This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: 0id8Yk3qJKDe9+66C4jIyZEuhHgKbRFDqxZFii19at0= Subject key identifier: 99:A7:30:53:D3:A2:39:C8:F0:2F:A7:65:C6:2C:F1:79:C5:DE:23:B4 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019C0BC65886A2CDEF4C9B32D8587E4FD3FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 06AA Signing time: Thu 29 Jan 2026 22:01:13 +0000 Manifest this update: Thu 29 Jan 2026 22:01:13 +0000 Manifest next update: Fri 30 Jan 2026 22:01:13 +0000 Files and hashes: 1: 1zvdcEwkgDgymDIvdRNXraLRNH8.roa (hash: 91ImAvK9cIsr386Uw3vdRaUWjAcGr1Za2u1qM4Wcpbw=) 2: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: 2GPf2TuaH6ghc6gvjfQ+4p4amvOAcNeSj/PdyQP2AN0=) 3: AuuFpGckEdWDmpSli6J4EvnBEFA.roa (hash: UWwZYirMViLQ4FhWk6naRNb3lf/S07gxbtcPGiaea3M=) 4: B_2DlHPjFMc2OFdioV78P7kSKnk.roa (hash: l6A6lmViWSMPIZA6Jqw5d17N6Vzy1rMqG76RVXMx2Xs=) 5: D_jYfwuBOjkANvdaFHDPTLr66JQ.roa (hash: vAK4Fi/RAnr6XiRotftdXv2sD1o6dY70W8WZ/V0XyK4=) 6: JRpzznWelvDGpNctUx-9YeQj91I.roa (hash: UWpK2mc+BRq0WDsXbRZApCIJ/yZuMuk8WsuIDijlk30=) 7: N8T1T4yzeC_svV7N6clN6YYuhS0.roa (hash: Zjsphs8xxbX+E2wFNgFNlo+S/FNhRonrcNCUdPBKUgo=) 8: XCau4ffd9wRsX7TYXIogzR2WqO4.roa (hash: ftqkiMajJgdI8EjDHWxMovMT410S0p0no+51o9gTIa8=) 9: YARBLfUZ9k_hQNuqCW-GW04WaQI.roa (hash: YYeeEXSa0og2pjEcv4jU32lCZBeHpaJXhmkA+TmvUbg=) 10: YfhOPAWRkHzsFNKQodjoA2IhLKM.roa (hash: 9/L6hUhQcrkiGTuXjLMFbE6LlWLBn2NBCH2Dr2RZSJA=) 11: YhAgOfBxB36OmlW5J6iwNI4pf-A.roa (hash: YgJ931EB8K2m5BcoLz5t++aQe+CzOPxkeIACGG7/szQ=) 12: YqA5Nc1KA5rAJ78_5MFp3uqVEyo.roa (hash: /mX+AdWxuRgbJEYcF/jnfYMmQcOrnv5KIh/j9UyP9FA=) 13: _m7nbQwhxW5w0wbnoPwEGZq5xj4.roa (hash: 6vjyJskNxAqxaPWKjJV/dxJmRNdkP5LCRI9f1lfJEJQ=) 14: aHuFfSOUYXmTmBwxHlPwh-EVryM.roa (hash: 4h0lpb8Jw+MnXWrJAhTnOT+WFcvU+QMAmEsFwZdu5/k=) 15: egsOE6bZvfKQiaDurlHql4l7FQo.roa (hash: BP8wlsBgKB6wKVje/kb04PbZKDtzqCLIojy+BbhlXD4=) 16: hieYljUxWV_urT3FVt4VHwUYJHA.roa (hash: uaNQn7nDi6rwH6tpmG6o5xOJwukq6sKOWsUOpBkHxN0=) 17: v8v2OaJG7Hdhmb6VYMUj66YcSY0.roa (hash: B7Lry8kdmTHVcZ/TVSfBhCUi/wQDju0yT/ymY52jHqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 22:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0b:c6:58:86:a2:cd:ef:4c:9b:32:d8:58:7e:4f:d3:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Jan 29 22:01:13 2026 GMT Not After : Jan 30 22:01:13 2026 GMT Subject: CN=99a73053d3a239c8f02fa765c62cf179c5de23b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ef:38:fc:5c:5b:eb:30:1d:e6:9a:14:08:38: ea:09:7c:33:0b:a5:4c:34:13:81:6f:e7:81:23:9f: 08:22:0b:da:ff:d3:8d:38:f3:30:1f:eb:1f:bb:97: 1d:25:8b:f1:f9:b8:ce:10:d4:2f:8a:43:4d:08:53: e2:02:8d:a4:44:a3:2d:f6:3d:04:38:9d:7c:2b:36: fc:b4:25:5b:7e:dd:ea:86:ad:c1:c7:3c:be:a6:85: b8:83:8b:30:5c:8c:99:0d:5c:50:a0:f7:67:bf:78: 05:19:04:3a:09:c8:9e:2f:cc:f7:73:b2:46:f4:8a: 91:86:fc:91:59:fd:45:6f:ef:63:a6:0d:26:19:2c: ae:a5:40:ec:ea:03:9e:21:e5:e6:35:ea:70:e1:81: d0:94:18:97:14:7a:5f:dd:c1:89:9b:44:9f:62:d1: fa:04:14:d5:79:5b:0a:0e:fc:2a:f1:e2:c0:e5:89: 46:c2:9b:e1:7c:4d:60:5c:81:fd:ce:fa:ff:15:a9: ae:4e:04:4f:04:19:1a:ff:cc:9b:7a:af:39:75:3f: 39:6a:b9:e3:1d:55:00:c7:c3:ab:d4:a5:35:68:63: 93:63:d8:53:39:65:fb:99:e4:8b:26:be:a4:fc:47: 17:89:7f:97:94:59:2b:08:47:4d:4e:b9:1c:a2:e1: 32:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A7:30:53:D3:A2:39:C8:F0:2F:A7:65:C6:2C:F1:79:C5:DE:23:B4 X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d3:59:17:e5:4a:e1:d8:b0:ac:36:72:89:0b:41:32:e5:b1: 37:b7:87:6f:fd:35:03:2b:22:2e:57:48:4c:5c:49:13:dc:da: 70:07:e9:96:68:33:2d:b2:8f:34:fc:09:88:29:c6:b7:87:10: 5a:ea:26:3a:83:06:ca:02:e3:6a:1e:45:09:4e:54:e6:fa:0b: 55:13:87:5f:c0:1d:66:a1:d4:61:31:89:03:c7:61:70:d1:06: e7:84:27:c7:1f:ce:b3:82:13:78:69:6b:62:7f:34:63:69:4f: 03:32:8f:4a:f9:ff:06:26:2b:a2:0e:06:de:f9:ba:45:a9:f5: 26:31:ed:b7:3a:8c:ba:a7:ef:6e:47:94:f3:86:66:43:90:7f: ec:63:43:55:19:dd:4f:b0:6d:55:bb:3f:40:24:5b:9e:d1:61: 08:18:d5:d7:4e:77:e1:de:ac:59:93:c5:e4:b6:5c:a6:c4:22: 8d:04:0e:91:a5:fc:21:c0:61:30:8e:26:48:21:34:d0:e5:fe: 05:09:47:37:ad:77:17:b6:ec:3e:7d:d6:6b:37:e7:d4:86:94: 1f:aa:12:c4:03:67:fe:f6:7e:06:65:a6:58:7b:d0:c9:71:d6: c0:86:37:78:22:54:29:60:af:77:3d:3d:a7:6b:d8:8e:9d:32: 2e:41:2e:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwLxliGos3vTJsy2Fh+T9P9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwMTI5MjIwMTEzWhcNMjYwMTMwMjIwMTEzWjAzMTEwLwYDVQQD Eyg5OWE3MzA1M2QzYTIzOWM4ZjAyZmE3NjVjNjJjZjE3OWM1ZGUyM2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe84/Fxb6zAd5poUCDjqCXwzC6VM NBOBb+eBI58IIgva/9ONOPMwH+sfu5cdJYvx+bjOENQvikNNCFPiAo2kRKMt9j0E OJ18Kzb8tCVbft3qhq3Bxzy+poW4g4swXIyZDVxQoPdnv3gFGQQ6CcieL8z3c7JG 9IqRhvyRWf1Fb+9jpg0mGSyupUDs6gOeIeXmNepw4YHQlBiXFHpf3cGJm0SfYtH6 BBTVeVsKDvwq8eLA5YlGwpvhfE1gXIH9zvr/FamuTgRPBBka/8ybeq85dT85arnj HVUAx8Or1KU1aGOTY9hTOWX7meSLJr6k/EcXiX+XlFkrCEdNTrkcouEy+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmnMFPTojnI8C+nZcYs8XnF3iO0MB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdNZF+VK 4diwrDZyiQtBMuWxN7eHb/01AysiLldITFxJE9zacAfplmgzLbKPNPwJiCnGt4cQ WuomOoMGygLjah5FCU5U5voLVROHX8AdZqHUYTGJA8dhcNEG54Qnxx/Os4ITeGlr Yn80Y2lPAzKPSvn/BiYrog4G3vm6Ran1JjHttzqMuqfvbkeU84ZmQ5B/7GNDVRnd T7BtVbs/QCRbntFhCBjV10534d6sWZPF5LZcpsQijQQOkaX8IcBhMI4mSCE00OX+ BQlHN613F7bsPn3Wazfn1IaUH6oSxANn/vZ+BmWmWHvQyXHWwIY3eCJUKWCvdz09 p2vYjp0yLkEukw== -----END CERTIFICATE-----Generated at Fri Jan 30 07:37:34 2026 by rpki-client