This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json) Hash identifier: ofauTZ/w3xKinU9s1uDcy0MZqoU5OVEdFYlHmrJLbvw= Subject key identifier: DB:40:EE:F0:BB:52:99:76:BC:2D:67:15:C0:46:AA:5C:9E:74:C1:B8 Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b Certificate serial: 019BF8AD69567D5DDDB37C83D0DB34FE5499 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 05:01:12 +0000 Manifest this update: Mon 26 Jan 2026 05:01:12 +0000 Manifest next update: Tue 27 Jan 2026 05:01:12 +0000 Files and hashes: 1: Nh5n5OS_FgNSU_CRCZBVspz1rhI.roa (hash: IWrNPYpBRnCN3KoAH2/hYR5dMaCc3BE8UMq5q83cyhw=) 2: wG3GrFqVGUvTRTbPHblNlTz8CLk.roa (hash: LemTu9TRxZtqMeqZqR+9skKyltQynjo4K29j1dzL0vI=) 3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: koZq7uze4E5tUNCrgmid2eROSSDLw+jvRdeWX5wOmlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:69:56:7d:5d:dd:b3:7c:83:d0:db:34:fe:54:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b Validity Not Before: Jan 26 05:01:12 2026 GMT Not After : Jan 27 05:01:12 2026 GMT Subject: CN=db40eef0bb529976bc2d6715c046aa5c9e74c1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:df:5c:68:72:11:5c:9e:3e:23:c9:35:ba: 5d:9d:92:9f:7a:9b:cb:70:72:3c:c4:fe:69:5c:0c: 6d:56:e1:3b:1f:1f:02:b5:ea:d1:4e:7b:bf:bb:d2: f0:00:62:bf:27:48:52:9f:00:31:f1:e6:75:fc:07: 5b:aa:df:b2:96:e4:3a:f9:75:de:ad:14:f6:57:59: 43:5d:e0:4d:31:58:3b:5d:0f:6a:7e:a9:32:3d:ff: 6f:1e:aa:db:e6:77:53:eb:44:04:5e:a3:71:4e:1d: 8e:bf:8d:72:0b:af:90:5f:d7:00:b2:00:ea:0d:ad: 0c:45:b7:fd:36:16:d7:6d:22:dd:04:c5:ee:95:7f: e3:f8:83:4e:50:d6:01:ee:e5:1e:02:8c:66:92:57: 77:5f:18:c9:34:df:0f:a1:7d:86:7e:3d:c1:ec:f2: 3c:a3:47:91:a4:16:f4:13:b2:b2:95:5a:f2:ac:77: 87:a7:67:08:7e:8c:17:8f:c7:64:84:bd:9d:2c:b2: 82:c3:e4:af:37:f2:d9:43:dd:18:9f:8f:0e:51:42: 51:a9:69:0f:a9:7c:1d:c6:0a:2f:07:2e:22:ad:c4: e9:44:56:da:e1:89:90:33:57:af:48:fd:dd:3d:b5: 39:72:61:8f:47:93:c4:4d:85:9a:6b:ee:39:f0:b3: 29:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:40:EE:F0:BB:52:99:76:BC:2D:67:15:C0:46:AA:5C:9E:74:C1:B8 X509v3 Authority Key Identifier: keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:15:39:f9:73:69:ca:68:d2:a6:84:bd:9b:4f:cb:59:48:12: ec:15:18:bd:27:4e:2d:69:5f:26:29:f5:6b:16:6a:4a:72:fe: 66:24:96:ca:57:ad:8a:f0:13:a0:fe:3b:78:3f:45:56:ed:c8: b1:90:ad:ec:68:d9:f2:51:b1:08:05:6d:3e:5e:72:1f:65:43: 46:a1:48:3b:19:ec:5b:15:f0:3e:fc:95:b6:5e:6d:fd:8c:23: bf:cb:7f:be:74:0d:d5:4e:d5:69:4e:d5:82:c5:30:a1:03:bd: 70:8c:df:f9:7a:9b:89:d9:ad:35:bd:85:27:3b:6b:c1:55:4a: 7a:da:06:eb:1c:85:03:7c:c1:19:01:4c:d0:75:23:84:e1:f6: 8b:21:d9:09:d9:75:01:a6:60:19:45:0a:4c:83:69:f2:d0:fb: 75:0c:79:81:4b:b4:0a:82:22:04:ab:0d:32:16:ce:41:23:8a: 5d:c3:77:28:3b:31:0f:fa:32:fe:93:1b:7a:2b:48:8c:ac:b1: d0:05:6b:3d:e4:53:1a:01:ab:d0:66:2f:27:c1:53:24:53:81: 5c:7d:de:a7:d0:bd:aa:eb:26:84:7b:75:59:fe:6b:aa:1f:86: 72:26:80:c1:ab:17:e6:8e:87:6e:7e:8d:ba:86:c4:d0:63:0e: c3:b8:02:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rWlWfV3ds3yD0Ns0/lSZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5N2RjNmQ4ZGY1ZDA4NGU5MjMwNjM0ODhkMzdkM2FlMDEx NDc3N2IwHhcNMjYwMTI2MDUwMTEyWhcNMjYwMTI3MDUwMTEyWjAzMTEwLwYDVQQD EyhkYjQwZWVmMGJiNTI5OTc2YmMyZDY3MTVjMDQ2YWE1YzllNzRjMWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrnfXGhyEVyePiPJNbpdnZKfepvL cHI8xP5pXAxtVuE7Hx8CterRTnu/u9LwAGK/J0hSnwAx8eZ1/Adbqt+yluQ6+XXe rRT2V1lDXeBNMVg7XQ9qfqkyPf9vHqrb5ndT60QEXqNxTh2Ov41yC6+QX9cAsgDq Da0MRbf9NhbXbSLdBMXulX/j+INOUNYB7uUeAoxmkld3XxjJNN8PoX2Gfj3B7PI8 o0eRpBb0E7KylVryrHeHp2cIfowXj8dkhL2dLLKCw+SvN/LZQ90Yn48OUUJRqWkP qXwdxgovBy4ircTpRFba4YmQM1evSP3dPbU5cmGPR5PETYWaa+458LMpEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtA7vC7Upl2vC1nFcBGqlyedMG4MB8GA1UdIwQY MBaAFMl9xtjfXQhOkjBjSI03064BFHd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wZjY5MjAtMjc3MC00Y2JlLWE2NGYt MmE2YmMzODMyYTBhLzEveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8wZjY5MjAtMjc3MC00Y2JlLWE2NGYtMmE2YmMzODMyYTBh LzEveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxU5+XNp ymjSpoS9m0/LWUgS7BUYvSdOLWlfJin1axZqSnL+ZiSWyletivAToP47eD9FVu3I sZCt7GjZ8lGxCAVtPl5yH2VDRqFIOxnsWxXwPvyVtl5t/Ywjv8t/vnQN1U7VaU7V gsUwoQO9cIzf+XqbidmtNb2FJztrwVVKetoG6xyFA3zBGQFM0HUjhOH2iyHZCdl1 AaZgGUUKTINp8tD7dQx5gUu0CoIiBKsNMhbOQSOKXcN3KDsxD/oy/pMbeitIjKyx 0AVrPeRTGgGr0GYvJ8FTJFOBXH3ep9C9qusmhHt1Wf5rqh+GciaAwasX5o6Hbn6N uobE0GMOw7gCzw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:45 2026 by rpki-client