This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft File: lyQtuibtiCs4DavrqzxfOUIAbsw.mft (raw, json) Hash identifier: spNNdaq2+V5pDpCmLRLqSnm17cn13sDwSgsGzPKi1LU= Subject key identifier: 70:E7:60:25:0E:85:C2:0A:24:08:E1:42:5D:23:36:56:CF:AA:E7:1D Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC Certificate issuer: /CN=97242dba26ed882b380dabebab3c5f3942006ecc Certificate serial: 019BF2064658C2DFD286CA8524DDE3112D6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft Manifest number: 17EC Signing time: Sat 24 Jan 2026 22:00:56 +0000 Manifest this update: Sat 24 Jan 2026 22:00:56 +0000 Manifest next update: Sun 25 Jan 2026 22:00:56 +0000 Files and hashes: 1: KuYHIDTT0pfrZb69d41RvniDU3w.roa (hash: pzsXiQ0yFpyoB+XjLaUAL8JPW4YObE6pxPQc+E3xZNQ=) 2: lyQtuibtiCs4DavrqzxfOUIAbsw.crl (hash: 75TGqGe2ouws4cs4QXn6hopoLMAp1zYL4Z93DRkbDyA=) 3: vKZmJ0jDQuc8fHx1GoSSQ_umesg.roa (hash: aKqfhdTXupMXPlpBmxeTWXojTlpX9o9GLhhsywcjHYI=) 4: w1fI7tvPLN33WU2I9Rt_Z9orWcc.roa (hash: RojgiRAa+/JdbpS5f+RHbhZYfz5WfXhvE0D2UVq9ASc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:06:46:58:c2:df:d2:86:ca:85:24:dd:e3:11:2d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc Validity Not Before: Jan 24 22:00:56 2026 GMT Not After : Jan 25 22:00:56 2026 GMT Subject: CN=70e760250e85c20a2408e1425d233656cfaae71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:58:99:99:17:a1:5f:f7:e7:a2:b9:15:bb:5e: cd:8c:92:fa:ba:ac:e2:29:9f:f9:eb:0a:5f:87:0a: 61:0c:48:55:8b:4f:29:fc:30:c1:16:83:e2:34:b2: 02:ef:01:c2:5f:32:d7:fe:f6:31:98:8e:7f:0c:59: 1e:1e:09:0c:5b:d9:78:80:88:e9:a9:63:2e:a9:a6: d0:64:52:c7:0a:5a:f3:1e:c4:d6:b2:86:60:7e:1a: 4a:dc:b0:3e:cd:44:0c:34:71:56:65:9f:a3:3f:6a: 36:cc:36:3c:ec:fc:fa:49:a7:4c:5f:8d:c5:ff:67: b0:02:2a:26:34:c1:fa:9b:ea:01:72:6e:36:6e:b4: 31:65:9c:5b:af:b2:04:4f:94:1f:cb:1e:bb:f2:04: da:c8:ff:37:58:4c:eb:ff:e9:ef:c4:df:41:c0:cd: b5:a3:3d:2a:d3:d6:86:a8:eb:ff:93:c0:eb:4e:15: 7d:d9:62:96:0e:f0:c9:c6:48:b8:7d:f6:62:60:17: f7:c0:9e:f7:30:7a:e0:94:d9:d3:95:22:ba:a4:52: 7f:20:cc:a4:2c:95:dd:d7:0a:d1:9f:75:71:37:75: 3e:4f:ff:7a:85:40:43:8d:0a:af:d6:4e:39:56:cc: d4:dd:35:9e:9a:41:1f:ef:47:5a:2b:fd:52:6c:6f: 77:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E7:60:25:0E:85:C2:0A:24:08:E1:42:5D:23:36:56:CF:AA:E7:1D X509v3 Authority Key Identifier: keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:53:19:76:ae:37:93:0b:9b:c4:91:04:74:8b:7a:20:e6:ed: 12:9c:f7:c8:b7:db:60:f6:cf:3d:d4:a7:70:70:47:d7:01:e4: 82:d7:14:13:6a:49:73:87:50:95:af:be:ee:ae:d0:7e:85:73: 3c:7f:a6:d6:27:76:d1:9f:9a:c8:b5:8f:48:ea:07:c7:ab:22: 2b:1a:24:e9:f3:ea:08:ab:c1:23:72:59:91:e0:18:09:7e:e7: 92:aa:0f:f5:bb:11:48:7c:0b:ec:e0:58:cf:38:47:d7:98:57: 85:40:54:1d:14:27:99:60:36:1d:5b:3c:ac:86:00:6a:94:35: d4:d5:6e:e3:86:f1:13:f9:5f:0e:74:13:d0:1d:e5:39:15:61: 27:ba:27:1b:b3:3e:b5:68:d2:84:05:5e:25:43:ab:4a:db:54: 71:54:96:0e:33:9f:72:a6:e5:09:37:5d:e6:5f:96:4f:c8:36: 63:70:67:da:e0:db:39:a6:4b:a8:42:5c:28:83:f2:4a:dd:b9: 57:1d:6a:51:00:a7:ce:3c:5f:01:22:f4:d7:df:38:21:2a:b8: 0d:42:7e:da:20:69:d1:f2:a4:56:36:08:b6:00:8f:98:1f:1e: d0:68:61:89:75:92:ac:58:27:c3:ea:d0:fc:a1:45:b4:48:43: 2f:f3:ac:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyBkZYwt/ShsqFJN3jES1tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MjQyZGJhMjZlZDg4MmIzODBkYWJlYmFiM2M1ZjM5NDIw MDZlY2MwHhcNMjYwMTI0MjIwMDU2WhcNMjYwMTI1MjIwMDU2WjAzMTEwLwYDVQQD Eyg3MGU3NjAyNTBlODVjMjBhMjQwOGUxNDI1ZDIzMzY1NmNmYWFlNzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzliZmRehX/fnorkVu17NjJL6uqzi KZ/56wpfhwphDEhVi08p/DDBFoPiNLIC7wHCXzLX/vYxmI5/DFkeHgkMW9l4gIjp qWMuqabQZFLHClrzHsTWsoZgfhpK3LA+zUQMNHFWZZ+jP2o2zDY87Pz6SadMX43F /2ewAiomNMH6m+oBcm42brQxZZxbr7IET5Qfyx678gTayP83WEzr/+nvxN9BwM21 oz0q09aGqOv/k8DrThV92WKWDvDJxki4ffZiYBf3wJ73MHrglNnTlSK6pFJ/IMyk LJXd1wrRn3VxN3U+T/96hUBDjQqv1k45VszU3TWemkEf70daK/1SbG93PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDnYCUOhcIKJAjhQl0jNlbPqucdMB8GA1UdIwQY MBaAFJckLbom7YgrOA2r66s8XzlCAG7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80Y2I2ODctODdmZC00YWYwLWEzNmIt NjA3MjcyZDczN2NiLzEvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy80Y2I2ODctODdmZC00YWYwLWEzNmItNjA3MjcyZDczN2Ni LzEvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1MZdq43 kwubxJEEdIt6IObtEpz3yLfbYPbPPdSncHBH1wHkgtcUE2pJc4dQla++7q7QfoVz PH+m1id20Z+ayLWPSOoHx6siKxok6fPqCKvBI3JZkeAYCX7nkqoP9bsRSHwL7OBY zzhH15hXhUBUHRQnmWA2HVs8rIYAapQ11NVu44bxE/lfDnQT0B3lORVhJ7onG7M+ tWjShAVeJUOrSttUcVSWDjOfcqblCTdd5l+WT8g2Y3Bn2uDbOaZLqEJcKIPySt25 Vx1qUQCnzjxfASL01984ISq4DUJ+2iBp0fKkVjYItgCPmB8e0GhhiXWSrFgnw+rQ /KFFtEhDL/Os+w== -----END CERTIFICATE-----Generated at Sun Jan 25 09:13:54 2026 by rpki-client