This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft File: Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json) Hash identifier: E6SihSNyXSg3E3I7SmdNbhXaOKDJautPEElIudLeHZ4= Subject key identifier: 5B:05:D3:B1:29:6D:DC:B7:88:3C:66:D7:DB:34:2B:1E:FA:A7:BA:A5 Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec Certificate serial: 019BFA9BBD4B015DAC0797EDE6684D7C6506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft Manifest number: 17FD Signing time: Mon 26 Jan 2026 14:01:09 +0000 Manifest this update: Mon 26 Jan 2026 14:01:09 +0000 Manifest next update: Tue 27 Jan 2026 14:01:09 +0000 Files and hashes: 1: 4IporOiK6JktRpGESiSAAQpMF7U.roa (hash: lg+Ex4UPGBW/ZbBLSg9owvXX4yPCqEFw5/NmsjkdpGk=) 2: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: +niZ+a1ehMJ/G8TbDm1rA8NXJUjROqMAQDYEF262VvA=) 3: fNxI3dXScPmMR3z1E-3FYKWMeS8.roa (hash: aphBfexzTqun+pqPzK9ahrBEriTPK5GbP96jBpZa6kw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:bd:4b:01:5d:ac:07:97:ed:e6:68:4d:7c:65:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec Validity Not Before: Jan 26 14:01:09 2026 GMT Not After : Jan 27 14:01:09 2026 GMT Subject: CN=5b05d3b1296ddcb7883c66d7db342b1efaa7baa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:23:9f:56:91:af:74:90:be:3a:ce:3a:0a:ce: fa:d1:7f:82:08:98:cf:dc:25:ae:64:c2:99:b1:fc: a5:14:76:66:ce:ab:c0:85:41:00:7e:21:e4:50:ff: b3:9a:44:54:87:cb:97:24:66:de:d4:bf:88:4b:ee: f7:b7:6e:15:4a:55:6a:be:e5:ec:4a:45:41:04:07: 42:b6:20:18:9b:4a:2d:a4:80:fe:9d:df:a1:77:96: d8:07:29:19:8b:18:f5:4f:67:ad:4f:2b:92:08:bf: b3:6e:eb:55:d1:e6:a1:51:99:58:e8:c4:8b:6a:cc: 15:a6:22:7d:5c:18:a5:ef:5b:f6:94:29:cb:cb:03: c2:b6:35:34:fd:3c:01:79:9c:91:1c:cb:4c:d5:4d: 41:d6:5b:0c:49:81:41:e3:18:f0:58:2b:bb:e6:ac: e0:9f:5a:84:d6:0d:8d:7d:da:76:c3:e8:ae:40:ce: 1b:28:85:b2:50:96:83:5b:e9:57:e5:67:b8:43:03: d4:b6:7b:18:ed:22:81:a6:aa:20:4e:97:8a:87:94: 74:c8:df:08:f6:37:4c:07:3f:01:56:d8:47:14:0b: b1:e1:ae:03:67:12:60:c5:86:f5:25:3f:89:3a:66: a3:64:6d:df:b3:6d:8c:18:40:f1:9e:10:1d:a8:8d: 90:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:05:D3:B1:29:6D:DC:B7:88:3C:66:D7:DB:34:2B:1E:FA:A7:BA:A5 X509v3 Authority Key Identifier: keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:42:85:cb:6c:12:de:0a:6b:e9:17:50:11:a6:5b:fd:2e:e5: 2b:8f:a4:f8:d8:8e:7c:0e:77:52:0c:21:0f:c7:a7:a9:6b:7a: 