This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft File: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft (raw, json) Hash identifier: ApzzZ+RIKmJTI0SQR1bk9hwpJfsUk23HXvTIlAPdf7o= Subject key identifier: D4:4D:2B:EC:8B:5E:0D:FA:66:D8:AC:B1:89:3A:66:A5:B0:B9:1E:39 Authority key identifier: D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67 Certificate issuer: /CN=d98c4e8a0ea297d67b431aac438a1c20675ef867 Certificate serial: 019BFB0964C82099E37A4FB0B9D2E5857371 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft Manifest number: 036A Signing time: Mon 26 Jan 2026 16:00:55 +0000 Manifest this update: Mon 26 Jan 2026 16:00:55 +0000 Manifest next update: Tue 27 Jan 2026 16:00:55 +0000 Files and hashes: 1: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl (hash: HEBWcwoQRJ6r+4VFUlZniinR74siCC76bMsXbps8ipk=) 2: YKz64qjzkcbm2W2sbtXQlg38t8Y.roa (hash: md6cmjkCVjBhp2ILYsYMB25tfvee/yTEOqBHj6QyZqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 16:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:64:c8:20:99:e3:7a:4f:b0:b9:d2:e5:85:73:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d98c4e8a0ea297d67b431aac438a1c20675ef867 Validity Not Before: Jan 26 16:00:55 2026 GMT Not After : Jan 27 16:00:55 2026 GMT Subject: CN=d44d2bec8b5e0dfa66d8acb1893a66a5b0b91e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2f:ae:b5:38:64:bb:5d:c2:69:82:be:32:ff: b1:ca:d6:46:a5:7a:e6:5d:bb:67:67:f8:cc:ac:de: 5f:a9:8e:9c:7e:00:3b:fd:21:1d:34:ea:24:77:e8: 56:c4:aa:f1:b5:79:c6:27:00:ab:e3:71:4c:d6:10: 20:50:a5:01:34:19:2a:34:0f:fd:55:13:d6:4e:a7: 7e:77:f6:0d:3e:22:4b:0a:51:bd:09:7d:ff:da:00: 9a:ab:36:2f:3a:7c:1f:74:36:28:3f:fa:e8:f7:11: 8f:3d:3f:18:df:ff:83:48:63:77:b9:e8:63:6f:e8: d8:a0:98:c4:3b:c7:70:c0:5d:23:33:4b:09:08:5e: bd:90:1e:5b:4f:da:ae:73:a2:de:bd:ef:af:76:49: cd:80:70:40:38:83:82:94:c9:89:1d:2d:fc:81:dc: 27:8d:dc:d4:73:fa:39:79:eb:b8:09:fa:cd:74:db: 6d:ee:aa:3e:f6:96:d6:73:cc:72:6c:df:ff:91:49: 7b:73:b6:fb:7c:87:ef:c6:01:a3:4f:fb:55:68:af: 9d:97:31:d1:80:68:8f:5c:22:e2:59:78:74:44:f3: b3:b5:3b:80:e2:06:53:c5:17:1d:35:f2:9f:ff:be: b6:66:7c:35:75:ec:73:56:0c:71:e1:08:3c:ea:7c: fc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4D:2B:EC:8B:5E:0D:FA:66:D8:AC:B1:89:3A:66:A5:B0:B9:1E:39 X509v3 Authority Key Identifier: keyid:D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ff:e2:c9:d4:ea:21:b4:0a:f9:f2:08:bc:bd:c4:01:ad:92: 