This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft File: yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft (raw, json) Hash identifier: 7iIJ/KCM15sah90xGBWlG2ksbPqnObyDLEa+0EYKwXo= Subject key identifier: BF:51:41:96:22:16:69:AD:FE:C5:33:5E:73:28:98:30:A2:D3:59:11 Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77 Certificate issuer: /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277 Certificate serial: 019BF8086B3685D473A8135349AD27AAF348 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft Manifest number: 146E Signing time: Mon 26 Jan 2026 02:00:59 +0000 Manifest this update: Mon 26 Jan 2026 02:00:59 +0000 Manifest next update: Tue 27 Jan 2026 02:00:59 +0000 Files and hashes: 1: xJ9oLhi0jZ3bx5rEVTQJ-Dbq8Ic.roa (hash: 8Hl158eCXhXx4gFRUokLsBxI0i7haKKmOz5b/bBgdPg=) 2: yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl (hash: ChiZybQnGpcxAbacJzSt/7blvAJXuj92TD9NJg5fXfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:6b:36:85:d4:73:a8:13:53:49:ad:27:aa:f3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277 Validity Not Before: Jan 26 02:00:59 2026 GMT Not After : Jan 27 02:00:59 2026 GMT Subject: CN=bf514196221669adfec5335e73289830a2d35911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4f:c3:f1:ce:83:7d:58:68:83:46:69:86:f8: f0:1e:40:92:ae:18:2b:21:cf:bd:95:f4:43:cf:c1: 51:b5:55:16:8d:08:67:1c:5c:94:9e:92:3f:1c:09: 13:dd:3f:92:2f:1d:ab:b1:3b:9f:48:d6:5b:24:b2: 0a:77:4e:64:f9:c9:ec:9b:94:96:41:e6:be:6a:7e: cc:34:a7:3d:4d:e6:d4:3c:c1:ee:a7:43:34:d1:97: f0:b2:8a:73:a4:bf:8c:75:fb:bb:92:f5:20:fe:53: ed:97:cb:f0:ef:9a:e5:5c:dc:68:d9:33:71:94:16: 23:d0:24:09:5e:21:ab:77:fd:a1:63:a7:46:c5:f3: 8b:8d:05:99:53:43:fd:46:db:09:c5:ec:1a:d9:4d: 73:44:43:52:53:8d:84:a9:95:cf:26:19:12:53:8f: 40:1d:fd:1f:cc:ee:dd:72:ff:52:df:78:7b:cb:9c: 32:d9:92:e9:c8:5b:66:48:fe:80:2d:f9:1d:cc:de: 25:0f:3a:22:f6:da:25:b2:ed:f5:df:1a:52:12:de: 35:3a:4f:9f:7b:41:4a:55:80:31:e5:08:02:78:c0: 88:6e:94:ca:51:aa:4c:90:6e:4d:20:fc:cf:b4:40: 95:f3:5d:0a:c9:8e:b6:e0:6b:4e:2a:1b:f5:0e:09: c4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:51:41:96:22:16:69:AD:FE:C5:33:5E:73:28:98:30:A2:D3:59:11 X509v3 Authority Key Identifier: keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:a3:6a:b8:c3:37:f4:10:96:5f:7d:de:5e:f4:70:02:6a:95: 6b:cf:71:1a:56:0f:26:59:a0:73:8d:2f:c9:42:ad:f1:16:6f: 41:2b:68:2c:38:fe:e3:8a:3c:1b:b4:cc:2b:3e:36:e2:82:fc: 85:2f:56:fe:ff:4a:1c:4d:16:75:05:0d:2e:af:f7:97:55:e4: b5:fd:21:b3:13:6b:e5:21:24:49:d7:6a:2f:51:2c:95:fc:e2: 66:01:99:52:05:01:0e:ef:07:2a:cf:3b:1d:ab:57:ff:88:7a: df:5a:70:89:2c:32:9e:2e:12:f4:00:f5:3c:bc:88:89:52:80: ad:8f:28:41:88:e9:f4:9c:d0:30:b0:9e:85:d8:3d:c2:b1:dc: be:5a:69:a8:22:fa:32:83:3b:1d:95:19:d0:97:08:af:c9:c9: fa:c6:a2:cc:c8:af:fc:94:38:d6:db:50:12:88:6a:25:a8:8f: 89:4a:04:16:48:18:99:6b:95:c7:be:b3:88:df:42:74:9b:28: bd:2e:47:69:dc:9e:0e:ae:c1:e8:16:a9:42:49:0c:c2:84:41: 99:2d:42:7c:2e:33:c7:0d:e8:5e:0a:fd:7d:df:f7:43:f9:86: 32:3f:71:0e:95:55:52:97:8f:82:38:d9:60:ba:62:38:5b:52: 54:ad:9a:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CGs2hdRzqBNTSa0nqvNIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4Mjg5NTM1ZTdlNGQyM2U2M2UxNzhlM2ZiNWJmMDU2ZmU4 YWUyNzcwHhcNMjYwMTI2MDIwMDU5WhcNMjYwMTI3MDIwMDU5WjAzMTEwLwYDVQQD EyhiZjUxNDE5NjIyMTY2OWFkZmVjNTMzNWU3MzI4OTgzMGEyZDM1OTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0/D8c6DfVhog0ZphvjwHkCSrhgr Ic+9lfRDz8FRtVUWjQhnHFyUnpI/HAkT3T+SLx2rsTufSNZbJLIKd05k+cnsm5SW Qea+an7MNKc9TebUPMHup0M00ZfwsopzpL+Mdfu7kvUg/lPtl8vw75rlXNxo2TNx lBYj0CQJXiGrd/2hY6dGxfOLjQWZU0P9RtsJxewa2U1zRENSU42EqZXPJhkSU49A Hf0fzO7dcv9S33h7y5wy2ZLpyFtmSP6ALfkdzN4lDzoi9tolsu313xpSEt41Ok+f e0FKVYAx5QgCeMCIbpTKUapMkG5NIPzPtECV810KyY624GtOKhv1DgnE0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9RQZYiFmmt/sUzXnMomDCi01kRMB8GA1UdIwQY MBaAFMgolTXn5NI+Y+F44/tb8Fb+iuJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82ZGNlZGItY2EwYi00ODNhLWE2NjQt NjZhNWVjYzg0NjE2LzEveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82ZGNlZGItY2EwYi00ODNhLWE2NjQtNjZhNWVjYzg0NjE2 LzEveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKNquMM3 9BCWX33eXvRwAmqVa89xGlYPJlmgc40vyUKt8RZvQStoLDj+44o8G7TMKz424oL8 hS9W/v9KHE0WdQUNLq/3l1Xktf0hsxNr5SEkSddqL1EslfziZgGZUgUBDu8HKs87 HatX/4h631pwiSwyni4S9AD1PLyIiVKArY8oQYjp9JzQMLCehdg9wrHcvlppqCL6 MoM7HZUZ0JcIr8nJ+saizMiv/JQ41ttQEohqJaiPiUoEFkgYmWuVx76ziN9CdJso vS5HadyeDq7B6BapQkkMwoRBmS1CfC4zxw3oXgr9fd/3Q/mGMj9xDpVVUpePgjjZ YLpiOFtSVK2aWQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:57:32 2026 by rpki-client