This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft File: ywyjSKyJHDNtjHlFpb1bMyXrXws.mft (raw, json) Hash identifier: z15n7AGs38HfZoHkyCT1pPmdfRD9a6LAKnR0Idvg96o= Subject key identifier: CD:17:37:EE:B3:3D:5C:3E:B8:51:7D:08:4A:0B:C0:78:96:19:AA:7D Authority key identifier: CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B Certificate issuer: /CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b Certificate serial: 019BF42BCAB80F866DF27F4B71062CC33180 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft Manifest number: 06B6 Signing time: Sun 25 Jan 2026 08:01:09 +0000 Manifest this update: Sun 25 Jan 2026 08:01:09 +0000 Manifest next update: Mon 26 Jan 2026 08:01:09 +0000 Files and hashes: 1: 1-Y3ijndscKqraUdYHPlGlvPiaww.roa (hash: xxGKvHWQXGb9FbfED6D0G6e4DrQ9E36ESQZN/cdfGxs=) 2: Xh_VSPJKOjJ808dZZ9cjw-Qe3R8.roa (hash: zFLbAkvTVFDLeRppM8t2hdy6uhNcDWH0+KfQkEKnBWc=) 3: h1rJ_5IwT6r9srNzb0xH-naB6tI.roa (hash: 1/JRSZ3nsnOwZgC6F3kqzm5Oq+Y/WO+2ye58dNCreY4=) 4: ywyjSKyJHDNtjHlFpb1bMyXrXws.crl (hash: cRSXtmvhZnWU2iAHCTi4TttzJkaF64+jPmenGSLX6Hg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:ca:b8:0f:86:6d:f2:7f:4b:71:06:2c:c3:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b Validity Not Before: Jan 25 08:01:09 2026 GMT Not After : Jan 26 08:01:09 2026 GMT Subject: CN=cd1737eeb33d5c3eb8517d084a0bc0789619aa7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f5:52:b3:6f:f9:e8:e3:ae:e2:0b:51:cc:1c: 0a:58:0e:d4:19:b8:ab:60:9d:11:72:b7:86:c8:47: 02:be:82:91:f3:34:f3:76:45:56:24:3f:3c:69:25: 6f:3c:0f:d7:17:97:1f:33:f7:04:7b:3a:77:d8:64: 2c:6b:3d:b1:42:ca:22:f0:90:37:f1:d5:d5:db:f4: e5:ff:a6:d0:33:7b:88:b5:b4:d7:54:d6:54:36:ab: 93:a7:6c:68:49:e5:c6:cf:00:2d:f7:4a:42:45:fd: e8:62:d0:28:31:98:8c:8d:de:2b:46:23:ef:1e:af: eb:cc:b6:83:0e:f0:94:e1:b0:d0:0e:08:6c:0e:32: aa:2e:6c:f5:2d:8a:ab:fb:f7:d7:a9:45:cd:86:3c: 25:95:ce:70:2c:02:be:55:7c:53:f9:28:1e:d0:a0: 2a:03:1c:6d:50:97:6e:8d:45:a9:0d:c1:b5:7e:06: e6:b5:3b:dc:2e:66:08:b3:2b:1e:48:9d:42:c8:75: 4c:31:ed:f1:55:82:1f:ab:c4:6d:3b:2c:c7:7e:28: 29:2b:82:ca:7e:9e:1f:63:5d:b7:11:56:7a:af:86: 2f:52:d8:88:a8:39:82:e8:fd:a3:f9:a3:9e:6a:15: 66:64:ca:13:49:94:64:5d:e4:0a:cb:b0:c9:1f:ee: 15:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:17:37:EE:B3:3D:5C:3E:B8:51:7D:08:4A:0B:C0:78:96:19:AA:7D X509v3 Authority Key Identifier: keyid:CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:9e:a2:0b:fe:23:20:c5:ac:03:a7:94:66:09:0b:61:e9:6f: 