This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft File: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft (raw, json) Hash identifier: igS4mmVzPW37xXEr+5FitbiSiQc/IWxByZh0IwsKxzQ= Subject key identifier: 41:CB:69:FD:48:32:BC:23:FF:72:99:E4:37:2E:F8:1F:44:05:34:0A Authority key identifier: CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C Certificate issuer: /CN=cbc83c392c5421c595cd5fb79428e8275bdb594c Certificate serial: 019BC9E5BBB535946C2132FBE9739DB41F30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft Manifest number: 01C0 Signing time: Sat 17 Jan 2026 03:00:34 +0000 Manifest this update: Sat 17 Jan 2026 03:00:34 +0000 Manifest next update: Sun 18 Jan 2026 03:00:34 +0000 Files and hashes: 1: 8MxTJlqau9S1ZV5fA_n_hiU2OjQ.roa (hash: ZFi66z5+x2HZHjEf8Mnf2qe4zKNsSEknPsHvSK6VhIc=) 2: DNbiYi8RnmHbs53ufR4Wo4EOQD4.roa (hash: 1O4zlMEhLqsXNNh16SOVPGWJLESJzqVd3J7KSAE8smE=) 3: EBV1N0nyc3uDjy8VuxK9uZr58ys.roa (hash: Ua/lKqQMivBauR1brwmNmnYyYEQG+PCmKakmmH7OZoQ=) 4: wgW5ViWtyw-hcjNoVsfmKE4EIG8.roa (hash: HhTkFaNAcVHstP72WGd6nJS+mIOkBQF6lfIRGmZJYHI=) 5: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl (hash: D0xMumI7GffjV/FpiB+Oe+YhoJx7LA0azF7uL5QMAGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c9:e5:bb:b5:35:94:6c:21:32:fb:e9:73:9d:b4:1f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbc83c392c5421c595cd5fb79428e8275bdb594c Validity Not Before: Jan 17 03:00:34 2026 GMT Not After : Jan 18 03:00:34 2026 GMT Subject: CN=41cb69fd4832bc23ff7299e4372ef81f4405340a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fc:36:cb:e5:40:38:df:12:c5:ba:91:2b:e1: aa:54:75:c1:bb:18:79:4d:2c:6e:cd:1e:9f:5e:5a: 40:65:d9:b5:ed:63:77:fa:55:3d:0c:5d:36:53:75: 1d:da:ac:af:75:c9:78:07:df:5e:e0:06:e9:a8:f7: de:d4:00:f1:dc:2a:e1:4d:ad:08:73:63:96:f0:3a: 63:40:da:b2:ef:c9:4f:10:24:c8:cb:74:6a:c1:e7: 03:ca:71:8f:89:58:ed:24:9d:30:66:ea:37:13:e4: c9:05:03:d7:49:97:82:25:13:4f:c0:1b:94:ce:78: e4:17:fb:af:13:1d:13:aa:37:58:cb:ed:f9:d3:2b: 7b:55:13:8c:3a:f5:b2:88:d1:19:fc:97:54:ec:b6: 1e:0e:05:6a:e2:6b:e4:25:2d:67:11:e9:e2:13:ab: 67:4d:fc:6d:17:b8:1f:53:02:d8:48:02:06:61:d9: 64:60:45:a0:6f:52:a4:a0:58:e7:13:e6:4f:bf:5d: ab:5f:9d:2c:07:36:d3:9b:53:e2:59:e5:d3:9c:3c: 91:da:e3:86:d8:35:e8:20:fd:b7:cc:90:de:74:9c: b4:e2:30:dd:06:76:61:1f:1e:2e:0b:a8:e3:6d:54: 26:fb:84:f3:0a:fd:0a:0a:2b:17:17:f5:b8:b7:4c: d7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CB:69:FD:48:32:BC:23:FF:72:99:E4:37:2E:F8:1F:44:05:34:0A