This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft File: yzNdxv6zhfaiM0QFahPCxZUCjpE.mft (raw, json) Hash identifier: p9h/0bbiqmHFD1mGhbfnlurEfUpUbkqZzyXviRuKhM4= Subject key identifier: 2F:53:28:45:FB:FB:8E:26:14:2B:4C:FD:2A:7F:0F:63:9A:92:F8:5E Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91 Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91 Certificate serial: 019BF951B9EA0E231D6FA8FD789F955C06FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft Manifest number: 17F1 Signing time: Mon 26 Jan 2026 08:00:41 +0000 Manifest this update: Mon 26 Jan 2026 08:00:41 +0000 Manifest next update: Tue 27 Jan 2026 08:00:41 +0000 Files and hashes: 1: X3ZQenpvE8l1hGo8jarjWIZlEHg.roa (hash: z2dHWQocjAT7eQBvB40EN/2l3Ks2v71LcjzkY2camiw=) 2: ko8WrvZomBgcI3Hqp37PqXOWiSI.roa (hash: 8LPZPPU2MH1K+TEuOxL4YKzpLJKTkh0MI1eoRloRcik=) 3: p5uygMovU567H0ml5c8C_ZDtiZY.roa (hash: PWQLRe33NpLQ7v5TkzLMs7Rxm+rn1zWzKAt3r3JdpTc=) 4: yzNdxv6zhfaiM0QFahPCxZUCjpE.crl (hash: POUnoKVeapuPepH+JASaWbD2c1r4/7ES9/15omp3c48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:b9:ea:0e:23:1d:6f:a8:fd:78:9f:95:5c:06:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91 Validity Not Before: Jan 26 08:00:41 2026 GMT Not After : Jan 27 08:00:41 2026 GMT Subject: CN=2f532845fbfb8e26142b4cfd2a7f0f639a92f85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ad:8a:ac:0d:2f:fa:52:91:4f:88:60:b7:42: 39:f2:fe:94:2d:4f:d7:a6:fb:89:1b:a6:00:6a:49: ee:99:aa:1e:cd:b0:51:7f:b2:d3:16:cc:f0:8f:3d: bf:e7:67:a8:bd:45:dc:92:d2:33:6a:89:6d:16:c2: f1:22:d4:b9:98:ea:1f:74:76:9c:e3:86:3a:71:ca: 77:92:07:89:2e:d3:e3:55:22:32:bc:95:d0:6f:b5: 69:4d:55:07:c5:f2:9f:97:82:35:be:e4:03:cf:61: 31:e4:b9:14:12:74:3b:a7:d5:6b:4f:ea:87:8d:04: dd:bb:5b:40:9b:49:e5:be:e8:69:e2:fe:17:80:d9: db:65:74:14:86:bb:df:ce:14:5c:e3:e2:45:39:23: 71:7f:6f:d9:d5:31:ec:7b:3f:46:ba:fc:e6:4f:d6: 3f:26:f2:89:ea:19:4f:c9:8d:d5:b2:18:d1:34:da: d3:7f:f8:ec:b7:2d:32:73:b5:7a:06:9c:fa:eb:b0: 79:87:3c:65:58:6c:23:4a:65:6a:68:33:13:8f:ed: 8f:49:9f:f1:c3:db:b5:6a:31:dc:3a:a9:03:27:31: 24:b8:a2:5b:25:8b:de:bc:6d:bd:78:88:3c:3f:cf: 9e:47:df:e1:25:6d:e7:69:98:c7:5a:15:ee:35:71: db:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:53:28:45:FB:FB:8E:26:14:2B:4C:FD:2A:7F:0F:63:9A:92:F8:5E X509v3 Authority Key Identifier: keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d1:7d:73:af:39:02:d8:a5:4f:fe:2f:51:a5:34:e1:32:c6: 3d:67:cf:64:07:a0:35:17:c7:2c:76:cc:db:c7:b3:3b:c9:d6: 65:96:c0:43:81:e5:87:f9:a9:5d:ed:1c:93:bf:b6:9a:2f:7b: b7:f5:f7:11:65:04:80:67:fe:96:6b:79:db:8d:dd:26:b8:45: 63:b4:8f:8b:d3:fb:df:1f:ad:fd:e6:08:a1:5d:1b:ff:af:d7: b7:37:51:34:97:5f:01:7e:c3:0d:72:07:13:69:cd:9d:62:ce: 44:06:c8:ba:4b:33:6c:37:cc:bf:df:ce:32:03:ed:48:ec:75: 57:d0:f4:d2:d8:a4:bc:ae:79:65:f1:b9:d8:fe:23:98:41:9b: c0:a9:79:14:ad:f1:12:36:4e:6f:69:c4:e6:1a:22:e4:41:6d: bf:26:fa:b8:15:06:54:7d:ab:62:21:90:16:44:b9:26:3c:4a: 7d:f8:51:96:5c:17:b5:34:78:4c:51:a4:13:1d:e8:5a:24:7b: a7:a5:b5:fe:1f:0b:d3:3c:6a:7a:57:5a:76:b6:d4:97:73:1e: f5:53:e5:7a:4e:84:2a:d3:56:58:8a:d0:e4:c7:5e:41:87:5e: 9e:73:84:3f:ad:1a:03:8f:b0:64:09:12:a1:19:ef:ca:68:7a: ea:38:5a:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UbnqDiMdb6j9eJ+VXAb6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzM1ZGM2ZmViMzg1ZjZhMjMzNDQwNTZhMTNjMmM1OTUw MjhlOTEwHhcNMjYwMTI2MDgwMDQxWhcNMjYwMTI3MDgwMDQxWjAzMTEwLwYDVQQD EygyZjUzMjg0NWZiZmI4ZTI2MTQyYjRjZmQyYTdmMGY2MzlhOTJmODVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK2KrA0v+lKRT4hgt0I58v6ULU/X pvuJG6YAaknumaoezbBRf7LTFszwjz2/52eovUXcktIzaoltFsLxItS5mOofdHac 44Y6ccp3kgeJLtPjVSIyvJXQb7VpTVUHxfKfl4I1vuQDz2Ex5LkUEnQ7p9VrT+qH jQTdu1tAm0nlvuhp4v4XgNnbZXQUhrvfzhRc4+JFOSNxf2/Z1THsez9GuvzmT9Y/ JvKJ6hlPyY3VshjRNNrTf/jsty0yc7V6Bpz667B5hzxlWGwjSmVqaDMTj+2PSZ/x w9u1ajHcOqkDJzEkuKJbJYvevG29eIg8P8+eR9/hJW3naZjHWhXuNXHbSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9TKEX7+44mFCtM/Sp/D2OakvheMB8GA1UdIwQY MBaAFMszXcb+s4X2ojNEBWoTwsWVAo6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmIt ODg1NGM4MmI1NDVkLzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmItODg1NGM4MmI1NDVk LzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNF9c685 AtilT/4vUaU04TLGPWfPZAegNRfHLHbM28ezO8nWZZbAQ4Hlh/mpXe0ck7+2mi97 t/X3EWUEgGf+lmt5243dJrhFY7SPi9P73x+t/eYIoV0b/6/XtzdRNJdfAX7DDXIH E2nNnWLORAbIukszbDfMv9/OMgPtSOx1V9D00tikvK55ZfG52P4jmEGbwKl5FK3x EjZOb2nE5hoi5EFtvyb6uBUGVH2rYiGQFkS5JjxKffhRllwXtTR4TFGkEx3oWiR7 p6W1/h8L0zxqeldadrbUl3Me9VPlek6EKtNWWIrQ5MdeQYdennOEP60aA4+wZAkS oRnvymh66jhavA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:57:31 2026 by rpki-client