03:77:3c:b8:1c:97:28:51:09:5b:2d:dc:37:d3:4d:49:c7:db: 16:94:94:8e:74:73:f1:59:32:89:0f:f6:13:c5:0a:35:62:32: f7:07:67:a7:20:1b:b9:c2:69:9b:b6:71:e8:48:5c:19:87:36: 99:27:f8:42:12:fa:2f:35:e2:89:40:bd:43:35:fe:1e:10:73: a6:99:d4:3a:30:0b:7a:65:8a:84:49:f8:00:0e:b7:1a:80:56: 4b:8b:5a:59:5c:3b:56:3c:ab:21:47:7a:f2:a3:3e:e0:94:ef: ca:dc:c9:77:b4:d4:4b:7b:16:c8:e6:17:da:15:ec:cf:27:57: 44:f9:82:82:45:84:a0:06:8c:ce:df:48:02:5e:45:37:a3:64: 54:a1:5e:0d:fd:c9:f1:72:22:72:f1:cd:8a:be:7b:fe:f2:76: c9:41:ad:70:ba:9d:37:f3:c4:3c:d2:22:7b:b7:1d:be:0f:d8: 28:f5:5d:cd:d4:53:76:44:24:66:90:3f:45:d2:16:d6:18:7d: cc:71:26:0e:1d:d9:e2:73:ed:9d:cb:87:dc:7a:12:18:c6:cf: 9f:dc:9a:d7:a4:ce:c3:ab:14:f0:86:05:95:a1:0c:e1:e3:61: a9:7c:68:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K8q4D4Zt8n9LcQYswzGAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMGNhMzQ4YWM4OTFjMzM2ZDhjNzk0NWE1YmQ1YjMzMjVl YjVmMGIwHhcNMjYwMTI1MDgwMTA5WhcNMjYwMTI2MDgwMTA5WjAzMTEwLwYDVQQD EyhjZDE3MzdlZWIzM2Q1YzNlYjg1MTdkMDg0YTBiYzA3ODk2MTlhYTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPVSs2/56OOu4gtRzBwKWA7UGbir YJ0RcreGyEcCvoKR8zTzdkVWJD88aSVvPA/XF5cfM/cEezp32GQsaz2xQsoi8JA3 8dXV2/Tl/6bQM3uItbTXVNZUNquTp2xoSeXGzwAt90pCRf3oYtAoMZiMjd4rRiPv Hq/rzLaDDvCU4bDQDghsDjKqLmz1LYqr+/fXqUXNhjwllc5wLAK+VXxT+Sge0KAq AxxtUJdujUWpDcG1fgbmtTvcLmYIsyseSJ1CyHVMMe3xVYIfq8RtOyzHfigpK4LK fp4fY123EVZ6r4YvUtiIqDmC6P2j+aOeahVmZMoTSZRkXeQKy7DJH+4VnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0XN+6zPVw+uFF9CEoLwHiWGap9MB8GA1UdIwQY MBaAFMsMo0isiRwzbYx5RaW9WzMl618LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXd5alNLeUpIRE50akhsRnBiMWJNeVhyWHdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lZjYxZDYtMDVkMS00ZmIyLWE2ZWEt NDI1MjMyZmQ1NjQzLzEveXd5alNLeUpIRE50akhsRnBiMWJNeVhyWHdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9lZjYxZDYtMDVkMS00ZmIyLWE2ZWEtNDI1MjMyZmQ1NjQz LzEveXd5alNLeUpIRE50akhsRnBiMWJNeVhyWHdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJ6iC/4j IMWsA6eUZgkLYelvA3c8uByXKFEJWy3cN9NNScfbFpSUjnRz8VkyiQ/2E8UKNWIy 9wdnpyAbucJpm7Zx6EhcGYc2mSf4QhL6LzXiiUC9QzX+HhBzppnUOjALemWKhEn4 AA63GoBWS4taWVw7VjyrIUd68qM+4JTvytzJd7TUS3sWyOYX2hXszydXRPmCgkWE oAaMzt9IAl5FN6NkVKFeDf3J8XIicvHNir57/vJ2yUGtcLqdN/PEPNIie7cdvg/Y KPVdzdRTdkQkZpA/RdIW1hh9zHEmDh3Z4nPtncuH3HoSGMbPn9ya16TOw6sU8IYF laEM4eNhqXxoxw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:53:27 2026 by rpki-client