This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft File: rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json) Hash identifier: OncQofRSNi2+IGu/7OGk9X5PVI9hLLN9v+W5dv2zlKM= Subject key identifier: 3C:AF:5A:38:66:82:60:10:BD:D0:3C:2D:A6:6A:8B:DD:91:A6:0A:CD Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf Certificate serial: 019BF8088FFD181D405D6BFC968983C26292 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft Manifest number: 17F2 Signing time: Mon 26 Jan 2026 02:01:09 +0000 Manifest this update: Mon 26 Jan 2026 02:01:09 +0000 Manifest next update: Tue 27 Jan 2026 02:01:09 +0000 Files and hashes: 1: 1DSUQ0jxs6dG0EoFqfG91mFQyMw.roa (hash: iINHWWjQ7Nsnh6T5r2HUf93qqcUOuSqMNkps61w8OX0=) 2: BdsuDRm80ULk9aLfJ7zh20INiU8.roa (hash: 0BqcT0T81e3M/0LPrL5e9ii3yguHiKnmLWj00gesJkU=) 3: KLak6E7XOaljYL7i0cSZlIlCEqg.roa (hash: mJGksFMnjfzfVrg/g8a4mJkgqFzUtmtGPX7OdhiTIDg=) 4: VSskXdqgKe7CaDWuoatQnI_9KiE.roa (hash: ZdbXSqyDrBgEKdzaBPZgWnFmAfBPFOOQn34nK2NZEnk=) 5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: Vzj7NStixhlJJQDjnbazdF2lu63Xn/KGCZbxTPUmPGc=) 6: vPgoZptW0KavIK_Hg1kzkfOF1WE.roa (hash: j7J2y1HSuKj72l6kVGUrAtD78gxcoUd5XdyBbZEybuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:8f:fd:18:1d:40:5d:6b:fc:96:89:83:c2:62:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf Validity Not Before: Jan 26 02:01:09 2026 GMT Not After : Jan 27 02:01:09 2026 GMT Subject: CN=3caf5a3866826010bdd03c2da66a8bdd91a60acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:16:38:bc:16:4f:a0:58:8c:f3:d7:4a:7b:f6: 80:9d:52:6a:76:6b:40:a1:90:1a:a0:30:b6:4b:cf: 21:60:68:0e:14:18:13:ce:ed:64:1e:b2:84:ca:9b: 8a:44:0b:1d:83:eb:ff:0b:8a:b3:b8:87:7e:9a:94: dd:27:a6:ba:d2:50:f9:82:ef:3b:a0:d1:49:91:ea: 17:42:cb:4a:71:46:5b:41:8f:69:1a:15:0b:a3:0e: 4a:b5:91:ce:57:19:5a:ee:5a:b4:1f:b9:64:49:b5: 9e:f5:99:bb:5e:04:c5:1f:b8:74:81:29:c2:fe:a3: 1d:3f:2d:15:53:00:1c:20:9f:fb:04:c4:e1:b8:b9: b2:e9:11:6a:3c:e7:59:b4:ec:3e:9d:3b:b5:67:73: b0:b2:49:8e:50:50:06:48:0d:43:a7:7d:6b:40:74: 52:36:eb:13:5b:94:c3:50:67:f6:aa:d2:26:f9:a7: a5:52:01:94:ee:b4:94:84:d1:90:af:b4:49:6b:44: b1:88:41:da:fa:c3:71:ae:79:71:b6:72:93:af:ac: b0:98:a7:51:97:71:7b:e0:9b:8c:d4:44:64:fe:ae: e4:97:2d:06:aa:13:9b:a9:64:04:a7:2c:30:87:31: e3:cc:8e:20:2a:fe:d9:67:ed:65:df:2a:e4:c1:31: 6a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AF:5A:38:66:82:60:10:BD:D0:3C:2D:A6:6A:8B:DD:91:A6:0A:CD