This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json) Hash identifier: 1eGN+j5RcShLPIaH0Tz192t5E8xaix9Flw9bD6dQXDM= Subject key identifier: 80:24:32:A7:71:90:E3:BC:89:98:3E:EF:2F:65:62:28:0D:D4:BA:FC Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce Certificate serial: 019BF3193E1C0E49F37B52A480B1DEA48667 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft Manifest number: 17E4 Signing time: Sun 25 Jan 2026 03:01:16 +0000 Manifest this update: Sun 25 Jan 2026 03:01:16 +0000 Manifest next update: Mon 26 Jan 2026 03:01:16 +0000 Files and hashes: 1: QPQtrPAdzjVTLUIL1R2LDnfS2LA.roa (hash: Y2kjypGDHo8r5S3vGzyX8p4vjhzMXiKa35ThvxEKdFQ=) 2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: ZR7DvqAbSKptOQxzZms6rpI/BuqqMfwonuhV8cTI2Tk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:19:3e:1c:0e:49:f3:7b:52:a4:80:b1:de:a4:86:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce Validity Not Before: Jan 25 03:01:16 2026 GMT Not After : Jan 26 03:01:16 2026 GMT Subject: CN=802432a77190e3bc89983eef2f6562280dd4bafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6d:bf:4e:a0:a8:d8:2c:bd:0e:43:81:99:59: bb:19:6c:0c:85:5f:a0:80:e3:56:fc:db:6e:56:09: 68:9e:0a:04:3b:cc:99:f6:fc:f6:2f:10:08:56:14: 84:da:93:40:43:14:b0:c8:cd:31:a0:4d:b4:b9:59: e0:6c:5b:a0:cc:4e:0b:35:23:26:ea:de:b9:c6:b0: 21:3d:7c:ab:e7:3f:a9:80:62:19:8d:09:ff:4b:c2: 82:b1:10:77:cc:f2:f7:84:60:56:a4:81:1c:39:78: 1c:a1:af:f0:e1:a4:1c:dc:16:64:c7:0d:e9:75:5d: 45:99:b4:67:d0:29:6f:33:75:80:bb:f0:c7:94:10: 9c:0b:f7:ec:7c:6a:a7:43:f0:bd:25:4a:da:2e:39: f4:0c:28:4f:89:0c:dd:bf:63:bb:c0:4a:0b:d9:42: 0a:93:80:b1:2d:f4:bb:23:2a:7b:35:5e:9f:f5:c2: 10:3c:36:14:f0:f7:81:50:d9:0b:ee:ab:48:1c:03: 4d:ae:fe:14:50:ba:f3:a8:5c:7d:c5:2c:ef:34:9e: 39:4b:b0:fa:3a:4b:86:eb:2b:e0:dd:5b:bd:1a:87: e2:4d:df:80:98:54:73:0d:a2:fd:a9:16:02:07:12: e6:ee:91:a4:75:b7:7e:f3:aa:46:34:35:b8:4d:10: 97:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:24:32:A7:71:90:E3:BC:89:98:3E:EF:2F:65:62:28:0D:D4:BA:FC X509v3 Authority Key Identifier: keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d9:75:fc:8a:0b:1a:2c:92:b5:92:ad:c0:0a:03:2f:cc:df: 1f:bd:11:b8:f3:fc:4f:73:45:9d:ef:f5:f2:b1:8b:be:37:a6: 16:1e:c2:aa:f1:7e:1f:52:fc:d5:b3:e2:97:04:26:29:a1:ee: f4:cd:05:a2:2f:d6:7e:d0:80:d5:f0:4c:ef:16:ca:60:0c:b9: d6:ae:c6:cc:63:11:bb:13:78:52:a7:8e:52:bd:7a:8c:05:fb: da:a1:4e:74:15:79:73:9c:6e:0d:15:61:ce:63:4b:85:a7:09: a1:1b:1a:e8:71:20:fd:72:75:76:f5:83:2b:b1:fe:b7:5c:93: 9f:d5:29:85:2f:69:da:7a:5c:fe:13:c8:25:49:06:3e:d1:e2: 31:9a:40:ae:47:ff:45:21:55:64:99:05:27:30:9f:e8:b0:eb: b2:f1:d6:be:63:60:72:0f:bb:d0:44:11:83:2b:9f:29:52:d8: f6:61:a5:ec:12:ff:d7:4f:74:ae:f8:8d:0c:3b:98:e9:74:29: 39:e5:f8:1f:f1:c4:74:73:30:cd:38:44:87:10:91:97:38:36: fe:5a:48:88:cb:b6:ca:93:ae:bd:6e:59:7c:58:0c:bb:9d:65: e1:e6:da:d0:17:0b:6f:a8:c2:54:84:ba:87:55:de:37:a4:62: 91:ae:b3:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGT4cDknze1KkgLHepIZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOTVlMWNiYzY3ZTc4MmRiZjlmOGU3NDRlNDM3MjY4YmRj YzM5Y2UwHhcNMjYwMTI1MDMwMTE2WhcNMjYwMTI2MDMwMTE2WjAzMTEwLwYDVQQD Eyg4MDI0MzJhNzcxOTBlM2JjODk5ODNlZWYyZjY1NjIyODBkZDRiYWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA722/TqCo2Cy9DkOBmVm7GWwMhV+g gONW/NtuVglongoEO8yZ9vz2LxAIVhSE2pNAQxSwyM0xoE20uVngbFugzE4LNSMm 6t65xrAhPXyr5z+pgGIZjQn/S8KCsRB3zPL3hGBWpIEcOXgcoa/w4aQc3BZkxw3p dV1FmbRn0ClvM3WAu/DHlBCcC/fsfGqnQ/C9JUraLjn0DChPiQzdv2O7wEoL2UIK k4CxLfS7Iyp7NV6f9cIQPDYU8PeBUNkL7qtIHANNrv4UULrzqFx9xSzvNJ45S7D6 OkuG6yvg3Vu9GofiTd+AmFRzDaL9qRYCBxLm7pGkdbd+86pGNDW4TRCXuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAkMqdxkOO8iZg+7y9lYigN1Lr8MB8GA1UdIwQY MBaAFMuV4cvGfngtv5+OdE5Dcmi9zDnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83M2UwMGYtZTNlMy00ZDIzLWFkNmIt NzY2ODJlNzk0Y2MzLzEveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83M2UwMGYtZTNlMy00ZDIzLWFkNmItNzY2ODJlNzk0Y2Mz LzEveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9l1/IoL GiyStZKtwAoDL8zfH70RuPP8T3NFne/18rGLvjemFh7CqvF+H1L81bPilwQmKaHu 9M0Foi/WftCA1fBM7xbKYAy51q7GzGMRuxN4UqeOUr16jAX72qFOdBV5c5xuDRVh zmNLhacJoRsa6HEg/XJ1dvWDK7H+t1yTn9UphS9p2npc/hPIJUkGPtHiMZpArkf/ RSFVZJkFJzCf6LDrsvHWvmNgcg+70EQRgyufKVLY9mGl7BL/1090rviNDDuY6XQp OeX4H/HEdHMwzThEhxCRlzg2/lpIiMu2ypOuvW5ZfFgMu51l4eba0BcLb6jCVIS6 h1XeN6Rika6zpA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:31 2026 by rpki-client