This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft File: y__HcfLtWPwoIe50zahT_S42xCg.mft (raw, json) Hash identifier: Ky0VR6S1LT3rOkjbeJsq8159UNc977NwOKDNsohXseM= Subject key identifier: 46:7E:19:1C:7B:BA:C0:1F:79:5A:AB:56:95:7E:3C:E5:E5:6F:8D:2F Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28 Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428 Certificate serial: 019BF619B8048FDF35BF3A5A0D7D827FE9F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft Manifest number: 0CDB Signing time: Sun 25 Jan 2026 17:00:39 +0000 Manifest this update: Sun 25 Jan 2026 17:00:39 +0000 Manifest next update: Mon 26 Jan 2026 17:00:39 +0000 Files and hashes: 1: ED9fPzOepDgkuJo-elslIFPUuoE.roa (hash: 6gPQSH/gpSv5/wqic1Y/TmKzEmUsxiYhBSwpI3RrMfE=) 2: xpqqOtgsAXsWWjj58DWw9Ikqzic.roa (hash: XQV7y3FYzj3+Xq+UX0OMewU57UNtc6BiHPtsxX2i26s=) 3: y__HcfLtWPwoIe50zahT_S42xCg.crl (hash: e/DgMSHhwPYb11EVmya7Jsxsc0s49Vq/H7vPCmFnDfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:b8:04:8f:df:35:bf:3a:5a:0d:7d:82:7f:e9:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428 Validity Not Before: Jan 25 17:00:39 2026 GMT Not After : Jan 26 17:00:39 2026 GMT Subject: CN=467e191c7bbac01f795aab56957e3ce5e56f8d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:77:86:be:d2:a4:c3:2e:29:f5:3f:f4:7c: 58:70:3f:5f:46:ee:af:ee:17:91:79:b6:37:97:3a: 84:29:7b:fc:cb:f6:4a:b6:3a:66:e2:e7:bb:08:63: f5:d7:40:bb:8c:26:a3:5a:c7:11:15:5a:be:5c:29: 59:ce:25:bf:fd:21:0c:cc:8c:60:9b:74:9f:78:19: 03:35:2f:e9:be:17:9b:27:de:ec:31:ec:04:5a:f2: 1a:56:24:d0:49:20:ec:5a:97:e5:f8:82:a6:0f:92: 90:78:00:45:e9:ce:51:17:f3:6f:52:44:6d:ba:3f: cf:7b:5f:d7:31:3e:1f:55:a5:95:c3:ac:9f:7d:78: 53:ae:53:e7:b4:76:e2:2d:e0:ca:d1:7d:e0:b6:4c: b1:93:99:41:b3:4f:1a:06:dd:c8:5d:65:76:2e:5b: 30:f6:96:a1:fd:1d:62:13:9a:3d:67:ec:53:98:a3: 36:3d:41:b9:36:c9:2b:20:6a:07:5d:70:54:6b:82: f6:cd:51:14:05:72:44:89:99:9a:b0:63:12:0d:46: 72:b6:67:d3:15:21:5c:0f:15:03:0f:80:5c:89:74: 2b:3e:3d:60:2b:53:39:bf:6c:25:48:86:77:25:bf: 5f:10:fb:6f:ec:8e:08:af:65:19:41:0d:dc:cb:7a: 25:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7E:19:1C:7B:BA:C0:1F:79:5A:AB:56:95:7E:3C:E5:E5:6F:8D:2F X509v3 Authority Key Identifier: keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ba:21:43:7b:bf:75:f1:7a:ba:96:3f:a0:9c:d7:57:69:ff: 09:55:b1:d5:30:d0:0e:7d:83:ca:e7:d7:fa:1b:50:e0:95:e8: 4a:2d:47:35:80:08:df:9a:e6:01:8a:52:86:b9:b4:e0:c8:19: cd:93:26:f7:50:03:48:d2:78:e8:f3:a4:72:fb:4e:e1:1d:bc: 0d:3c:3e:60:c3:a5:91:45:20:97:31:5b:11:8c:4f:7d:03:69: da:a8:7f:5d:38:32:fd:be:33:45:dd:62:d5:b7:47:28:30:a9: 20:3d:f6:d7:e0:60:06:d1:d5:b4:7c:67:db:c1:dd:b2:79:55: 53:50:e8:87:07:46:14:89:eb:aa:a7:99:ef:38:90:d4:9f:f4: 85:3c:87:59:64:63:a1:9c:7f:5a:36:44:2b:f4:1a:83:87:69: 8f:30:0f:1f:af:45:5e:f5:b1:89:96:0b:30:d9:8d:b2:eb:b8: a2:a0:da:81:f7:c6:bd:86:30:91:6f:ac:68:8e:a6:eb:0d:37: f9:df:f3:0b:64:b9:a7:00:8b:3e:77:59:34:da:09:62:a2:5f: 81:da:43:46:32:e2:aa:17:8c:49:c4:de:2c:5f:76:5c:2d:0e: f5:2d:f1:62:5e:e6:0a:12:6a:a1:9a:63:90:1a:aa:35:fc:82: 87:04:e2:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GbgEj981vzpaDX2Cf+n0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZmZjNzcxZjJlZDU4ZmMyODIxZWU3NGNkYTg1M2ZkMmUz NmM0MjgwHhcNMjYwMTI1MTcwMDM5WhcNMjYwMTI2MTcwMDM5WjAzMTEwLwYDVQQD Eyg0NjdlMTkxYzdiYmFjMDFmNzk1YWFiNTY5NTdlM2NlNWU1NmY4ZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwR3hr7SpMMuKfU/9HxYcD9fRu6v 7heRebY3lzqEKXv8y/ZKtjpm4ue7CGP110C7jCajWscRFVq+XClZziW//SEMzIxg m3SfeBkDNS/pvhebJ97sMewEWvIaViTQSSDsWpfl+IKmD5KQeABF6c5RF/NvUkRt uj/Pe1/XMT4fVaWVw6yffXhTrlPntHbiLeDK0X3gtkyxk5lBs08aBt3IXWV2Llsw 9pah/R1iE5o9Z+xTmKM2PUG5NskrIGoHXXBUa4L2zVEUBXJEiZmasGMSDUZytmfT FSFcDxUDD4BciXQrPj1gK1M5v2wlSIZ3Jb9fEPtv7I4Ir2UZQQ3cy3olRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZ+GRx7usAfeVqrVpV+POXlb40vMB8GA1UdIwQY MBaAFMv/x3Hy7Vj8KCHudM2oU/0uNsQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9lNTJlMTQtN2FhZC00M2U0LTg4YzQt N2E0MDU0NTUxZmQ0LzEveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9lNTJlMTQtN2FhZC00M2U0LTg4YzQtN2E0MDU0NTUxZmQ0 LzEveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrohQ3u/ dfF6upY/oJzXV2n/CVWx1TDQDn2DyufX+htQ4JXoSi1HNYAI35rmAYpShrm04MgZ zZMm91ADSNJ46POkcvtO4R28DTw+YMOlkUUglzFbEYxPfQNp2qh/XTgy/b4zRd1i 1bdHKDCpID321+BgBtHVtHxn28HdsnlVU1DohwdGFInrqqeZ7ziQ1J/0hTyHWWRj oZx/WjZEK/Qag4dpjzAPH69FXvWxiZYLMNmNsuu4oqDagffGvYYwkW+saI6m6w03 +d/zC2S5pwCLPndZNNoJYqJfgdpDRjLiqheMScTeLF92XC0O9S3xYl7mChJqoZpj kBqqNfyChwTiHg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:53 2026 by rpki-client