X509v3 Authority Key Identifier: keyid:CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:c0:81:ea:f5:3f:e8:fd:56:b6:96:78:7c:b4:32:3f:b3:48: d0:ef:26:fc:3f:ea:e8:ac:a4:84:e0:d8:88:76:5b:a4:4e:3e: 7e:fe:08:83:b9:14:4a:b7:bb:67:08:93:99:ce:1f:8c:64:98: b3:11:ed:8d:56:ae:d0:6b:22:ea:8b:e3:7b:47:0f:b8:82:36: d8:69:7c:ff:f4:69:27:d8:4b:17:ce:34:08:62:c9:06:4d:02: be:63:89:86:8e:1b:0d:3d:01:1c:a4:e7:e9:fb:6c:5a:f6:f0: da:44:76:47:09:d2:b8:43:7a:5c:f2:24:e5:0c:ae:b1:01:a8: 31:7b:89:31:14:69:97:f4:79:35:55:4e:7d:8b:00:e5:e8:30: ae:a4:46:74:42:8c:72:14:33:f3:c1:16:5e:a1:82:bd:00:45: 11:bf:59:1b:3f:80:d2:6b:24:38:7f:07:96:02:47:4b:bc:e7: 48:2a:c3:a6:e7:b4:a4:30:01:2a:bf:01:26:96:96:b5:32:b0: f7:29:9b:2d:bf:c8:0a:a3:4b:9d:82:f9:1c:70:e5:b9:b3:a6: 20:28:09:8a:4c:15:e1:5a:4c:c7:e0:8c:24:3e:c4:43:88:1c: d1:2d:7b:14:a3:68:9f:63:19:4e:5a:0c:96:f4:e9:27:90:a8: 75:f0:6b:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvJ5bu1NZRsITL76XOdtB8wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYzgzYzM5MmM1NDIxYzU5NWNkNWZiNzk0MjhlODI3NWJk YjU5NGMwHhcNMjYwMTE3MDMwMDM0WhcNMjYwMTE4MDMwMDM0WjAzMTEwLwYDVQQD Eyg0MWNiNjlmZDQ4MzJiYzIzZmY3Mjk5ZTQzNzJlZjgxZjQ0MDUzNDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Pw2y+VAON8SxbqRK+GqVHXBuxh5 TSxuzR6fXlpAZdm17WN3+lU9DF02U3Ud2qyvdcl4B99e4AbpqPfe1ADx3CrhTa0I c2OW8DpjQNqy78lPECTIy3RqwecDynGPiVjtJJ0wZuo3E+TJBQPXSZeCJRNPwBuU znjkF/uvEx0TqjdYy+350yt7VROMOvWyiNEZ/JdU7LYeDgVq4mvkJS1nEeniE6tn TfxtF7gfUwLYSAIGYdlkYEWgb1KkoFjnE+ZPv12rX50sBzbTm1PiWeXTnDyR2uOG 2DXoIP23zJDedJy04jDdBnZhHx4uC6jjbVQm+4TzCv0KCisXF/W4t0zX7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHLaf1IMrwj/3KZ5Dcu+B9EBTQKMB8GA1UdIwQY MBaAFMvIPDksVCHFlc1ft5Qo6Cdb21lMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zMDUyZGUtNTU4Yi00MzM0LThhNzAt OWFkMzNhZTY1M2FkLzEveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zMDUyZGUtNTU4Yi00MzM0LThhNzAtOWFkMzNhZTY1M2Fk LzEveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxMCB6vU/ 6P1WtpZ4fLQyP7NI0O8m/D/q6KykhODYiHZbpE4+fv4Ig7kUSre7ZwiTmc4fjGSY sxHtjVau0Gsi6ovje0cPuII22Gl8//RpJ9hLF840CGLJBk0CvmOJho4bDT0BHKTn 6ftsWvbw2kR2RwnSuEN6XPIk5QyusQGoMXuJMRRpl/R5NVVOfYsA5egwrqRGdEKM chQz88EWXqGCvQBFEb9ZGz+A0mskOH8HlgJHS7znSCrDpue0pDABKr8BJpaWtTKw 9ymbLb/ICqNLnYL5HHDlubOmICgJikwV4VpMx+CMJD7EQ4gc0S17FKNon2MZTloM lvTpJ5CodfBr0A== -----END CERTIFICATE-----Generated at Sat Jan 17 10:18:45 2026 by rpki-client