This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft File: y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json) Hash identifier: +3mZPaQAY3lQMik+JOtZLmUdm8ynFfcr0ro3d67zt1U= Subject key identifier: 0F:2A:43:D9:D2:AC:1D:2E:1A:98:CC:58:5C:48:55:8A:73:C5:B2:65 Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23 Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23 Certificate serial: 019BF83F1E565D327C3A8AFBAE856DA6DB21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft Manifest number: 09F9 Signing time: Mon 26 Jan 2026 03:00:44 +0000 Manifest this update: Mon 26 Jan 2026 03:00:44 +0000 Manifest next update: Tue 27 Jan 2026 03:00:44 +0000 Files and hashes: 1: mGTXHUzlo8jZOHFUmBeN6FRI7Bk.roa (hash: 2bfzL2d7ZwGUW9cvd/ehAd7HuPDH/Eytzu1KccPbTks=) 2: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: 6ELdGhZuq3RzcMZ+iBGFZoz/gEf4iTwrBCGHW1l8lFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:1e:56:5d:32:7c:3a:8a:fb:ae:85:6d:a6:db:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23 Validity Not Before: Jan 26 03:00:44 2026 GMT Not After : Jan 27 03:00:44 2026 GMT Subject: CN=0f2a43d9d2ac1d2e1a98cc585c48558a73c5b265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:be:0b:02:1f:ab:0a:3f:83:25:58:e1:ba:8b: 63:a6:53:1c:41:14:8f:fc:92:85:3d:6c:80:96:21: 2e:b6:d9:bb:e6:5e:5b:63:9e:b0:04:28:b6:c9:37: b7:34:35:84:27:e8:47:22:84:a9:28:33:33:c0:65: c5:e6:b5:b6:44:23:19:de:db:9e:44:c3:66:fa:4b: 8e:c4:42:47:25:60:a4:be:a9:3c:99:50:7c:38:06: 90:32:bc:07:7f:50:a0:3c:4f:45:f7:cc:b6:bd:09: 09:d1:ba:d9:af:3c:2e:d5:4f:39:2a:2a:b1:93:c8: ed:45:fa:30:e5:ff:a7:54:d1:b5:d2:84:80:8d:bd: 65:6d:54:24:88:2a:e4:c0:82:f5:3e:42:72:d3:4f: 10:fc:0b:bf:ad:35:40:41:19:c0:d0:0a:13:47:c9: 27:45:fe:2f:dd:4f:0c:4b:f2:a6:23:19:49:e5:32: 30:2f:62:98:e1:0f:15:3b:84:bd:e4:06:60:21:d5: df:f0:24:86:01:f0:f8:48:0e:ac:42:2c:ed:a8:0a: d4:88:34:1d:40:23:fa:48:c4:f7:c6:71:97:e6:2f: 3c:0f:3a:c7:4c:c4:3b:91:69:ed:da:3e:16:9f:a7: 20:a5:25:db:cf:ea:4b:1b:18:e7:a4:3e:59:87:3a: 8e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2A:43:D9:D2:AC:1D:2E:1A:98:CC:58:5C:48:55:8A:73:C5:B2:65 X509v3 Authority Key Identifier: keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ac:33:5e:ba:d7:22:ab:63:63:ac:45:8e:04:a3:81:0c:96: ef:8a:30:6f:5e:8a:09:83:51:6d:96:d1:79:43:f2:60:72:fb: b3:f6:5b:9f:35:e2:b3:dd:ee:39:34:76:b6:c8:86:b5:ae:d4: 64:2a:68:69:c0:95:bc:fb:55:0e:10:c9:2c:c8:57:99:9d:56: 04:98:ab:18:12:fa:cd:ec:a5:c0:31:fb:36:84:9d:e8:fb:2d: 31:20:4f:d3:c3:a3:44:d8:cb:58:75:2a:21:84:29:8c:71:8f: 1d:d5:24:cb:ca:7d:da:2e:99:64:72:7b:53:e4:85:ad:f3:8f: 77:95:b3:f6:98:97:4e:97:89:ac:5b:45:53:79:5f:fb:3c:89: 3d:fc:25:3c:7c:07:7b:0a:4c:bc:73:07:67:a9:15:95:1e:b2: e7:2d:09:57:c1:83:6e:d5:f0:dc:3d:12:43:29:ee:07:a6:22: dd:fc:41:21:43:d8:71:19:25:50:1d:d2:cb:83:b0:e2:49:33: 5c:aa:a8:b7:29:b7:37:fa:ef:b7:90:f5:ae:54:01:6b:9e:9c: 43:69:39:e7:dd:5d:67:89:5d:9c:ae:3c:e4:29:3b:f9:c6:21: 05:ae:b2:de:fd:7f:d7:0c:8e:c4:77:1e:15:ea:02:fd:9e:05: 68:47:61:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4Px5WXTJ8Oor7roVtptshMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZTNkYTM1ODJhMjI4MzBlYzRlNjc1NDdlNzVmYTNiOWRh MjBiMjMwHhcNMjYwMTI2MDMwMDQ0WhcNMjYwMTI3MDMwMDQ0WjAzMTEwLwYDVQQD EygwZjJhNDNkOWQyYWMxZDJlMWE5OGNjNTg1YzQ4NTU4YTczYzViMjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw74LAh+rCj+DJVjhuotjplMcQRSP /JKFPWyAliEuttm75l5bY56wBCi2yTe3NDWEJ+hHIoSpKDMzwGXF5rW2RCMZ3tue RMNm+kuOxEJHJWCkvqk8mVB8OAaQMrwHf1CgPE9F98y2vQkJ0brZrzwu1U85Kiqx k8jtRfow5f+nVNG10oSAjb1lbVQkiCrkwIL1PkJy008Q/Au/rTVAQRnA0AoTR8kn Rf4v3U8MS/KmIxlJ5TIwL2KY4Q8VO4S95AZgIdXf8CSGAfD4SA6sQiztqArUiDQd QCP6SMT3xnGX5i88DzrHTMQ7kWnt2j4Wn6cgpSXbz+pLGxjnpD5ZhzqO1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8qQ9nSrB0uGpjMWFxIVYpzxbJlMB8GA1UdIwQY MBaAFMvj2jWCoigw7E5nVH51+judogsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUt NmUzNmIyZjE3MDZiLzEveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUtNmUzNmIyZjE3MDZi LzEveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6wzXrrX IqtjY6xFjgSjgQyW74owb16KCYNRbZbReUPyYHL7s/ZbnzXis93uOTR2tsiGta7U ZCpoacCVvPtVDhDJLMhXmZ1WBJirGBL6zeylwDH7NoSd6PstMSBP08OjRNjLWHUq IYQpjHGPHdUky8p92i6ZZHJ7U+SFrfOPd5Wz9piXTpeJrFtFU3lf+zyJPfwlPHwH ewpMvHMHZ6kVlR6y5y0JV8GDbtXw3D0SQynuB6Yi3fxBIUPYcRklUB3Sy4Ow4kkz XKqotym3N/rvt5D1rlQBa56cQ2k5591dZ4ldnK485Ck7+cYhBa6y3v1/1wyOxHce FeoC/Z4FaEdh+A== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:23 2026 by rpki-client