This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft File: ryto8Mg63Zo6O4arJPuRCpYCYsY.mft (raw, json) Hash identifier: uxHdSeuWgDAiqhznEVbGo1tQmzCIl1uRDa5CNSx7zO8= Subject key identifier: 9E:BA:7A:25:DA:FF:DE:1B:21:2C:3D:34:78:4D:6B:6C:C3:39:C0:CE Authority key identifier: AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6 Certificate issuer: /CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6 Certificate serial: 019BF6F57CD40937EFFB4D8DF1C7FC1FE5EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft Manifest number: 135B Signing time: Sun 25 Jan 2026 21:00:41 +0000 Manifest this update: Sun 25 Jan 2026 21:00:41 +0000 Manifest next update: Mon 26 Jan 2026 21:00:41 +0000 Files and hashes: 1: h-PWIeDfQLuLQns6H59eVXIlTEw.roa (hash: a2RfFAyHbTGC+LHQhF0hKAuxj7Am0hNvyjuE9TNtMKs=) 2: ryto8Mg63Zo6O4arJPuRCpYCYsY.crl (hash: syok1L7l3jjzu9R1VSvwTkZuOnPPwf8YWSRMI7RcVqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:7c:d4:09:37:ef:fb:4d:8d:f1:c7:fc:1f:e5:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6 Validity Not Before: Jan 25 21:00:41 2026 GMT Not After : Jan 26 21:00:41 2026 GMT Subject: CN=9eba7a25daffde1b212c3d34784d6b6cc339c0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0e:01:70:68:3b:e4:78:f4:9b:3f:cd:17:4e: fe:a3:d8:28:b6:d8:f7:99:2b:d0:b6:14:a5:77:9d: 9a:45:ab:4f:12:8b:39:c5:b0:57:39:a7:36:2a:ce: 0d:dd:d2:1f:40:f6:3c:53:83:11:00:89:36:d1:d2: f9:97:06:6b:9f:ab:bc:82:50:44:1e:e3:dd:32:52: 1c:86:2e:a7:29:09:77:78:f8:6f:11:80:f3:47:bb: 40:ed:79:a5:0f:f5:17:53:f8:84:ab:0c:6f:ad:eb: 2e:53:7c:74:f3:a7:db:a7:94:cd:14:4a:3b:f2:3f: 37:2d:3c:61:6e:27:5d:af:78:98:55:23:45:f8:a5: 1b:b1:8c:81:e3:85:88:c8:20:1c:10:37:85:be:b6: d0:88:65:e6:bb:d5:4b:ca:80:77:d1:55:e1:96:b8: e8:af:18:1a:40:68:c1:5e:ca:79:54:f6:c7:e5:56: 75:09:00:88:b2:bb:50:d5:2f:4b:87:06:a4:b6:e9: 97:c2:fd:73:b1:33:4a:d7:00:b3:d6:97:c8:d9:7f: 46:d5:89:e8:20:08:51:09:8e:82:af:cd:24:9e:81: 1a:d7:9a:e2:92:e1:00:61:d5:cf:30:90:7d:83:82: ea:13:83:8a:d8:58:40:e8:93:86:a1:a7:77:98:57: 54:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BA:7A:25:DA:FF:DE:1B:21:2C:3D:34:78:4D:6B:6C:C3:39:C0:CE X509v3 Authority Key Identifier: keyid:AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:dd:71:9d:f2:47:f9:02:ea:0f:50:7b:e0:bc:aa:13:07:e5: 2c:dc:9d:02:98:08:54:51:e7:e4:49:67:1c:5d:9f:c7:c3:14: 