33:31:32:42:7f:ce:cf:36:69:92:f4:0f:36:13:fd:e6:c6:57: bc:14:36:e0:94:45:14:4c:fb:05:f4:12:a9:e2:01:69:77:47: 95:b3:77:3d:32:d9:5e:c3:44:aa:85:a1:05:4a:54:93:84:59: ca:d8:44:66:c6:68:30:44:cd:9a:a6:9d:54:36:c8:63:4d:5d: 54:5d:88:03:65:3c:03:54:0b:7c:c0:6f:86:3f:f0:f4:e8:fd: 2e:2c:c0:b0:86:9d:28:45:b3:63:f2:73:51:56:03:64:70:e5: da:84:6a:19:9a:e6:f1:dc:1c:e9:9f:1f:76:44:9b:67:28:32: 54:48:9d:92:de:31:89:67:f2:18:3f:1e:83:cf:e2:ca:e0:38: f4:65:90:a5:10:8f:4a:c7:c6:00:44:bd:7b:6b:3a:9c:f2:25: 72:9e:c2:94:9f:e6:bd:28:fe:30:e0:4c:fe:44:76:e2:77:d8: a6:e2:84:9f:01:8b:81:11:7d:0e:18:a0:26:2d:c0:16:8c:8e: 7f:e2:da:23:e8:1e:01:05:1f:23:6e:2e:53:be:d9:84:39:23: b3:ad:a0:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m71LAV2sB5ft5mhNfGUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZDlkMWQ5NWMxZWI3MTZlZTgxOTUwNDVhNzdjYmEyMTgx ZDc5ZWMwHhcNMjYwMTI2MTQwMTA5WhcNMjYwMTI3MTQwMTA5WjAzMTEwLwYDVQQD Eyg1YjA1ZDNiMTI5NmRkY2I3ODgzYzY2ZDdkYjM0MmIxZWZhYTdiYWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0COfVpGvdJC+Os46Cs760X+CCJjP 3CWuZMKZsfylFHZmzqvAhUEAfiHkUP+zmkRUh8uXJGbe1L+IS+73t24VSlVqvuXs SkVBBAdCtiAYm0otpID+nd+hd5bYBykZixj1T2etTyuSCL+zbutV0eahUZlY6MSL aswVpiJ9XBil71v2lCnLywPCtjU0/TwBeZyRHMtM1U1B1lsMSYFB4xjwWCu75qzg n1qE1g2Nfdp2w+iuQM4bKIWyUJaDW+lX5We4QwPUtnsY7SKBpqogTpeKh5R0yN8I 9jdMBz8BVthHFAux4a4DZxJgxYb1JT+JOmajZG3fs22MGEDxnhAdqI2Q+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsF07Epbdy3iDxm19s0Kx76p7qlMB8GA1UdIwQY MBaAFGPZ0dlcHrcW7oGVBFp3y6IYHXnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTluUjJWd2V0eGJ1Z1pVRVduZkxvaGdkZWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZWQ4ZGQtZDM2ZS00NDBjLTgxNDIt ZDgwYzZiODVjZGE0LzEvWTluUjJWd2V0eGJ1Z1pVRVduZkxvaGdkZWV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZWQ4ZGQtZDM2ZS00NDBjLTgxNDItZDgwYzZiODVjZGE0 LzEvWTluUjJWd2V0eGJ1Z1pVRVduZkxvaGdkZWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0KFy2wS 3gpr6RdQEaZb/S7lK4+k+NiOfA53UgwhD8enqWt6MzEyQn/OzzZpkvQPNhP95sZX vBQ24JRFFEz7BfQSqeIBaXdHlbN3PTLZXsNEqoWhBUpUk4RZythEZsZoMETNmqad VDbIY01dVF2IA2U8A1QLfMBvhj/w9Oj9LizAsIadKEWzY/JzUVYDZHDl2oRqGZrm 8dwc6Z8fdkSbZygyVEidkt4xiWfyGD8eg8/iyuA49GWQpRCPSsfGAES9e2s6nPIl cp7ClJ/mvSj+MOBM/kR24nfYpuKEnwGLgRF9DhigJi3AFoyOf+LaI+geAQUfI24u U77ZhDkjs62gzA== -----END CERTIFICATE-----Generated at Mon Jan 26 22:39:33 2026 by rpki-client