This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft File: mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json) Hash identifier: sksK4cMXpGa4ACqfR5K9loTf4/Ry7nWhb9abuG0V0kY= Subject key identifier: 68:9B:53:CC:0A:9A:79:34:5C:D0:29:5F:5D:ED:F7:43:C8:85:E3:A9 Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8 Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8 Certificate serial: 019BFC8A3F6988566FE5030C1AECF12FF81A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft Manifest number: 17F1 Signing time: Mon 26 Jan 2026 23:01:17 +0000 Manifest this update: Mon 26 Jan 2026 23:01:17 +0000 Manifest next update: Tue 27 Jan 2026 23:01:17 +0000 Files and hashes: 1: 1-M17FsedROaF_Kne-5Hqf60_ZF0.roa (hash: dEdEroRDmqUptgIx5X9EfWXuPhIB2SKqFgAL57TKHAs=) 2: 8xwaS60LVGP0-okttlRwMxeXtAs.asa (hash: eEQj5lWgE4ntot+6zad5rM7H1/i9Quj9OILVi+LsDxQ=) 3: iOPKRCMcUAyvxDbxa94mSh4aVLQ.roa (hash: 853t8WhJ4kw5HbkYp7EUF9CdroSNYLBypKw+/lvJndw=) 4: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: kfH/Tdf/2Iz+g7kQMq+P0C3FlgqqDSeCaxp2ieRJVrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:3f:69:88:56:6f:e5:03:0c:1a:ec:f1:2f:f8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8 Validity Not Before: Jan 26 23:01:17 2026 GMT Not After : Jan 27 23:01:17 2026 GMT Subject: CN=689b53cc0a9a79345cd0295f5dedf743c885e3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:03:25:76:20:06:43:4e:a2:c8:c8:4f:a0:5d: 97:0b:e2:c6:c6:a0:1e:64:06:59:3f:ca:a7:a2:16: d2:1e:4e:70:c7:35:b3:16:74:9c:84:86:d5:41:85: d4:65:b1:28:fb:90:f2:51:72:07:91:56:c7:41:b1: 11:ad:dc:33:50:cd:3f:8b:62:e2:d1:37:55:44:b6: 2a:1c:f3:93:4c:4d:b2:84:f9:87:0e:ea:25:fc:58: b3:a8:d0:53:4a:a0:22:1f:9a:11:33:45:eb:32:d0: 1d:15:35:b9:fc:1f:f2:af:3b:9d:15:fa:b1:d9:84: 9c:63:29:96:d7:cf:0f:09:18:da:aa:67:d7:7b:b4: 91:b5:5f:04:99:96:14:26:75:4e:3d:7c:ab:f9:e8: 25:cc:3b:5b:d0:17:b4:ae:9a:05:11:47:05:7e:97: 48:e2:96:9c:dd:9a:5d:e8:ab:3e:cb:aa:20:cc:4f: 82:fd:1d:3e:af:40:cd:10:82:ba:27:76:50:cc:4c: 72:26:57:1a:cf:64:02:a1:82:23:0a:32:66:40:8b: 3b:b7:e5:0e:9c:01:5d:43:52:ae:c5:e9:71:ef:f6: 35:a7:0d:60:43:40:83:a1:d0:30:8f:ea:6d:2c:ac: e3:a6:63:6a:5c:c2:92:2b:a1:5b:a2:65:2d:ac:f0: cd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9B:53:CC:0A:9A:79:34:5C:D0:29:5F:5D:ED:F7:43:C8:85:E3:A9 X509v3 Authority Key Identifier: keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ea:29:8c:af:9d:7e:4b:af:31:8c:fc:0f:a9:51:13:ea:ab: 06:ba:95:ca:10:de:ea:bd:84:16:15:26:45:c9:6d:b3:01:6b: 6f:ea:85:48:65:20:be:75:1c:06:55:01:66:a4:50:81:1f:68: 1e:91:f5:ae:bf:88:b1:00:56:48:ce:9f:00:2a:ca:6e:88:aa: ec:ca:3d:0b:66:d7:1d:75:cd:d8:2d:6e:88:f7:b5:1b:8c:ea: 69:9c:51:1e:45:60:51:1e:b1:8c:87:9c:f2:47:4d:ec:6f:0a: 9b:cf:6b:32:70:c1:64:9a:bd:46:3a:9d:6f:bc:b4:39:0d:3f: fa:b1:77:8c:d5:e4:5b:39:97:b4:36:5d:55:c5:29:f9:b3:62: 5d:6a:6c:ce:e8:a3:68:96:fd:f9:d5:68:12:4c:a7:01:3b:f8: a2:c6:26:ca:95:82:17:f0:3a:72:e0:cc:8a:fa:87:ef:f5:82: cd:a7:9a:af:64:c5:05:3b:44:82:2d:1a:48:4f:c7:9e:22:71: d3:c7:74:02:8d:38:ef:f1:8b:dd:69:cc:da:41:80:75:d2:fd: be:71:d9:1e:bd:a8:95:59:99:2c:47:7e:d8:79:92:74:ae:d0: f5:cc:df:1e:75:3d:9b:6d:fa:e3:a7:73:88:0f:c8:8f:95:f7: f2:0c:3e:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ij9piFZv5QMMGuzxL/gaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ODRiOWViMTIyMjM3MTExYzFmOGNhNTc3MDdlYzczMDcy OTFlZTgwHhcNMjYwMTI2MjMwMTE3WhcNMjYwMTI3MjMwMTE3WjAzMTEwLwYDVQQD Eyg2ODliNTNjYzBhOWE3OTM0NWNkMDI5NWY1ZGVkZjc0M2M4ODVlM2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgMldiAGQ06iyMhPoF2XC+LGxqAe ZAZZP8qnohbSHk5wxzWzFnSchIbVQYXUZbEo+5DyUXIHkVbHQbERrdwzUM0/i2Li 0TdVRLYqHPOTTE2yhPmHDuol/FizqNBTSqAiH5oRM0XrMtAdFTW5/B/yrzudFfqx 2YScYymW188PCRjaqmfXe7SRtV8EmZYUJnVOPXyr+eglzDtb0Be0rpoFEUcFfpdI 4pac3Zpd6Ks+y6ogzE+C/R0+r0DNEIK6J3ZQzExyJlcaz2QCoYIjCjJmQIs7t+UO nAFdQ1Kuxelx7/Y1pw1gQ0CDodAwj+ptLKzjpmNqXMKSK6FbomUtrPDNmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGibU8wKmnk0XNApX13t90PIheOpMB8GA1UdIwQY MBaAFJmEuesSIjcRHB+MpXcH7HMHKR7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iOWMxZDctMmFlZC00Njk2LTgwYTct ZDVhYmY1MDMxZDIxLzEvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9iOWMxZDctMmFlZC00Njk2LTgwYTctZDVhYmY1MDMxZDIx LzEvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPeopjK+d fkuvMYz8D6lRE+qrBrqVyhDe6r2EFhUmRcltswFrb+qFSGUgvnUcBlUBZqRQgR9o HpH1rr+IsQBWSM6fACrKboiq7Mo9C2bXHXXN2C1uiPe1G4zqaZxRHkVgUR6xjIec 8kdN7G8Km89rMnDBZJq9Rjqdb7y0OQ0/+rF3jNXkWzmXtDZdVcUp+bNiXWpszuij aJb9+dVoEkynATv4osYmypWCF/A6cuDMivqH7/WCzaear2TFBTtEgi0aSE/HniJx 08d0Ao047/GL3WnM2kGAddL9vnHZHr2olVmZLEd+2HmSdK7Q9czfHnU9m23646dz iA/Ij5X38gw+xA== -----END CERTIFICATE-----Generated at Tue Jan 27 07:16:56 2026 by rpki-client