51:6a:19:71:22:d6:6e:fa:07:00:a1:34:d8:df:7f:9d:21:70: 9c:a2:51:29:2a:e1:61:71:fc:50:df:1f:09:50:b9:13:f2:d9: 21:db:73:ad:c5:dd:84:23:41:1e:5f:55:10:b2:b5:68:1d:fa: 0b:84:25:2d:89:d2:98:4c:27:8d:d5:29:4b:f5:e5:16:f7:2a: e8:69:db:d1:05:24:f4:f5:78:6e:b6:44:ba:86:26:39:3c:56: 6b:88:93:7d:8a:dd:d5:0c:d1:dc:d8:25:10:44:1b:54:13:8f: b8:ac:ed:5b:1d:01:69:ee:f6:6d:c0:cf:3d:34:ea:bd:c5:b4: a3:74:34:c8:18:71:b0:7c:6e:b6:a6:c8:dc:8f:9e:0d:6c:05: b6:1d:26:1c:ee:17:1c:fa:f6:cb:2a:ba:ce:85:ec:b8:25:81: 14:50:b2:1d:32:44:3a:83:b9:93:93:53:47:8f:85:10:68:91: d7:c9:7e:dd:5d:db:0b:5f:99:3f:ea:53:b5:c1:19:df:4f:ad: 5e:21:5b:ca:46:b3:c0:6b:60:b9:37:ae:da:2e:3f:fc:ec:ad: 98:fa:ad:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29XzUCTfv+02N8cf8H+XrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMmI2OGYwYzgzYWRkOWEzYTNiODZhYjI0ZmI5MTBhOTYw MjYyYzYwHhcNMjYwMTI1MjEwMDQxWhcNMjYwMTI2MjEwMDQxWjAzMTEwLwYDVQQD Eyg5ZWJhN2EyNWRhZmZkZTFiMjEyYzNkMzQ3ODRkNmI2Y2MzMzljMGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg4BcGg75Hj0mz/NF07+o9gottj3 mSvQthSld52aRatPEos5xbBXOac2Ks4N3dIfQPY8U4MRAIk20dL5lwZrn6u8glBE HuPdMlIchi6nKQl3ePhvEYDzR7tA7XmlD/UXU/iEqwxvresuU3x086fbp5TNFEo7 8j83LTxhbiddr3iYVSNF+KUbsYyB44WIyCAcEDeFvrbQiGXmu9VLyoB30VXhlrjo rxgaQGjBXsp5VPbH5VZ1CQCIsrtQ1S9LhwaktumXwv1zsTNK1wCz1pfI2X9G1Yno IAhRCY6Cr80knoEa15rikuEAYdXPMJB9g4LqE4OK2FhA6JOGoad3mFdU/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ66eiXa/94bISw9NHhNa2zDOcDOMB8GA1UdIwQY MBaAFK8raPDIOt2aOjuGqyT7kQqWAmLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnl0bzhNZzYzWm82TzRhckpQdVJDcFlDWXNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83OTNlMDAtMGM1My00OWM0LWE1MWIt ZWRhMzE2YTJhZmI4LzEvcnl0bzhNZzYzWm82TzRhckpQdVJDcFlDWXNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy83OTNlMDAtMGM1My00OWM0LWE1MWItZWRhMzE2YTJhZmI4 LzEvcnl0bzhNZzYzWm82TzRhckpQdVJDcFlDWXNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAad1xnfJH +QLqD1B74LyqEwflLNydApgIVFHn5ElnHF2fx8MUUWoZcSLWbvoHAKE02N9/nSFw nKJRKSrhYXH8UN8fCVC5E/LZIdtzrcXdhCNBHl9VELK1aB36C4QlLYnSmEwnjdUp S/XlFvcq6Gnb0QUk9PV4brZEuoYmOTxWa4iTfYrd1QzR3NglEEQbVBOPuKztWx0B ae72bcDPPTTqvcW0o3Q0yBhxsHxutqbI3I+eDWwFth0mHO4XHPr2yyq6zoXsuCWB FFCyHTJEOoO5k5NTR4+FEGiR18l+3V3bC1+ZP+pTtcEZ30+tXiFbykazwGtguTeu 2i4//OytmPqtRA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:49 2026 by rpki-client