This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft File: y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft (raw, json) Hash identifier: +41xwJfjH6VFT92j24leVsCeAWIDYzrZo9PMYGsl1OI= Subject key identifier: F1:61:E9:83:51:AB:B8:11:90:7A:87:97:84:C2:D9:EF:2E:73:9E:99 Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2 Certificate issuer: /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2 Certificate serial: 019BF8ACE88ED2E0454A9AE6AAC21844B467 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 05:00:39 +0000 Manifest this update: Mon 26 Jan 2026 05:00:39 +0000 Manifest next update: Tue 27 Jan 2026 05:00:39 +0000 Files and hashes: 1: 9tnMBfiIpNVErByTpvjDqn5wKbY.roa (hash: kOpNjJnS/Tt8SHMz9QLvG0L/TVTmkM0mNYtN/5t0qzc=) 2: VJaS-jYIuprV7YtO1DCuyd2g5wY.roa (hash: hL/BN/PlAs7Bgm3HIeGTv4CgOWk68zftN+8vu/Zh/Kk=) 3: eV_cnBLHExwM3HoFdmLAj8EL0dU.roa (hash: izY6q8vOLE3p/u7foQA9fiAmgnD5RtTMesu7+JH2h/0=) 4: n4s3R3iktWUGobIMBTVKacPInjg.roa (hash: XxvWTy0J0RZ/Rk3snkitBdW77lxKp2361BnvrzID/vE=) 5: qDwRi2lUn6QwtTVR74uQNIDyQDY.roa (hash: jR4Cc4WipI4p46sG0PogQImTneHDTqWPMtigJYRDeY8=) 6: y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl (hash: yk9WdUrkTZHOuWi9apgkEqibmg4pO4eY4vHNtkkHE9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:e8:8e:d2:e0:45:4a:9a:e6:aa:c2:18:44:b4:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2 Validity Not Before: Jan 26 05:00:39 2026 GMT Not After : Jan 27 05:00:39 2026 GMT Subject: CN=f161e98351abb811907a879784c2d9ef2e739e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:83:c2:d3:67:0e:7a:b7:22:35:23:e8:60: 68:dc:db:86:88:f7:66:34:11:8e:b3:ed:09:2f:90: 99:10:65:a4:89:26:4e:21:b3:cd:4e:fc:ff:48:ec: 69:6e:50:f0:d6:e5:38:95:a6:14:ef:3a:55:ac:6a: be:d5:2e:95:bd:4d:8e:77:04:3b:15:4b:cd:5e:ef: 65:ce:74:11:d4:0f:11:c2:37:e6:2d:9b:5d:b9:b2: 91:c9:03:83:82:98:80:ac:0a:93:8c:1e:7e:d5:43: 02:39:e6:2e:7f:67:98:e9:4e:20:54:12:2e:ac:88: fb:e6:a2:b7:0d:9e:2e:a7:4e:7c:06:31:2b:bf:d3: 84:d8:bf:52:c3:c9:c1:80:2a:fc:d0:eb:24:73:1a: 64:27:81:77:70:4c:f9:2d:71:e0:36:e9:fa:80:75: 80:de:94:f1:3b:a2:a3:d4:92:5c:56:93:6b:10:e2: 08:94:f7:a2:5f:3a:3d:6e:fa:d4:18:cd:23:8f:8e: 20:11:86:05:e1:08:4a:8f:27:f5:bf:97:07:ae:eb: 28:06:65:56:28:fa:2c:fa:05:e5:cf:c9:1a:21:0b: 16:1e:8e:e5:04:8b:37:a8:0d:c0:0e:de:63:b5:3f: df:d6:12:4e:6f:cb:3b:22:11:bb:d7:b6:f7:ce:20: