This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json) Hash identifier: EAWG1NvWWls1Hl6J0YA2b+zn9dcrnB7qkPI57pq6QWQ= Subject key identifier: BA:9F:21:A9:70:D3:62:7E:CF:88:AB:A3:84:DB:A5:2D:82:1E:28:33 Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34 Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34 Certificate serial: 019BF507045DD93CA982A76439D0902FFE94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft Manifest number: 10D5 Signing time: Sun 25 Jan 2026 12:00:36 +0000 Manifest this update: Sun 25 Jan 2026 12:00:36 +0000 Manifest next update: Mon 26 Jan 2026 12:00:36 +0000 Files and hashes: 1: YFo06dx0o1PHDC6LUgSFCDM_MLE.roa (hash: i0OcIk2lCb0oZECkABY1EIzkvkdWAble7uuQNpGV6Q8=) 2: cIShs-dj-a-jUHC5O2QcH4JFtqE.roa (hash: sqvBQpMmwNFJ+qbqQywFjzcQM3kVnXmjI7ID549RLQI=) 3: gd9FyMAEx2zDcAvRasWsSCt8jII.roa (hash: 3gHwGEwP5km+DCt4+0KzZKC5xkxi0OUUMqCX1cypjtI=) 4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: gmKR+WuU1C1PkhWEOEXMtkVvWpow3eVrzyB/S9Nbl1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:04:5d:d9:3c:a9:82:a7:64:39:d0:90:2f:fe:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34 Validity Not Before: Jan 25 12:00:36 2026 GMT Not After : Jan 26 12:00:36 2026 GMT Subject: CN=ba9f21a970d3627ecf88aba384dba52d821e2833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:e3:43:f5:5d:18:ca:33:6d:19:f0:f0:a5: 92:43:83:cf:3b:aa:ff:05:80:ff:0f:73:aa:cc:9f: ce:aa:ab:93:27:e0:e5:ba:12:8d:43:39:b0:c5:7d: 62:1d:17:4d:c2:fb:dd:d3:a6:3d:eb:18:89:63:20: 76:0e:c6:15:a9:fe:2d:32:73:ad:ae:2f:80:e7:cb: 6a:36:e4:80:d4:c6:08:dd:b2:73:15:b1:b3:fa:6d: 67:a2:67:d0:5a:90:1e:29:91:05:71:4d:b1:f3:73: 15:97:79:7c:40:7f:e0:64:e0:13:c0:51:d3:ee:ab: 79:54:f8:75:73:6a:99:de:d1:4a:fb:97:2c:b2:58: 6f:f9:1b:c7:ca:6b:f1:b1:64:79:26:56:9a:80:c7: f7:91:3b:27:4f:e7:b7:b9:76:cf:ab:74:ee:10:e5: c3:e1:0b:56:14:31:10:70:f4:c8:3a:59:bd:cd:fd: 08:d0:ec:db:70:5b:90:a6:dd:d0:f1:96:66:5f:43: d7:c1:19:25:03:62:60:77:e1:5f:da:75:2d:07:ba: 72:fe:68:90:ce:cf:7a:70:fc:41:20:94:8b:9b:83: 55:5f:11:41:f6:20:bb:6a:5a:a6:a6:d6:c3:86:68: 9b:43:12:15:89:d2:bb:17:f4:ad:ff:d7:40:6a:49: 2a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9F:21:A9:70:D3:62:7E:CF:88:AB:A3:84:DB:A5:2D:82:1E:28:33 X509v3 Authority Key Identifier: keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:83:20:86:72:b7:c1:b2:6c:df:ab:f4:99:78:98:d0:ae:9e: 72:86:57:e8:02:c3:29:a8:8c:20:6b:cd:01:08:b1:92:c3:3e: 3f:4f:89:6e:93:5e:19:7a:43:e2:83:ba:0d:e2:6d:81:be:90: 42:cc:8e:98:04:83:90:31:61:5f:a9:fa:09:90:09:e1:2a:75: e7:06:a1:bd:8f:80:1a:af:83:cc:bf:56:da:28:9a:9a:d1:95: 0f:3f:6d:36:cd:c2:61:8a:91:d7:6b:91:30:29:9f:30:62:15: 13:a1:dc:fc:47:61:6c:3c:aa:8e:cf:b8:34:79:3f:c2:7b:45: 2a:f7:13:1b:ae:5e:37:13:6b:b6:13:68:e1:f5:fa:4f:ef:6a: 65:ff:f6:47:db:b3:26:a0:b6:8b:99:0d:ca:70:17:fc:8a:f8: 46:2f:39:c4:2b:b8:e2:d3:d8:64:93:84:a2:b1:ba:9c:07:50: 11:19:7e:a3:6f:fc:a7:ad:1f:18:66:65:f8:5b:f7:c9:1b:47: d7:be:b9:d0:29:f6:a7:dc:22:e9:a4:0d:23:40:d6:83:0d:d8: 34:57:81:c4:80:60:df:f6:17:ef:52:a8:74:6c:80:2f:ad:5b: 0f:cd:39:e6:e4:39:d5:77:89:0a:b5:24:48:34:30:cf:bd:31: c5:d8:cb:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BwRd2TypgqdkOdCQL/6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYjdjMjBiNTVhNDcwZGFiODkyZjRjOTFlYTAwMTBiZDFj MzlmMzQwHhcNMjYwMTI1MTIwMDM2WhcNMjYwMTI2MTIwMDM2WjAzMTEwLwYDVQQD EyhiYTlmMjFhOTcwZDM2MjdlY2Y4OGFiYTM4NGRiYTUyZDgyMWUyODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE/jQ/VdGMozbRnw8KWSQ4PPO6r/ BYD/D3OqzJ/OqquTJ+DluhKNQzmwxX1iHRdNwvvd06Y96xiJYyB2DsYVqf4tMnOt ri+A58tqNuSA1MYI3bJzFbGz+m1nomfQWpAeKZEFcU2x83MVl3l8QH/gZOATwFHT 7qt5VPh1c2qZ3tFK+5csslhv+RvHymvxsWR5JlaagMf3kTsnT+e3uXbPq3TuEOXD 4QtWFDEQcPTIOlm9zf0I0OzbcFuQpt3Q8ZZmX0PXwRklA2Jgd+Ff2nUtB7py/miQ zs96cPxBIJSLm4NVXxFB9iC7alqmptbDhmibQxIVidK7F/St/9dAakkqrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqfIalw02J+z4iro4TbpS2CHigzMB8GA1UdIwQY MBaAFMu3wgtVpHDauJL0yR6gAQvRw580MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgt MjU2MzM5NzM2YzJiLzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgtMjU2MzM5NzM2YzJi LzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoIMghnK3 wbJs36v0mXiY0K6ecoZX6ALDKaiMIGvNAQixksM+P0+JbpNeGXpD4oO6DeJtgb6Q QsyOmASDkDFhX6n6CZAJ4Sp15wahvY+AGq+DzL9W2iiamtGVDz9tNs3CYYqR12uR MCmfMGIVE6Hc/EdhbDyqjs+4NHk/wntFKvcTG65eNxNrthNo4fX6T+9qZf/2R9uz JqC2i5kNynAX/Ir4Ri85xCu44tPYZJOEorG6nAdQERl+o2/8p60fGGZl+Fv3yRtH 17650Cn2p9wi6aQNI0DWgw3YNFeBxIBg3/YX71KodGyAL61bD8055uQ51XeJCrUk SDQwz70xxdjLwg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:45:54 2026 by rpki-client