This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json) Hash identifier: y8LZEcr5i8Z00dIrl7VauhNb3V8Yh/may5VV65zUoSs= Subject key identifier: 83:25:2A:76:98:59:19:77:FC:83:11:4A:81:2B:35:96:ED:F8:83:35 Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d Certificate serial: 019BFCF7BFC8C7722765CF2C77053002C599 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft Manifest number: 091A Signing time: Tue 27 Jan 2026 01:00:53 +0000 Manifest this update: Tue 27 Jan 2026 01:00:53 +0000 Manifest next update: Wed 28 Jan 2026 01:00:53 +0000 Files and hashes: 1: kqpRs8PQ33xnPlP-Fdc6LgO-EXI.roa (hash: oPLgkHy5uqEh77+OXee0sAfzK1xOwlBFgn/lM+qBthY=) 2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: wfoCrFQePKpNunl/Nl0nDup+0At8c1tKjEGzQlDjO5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f7:bf:c8:c7:72:27:65:cf:2c:77:05:30:02:c5:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d Validity Not Before: Jan 27 01:00:53 2026 GMT Not After : Jan 28 01:00:53 2026 GMT Subject: CN=83252a7698591977fc83114a812b3596edf88335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:fd:0e:c7:11:c1:42:d0:7b:bd:fe:12:60: 78:f2:bc:e3:34:f8:4d:91:fd:35:01:9b:2c:61:c9: c6:0e:95:e7:82:e2:73:9f:9d:ed:63:d7:ac:9a:44: e7:e2:21:48:f9:e4:f0:63:72:9e:8b:26:c0:5b:26: a5:2b:98:0b:d2:63:89:3c:e4:8a:90:2f:55:1e:2b: 2f:e0:8d:32:ea:32:9e:72:5e:e3:8d:2c:d4:e0:c4: fd:2a:42:08:5f:3f:2e:6c:80:43:ee:b8:9d:eb:f3: c3:ad:ec:c4:bb:8f:d3:88:e5:52:2a:9a:f7:03:b8: 51:7c:db:ce:6e:51:a9:dc:c6:4a:5b:6f:80:41:e2: 78:e8:1f:8f:b2:1a:74:a6:26:65:9c:1c:9f:bd:3a: dd:ef:da:08:62:e2:ad:78:da:5c:47:8b:c8:9c:bb: f4:7c:e0:42:2c:a3:24:26:ee:55:fe:60:35:35:a3: b0:ef:c9:14:a4:79:d0:34:b3:65:cf:bf:0c:c2:6d: e5:36:a9:8b:9d:03:d6:e7:08:da:00:83:36:5f:9d: 5c:d5:28:ad:78:c5:35:f1:9a:4b:16:7a:b7:f7:9e: 17:5e:5a:eb:63:e4:3e:bf:c5:8b:cd:2b:9d:57:ce: 89:47:43:66:64:63:5b:34:d2:73:93:c7:d7:41:3c: 61:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:25:2A:76:98:59:19:77:FC:83:11:4A:81:2B:35:96:ED:F8:83:35 X509v3 Authority Key Identifier: keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5a:8a:c5:4c:98:6d:cf:63:b4:0d:ec:85:e4:d0:c8:b5:8e: 88:14:00:bb:ac:b9:69:c0:01:9b:05:7a:b8:07:f9:ed:9f:59: 8b:aa:e7:63:5f:c4:4d:c6:6b:29:bc:1e:21:a6:7e:c3:47:a9: 18:fe:21:ee:1e:09:a0:f1:e0:9d:e6:b2:72:39:52:cd:fb:c0: 6b:c5:df:35:7a:c5:43:4b:f2:9b:d0:a1:99:f8:8c:b0:aa:06: d7:50:42:b3:60:a1:b9:eb:d4:2e:c0:06:98:98:dd:bb:80:d9: 8b:20:24:82:e5:e0:04:c3:fa:26:a0:ee:6a:3c:bb:25:67:bc: 94:f2:3b:d0:fa:08:7d:51:85:3a:0e:57:be:62:36:9a:2b:35: 93:f1:b6:ce:68:ef:fd:6d:f1:86:74:6e:bd:1b:ed:94:c9:03: a6:b3:d1:c1:a1:ea:3d:ea:07:0d:7f:46:a2:ce:06:1f:2b:1d: ff:37:de:c0:cb:5f:d8:7e:0d:be:07:b3:75:08:6c:14:62:1e: 5b:8a:ee:ef:78:1a:57:15:df:3b:e0:29:4a:e5:a1:bb:9b:8e: 2e:b5:ed:b8:a0:c2:35:08:08:0e:e7:5f:b7:36:e9:6c:12:b0: 44:b7:1f:ab:9c:7c:86:e3:73:31:27:6a:9f:83:24:34:d5:12: d4:29:9b:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv897/Ix3InZc8sdwUwAsWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDIxNmIwMDU3NDRjMThjYjM4NGQzZDA5ZDEyNDA2NmQ1 NWY2MmQwHhcNMjYwMTI3MDEwMDUzWhcNMjYwMTI4MDEwMDUzWjAzMTEwLwYDVQQD Eyg4MzI1MmE3Njk4NTkxOTc3ZmM4MzExNGE4MTJiMzU5NmVkZjg4MzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8L9DscRwULQe73+EmB48rzjNPhN kf01AZssYcnGDpXnguJzn53tY9esmkTn4iFI+eTwY3KeiybAWyalK5gL0mOJPOSK kC9VHisv4I0y6jKecl7jjSzU4MT9KkIIXz8ubIBD7rid6/PDrezEu4/TiOVSKpr3 A7hRfNvOblGp3MZKW2+AQeJ46B+Pshp0piZlnByfvTrd79oIYuKteNpcR4vInLv0 fOBCLKMkJu5V/mA1NaOw78kUpHnQNLNlz78Mwm3lNqmLnQPW5wjaAIM2X51c1Sit eMU18ZpLFnq3954XXlrrY+Q+v8WLzSudV86JR0NmZGNbNNJzk8fXQTxh6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMlKnaYWRl3/IMRSoErNZbt+IM1MB8GA1UdIwQY MBaAFMvSFrAFdEwYyzhNPQnRJAZtVfYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2Qt MDViYmU0ZWYwNmMwLzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2QtMDViYmU0ZWYwNmMw LzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL1qKxUyY bc9jtA3sheTQyLWOiBQAu6y5acABmwV6uAf57Z9Zi6rnY1/ETcZrKbweIaZ+w0ep GP4h7h4JoPHgneaycjlSzfvAa8XfNXrFQ0vym9ChmfiMsKoG11BCs2ChuevULsAG mJjdu4DZiyAkguXgBMP6JqDuajy7JWe8lPI70PoIfVGFOg5XvmI2mis1k/G2zmjv /W3xhnRuvRvtlMkDprPRwaHqPeoHDX9Gos4GHysd/zfewMtf2H4NvgezdQhsFGIe W4ru73gaVxXfO+ApSuWhu5uOLrXtuKDCNQgIDudftzbpbBKwRLcfq5x8huNzMSdq n4MkNNUS1CmbdA== -----END CERTIFICATE-----Generated at Tue Jan 27 07:16:57 2026 by rpki-client