUQGi+3A2psmOZVV2uh15XbfNbYBwkroWm7oF/UN7c7hxBsrAlYv3zwI1Tjpun2m 3Qm/QmvSgYsjNZMpu6PnBnn3D0gR2ej8RN4z/vwJubDybdnZaTil9IvEzAP2omy4 ALbWZGRJ+oWpH1DMKYFrsA0id8L+J+o4VoV3IIFwt0lYgXdVDyHr8TCJ/Gi5upw6 ENqSObFLCQp3PQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:01 2026 by rpki-client