This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json) Hash identifier: ABOvIeERH2zAZbxGNVttGnzTYTv9lHziQBqIUuSTzGM= Subject key identifier: 6F:22:B4:93:F9:9D:E9:91:3D:86:2E:99:9C:67:9C:5D:7C:E8:45:42 Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b Certificate serial: 019BF7D1B1292DDCE83DF6A8ABB0AB8949BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft Manifest number: 0598 Signing time: Mon 26 Jan 2026 01:01:13 +0000 Manifest this update: Mon 26 Jan 2026 01:01:13 +0000 Manifest next update: Tue 27 Jan 2026 01:01:13 +0000 Files and hashes: 1: aoQsvFOShg8unGdvRNHzyskZu6Q.roa (hash: p8PU4KP73BDGEEa9wvSrJwTPPhTgMiV7+d9ryeZmr2c=) 2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: Kd2l4p1E9PlV4xLg8C0psi/u5C5kKuped0U+FWFS0Fo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:b1:29:2d:dc:e8:3d:f6:a8:ab:b0:ab:89:49:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b Validity Not Before: Jan 26 01:01:13 2026 GMT Not After : Jan 27 01:01:13 2026 GMT Subject: CN=6f22b493f99de9913d862e999c679c5d7ce84542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:12:d1:51:ba:8f:66:18:24:28:f1:02:89:6a: b1:79:db:c5:4c:38:e4:d1:7e:ba:ea:ce:e1:eb:f8: c2:2f:45:ca:1c:ab:5f:7f:ce:37:57:c6:68:b6:a0: 64:f6:16:b4:ee:b2:59:8f:7a:58:39:6e:0a:f8:dd: 26:6e:25:54:d9:37:85:06:d4:38:17:f8:99:c4:52: fc:8c:77:20:72:10:d6:1f:62:cf:07:8b:36:52:c4: 2b:03:23:b5:5a:72:42:c7:00:d6:7a:b6:84:a3:36: eb:c4:e3:ee:af:38:d2:4e:a0:6f:bc:46:29:1e:03: dc:43:b1:6b:6c:aa:2b:fc:39:3f:ca:d2:03:31:e1: 5e:89:38:49:14:15:38:02:81:21:6a:b0:57:90:49: 22:fb:62:3d:b1:a3:8b:59:6e:29:3a:e4:ea:f5:90: 4e:36:3f:6c:bf:bd:95:b1:0f:48:60:f4:9b:38:43: 6a:cd:f8:e2:c9:ce:01:26:f7:ab:48:14:f9:6b:e8: db:7f:95:d0:6b:50:30:c9:e0:b1:96:55:0d:44:b4: dd:32:e8:de:77:59:df:2c:e4:f7:5e:82:6d:68:06: 1d:6f:f6:2d:07:59:59:3d:1d:96:e4:e2:ca:1d:65: 63:21:e1:85:ab:4a:da:1d:e5:02:47:45:10:39:cc: cf:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:22:B4:93:F9:9D:E9:91:3D:86:2E:99:9C:67:9C:5D:7C:E8:45:42 X509v3 Authority Key Identifier: keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:a6:98:d3:97:72:50:b3:00:5d:49:e9:b2:ea:48:7a:56:91: 3a:bb:36:b2:65:c3:a5:82:d7:6f:80:04:3a:6f:94:c4:92:d8: 70:a9:3d:fe:eb:04:5e:14:e2:12:7f:99:69:9f:cf:a4:c7:f5: 73:7f:b9:5a:56:71:3e:26:87:39:9d:b5:e8:72:5a:b2:a5:4c: f7:0f:c3:be:02:6e:c7:43:c7:4c:37:60:4f:41:bf:12:9e:e8: b5:6b:f4:4e:9c:f1:70:e5:bc:db:08:16:6c:63:e7:1c:19:75: e3:89:d9:fa:16:d7:0e:54:e5:5c:cc:4f:5a:ae:06:1c:02:8c: 32:02:65:74:60:69:76:fc:12:34:ab:f3:7b:b8:99:ec:49:39: b9:fa:6a:05:94:99:0d:14:68:de:d3:65:ee:9b:40:a8:b5:2b: 18:e1:4c:b6:c2:8e:e9:b3:53:34:b9:cb:fc:56:16:5e:e9:e9: 86:e5:d7:76:22:6f:b1:7e:db:8f:a0:40:af:a7:e6:43:30:0e: 64:13:b2:36:1f:5f:84:ab:05:9c:81:56:db:9d:b0:f7:20:8b: 52:97:17:be:5b:01:ed:fb:9b:23:ea:63:6c:d3:65:60:40:56: 5d:5b:ba:e8:d6:9c:ae:9f:12:d6:00:f8:5f:1b:7d:0d:c0:0f: de:5d:08:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30bEpLdzoPfaoq7CriUm+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNmM5OGQ1OTdiNzgxYjdhMTBjN2UwZWRiMWM0OGY2Yjgx YTVmOGIwHhcNMjYwMTI2MDEwMTEzWhcNMjYwMTI3MDEwMTEzWjAzMTEwLwYDVQQD Eyg2ZjIyYjQ5M2Y5OWRlOTkxM2Q4NjJlOTk5YzY3OWM1ZDdjZTg0NTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBLRUbqPZhgkKPECiWqxedvFTDjk 0X666s7h6/jCL0XKHKtff843V8ZotqBk9ha07rJZj3pYOW4K+N0mbiVU2TeFBtQ4 F/iZxFL8jHcgchDWH2LPB4s2UsQrAyO1WnJCxwDWeraEozbrxOPurzjSTqBvvEYp HgPcQ7FrbKor/Dk/ytIDMeFeiThJFBU4AoEharBXkEki+2I9saOLWW4pOuTq9ZBO Nj9sv72VsQ9IYPSbOENqzfjiyc4BJverSBT5a+jbf5XQa1AwyeCxllUNRLTdMuje d1nfLOT3XoJtaAYdb/YtB1lZPR2W5OLKHWVjIeGFq0raHeUCR0UQOczPswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8itJP5nemRPYYumZxnnF186EVCMB8GA1UdIwQY MBaAFJ9smNWXt4G3oQx+DtscSPa4Gl+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mNWVkMWMtMzc5Ny00MDBkLWI3MmYt ODA0Y2RhNTI0M2IzLzEvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9mNWVkMWMtMzc5Ny00MDBkLWI3MmYtODA0Y2RhNTI0M2Iz LzEvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaaY05dy ULMAXUnpsupIelaROrs2smXDpYLXb4AEOm+UxJLYcKk9/usEXhTiEn+ZaZ/PpMf1 c3+5WlZxPiaHOZ216HJasqVM9w/DvgJux0PHTDdgT0G/Ep7otWv0TpzxcOW82wgW bGPnHBl144nZ+hbXDlTlXMxPWq4GHAKMMgJldGBpdvwSNKvze7iZ7Ek5ufpqBZSZ DRRo3tNl7ptAqLUrGOFMtsKO6bNTNLnL/FYWXunphuXXdiJvsX7bj6BAr6fmQzAO ZBOyNh9fhKsFnIFW252w9yCLUpcXvlsB7fubI+pjbNNlYEBWXVu66Nacrp8S1gD4 Xxt9DcAP3l0I6A== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:25 2026 by rpki-client