This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json) Hash identifier: TOYZtYrVG/Fp8OPkfSGvp2XJvETPguUPhV3BM6Eey0U= Subject key identifier: 69:08:00:81:8B:E7:08:38:A3:D2:90:49:56:49:ED:4B:A7:5D:15:D9 Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38 Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838 Certificate serial: 019BF462F834E30C67A1266D337D4C02822F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft Manifest number: 0ECE Signing time: Sun 25 Jan 2026 09:01:25 +0000 Manifest this update: Sun 25 Jan 2026 09:01:25 +0000 Manifest next update: Mon 26 Jan 2026 09:01:25 +0000 Files and hashes: 1: YaqRyIn-AB_tvxqkStw-Njh6W2k.roa (hash: hXGurB4kvwUhGTKMC2eDgDWOU9jHumsHCcR8hZrvaLo=) 2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: ce0F9Yhppqq9W/JPpAVgDkK1V6flBPJ6f5XruRtSFZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:f8:34:e3:0c:67:a1:26:6d:33:7d:4c:02:82:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838 Validity Not Before: Jan 25 09:01:25 2026 GMT Not After : Jan 26 09:01:25 2026 GMT Subject: CN=690800818be70838a3d290495649ed4ba75d15d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:14:25:e9:d3:d7:2f:61:86:00:b2:a4:f7: cb:30:1c:c4:52:84:ea:84:93:3f:2d:c7:25:c2:6a: 83:81:a6:05:0e:4b:37:77:ff:ef:8c:bd:0e:cc:d4: 18:5d:8e:4a:1f:6b:0a:6f:98:a5:2e:dc:cb:c2:76: 22:2a:85:c3:d5:8b:04:04:89:32:37:20:fc:72:19: 6f:68:1b:93:5b:d5:89:7b:1c:8c:73:b2:5b:01:90: 9c:67:fa:8c:bc:66:5a:0b:dd:c5:94:ce:cf:6c:4e: e8:8c:dc:ed:86:01:b6:49:d1:e9:05:b9:40:ec:5e: 68:70:60:51:aa:ab:c4:8d:ef:1c:c2:9c:3e:9b:62: 53:83:4b:e4:d7:e4:ce:1f:ac:f2:39:bf:c5:92:6b: db:46:fb:76:63:e4:eb:9a:5c:52:b5:1b:b2:b0:95: 90:23:79:9f:4f:30:08:33:a7:cd:5e:35:52:6d:ad: bc:b4:57:3c:bf:5b:dc:02:66:17:8c:e9:bb:26:d8: e8:a5:eb:3c:dd:cb:53:12:d9:ea:19:a4:cf:8d:5a: e8:2b:17:7e:e5:3d:c8:b2:5d:ef:d6:67:e8:a8:44: 7f:dc:52:2d:7d:5e:f5:14:03:d0:8d:e2:ee:c2:c7: 1b:b7:2f:c2:75:5e:8f:58:3b:00:2e:30:6f:13:e8: 57:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:08:00:81:8B:E7:08:38:A3:D2:90:49:56:49:ED:4B:A7:5D:15:D9 X509v3 Authority Key Identifier: keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:fa:71:f0:d6:df:bd:02:13:3a:d8:90:d5:34:e8:e8:56:96: 44:a1:07:22:41:30:9e:39:d5:69:db:b5:ad:6b:c6:0e:b3:8b: 16:30:52:8d:25:e0:db:6b:7f:63:b2:7f:81:8f:0e:97:cd:f5: bd:cb:67:79:df:13:25:48:28:16:a0:a0:fb:7d:11:c1:52:0c: 4b:dd:f4:fa:55:87:31:9d:3c:70:41:b6:3c:6a:70:d8:dc:58: 07:25:18:f7:3d:e6:a1:22:1e:3d:63:94:07:99:ea:4f:5b:62: 35:4f:61:1d:cc:bf:5b:c1:85:90:dc:69:bd:26:7f:25:a0:41: a8:b1:eb:a0:a4:09:4c:63:5f:8f:18:75:cf:e7:20:43:46:6b: f1:06:86:0a:99:a3:1d:65:33:de:9b:33:1c:e8:b7:64:4e:0d: 2f:e7:ae:9f:2f:00:22:22:67:44:3d:e9:1c:b5:51:6a:34:88: ba:49:e7:e3:e7:29:50:12:be:84:0a:5e:0b:a1:16:b4:88:08: 42:75:a4:41:fd:9e:c4:ab:de:44:67:b4:ca:71:52:46:ed:91: 4d:a0:0a:38:61:59:1e:78:ad:0f:ae:a7:9a:8b:42:22:20:5d: ea:c9:38:5e:45:19:37:07:ad:c1:05:02:fb:65:fb:aa:11:3b: e3:e5:04:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yvg04wxnoSZtM31MAoIvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDIyYjRhZGUwZWQxZDRkNTMyOGVhZTVmMzhhNThiZTk1 M2Y4MzgwHhcNMjYwMTI1MDkwMTI1WhcNMjYwMTI2MDkwMTI1WjAzMTEwLwYDVQQD Eyg2OTA4MDA4MThiZTcwODM4YTNkMjkwNDk1NjQ5ZWQ0YmE3NWQxNWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8kUJenT1y9hhgCypPfLMBzEUoTq hJM/LcclwmqDgaYFDks3d//vjL0OzNQYXY5KH2sKb5ilLtzLwnYiKoXD1YsEBIky NyD8chlvaBuTW9WJexyMc7JbAZCcZ/qMvGZaC93FlM7PbE7ojNzthgG2SdHpBblA 7F5ocGBRqqvEje8cwpw+m2JTg0vk1+TOH6zyOb/FkmvbRvt2Y+TrmlxStRuysJWQ I3mfTzAIM6fNXjVSba28tFc8v1vcAmYXjOm7Jtjopes83ctTEtnqGaTPjVroKxd+ 5T3Isl3v1mfoqER/3FItfV71FAPQjeLuwscbty/CdV6PWDsALjBvE+hXjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkIAIGL5wg4o9KQSVZJ7UunXRXZMB8GA1UdIwQY MBaAFMvSK0reDtHU1TKOrl84pYvpU/g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQt MjlmMzM0ZTExYTE5LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQtMjlmMzM0ZTExYTE5 LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPpx8Nbf vQITOtiQ1TTo6FaWRKEHIkEwnjnVadu1rWvGDrOLFjBSjSXg22t/Y7J/gY8Ol831 vctned8TJUgoFqCg+30RwVIMS930+lWHMZ08cEG2PGpw2NxYByUY9z3moSIePWOU B5nqT1tiNU9hHcy/W8GFkNxpvSZ/JaBBqLHroKQJTGNfjxh1z+cgQ0Zr8QaGCpmj HWUz3pszHOi3ZE4NL+euny8AIiJnRD3pHLVRajSIuknn4+cpUBK+hApeC6EWtIgI QnWkQf2exKveRGe0ynFSRu2RTaAKOGFZHnitD66nmotCIiBd6sk4XkUZNwetwQUC +2X7qhE74+UEyQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:39:47 2026 by rpki-client