This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft File: y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json) Hash identifier: yWe5oDqBHQeCNDEUElDFXaTfupWkn7VbMAa4sJ2gy1w= Subject key identifier: 69:5A:3E:95:2C:03:B6:A0:61:11:A6:84:64:87:27:3F:C5:DD:B1:57 Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3 Certificate issuer: /CN=cb4fba09190b76849fff3d26d580790e54fac2e3 Certificate serial: 019BF8ADE8A8AD8AB776F41C2F0FC37663D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 05:01:45 +0000 Manifest this update: Mon 26 Jan 2026 05:01:45 +0000 Manifest next update: Tue 27 Jan 2026 05:01:45 +0000 Files and hashes: 1: Zu8UuGG4D2VbmJDnyhSG0Cawt4M.roa (hash: 0v9+1D6+nPkZSNsJJaK1p3wg2xF1SbrepfZyyi1iP3c=) 2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: YR9DuyYwu+Aw1EUVzVjTk5aYXDICFlg4lDgMnf4DRDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:e8:a8:ad:8a:b7:76:f4:1c:2f:0f:c3:76:63:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3 Validity Not Before: Jan 26 05:01:45 2026 GMT Not After : Jan 27 05:01:45 2026 GMT Subject: CN=695a3e952c03b6a06111a6846487273fc5ddb157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d1:c6:42:60:18:0f:18:a0:83:0d:09:95:54: 30:76:db:0a:f3:6a:d4:ac:d3:05:8d:09:1f:74:b5: fb:c2:b9:be:21:78:5a:77:0e:58:14:07:1e:6b:4c: 5e:9c:e4:84:e1:f1:3d:6f:dd:29:90:5d:6d:ba:49: d3:f8:53:7c:42:39:ae:6d:fb:d5:ff:b7:cd:e0:2c: cb:4f:17:21:ae:50:77:4a:39:6e:99:25:26:94:9d: 25:1f:2b:93:15:17:84:29:fc:69:d7:6f:65:28:98: 6b:bb:0e:4d:69:fd:c0:bc:eb:ec:4d:ad:c6:5d:4f: 70:14:a0:c5:30:27:a3:20:00:03:6d:98:0a:9d:2c: 8a:bf:20:4d:4b:c8:0f:32:83:16:ff:86:85:d6:86: f4:6a:b8:af:93:43:79:a4:f9:65:7b:63:73:7e:fe: 68:6c:df:80:6c:17:a6:04:9b:00:57:c5:5c:f1:3d: 37:3a:4a:d1:ac:1b:9d:da:c3:c7:bd:f7:72:0e:cb: 29:09:ce:ce:1f:d3:5e:3d:58:68:68:0b:05:e3:82: 83:01:68:d3:2a:51:e6:77:73:24:4a:3e:e1:59:ce: d3:c5:c4:30:1f:14:4a:90:1e:e4:b8:59:ca:0b:03: e1:6a:b8:f5:3d:33:7a:4d:59:4a:38:25:0b:26:34: 24:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5A:3E:95:2C:03:B6:A0:61:11:A6:84:64:87:27:3F:C5:DD:B1:57 X509v3 Authority Key Identifier: keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:76:d0:d0:56:b0:91:8f:dd:9e:62:05:85:f9:64:b8:12:3c: 6e:a3:0f:ec:40:d5:fe:5b:48:bb:d4:29:89:1b:2b:13:7e:99: 91:18:85:bd:a4:30:c3:de:2d:82:45:58:fe:04:e1:7f:56:47: ec:30:3e:85:5e:41:05:fd:5e:a7:c0:81:42:31:f4:ea:cc:58: a8:11:7d:c8:76:ac:fc:aa:96:19:45:ae:05:75:ce:16:1a:fb: ce:27:ff:7c:21:02:b4:d4:32:41:e6:98:4d:34:9c:48:a8:ca: 5f:8e:83:da:25:b4:3e:7a:95:d3:48:ef:0e:07:3f:9c:f3:9c: 16:e6:c9:b4:3b:1d:63:72:24:8b:0a:2b:76:6f:b1:52:89:cc: 82:0e:5d:9f:b7:1f:c2:e3:8e:81:bf:ab:88:f3:f9:c0:2c:f0: 98:35:d0:e9:67:90:99:89:28:b1:43:cf:27:56:65:33:58:22: 22:a3:2d:99:cd:a6:41:d4:e6:ef:c7:b3:d6:47:d0:d6:10:07: 1e:41:5a:e9:f7:a7:43:c1:e7:27:26:04:c3:9b:a7:63:27:b0: fa:ee:2e:98:7c:21:28:45:ac:5b:67:92:d3:f9:3c:f7:54:72: 8f:86:6f:c4:c5:7c:df:74:af:32:db:28:a3:33:86:80:97:f9: 2a:f3:5d:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4reiorYq3dvQcLw/DdmPZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNGZiYTA5MTkwYjc2ODQ5ZmZmM2QyNmQ1ODA3OTBlNTRm YWMyZTMwHhcNMjYwMTI2MDUwMTQ1WhcNMjYwMTI3MDUwMTQ1WjAzMTEwLwYDVQQD Eyg2OTVhM2U5NTJjMDNiNmEwNjExMWE2ODQ2NDg3MjczZmM1ZGRiMTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dHGQmAYDxiggw0JlVQwdtsK82rU rNMFjQkfdLX7wrm+IXhadw5YFAcea0xenOSE4fE9b90pkF1tuknT+FN8QjmubfvV /7fN4CzLTxchrlB3SjlumSUmlJ0lHyuTFReEKfxp129lKJhruw5Naf3AvOvsTa3G XU9wFKDFMCejIAADbZgKnSyKvyBNS8gPMoMW/4aF1ob0arivk0N5pPlle2Nzfv5o bN+AbBemBJsAV8Vc8T03OkrRrBud2sPHvfdyDsspCc7OH9NePVhoaAsF44KDAWjT KlHmd3MkSj7hWc7TxcQwHxRKkB7kuFnKCwPharj1PTN6TVlKOCULJjQknwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlaPpUsA7agYRGmhGSHJz/F3bFXMB8GA1UdIwQY MBaAFMtPugkZC3aEn/89JtWAeQ5U+sLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9kYWRiNGItMTRmMy00MmZhLTk1Yjct Zjg1Y2M1NzQ3ZmJmLzEveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9kYWRiNGItMTRmMy00MmZhLTk1YjctZjg1Y2M1NzQ3ZmJm LzEveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnbQ0Faw kY/dnmIFhflkuBI8bqMP7EDV/ltIu9QpiRsrE36ZkRiFvaQww94tgkVY/gThf1ZH 7DA+hV5BBf1ep8CBQjH06sxYqBF9yHas/KqWGUWuBXXOFhr7zif/fCECtNQyQeaY TTScSKjKX46D2iW0PnqV00jvDgc/nPOcFubJtDsdY3Ikiwordm+xUonMgg5dn7cf wuOOgb+riPP5wCzwmDXQ6WeQmYkosUPPJ1ZlM1giIqMtmc2mQdTm78ez1kfQ1hAH HkFa6fenQ8HnJyYEw5unYyew+u4umHwhKEWsW2eS0/k891Ryj4ZvxMV833SvMtso ozOGgJf5KvNdbA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:16 2026 by rpki-client