6a:79:73:49:34:1b:0b:5c:47:a0:0f:65:a2:ee:96:29:36:c3: a6:32:4d:75:75:d0:7e:ca:4c:83:19:4b:11:ab:ca:03:ff:ab: 5f:2d:9e:ee:fc:0b:ed:57:4c:a1:00:cf:c7:9b:c9:09:c2:98: 87:1d:45:c3:cc:33:da:fb:fe:5d:53:a2:69:84:09:41:ed:5f: 62:07:ca:a9:1d:07:3e:07:a2:58:7d:82:48:b2:1b:91:c5:2c: d5:69:f4:32:08:ec:e3:21:4f:d8:7c:05:39:82:7f:a2:de:2d: 11:ff:ce:f8:e3:50:24:da:c2:dd:a0:c8:8b:cd:76:f7:14:27: fe:98:64:b4:bf:7e:fe:97:ca:24:cc:aa:09:01:19:51:20:96: df:a3:6b:b2:27:3f:d9:a9:a1:ca:a1:64:b6:8c:04:71:37:a6: 22:ae:22:d0:c7:b7:2f:0e:61:2f:c7:e1:37:d7:34:dc:92:a7: f5:24:72:87:e3:42:ac:2d:77:a2:25:7b:3e:93:4e:b7:e9:44: f4:f0:e7:ae:45:ea:7e:56:c7:3b:6b:93:c7:ee:f4:21:f9:45: 54:cf:77:cc:d8:45:06:50:10:7a:a8:0a:dd:f9:69:f9:78:9c: 95:94:d6:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CWTIIJnjek+wudLlhXNxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OGM0ZThhMGVhMjk3ZDY3YjQzMWFhYzQzOGExYzIwNjc1 ZWY4NjcwHhcNMjYwMTI2MTYwMDU1WhcNMjYwMTI3MTYwMDU1WjAzMTEwLwYDVQQD EyhkNDRkMmJlYzhiNWUwZGZhNjZkOGFjYjE4OTNhNjZhNWIwYjkxZTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S+utThku13CaYK+Mv+xytZGpXrm XbtnZ/jMrN5fqY6cfgA7/SEdNOokd+hWxKrxtXnGJwCr43FM1hAgUKUBNBkqNA/9 VRPWTqd+d/YNPiJLClG9CX3/2gCaqzYvOnwfdDYoP/ro9xGPPT8Y3/+DSGN3uehj b+jYoJjEO8dwwF0jM0sJCF69kB5bT9quc6Leve+vdknNgHBAOIOClMmJHS38gdwn jdzUc/o5eeu4CfrNdNtt7qo+9pbWc8xybN//kUl7c7b7fIfvxgGjT/tVaK+dlzHR gGiPXCLiWXh0RPOztTuA4gZTxRcdNfKf/762Znw1dexzVgxx4Qg86nz80wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRNK+yLXg36ZtissYk6ZqWwuR45MB8GA1UdIwQY MBaAFNmMTooOopfWe0MarEOKHCBnXvhnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMll4T2lnNmlsOVo3UXhxc1E0b2NJR2RlLUdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81YTM1MmUtNWJjYS00NDY4LWI4ZDYt YmEwNmU3NGRiOTFjLzEvMll4T2lnNmlsOVo3UXhxc1E0b2NJR2RlLUdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS81YTM1MmUtNWJjYS00NDY4LWI4ZDYtYmEwNmU3NGRiOTFj LzEvMll4T2lnNmlsOVo3UXhxc1E0b2NJR2RlLUdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG//iydTq IbQK+fIIvL3EAa2SanlzSTQbC1xHoA9lou6WKTbDpjJNdXXQfspMgxlLEavKA/+r Xy2e7vwL7VdMoQDPx5vJCcKYhx1Fw8wz2vv+XVOiaYQJQe1fYgfKqR0HPgeiWH2C SLIbkcUs1Wn0Mgjs4yFP2HwFOYJ/ot4tEf/O+ONQJNrC3aDIi8129xQn/phktL9+ /pfKJMyqCQEZUSCW36Nrsic/2amhyqFktowEcTemIq4i0Me3Lw5hL8fhN9c03JKn 9SRyh+NCrC13oiV7PpNOt+lE9PDnrkXqflbHO2uTx+70IflFVM93zNhFBlAQeqgK 3flp+XiclZTWVw== -----END CERTIFICATE-----Generated at Tue Jan 27 01:57:29 2026 by rpki-client