X509v3 Authority Key Identifier: keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:dd:4f:1c:65:04:68:b1:89:9c:39:81:dd:7c:6f:41:73:1c: 59:65:8a:f6:3d:cf:b6:47:62:a3:16:e4:9e:18:45:70:f7:3b: 0f:72:91:30:6b:d5:aa:95:39:21:06:09:30:12:52:e5:ce:bb: 41:62:5c:7f:dc:59:02:af:99:f2:60:ed:07:db:b8:d6:30:a1: af:8a:0b:08:7d:70:f6:78:19:ee:c1:f8:74:e0:80:2f:37:c3: ae:07:4c:dc:de:0b:3f:26:48:89:31:c4:76:89:52:71:5d:ac: bc:ef:fb:1e:e4:a1:4b:b9:ce:44:39:01:a2:07:a3:4d:62:b1: 79:d6:5c:a1:cf:84:40:b4:e3:6a:d1:b8:a5:12:a9:f0:1a:b9: 85:fb:19:bf:d4:c7:8c:fc:5c:e7:9b:7a:53:b9:f5:73:3e:1b: 3f:99:fe:df:c2:30:20:0f:49:b5:fc:c6:00:66:97:27:b0:51: 54:af:61:e5:70:6a:33:8f:7a:0b:ad:71:e6:f0:44:f4:6b:71: 00:d7:b9:3c:a4:e7:5c:32:75:43:c8:17:7e:7b:2a:21:7a:bf: 0a:ae:a0:eb:46:5c:01:d3:b6:1a:2d:0b:a0:7b:f1:fc:22:2b: 3a:cf:f7:a6:4b:2b:96:9e:0b:f7:67:a3:9d:8c:78:a2:9d:58: ff:d5:6a:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CI/9GB1AXWv8lomDwmKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkODA2NzliOTZjYTMyMmJmYTg1NTAwY2FiMjA2YzZkNDc0 MTJlZGYwHhcNMjYwMTI2MDIwMTA5WhcNMjYwMTI3MDIwMTA5WjAzMTEwLwYDVQQD EygzY2FmNWEzODY2ODI2MDEwYmRkMDNjMmRhNjZhOGJkZDkxYTYwYWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxY4vBZPoFiM89dKe/aAnVJqdmtA oZAaoDC2S88hYGgOFBgTzu1kHrKEypuKRAsdg+v/C4qzuId+mpTdJ6a60lD5gu87 oNFJkeoXQstKcUZbQY9pGhULow5KtZHOVxla7lq0H7lkSbWe9Zm7XgTFH7h0gSnC /qMdPy0VUwAcIJ/7BMThuLmy6RFqPOdZtOw+nTu1Z3OwskmOUFAGSA1Dp31rQHRS NusTW5TDUGf2qtIm+aelUgGU7rSUhNGQr7RJa0SxiEHa+sNxrnlxtnKTr6ywmKdR l3F74JuM1ERk/q7kly0GqhObqWQEpywwhzHjzI4gKv7ZZ+1l3yrkwTFqcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyvWjhmgmAQvdA8LaZqi92RpgrNMB8GA1UdIwQY MBaAFK2AZ5uWyjIr+oVQDKsgbG1HQS7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hMTM5OWEtZWE2Yi00YTA5LThiNDAt OTBjMGJkZTA5ODY5LzEvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hMTM5OWEtZWE2Yi00YTA5LThiNDAtOTBjMGJkZTA5ODY5 LzEvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAid1PHGUE aLGJnDmB3XxvQXMcWWWK9j3PtkdioxbknhhFcPc7D3KRMGvVqpU5IQYJMBJS5c67 QWJcf9xZAq+Z8mDtB9u41jChr4oLCH1w9ngZ7sH4dOCALzfDrgdM3N4LPyZIiTHE dolScV2svO/7HuShS7nORDkBogejTWKxedZcoc+EQLTjatG4pRKp8Bq5hfsZv9TH jPxc55t6U7n1cz4bP5n+38IwIA9JtfzGAGaXJ7BRVK9h5XBqM496C61x5vBE9Gtx ANe5PKTnXDJ1Q8gXfnsqIXq/Cq6g60ZcAdO2Gi0LoHvx/CIrOs/3pksrlp4L92ej nYx4op1Y/9VqEA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:31 2026 by rpki-client