This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: UoFGibVTUrZjr69FVset3DLA8MC07/pNU4oIx5UUXBs= Subject key identifier: DB:E7:94:26:A0:07:F4:5E:CD:23:83:A8:45:22:33:F2:74:DF:BC:A1 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019BF499641328A4E41D8A083697D928FCDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 069D Signing time: Sun 25 Jan 2026 10:00:51 +0000 Manifest this update: Sun 25 Jan 2026 10:00:51 +0000 Manifest next update: Mon 26 Jan 2026 10:00:51 +0000 Files and hashes: 1: 1zvdcEwkgDgymDIvdRNXraLRNH8.roa (hash: 91ImAvK9cIsr386Uw3vdRaUWjAcGr1Za2u1qM4Wcpbw=) 2: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: txGwTmYN3+JO6O8chVKCXqlMgBYLk6d2MfhwysJaruM=) 3: AuuFpGckEdWDmpSli6J4EvnBEFA.roa (hash: UWwZYirMViLQ4FhWk6naRNb3lf/S07gxbtcPGiaea3M=) 4: B_2DlHPjFMc2OFdioV78P7kSKnk.roa (hash: l6A6lmViWSMPIZA6Jqw5d17N6Vzy1rMqG76RVXMx2Xs=) 5: D_jYfwuBOjkANvdaFHDPTLr66JQ.roa (hash: vAK4Fi/RAnr6XiRotftdXv2sD1o6dY70W8WZ/V0XyK4=) 6: JRpzznWelvDGpNctUx-9YeQj91I.roa (hash: UWpK2mc+BRq0WDsXbRZApCIJ/yZuMuk8WsuIDijlk30=) 7: N8T1T4yzeC_svV7N6clN6YYuhS0.roa (hash: Zjsphs8xxbX+E2wFNgFNlo+S/FNhRonrcNCUdPBKUgo=) 8: XCau4ffd9wRsX7TYXIogzR2WqO4.roa (hash: ftqkiMajJgdI8EjDHWxMovMT410S0p0no+51o9gTIa8=) 9: YARBLfUZ9k_hQNuqCW-GW04WaQI.roa (hash: YYeeEXSa0og2pjEcv4jU32lCZBeHpaJXhmkA+TmvUbg=) 10: YfhOPAWRkHzsFNKQodjoA2IhLKM.roa (hash: 9/L6hUhQcrkiGTuXjLMFbE6LlWLBn2NBCH2Dr2RZSJA=) 11: YhAgOfBxB36OmlW5J6iwNI4pf-A.roa (hash: YgJ931EB8K2m5BcoLz5t++aQe+CzOPxkeIACGG7/szQ=) 12: _m7nbQwhxW5w0wbnoPwEGZq5xj4.roa (hash: 6vjyJskNxAqxaPWKjJV/dxJmRNdkP5LCRI9f1lfJEJQ=) 13: aHuFfSOUYXmTmBwxHlPwh-EVryM.roa (hash: 4h0lpb8Jw+MnXWrJAhTnOT+WFcvU+QMAmEsFwZdu5/k=) 14: cbz_UwKygebEETks8KwAVV-eHtI.roa (hash: WJoVOrBK0/PoGMf01zl6RkMQBV3g0+LhIriyrmd4GqQ=) 15: egsOE6bZvfKQiaDurlHql4l7FQo.roa (hash: BP8wlsBgKB6wKVje/kb04PbZKDtzqCLIojy+BbhlXD4=) 16: hieYljUxWV_urT3FVt4VHwUYJHA.roa (hash: uaNQn7nDi6rwH6tpmG6o5xOJwukq6sKOWsUOpBkHxN0=) 17: v8v2OaJG7Hdhmb6VYMUj66YcSY0.roa (hash: B7Lry8kdmTHVcZ/TVSfBhCUi/wQDju0yT/ymY52jHqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:64:13:28:a4:e4:1d:8a:08:36:97:d9:28:fc:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Jan 25 10:00:51 2026 GMT Not After : Jan 26 10:00:51 2026 GMT Subject: CN=dbe79426a007f45ecd2383a8452233f274dfbca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:95:cb:d4:e7:a7:9c:dc:80:a8:40:55:56:ca: 0f:a7:d9:86:3a:8d:a0:e7:9c:df:4f:99:fb:8f:d6: d7:45:a8:6c:9a:8f:6d:d3:dd:87:f3:c4:f9:80:f5: 76:bf:22:37:4a:b1:ba:c4:d1:12:03:fd:1c:5c:6d: 50:e4:6c:2d:21:5c:68:e7:bc:4f:57:1f:bf:cd:02: 25:0a:e3:bb:6d:51:34:57:02:95:54:6e:28:32:87: 