c8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:61:E9:83:51:AB:B8:11:90:7A:87:97:84:C2:D9:EF:2E:73:9E:99 X509v3 Authority Key Identifier: keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:e6:b8:cc:37:43:e5:e9:e1:0d:a9:ee:61:3b:c9:84:11:04: 0d:2c:e5:d9:fe:fb:b8:61:79:c3:cd:01:0d:69:56:85:72:31: 09:63:e0:6e:82:f5:e6:c3:52:96:43:2f:dc:1e:ce:a1:3f:cb: 31:b6:93:ed:e0:55:db:45:6a:17:fc:86:6c:3d:ea:92:c8:c3: cd:70:f3:46:58:f9:f4:ea:26:56:c8:f1:0d:9e:89:a6:17:c7: 7e:38:85:12:b9:c8:42:98:d7:5c:a4:c1:b4:2d:b2:51:07:35: b1:25:cb:6a:9b:23:46:3f:ac:7c:ab:dc:97:6a:6b:c2:24:90: 7e:58:37:35:23:39:86:45:7f:20:e6:f9:9a:36:56:d9:36:2f: 42:f5:81:d9:67:e8:ea:01:68:68:9c:c9:8c:1e:77:92:dd:f9: a2:75:2c:30:e5:24:40:4b:48:28:e6:a9:1d:5e:52:bb:92:17: 2e:96:7d:4d:27:bd:00:f9:53:24:d5:90:2e:f6:fe:42:92:88: 61:bf:44:5e:1d:3b:05:e4:63:35:9c:92:b0:7f:9e:99:f6:1c: 6b:5b:81:1a:c8:72:dd:89:69:ba:5c:8e:98:c4:31:b4:f7:50: 9b:db:d4:2a:25:c8:cc:86:f4:31:43:fd:b9:5d:b3:e2:3e:24: 2f:ee:a3:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rOiO0uBFSprmqsIYRLRnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOTUyZjljMzM5Y2FiZDE0MjM0ZDAwYzg0YTI1MmQ3ZWM3 MWEyYTIwHhcNMjYwMTI2MDUwMDM5WhcNMjYwMTI3MDUwMDM5WjAzMTEwLwYDVQQD EyhmMTYxZTk4MzUxYWJiODExOTA3YTg3OTc4NGMyZDllZjJlNzM5ZTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo2DwtNnDnq3IjUj6GBo3NuGiPdm NBGOs+0JL5CZEGWkiSZOIbPNTvz/SOxpblDw1uU4laYU7zpVrGq+1S6VvU2OdwQ7 FUvNXu9lznQR1A8RwjfmLZtdubKRyQODgpiArAqTjB5+1UMCOeYuf2eY6U4gVBIu rIj75qK3DZ4up058BjErv9OE2L9Sw8nBgCr80OskcxpkJ4F3cEz5LXHgNun6gHWA 3pTxO6Kj1JJcVpNrEOIIlPeiXzo9bvrUGM0jj44gEYYF4QhKjyf1v5cHrusoBmVW KPos+gXlz8kaIQsWHo7lBIs3qA3ADt5jtT/f1hJOb8s7IhG717b3ziDIawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFh6YNRq7gRkHqHl4TC2e8uc56ZMB8GA1UdIwQY MBaAFMuVL5wznKvRQjTQDISiUtfscaKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMt ZmQyMmRmM2I1N2Y2LzEveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMtZmQyMmRmM2I1N2Y2 LzEveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQea4zDdD 5enhDanuYTvJhBEEDSzl2f77uGF5w80BDWlWhXIxCWPgboL15sNSlkMv3B7OoT/L MbaT7eBV20VqF/yGbD3qksjDzXDzRlj59OomVsjxDZ6JphfHfjiFErnIQpjXXKTB tC2yUQc1sSXLapsjRj+sfKvcl2prwiSQflg3NSM5hkV/IOb5mjZW2TYvQvWB2Wfo 6gFoaJzJjB53kt35onUsMOUkQEtIKOapHV5Su5IXLpZ9TSe9APlTJNWQLvb+QpKI Yb9EXh07BeRjNZySsH+emfYca1uBGshy3YlpulyOmMQxtPdQm9vUKiXIzIb0MUP9 uV2z4j4kL+6jPA== -----END CERTIFICATE-----Generated at Mon Jan 26 06:37:40 2026 by rpki-client