This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft File: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft (raw, json) Hash identifier: xm5Wbtijvs+gnnvqrJ/YiVnsDLadumgQvv1W+0GhB6I= Subject key identifier: 90:F9:E8:A5:B4:69:41:3C:37:B6:7C:BC:2B:0F:83:9A:DE:C9:91:17 Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34 Certificate issuer: /CN=db2d75c6d547750642241b0749cfa052c8c17f34 Certificate serial: 019BF9889EDFC0969FB32B76786313906616 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 09:00:38 +0000 Manifest this update: Mon 26 Jan 2026 09:00:38 +0000 Manifest next update: Tue 27 Jan 2026 09:00:38 +0000 Files and hashes: 1: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl (hash: pgrq2BPE4EbbFJrbUtHNnss5hmt6KChk2P5UMd1gOog=) 2: RYCkmpH2b2Jhy7VdmwMy71iHAMU.roa (hash: m7nxILjYkQDIx4jO5jxneiBadE/Bw699fTnvikNCX4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:9e:df:c0:96:9f:b3:2b:76:78:63:13:90:66:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34 Validity Not Before: Jan 26 09:00:38 2026 GMT Not After : Jan 27 09:00:38 2026 GMT Subject: CN=90f9e8a5b469413c37b67cbc2b0f839adec99117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b6:1f:ee:b8:34:11:48:97:d4:d6:7e:e3:14: 0e:a4:bb:79:4c:1a:26:4a:df:1a:66:f5:1b:f1:2a: 9d:3f:1f:10:16:28:55:79:87:76:60:29:41:b6:a2: 9b:3c:ef:11:43:5f:c3:42:cf:a0:99:59:27:2d:0d: 14:88:4a:9b:75:08:93:b3:6e:84:36:42:73:33:55: e8:7c:d9:94:03:3b:ad:6d:5d:8b:ba:f3:cc:79:08: 22:c4:01:87:c8:9b:23:a5:74:f9:95:ac:ee:f4:ea: 26:07:54:1b:ee:14:6e:6e:86:95:b4:60:2d:48:8f: e0:fb:64:29:87:7c:20:d3:76:47:23:68:83:fa:ba: f4:7b:f9:b9:d5:42:8d:bc:01:a2:41:7b:03:1f:c7: 6a:4e:01:e0:7a:91:21:71:cf:0e:19:f9:9f:0e:b1: 3d:36:d9:bc:01:ee:bc:03:74:ff:44:8d:eb:25:5f: b8:26:2a:8e:0c:ca:89:33:90:de:6e:25:fb:16:71: 1a:49:ff:5d:0d:00:6e:53:1d:eb:23:fe:03:7f:c2: 4c:14:90:bd:77:b3:99:ce:2a:a6:71:74:d0:5a:e5: a6:91:5c:f0:67:76:62:2b:49:49:d2:d4:a9:56:58: 47:a6:79:81:d5:1d:f1:18:6d:c9:8e:45:2e:30:17: 4c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F9:E8:A5:B4:69:41:3C:37:B6:7C:BC:2B:0F:83:9A:DE:C9:91:17 X509v3 Authority Key Identifier: keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:7b:68:d1:9c:a3:97:4e:c4:ad:a3:92:7f:6f:ba:2e:bd:61: e2:2e:6f:27:42:70:92:be:c2:e1:dd:00:70:01:21:b7:b6:84: 96:03:dc:7c:37:c6:68:03:3f:24:5e:82:cc:57:62:86:64:1a: 32:de:f9:8f:2c:ba:8f:d0:4b:8b:ff:44:bc:a0:d8:20:03:fa: 94:ae:1c:ef:32:69:e6:f1:82:c9:0c:be:2a:fe:1b:07:91:36: 7c:e6:a2:27:d4:86:3a:1e:d9:4e:69:40:93:ff:7a:e4:18:76: a2:d6:f8:48:b7:53:c9:d8:8b:ac:15:40:40:ed:2d:c0:1e:0b: 7c:87:20:76:7a:d4:1e:41:3d:56:15:85:9c:3f:5b:f3:25:a0: 54:1f:54:50:2a:15:04:66:55:9e:2d:db:87:6e:60:bb:92:cd: f3:85:46:a1:3c:67:a7:31:ea:ee:9b:2f:38:96:0f:e3:b0:19: f7:45:8b:32:d8:5f:ce:26:a1:5d:a8:10:db:3d:64:67:3f:c2: d1:bc:4f:28:f6:86:93:e3:4f:10:87:08:56:4a:cd:02:54:40: a7:28:1f:52:2c:99:15:9c:c4:4c:0f:9b:c4:76:63:06:6e:89: 7c:01:e7:ca:ad:85:a9:0e:ab:20:cf:f4:3d:d4:c4:2d:3a:e8: 7c:f8:e5:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iJ7fwJafsyt2eGMTkGYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMmQ3NWM2ZDU0Nzc1MDY0MjI0MWIwNzQ5Y2ZhMDUyYzhj MTdmMzQwHhcNMjYwMTI2MDkwMDM4WhcNMjYwMTI3MDkwMDM4WjAzMTEwLwYDVQQD Eyg5MGY5ZThhNWI0Njk0MTNjMzdiNjdjYmMyYjBmODM5YWRlYzk5MTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrYf7rg0EUiX1NZ+4xQOpLt5TBom St8aZvUb8SqdPx8QFihVeYd2YClBtqKbPO8RQ1/DQs+gmVknLQ0UiEqbdQiTs26E NkJzM1XofNmUAzutbV2LuvPMeQgixAGHyJsjpXT5lazu9OomB1Qb7hRuboaVtGAt SI/g+2Qph3wg03ZHI2iD+rr0e/m51UKNvAGiQXsDH8dqTgHgepEhcc8OGfmfDrE9 Ntm8Ae68A3T/RI3rJV+4JiqODMqJM5DebiX7FnEaSf9dDQBuUx3rI/4Df8JMFJC9 d7OZziqmcXTQWuWmkVzwZ3ZiK0lJ0tSpVlhHpnmB1R3xGG3JjkUuMBdMUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJD56KW0aUE8N7Z8vCsPg5reyZEXMB8GA1UdIwQY MBaAFNstdcbVR3UGQiQbB0nPoFLIwX80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnkxMXh0VkhkUVpDSkJzSFNjLWdVc2pCZnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYzQwYTktOGIzZi00M2Q2LWEwNzgt YTkwMWUwMzRhZmU1LzEvMnkxMXh0VkhkUVpDSkJzSFNjLWdVc2pCZnpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9jYzQwYTktOGIzZi00M2Q2LWEwNzgtYTkwMWUwMzRhZmU1 LzEvMnkxMXh0VkhkUVpDSkJzSFNjLWdVc2pCZnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3to0Zyj l07EraOSf2+6Lr1h4i5vJ0Jwkr7C4d0AcAEht7aElgPcfDfGaAM/JF6CzFdihmQa Mt75jyy6j9BLi/9EvKDYIAP6lK4c7zJp5vGCyQy+Kv4bB5E2fOaiJ9SGOh7ZTmlA k/965Bh2otb4SLdTydiLrBVAQO0twB4LfIcgdnrUHkE9VhWFnD9b8yWgVB9UUCoV BGZVni3bh25gu5LN84VGoTxnpzHq7psvOJYP47AZ90WLMthfziahXagQ2z1kZz/C 0bxPKPaGk+NPEIcIVkrNAlRApygfUiyZFZzETA+bxHZjBm6JfAHnyq2FqQ6rIM/0 PdTELTrofPjlcQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:47 2026 by rpki-client