This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json) Hash identifier: f6mhFg/9+nvV4zgWdTeu+VUJhh5AL9gsSnYMnvArlNM= Subject key identifier: 06:22:C5:41:BE:0D:40:8D:71:79:FC:6E:71:8D:1F:01:3C:53:4E:D7 Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b Certificate serial: 019BFD2E6E28D154FF15FD6A7BFA883D0BED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft Manifest number: 06C5 Signing time: Tue 27 Jan 2026 02:00:36 +0000 Manifest this update: Tue 27 Jan 2026 02:00:36 +0000 Manifest next update: Wed 28 Jan 2026 02:00:36 +0000 Files and hashes: 1: 6ZBPRGxMRhzUL39PVDVSduo6FUc.roa (hash: mXhPY8g7CrKLHAIlSEURMCEabcnrrTvn2LVrA4zymb8=) 2: B0WU8sYjxbF2I99DOG4CZtJFemU.roa (hash: kZf8Vi7lYB4Gl+U+zxW5wY6bn3f+hQC1mSLMVib18Xg=) 3: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: mXd12VY6Pm9tVB52Qf7jGk4NlQxlJ35EqUq/PTUp6Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:6e:28:d1:54:ff:15:fd:6a:7b:fa:88:3d:0b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b Validity Not Before: Jan 27 02:00:36 2026 GMT Not After : Jan 28 02:00:36 2026 GMT Subject: CN=0622c541be0d408d7179fc6e718d1f013c534ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cc:7f:f9:3a:7d:e7:76:7b:ab:35:5b:9c:50: 51:a6:52:e0:f6:c5:65:5f:d2:cd:7f:47:e4:e4:f8: 14:2d:a8:e0:b6:88:a3:e5:23:c6:08:19:32:e5:13: 74:4f:d2:2f:89:de:e4:cc:f8:a6:88:eb:52:3b:59: f7:ab:c2:f7:63:07:a8:8d:74:a2:50:d7:cd:07:49: cf:79:94:4a:67:81:f6:0f:2e:9a:db:f0:91:b3:68: 50:34:74:5f:1b:18:4b:32:51:80:84:0f:ee:9f:4a: ca:b6:75:c1:52:06:55:75:d7:ff:39:20:77:dd:fb: bb:71:d9:8d:3d:4d:3a:a2:58:66:40:11:f0:a2:48: 3a:a0:28:76:0f:d7:a1:ca:8a:8c:75:2e:27:cf:53: 47:e6:b4:76:22:53:5b:e3:0c:a5:e2:e3:01:9c:2a: 7a:f0:6b:31:08:ab:1d:dc:3d:45:c2:86:f3:84:95: ec:6b:70:55:9c:8e:52:e9:8a:31:b3:2d:67:da:d5: 9f:f9:b4:8d:83:7c:5d:78:41:e0:1d:54:94:05:8e: 2a:e0:34:0e:b4:e0:4e:51:5e:04:81:a7:1c:cd:03: 47:18:93:09:51:3d:e5:bb:af:27:f1:fb:a0:e5:30: e8:9e:9e:e6:5a:c0:ea:27:e8:84:f3:35:7a:05:95: cd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:22:C5:41:BE:0D:40:8D:71:79:FC:6E:71:8D:1F:01:3C:53:4E:D7 X509v3 Authority Key Identifier: keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c0:78:b9:64:b4:0d:f2:40:f7:da:51:7d:0b:95:e6:82:8f: 8e:a1:b6:73:4b:d2:44:13:84:f9:6d:d3:ac:2b:2b:86:1d:d9: 3e:39:e3:f3:fe:de:c4:c1:9e:ca:04:47:e2:e9:ef:c2:cf:51: 34:f0:d2:cd:90:5c:ca:c2:25:21:f8:2d:3d:94:c8:ba:60:6a: 77:ab:c4:0f:b4:58:58:e3:0b:4d:2c:2f:a2:34:d5:56:e0:91: 3b:71:40:48:5d:79:e3:00:74:3d:a8:f0:dd:10:b1:a0:f5:6e: 07:64:ab:d2:db:05:b9:9a:e4:d1:e5:ce:d1:16:25:d8:e1:40: 2c:55:01:da:dd:30:dc:91:a2:92:cb:2f:2b:ba:1e:43:6c:ce: e4:48:6f:1e:84:e2:f0:74:02:94:a2:f0:ee:f3:5a:34:8c:76: 41:66:3d:b5:d0:3e:eb:b2:6a:c2:36:8d:a1:70:7d:e6:84:dd: c2:0c:d0:ea:1f:f8:2c:c0:12:c9:39:8f:c2:d0:3f:f4:35:a6: 96:b4:19:94:5f:0d:1a:61:e2:7c:c8:31:8a:8b:ed:d8:44:43: f0:91:d6:a7:6f:1d:83:ab:bd:ec:40:e0:db:39:f1:44:84:df: a9:89:fb:8c:05:24:68:29:79:40:63:97:af:d5:d5:e4:ed:ff: be:8c:db:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9Lm4o0VT/Ff1qe/qIPQvtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZWU2ZDFkMWVjY2FmOTc5OWJiZDVmMmI2ZGFjZTQ2ZDg2 ZGY0OGIwHhcNMjYwMTI3MDIwMDM2WhcNMjYwMTI4MDIwMDM2WjAzMTEwLwYDVQQD EygwNjIyYzU0MWJlMGQ0MDhkNzE3OWZjNmU3MThkMWYwMTNjNTM0ZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8x/+Tp953Z7qzVbnFBRplLg9sVl X9LNf0fk5PgULajgtoij5SPGCBky5RN0T9Ivid7kzPimiOtSO1n3q8L3YweojXSi UNfNB0nPeZRKZ4H2Dy6a2/CRs2hQNHRfGxhLMlGAhA/un0rKtnXBUgZVddf/OSB3 3fu7cdmNPU06olhmQBHwokg6oCh2D9ehyoqMdS4nz1NH5rR2IlNb4wyl4uMBnCp6 8GsxCKsd3D1FwobzhJXsa3BVnI5S6Yoxsy1n2tWf+bSNg3xdeEHgHVSUBY4q4DQO tOBOUV4EgacczQNHGJMJUT3lu68n8fug5TDonp7mWsDqJ+iE8zV6BZXNeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYixUG+DUCNcXn8bnGNHwE8U07XMB8GA1UdIwQY MBaAFGPubR0ezK+XmbvV8rbazkbYbfSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYt ZDFjNWYxYjUxZTE3LzEvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYtZDFjNWYxYjUxZTE3 LzEvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsB4uWS0 DfJA99pRfQuV5oKPjqG2c0vSRBOE+W3TrCsrhh3ZPjnj8/7exMGeygRH4unvws9R NPDSzZBcysIlIfgtPZTIumBqd6vED7RYWOMLTSwvojTVVuCRO3FASF154wB0Pajw 3RCxoPVuB2Sr0tsFuZrk0eXO0RYl2OFALFUB2t0w3JGikssvK7oeQ2zO5EhvHoTi 8HQClKLw7vNaNIx2QWY9tdA+67JqwjaNoXB95oTdwgzQ6h/4LMASyTmPwtA/9DWm lrQZlF8NGmHifMgxiovt2ERD8JHWp28dg6u97EDg2znxRITfqYn7jAUkaCl5QGOX r9XV5O3/vozbyw== -----END CERTIFICATE-----Generated at Tue Jan 27 07:46:49 2026 by rpki-client