This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft File: y9lC2W7pSnpaZS73rIVdyUAUFd8.mft (raw, json) Hash identifier: pPN+60Qbzy0SxcFcLd5a8A7Qj4xLynemS+ni8X2Hpk4= Subject key identifier: 8B:17:BA:28:43:F6:96:0A:60:38:DD:B2:99:D3:F4:FC:F8:48:20:4E Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF Certificate issuer: /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df Certificate serial: 019BF499396B04D2C850EE716E85C40A320E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 10:00:40 +0000 Manifest this update: Sun 25 Jan 2026 10:00:40 +0000 Manifest next update: Mon 26 Jan 2026 10:00:40 +0000 Files and hashes: 1: 3O0Jx2Z7uS77XzKQjDLJgefRDU4.roa (hash: mTSPl2/i72Uzjsz/bmIER2rP7ZrpmVRXp35zfMqJjrs=) 2: y9lC2W7pSnpaZS73rIVdyUAUFd8.crl (hash: XupMBRDH/c2Hj2ckOunakOO7NSfhKWkLH3g9RgqwiB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:39:6b:04:d2:c8:50:ee:71:6e:85:c4:0a:32:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df Validity Not Before: Jan 25 10:00:40 2026 GMT Not After : Jan 26 10:00:40 2026 GMT Subject: CN=8b17ba2843f6960a6038ddb299d3f4fcf848204e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:97:3c:22:b9:30:2e:48:61:3e:37:ba:60:1f: b6:47:62:ec:51:9b:43:ca:e6:81:09:59:72:99:40: 04:7d:59:d7:c8:5f:0d:1d:3d:42:7e:8f:05:cc:0e: d9:b7:d2:1d:1f:9e:84:de:ff:57:f4:7a:a1:e3:f8: be:75:0f:cb:e7:72:34:dd:bb:0c:92:9e:e1:0a:48: 7d:cb:ba:d2:51:2c:05:22:be:5c:c3:72:ff:3e:cf: 3f:e8:15:0a:ce:92:31:23:ec:f3:50:7a:0f:31:b8: 42:29:51:fb:89:d8:ff:3e:42:02:c6:d1:b2:78:90: b2:6d:21:12:72:9c:54:5e:a2:f0:48:03:5e:c6:e6: 95:19:25:05:e0:44:e6:b3:71:99:e9:ca:37:f4:c6: 87:f6:fc:ad:7e:68:9d:8b:ee:91:95:f3:a7:9c:0c: df:74:b4:e3:25:f4:89:36:5b:f3:db:25:d2:f7:c4: e3:38:1d:f5:ae:55:77:41:7d:aa:f2:36:3c:c9:89: 05:81:88:bb:d5:45:89:57:43:14:b3:d6:78:f8:ca: 43:2e:70:17:a9:a8:2a:9d:d6:94:f0:0d:59:e2:02: 33:d7:5d:08:66:c4:23:64:d9:5a:30:91:12:a7:e2: f2:9e:fd:19:11:3c:c6:35:85:1d:23:ef:07:97:c3: 74:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:17:BA:28:43:F6:96:0A:60:38:DD:B2:99:D3:F4:FC:F8:48:20:4E X509v3 Authority Key Identifier: keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:2b:1f:31:a7:00:d0:1f:18:d8:1f:2c:70:9c:46:5e:a5:26: b9:39:95:60:b5:65:ec:d3:c6:b4:83:a1:d7:5f:8c:2b:d1:55: ed:bd:04:9c:a6:e6:e0:30:7d:f9:17:e5:70:f8:d7:50:01:0f: a7:df:ea:c5:d9:ef:23:dc:a8:3b:bc:19:13:73:8f:f0:b9:da: d0:33:6f:48:10:f7:98:32:40:f1:d5:14:15:d3:16:3c:e5:71: e7:29:3d:47:b5:b0:aa:73:7c:53:42:37:f6:d5:c3:ca:58:26: 7a:c1:ad:52:36:6e:1a:ba:5b:8d:aa:c6:4f:12:61:ba:ed:dd: eb:f9:f5:e4:50:c0:12:a5:68:b7:52:3a:dd:ad:23:87:05:cc: a9:30:ff:b3:62:de:0b:e4:95:00:f3:9f:06:20:06:ba:c3:0d: a7:c8:76:d0:75:3e:54:b8:da:0f:da:de:3c:77:92:01:af:3a: a0:7c:ff:c7:79:18:65:78:39:cd:fd:92:ac:d9:fa:1f:c5:b8: e8:00:55:73:e7:76:e1:54:8b:94:3f:28:34:7d:3c:45:00:32: 6d:a9:f2:57:29:e5:14:d7:c1:45:d5:7f:f1:a3:ff:19:00:4e: 53:00:f9:4e:f9:91:ee:85:e7:63:41:95:38:d4:c3:2e:63:b2: c9:0a:2f:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mTlrBNLIUO5xboXECjIOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDk0MmQ5NmVlOTRhN2E1YTY1MmVmN2FjODU1ZGM5NDAx NDE1ZGYwHhcNMjYwMTI1MTAwMDQwWhcNMjYwMTI2MTAwMDQwWjAzMTEwLwYDVQQD Eyg4YjE3YmEyODQzZjY5NjBhNjAzOGRkYjI5OWQzZjRmY2Y4NDgyMDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZc8IrkwLkhhPje6YB+2R2LsUZtD yuaBCVlymUAEfVnXyF8NHT1Cfo8FzA7Zt9IdH56E3v9X9Hqh4/i+dQ/L53I03bsM kp7hCkh9y7rSUSwFIr5cw3L/Ps8/6BUKzpIxI+zzUHoPMbhCKVH7idj/PkICxtGy eJCybSEScpxUXqLwSANexuaVGSUF4ETms3GZ6co39MaH9vytfmidi+6RlfOnnAzf dLTjJfSJNlvz2yXS98TjOB31rlV3QX2q8jY8yYkFgYi71UWJV0MUs9Z4+MpDLnAX qagqndaU8A1Z4gIz110IZsQjZNlaMJESp+Lynv0ZETzGNYUdI+8Hl8N0uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsXuihD9pYKYDjdspnT9Pz4SCBOMB8GA1UdIwQY MBaAFMvZQtlu6Up6WmUu96yFXclAFBXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wODJmMTItNTEzYi00ZWI5LWExNzEt YzZmNmQ0NDQ5MTVmLzEveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8wODJmMTItNTEzYi00ZWI5LWExNzEtYzZmNmQ0NDQ5MTVm LzEveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCsfMacA 0B8Y2B8scJxGXqUmuTmVYLVl7NPGtIOh11+MK9FV7b0EnKbm4DB9+RflcPjXUAEP p9/qxdnvI9yoO7wZE3OP8Lna0DNvSBD3mDJA8dUUFdMWPOVx5yk9R7WwqnN8U0I3 9tXDylgmesGtUjZuGrpbjarGTxJhuu3d6/n15FDAEqVot1I63a0jhwXMqTD/s2Le C+SVAPOfBiAGusMNp8h20HU+VLjaD9rePHeSAa86oHz/x3kYZXg5zf2SrNn6H8W4 6ABVc+d24VSLlD8oNH08RQAybanyVynlFNfBRdV/8aP/GQBOUwD5TvmR7oXnY0GV ONTDLmOyyQovxw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:16:05 2026 by rpki-client