49:ad:86:14:bc:e7:e6:f4:06:87:a0:d9:21:e8:85: 1d:15:96:0b:cd:42:97:30:50:82:ea:b9:b6:2c:fb: 6f:43:df:63:c3:ff:63:fd:eb:37:54:c5:21:1d:0f: d5:f4:eb:28:ff:d3:92:c6:df:a2:dd:c3:7a:a2:9d: e1:83:dc:0a:ad:bd:f1:82:5d:42:25:8e:6c:95:9c: c7:a5:3e:dd:79:f6:4e:96:68:49:a8:ac:ca:40:68: b8:fe:1c:3a:ac:8c:c3:67:4b:52:5b:2b:1c:2b:e1: 9b:6b:31:99:ba:32:51:88:80:3c:9f:82:f6:41:c9: 76:96:0b:eb:1f:ff:f3:82:d3:91:24:d8:4d:10:44: 91:09:bb:65:7b:3d:08:92:59:b2:59:e2:10:c7:4e: a9:21:90:2f:fd:3f:bb:c6:a4:4f:46:f3:19:98:38: 20:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E7:94:26:A0:07:F4:5E:CD:23:83:A8:45:22:33:F2:74:DF:BC:A1 X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:aa:e0:34:51:73:d1:13:a8:1b:ce:4c:3b:b5:3d:ac:9d:64: 3f:1f:78:04:88:48:54:6b:0b:53:3f:94:c9:75:7f:81:fd:c9: 38:88:6b:7b:f1:bb:0d:79:79:95:ca:ef:68:1b:c4:8b:49:f8: 87:5a:f4:e9:cb:12:99:0b:19:e9:c5:0e:ce:83:81:68:92:49: 9b:9c:de:f2:70:49:3a:40:b3:58:3f:e0:90:93:3e:9d:a9:75: 03:2c:93:a1:4a:42:86:7a:11:4d:10:35:4a:e9:90:7e:d3:78: a5:69:40:78:db:87:4b:91:f0:3c:1f:0b:ee:55:6f:7d:d8:87: 8a:fd:df:ea:fc:a1:e4:79:a6:c9:e3:43:10:fa:82:3d:f6:ea: 77:4f:78:c6:63:07:e5:20:75:45:27:d3:86:7e:1c:16:1a:5d: b6:56:bb:40:8e:3d:3d:7e:70:e8:c7:82:21:53:5e:a5:78:4c: 13:29:a8:0d:8a:8f:26:7f:9f:4a:4d:e6:7c:79:a4:8d:4c:17: 19:97:2c:d4:15:f9:46:15:f0:8a:2a:fc:22:6f:81:8e:a5:b2: 0e:95:d2:69:c3:d6:fb:62:16:06:80:bd:11:49:b0:72:f9:62: e1:94:0d:02:0c:b0:cc:5d:97:f0:20:b6:03:de:0c:aa:6c:58: 43:ad:e1:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mWQTKKTkHYoINpfZKPzaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwMTI1MTAwMDUxWhcNMjYwMTI2MTAwMDUxWjAzMTEwLwYDVQQD EyhkYmU3OTQyNmEwMDdmNDVlY2QyMzgzYTg0NTIyMzNmMjc0ZGZiY2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5XL1OennNyAqEBVVsoPp9mGOo2g 55zfT5n7j9bXRahsmo9t092H88T5gPV2vyI3SrG6xNESA/0cXG1Q5GwtIVxo57xP Vx+/zQIlCuO7bVE0VwKVVG4oModJrYYUvOfm9AaHoNkh6IUdFZYLzUKXMFCC6rm2 LPtvQ99jw/9j/es3VMUhHQ/V9Oso/9OSxt+i3cN6op3hg9wKrb3xgl1CJY5slZzH pT7defZOlmhJqKzKQGi4/hw6rIzDZ0tSWyscK+GbazGZujJRiIA8n4L2Qcl2lgvr H//zgtORJNhNEESRCbtlez0IklmyWeIQx06pIZAv/T+7xqRPRvMZmDggFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvnlCagB/RezSODqEUiM/J037yhMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgargNFFz 0ROoG85MO7U9rJ1kPx94BIhIVGsLUz+UyXV/gf3JOIhre/G7DXl5lcrvaBvEi0n4 h1r06csSmQsZ6cUOzoOBaJJJm5ze8nBJOkCzWD/gkJM+nal1AyyToUpChnoRTRA1 SumQftN4pWlAeNuHS5HwPB8L7lVvfdiHiv3f6vyh5HmmyeNDEPqCPfbqd094xmMH 5SB1RSfThn4cFhpdtla7QI49PX5w6MeCIVNepXhMEymoDYqPJn+fSk3mfHmkjUwX GZcs1BX5RhXwiir8Im+BjqWyDpXSacPW+2IWBoC9EUmwcvli4ZQNAgywzF2X8CC2 A94MqmxYQ63hwg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:53:25 2026 by rpki-client