This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json) Hash identifier: sxP8v0TNAAYZQC2DbCUMmXIWQRcCdSIoHnRxvJ0GYPs= Subject key identifier: 1B:2A:FF:56:E4:2E:C6:8B:45:67:0A:59:8C:98:12:71:EE:B5:77:8B Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0 Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0 Certificate serial: 019BF5AC333DA542E5A57E6E193B999BDB48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft Manifest number: 077E Signing time: Sun 25 Jan 2026 15:01:01 +0000 Manifest this update: Sun 25 Jan 2026 15:01:01 +0000 Manifest next update: Mon 26 Jan 2026 15:01:01 +0000 Files and hashes: 1: VpnFqg4nLkv4hVZvAnrC7KmiNAU.roa (hash: 5iLmKrDX02BNsU1dvSS1ObOgIc5TS34EiCu+Rj74FUw=) 2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: +ncjFDYPfYqikIA8gmxLG0UOXaSAtz2yfDf+903PUk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:33:3d:a5:42:e5:a5:7e:6e:19:3b:99:9b:db:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0 Validity Not Before: Jan 25 15:01:01 2026 GMT Not After : Jan 26 15:01:01 2026 GMT Subject: CN=1b2aff56e42ec68b45670a598c981271eeb5778b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:35:46:6c:2c:75:b0:56:7f:b7:4d:c0:a0:fb: 0a:ca:25:55:9b:fc:c5:e9:ad:9f:82:cc:7d:21:a4: 5f:b7:1c:6e:68:36:1d:4c:77:62:69:cc:c7:4c:07: ba:a7:da:2c:78:3f:a3:5c:ed:3f:8c:4b:fc:c9:fd: da:82:19:8a:1f:8b:b1:d2:68:aa:81:9a:5a:37:c9: ca:f7:17:60:54:99:7e:f2:ed:74:20:12:ec:0c:76: 45:8a:ce:e0:aa:f4:19:56:fd:3e:cd:a5:99:60:c6: c1:eb:69:f5:d1:e0:d0:fb:ce:36:50:39:06:a2:19: 0f:c9:d2:1b:f6:d0:3f:2f:c8:ee:05:30:34:64:1c: 92:4c:2e:ad:31:ad:2f:51:6b:47:59:d8:59:f7:5b: c9:de:c9:bb:c5:71:6d:55:78:de:31:15:00:3f:00: 4b:1b:2b:4e:a1:6c:54:f9:45:b3:43:7a:50:05:63: b9:0c:15:1b:ac:c0:b2:5b:da:de:e7:85:7e:50:b9: d2:63:dd:af:53:30:eb:3e:64:52:0f:25:33:7a:61: 47:8c:8a:44:77:79:00:ac:cf:b4:53:db:91:26:6e: 15:74:70:45:a3:b8:27:3a:b2:f7:4a:11:85:62:1c: 09:b0:44:52:fe:91:88:d8:99:d7:16:dc:a4:cc:ac: 39:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2A:FF:56:E4:2E:C6:8B:45:67:0A:59:8C:98:12:71:EE:B5:77:8B X509v3 Authority Key Identifier: keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a3:c4:58:7d:3a:a2:d2:f0:97:ef:43:ec:36:43:fa:07:89: b8:af:d0:05:ff:40:d5:e1:95:35:a6:8f:a2:cf:94:5e:c0:19: 75:52:73:37:55:45:55:2f:f5:6d:18:2e:97:bc:d9:ac:e7:f0: 49:9c:b7:31:a2:5d:80:0b:b4:42:0c:d3:40:2b:49:d9:ca:cb: 4a:ea:94:70:60:d0:02:ae:b5:44:08:8b:6b:5d:09:ca:37:5a: 63:f8:23:40:f0:84:d0:5e:d5:0a:68:b8:49:2d:bd:25:0f:7f: fb:7d:64:c3:e2:44:a6:32:6f:00:77:ce:3a:02:e6:00:3b:0e: 7a:69:bb:6a:a2:03:b9:c6:21:aa:b5:17:7e:97:c8:65:d3:6e: 8a:ed:df:ee:d6:e0:ab:65:f7:aa:e6:7a:04:52:53:90:79:c0: b3:56:7d:34:71:d1:f1:b7:a0:8b:00:e3:76:a0:da:ca:3d:91: 06:96:32:af:fb:b7:50:1f:81:e9:8f:1b:c4:70:9f:5b:8b:a3: 0d:fa:58:ae:55:4c:47:2c:73:28:93:a0:42:6a:28:a6:94:e3: 6c:ab:36:30:da:da:a2:b8:58:d0:8b:b6:75:e1:4a:ab:f8:ca: ec:1a:be:72:7b:bf:89:2e:ef:21:27:9f:ee:61:9f:1f:fd:a3: c1:7f:a4:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rDM9pULlpX5uGTuZm9tIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZWI1ZmI3MzNhYmIzZTA3ZDc1ZmE4MGQ3YmU5Y2IxODEz Y2QzZTAwHhcNMjYwMTI1MTUwMTAxWhcNMjYwMTI2MTUwMTAxWjAzMTEwLwYDVQQD EygxYjJhZmY1NmU0MmVjNjhiNDU2NzBhNTk4Yzk4MTI3MWVlYjU3NzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzVGbCx1sFZ/t03AoPsKyiVVm/zF 6a2fgsx9IaRftxxuaDYdTHdiaczHTAe6p9oseD+jXO0/jEv8yf3aghmKH4ux0miq gZpaN8nK9xdgVJl+8u10IBLsDHZFis7gqvQZVv0+zaWZYMbB62n10eDQ+842UDkG ohkPydIb9tA/L8juBTA0ZBySTC6tMa0vUWtHWdhZ91vJ3sm7xXFtVXjeMRUAPwBL GytOoWxU+UWzQ3pQBWO5DBUbrMCyW9re54V+ULnSY92vUzDrPmRSDyUzemFHjIpE d3kArM+0U9uRJm4VdHBFo7gnOrL3ShGFYhwJsERS/pGI2JnXFtykzKw5EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsq/1bkLsaLRWcKWYyYEnHutXeLMB8GA1UdIwQY MBaAFMvrX7czq7PgfXX6gNe+nLGBPNPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveS10ZnR6T3JzLUI5ZGZxQTE3NmNzWUU4MC1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wYTdjNGUtOTViYy00NTZiLThmNzQt MmNjZmIzYjQxMjYwLzEveS10ZnR6T3JzLUI5ZGZxQTE3NmNzWUU4MC1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wYTdjNGUtOTViYy00NTZiLThmNzQtMmNjZmIzYjQxMjYw LzEveS10ZnR6T3JzLUI5ZGZxQTE3NmNzWUU4MC1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6PEWH06 otLwl+9D7DZD+geJuK/QBf9A1eGVNaaPos+UXsAZdVJzN1VFVS/1bRgul7zZrOfw SZy3MaJdgAu0QgzTQCtJ2crLSuqUcGDQAq61RAiLa10JyjdaY/gjQPCE0F7VCmi4 SS29JQ9/+31kw+JEpjJvAHfOOgLmADsOemm7aqIDucYhqrUXfpfIZdNuiu3f7tbg q2X3quZ6BFJTkHnAs1Z9NHHR8begiwDjdqDayj2RBpYyr/u3UB+B6Y8bxHCfW4uj DfpYrlVMRyxzKJOgQmooppTjbKs2MNraorhY0Iu2deFKq/jK7Bq+cnu/iS7vISef 7mGfH/2jwX+kVQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:44:46 2026 by rpki-client