This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json) Hash identifier: qSB4vR2oQ1Eu2Q7/lXbe7EOEKHUgQ63aO3rhW7layy8= Subject key identifier: 23:AA:1B:45:12:EF:D3:5D:57:9B:11:55:5A:DF:BC:8F:E9:0E:7C:51 Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4 Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4 Certificate serial: 019BF5ACA24ED4338CAAC2DAD2BE7DD2D93C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft Manifest number: 17E5 Signing time: Sun 25 Jan 2026 15:01:30 +0000 Manifest this update: Sun 25 Jan 2026 15:01:30 +0000 Manifest next update: Mon 26 Jan 2026 15:01:30 +0000 Files and hashes: 1: 8xpf1H5jnrklNTBoaVn0u85Fw00.roa (hash: xVZEKXXOjsh0YBdOeRbRNQ2rIeuGE/aopxCQhkfvBRc=) 2: k1f4H5R1t7ioWxpD9zQTzDGVw34.roa (hash: UazRYiujjVi7Q1FCel0edXG5MOLygjSQmvy3K0uCobk=) 3: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: zcs0uUEwfG9UoYD4swgkU4WzMpEXQL0kk4gzx7jDip4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:a2:4e:d4:33:8c:aa:c2:da:d2:be:7d:d2:d9:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4 Validity Not Before: Jan 25 15:01:30 2026 GMT Not After : Jan 26 15:01:30 2026 GMT Subject: CN=23aa1b4512efd35d579b11555adfbc8fe90e7c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9f:db:29:7d:89:3d:4a:73:2a:90:f5:67:17: f6:8a:a7:57:da:02:2d:6a:00:82:07:6b:b3:c6:6f: 70:b4:01:1c:16:b8:05:7d:5a:94:ad:95:7d:da:2f: 49:1a:cd:14:19:da:77:6b:f9:f0:40:8d:44:5c:3f: 0b:80:08:7e:be:b3:d0:a1:a9:87:2d:12:a0:4c:90: 38:7f:22:2d:03:fd:4a:5e:f6:26:01:7d:e5:c8:7e: 84:7e:7b:eb:5a:32:f0:65:8e:36:d1:38:20:db:a0: 2f:92:46:11:b1:e4:fe:23:b4:cd:f7:63:a6:68:83: d4:6d:c3:74:2e:2b:d9:3c:ab:72:d0:2e:0a:08:b6: bc:ee:cd:2f:da:d2:e5:a6:60:ec:7e:10:28:2c:c2: 98:4d:b5:3a:fe:82:ad:3f:8e:fb:8d:87:71:b2:78: 0a:c8:58:29:2e:25:17:f8:b1:a2:f4:47:85:6d:06: 5c:b6:b5:27:cb:43:72:18:4b:82:54:75:1f:81:15: 2a:b2:3a:7c:e4:7c:aa:20:21:e6:19:c5:2d:fb:8f: fa:bc:e4:3f:d3:a4:4a:f1:2d:a9:33:02:d4:fb:e4: 95:bd:08:80:89:c0:ea:2c:70:6f:d4:e5:70:fd:7f: ee:80:46:68:58:02:7b:db:af:21:8a:dd:94:59:6c: f6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AA:1B:45:12:EF:D3:5D:57:9B:11:55:5A:DF:BC:8F:E9:0E:7C:51 X509v3 Authority Key Identifier: keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:4c:83:3b:32:bc:7d:27:4d:49:1d:54:82:63:96:c9:d4:ad: 18:52:74:65:51:8f:19:e1:c2:b5:e1:53:91:be:ef:6d:47:7e: 24:2a:10:68:ad:75:81:0d:82:ad:2f:1c:b5:2f:8f:b7:09:a7: 18:86:b9:ac:e8:d4:99:9f:ea:25:d2:bc:d4:8e:f6:82:fd:c5: c5:b2:fa:c6:5d:5a:2d:ee:62:70:44:80:fc:3e:3c:91:1c:10: 06:fc:4d:aa:34:8b:03:2b:c4:79:7b:58:a0:c9:20:4c:94:d2: ee:1b:b3:7c:99:49:b9:e1:5a:53:7b:17:1d:95:e6:56:57:ab: 0b:13:48:85:c2:63:85:f3:98:bd:a3:9d:3f:18:3b:19:4c:05: 0f:a9:d3:6d:0e:ff:cf:d3:a2:1c:2b:c2:55:ee:c6:d6:e7:7f: 3d:3c:f0:23:da:ca:0d:4b:88:e9:1c:d7:69:79:51:35:96:f6: a7:01:22:42:db:89:97:d5:11:25:0e:46:6c:da:c9:39:21:3a: e9:af:5f:e2:36:f2:67:49:0f:c5:e6:d6:8c:c2:5c:a1:93:7e: 39:3b:68:0b:53:34:a2:b3:da:69:06:d5:ca:95:b2:65:2c:dc: c4:0a:a4:ba:56:fa:1b:4f:59:19:65:55:04:0c:3e:19:49:4f: 6f:7f:25:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rKJO1DOMqsLa0r590tk8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ODg2MDRkMjViODdiODJmZDEyNTlkZmUyOTRjZDhmYjlm ZjQ5YjQwHhcNMjYwMTI1MTUwMTMwWhcNMjYwMTI2MTUwMTMwWjAzMTEwLwYDVQQD EygyM2FhMWI0NTEyZWZkMzVkNTc5YjExNTU1YWRmYmM4ZmU5MGU3YzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5/bKX2JPUpzKpD1Zxf2iqdX2gIt agCCB2uzxm9wtAEcFrgFfVqUrZV92i9JGs0UGdp3a/nwQI1EXD8LgAh+vrPQoamH LRKgTJA4fyItA/1KXvYmAX3lyH6EfnvrWjLwZY420Tgg26AvkkYRseT+I7TN92Om aIPUbcN0LivZPKty0C4KCLa87s0v2tLlpmDsfhAoLMKYTbU6/oKtP477jYdxsngK yFgpLiUX+LGi9EeFbQZctrUny0NyGEuCVHUfgRUqsjp85HyqICHmGcUt+4/6vOQ/ 06RK8S2pMwLU++SVvQiAicDqLHBv1OVw/X/ugEZoWAJ7268hit2UWWz2YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOqG0US79NdV5sRVVrfvI/pDnxRMB8GA1UdIwQY MBaAFKWIYE0luHuC/RJZ3+KUzY+5/0m0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2It MjBkZGRiYzEyODFkLzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2ItMjBkZGRiYzEyODFk LzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0yDOzK8 fSdNSR1UgmOWydStGFJ0ZVGPGeHCteFTkb7vbUd+JCoQaK11gQ2CrS8ctS+Ptwmn GIa5rOjUmZ/qJdK81I72gv3FxbL6xl1aLe5icESA/D48kRwQBvxNqjSLAyvEeXtY oMkgTJTS7huzfJlJueFaU3sXHZXmVlerCxNIhcJjhfOYvaOdPxg7GUwFD6nTbQ7/ z9OiHCvCVe7G1ud/PTzwI9rKDUuI6RzXaXlRNZb2pwEiQtuJl9URJQ5GbNrJOSE6 6a9f4jbyZ0kPxebWjMJcoZN+OTtoC1M0orPaaQbVypWyZSzcxAqkulb6G09ZGWVV BAw+GUlPb38lsQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:41 2026 by rpki-client