This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft File: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft (raw, json) Hash identifier: CGJavuD+mlIntMTDuhPfnVs4UN/WwWt11aIDw9OF0m0= Subject key identifier: F0:2C:00:5D:75:34:23:4C:89:18:5F:AA:7F:B2:13:F4:B5:92:0F:C6 Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C Certificate issuer: /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c Certificate serial: 019BFA2D91FE7BE73D426D6F90A408D938EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft Manifest number: 17F1 Signing time: Mon 26 Jan 2026 12:00:49 +0000 Manifest this update: Mon 26 Jan 2026 12:00:49 +0000 Manifest next update: Tue 27 Jan 2026 12:00:49 +0000 Files and hashes: 1: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl (hash: l2luMlq8sdTG7mcIi/iu9A5TZZYI55a8ZiKaxFluXuE=) 2: weWWuV6jfsu20O1Kp8PZ_7w5-6I.roa (hash: hxVuyj93Sh3p92R2/8BnJWSOvPERrOV88q73B7vWqrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:91:fe:7b:e7:3d:42:6d:6f:90:a4:08:d9:38:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c Validity Not Before: Jan 26 12:00:49 2026 GMT Not After : Jan 27 12:00:49 2026 GMT Subject: CN=f02c005d7534234c89185faa7fb213f4b5920fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e3:b2:dd:89:33:7c:86:47:3a:71:ee:a8:34: fd:ef:43:c4:05:96:11:91:a9:05:5b:e0:88:58:f1: ac:06:b4:1d:d9:70:2e:cd:c6:77:6b:ce:c9:41:6a: c8:9c:45:5d:14:38:3f:68:d2:16:4a:78:58:a2:13: 82:c0:f5:30:48:96:3f:03:28:c4:c5:4e:02:2d:3d: bc:64:12:fb:79:ae:b3:5f:15:11:27:df:26:b3:b3: 9d:ae:a9:e8:30:ce:9b:7e:66:0b:38:1e:cd:68:4b: 31:b2:4d:3b:ea:08:13:c9:17:bc:47:f4:af:72:0b: 70:7a:ba:a6:3f:39:38:d8:52:51:34:d7:7e:d3:5b: e7:45:ce:8e:36:b6:c6:4d:7e:dc:fc:28:89:12:71: 60:c8:03:8e:1c:8a:82:5b:d7:f9:1f:9c:cf:bd:0e: 69:71:e4:b0:cd:87:71:2d:3e:ff:bc:25:2c:18:81: 64:e7:fc:a0:b7:e8:e5:d6:e1:be:0f:09:4b:8f:92: 2b:dd:9c:20:1a:81:67:f6:b4:a5:0f:55:66:7a:08: a6:6e:3c:4a:12:8f:63:15:98:90:85:b9:a2:17:83: 94:6f:1d:bb:35:7c:80:72:5f:85:a6:74:81:9e:7c: b0:49:bb:e3:cc:84:e5:ea:40:0f:ef:dd:23:7a:33: 3b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2C:00:5D:75:34:23:4C:89:18:5F:AA:7F:B2:13:F4:B5:92:0F:C6 X509v3 Authority Key Identifier: keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ae:d2:79:11:89:f0:cc:d1:cb:95:0d:69:43:29:e6:0e:27: 94:1a:8c:60:5a:46:bc:d5:7c:f0:cb:d2:ca:dc:bc:0e:01:65: 2e:38:b0:5f:c4:b8:69:18:eb:ad:26:7d:02:ef:00:44:05:19: 04:08:24:37:da:0c:eb:41:2b:d1:b7:1c:9b:d2:23:29:ed:c0: bb:79:ca:d3:a1:8c:0a:c7:cb:23:12:64:f9:95:ab:04:f4:53: 80:03:1d:90:b5:76:8b:7b:44:90:14:d1:11:7e:2e:c9:66:2f: cb:31:b7:6c:40:6b:02:bd:79:46:19:a9:15:d8:70:a6:95:68: 9c:8a:c8:b8:07:3b:1f:f7:22:97:a3:8d:94:b2:23:04:f6:66: 1e:32:b0:e8:f4:7f:eb:30:7f:65:8f:c4:c8:46:88:58:ab:80: 59:ae:df:bf:71:3a:3c:5e:35:83:9a:e5:1a:8e:9c:ea:99:b9: c0:9c:14:16:2d:5d:c8:1d:9a:2b:20:35:8e:3c:ee:9b:14:2d: f5:22:f8:cc:2a:7d:6d:71:c5:c5:eb:5a:3a:66:c6:08:87:1f: 35:89:d8:98:be:15:ca:f2:1a:27:22:e5:d2:9e:ea:29:40:2b: ae:6a:67:ed:b2:e6:5c:8d:ad:ad:ff:1d:1d:91:bf:9f:ab:8e: 5e:05:d9:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LZH+e+c9Qm1vkKQI2TjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOGY1NDM4MDczYTYyMWFlYTc3MmY1Y2I3YTRlZmQ1OGM2 Yjc3NGMwHhcNMjYwMTI2MTIwMDQ5WhcNMjYwMTI3MTIwMDQ5WjAzMTEwLwYDVQQD EyhmMDJjMDA1ZDc1MzQyMzRjODkxODVmYWE3ZmIyMTNmNGI1OTIwZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquOy3YkzfIZHOnHuqDT970PEBZYR kakFW+CIWPGsBrQd2XAuzcZ3a87JQWrInEVdFDg/aNIWSnhYohOCwPUwSJY/AyjE xU4CLT28ZBL7ea6zXxURJ98ms7OdrqnoMM6bfmYLOB7NaEsxsk076ggTyRe8R/Sv cgtwerqmPzk42FJRNNd+01vnRc6ONrbGTX7c/CiJEnFgyAOOHIqCW9f5H5zPvQ5p ceSwzYdxLT7/vCUsGIFk5/ygt+jl1uG+DwlLj5Ir3ZwgGoFn9rSlD1VmegimbjxK Eo9jFZiQhbmiF4OUbx27NXyAcl+FpnSBnnywSbvjzITl6kAP790jejM7+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAsAF11NCNMiRhfqn+yE/S1kg/GMB8GA1UdIwQY MBaAFK2PVDgHOmIa6ncvXLek79WMa3dMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9kMTRlZjUtZjRkYi00M2JjLThjY2Yt MTc3OGJhMjVkOGI5LzEvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9kMTRlZjUtZjRkYi00M2JjLThjY2YtMTc3OGJhMjVkOGI5 LzEvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe67SeRGJ 8MzRy5UNaUMp5g4nlBqMYFpGvNV88MvSyty8DgFlLjiwX8S4aRjrrSZ9Au8ARAUZ BAgkN9oM60Er0bccm9IjKe3Au3nK06GMCsfLIxJk+ZWrBPRTgAMdkLV2i3tEkBTR EX4uyWYvyzG3bEBrAr15RhmpFdhwppVonIrIuAc7H/cil6ONlLIjBPZmHjKw6PR/ 6zB/ZY/EyEaIWKuAWa7fv3E6PF41g5rlGo6c6pm5wJwUFi1dyB2aKyA1jjzumxQt 9SL4zCp9bXHFxetaOmbGCIcfNYnYmL4VyvIaJyLl0p7qKUArrmpn7bLmXI2trf8d HZG/n6uOXgXZ3Q== -----END CERTIFICATE-----Generated at Mon Jan 26 14:26:22 2026 by rpki-client