This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json) Hash identifier: gdjX6j6IFGLd/WAS1YGWvKRmAoROfszX1AfkesB7rs0= Subject key identifier: 17:D6:15:25:36:AD:84:97:25:36:EA:4C:73:0C:91:9B:69:CA:39:CF Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf Certificate serial: 019BFB76FD224356947D22BB5C1501019FC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft Manifest number: 116F Signing time: Mon 26 Jan 2026 18:00:37 +0000 Manifest this update: Mon 26 Jan 2026 18:00:37 +0000 Manifest next update: Tue 27 Jan 2026 18:00:37 +0000 Files and hashes: 1: 2rBRtn2VImz8NGlNapuFnTe1QMs.roa (hash: g8S101o2T04kwWweNxfhN7/ae2GiWrG/LFVp6fAx/g8=) 2: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: BD4UpdNc7IzSeGlozHjlXRGX9hpYMkbg+TyNFhTxviI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:76:fd:22:43:56:94:7d:22:bb:5c:15:01:01:9f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf Validity Not Before: Jan 26 18:00:37 2026 GMT Not After : Jan 27 18:00:37 2026 GMT Subject: CN=17d6152536ad84972536ea4c730c919b69ca39cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:66:f7:0f:35:60:fb:2e:74:e2:74:13:47: b2:44:d0:93:69:9a:99:56:8c:19:6e:49:a8:e0:67: 74:85:99:76:65:fc:8c:27:f1:7e:fc:5f:2c:08:9b: bd:e4:24:08:c9:90:dd:a7:37:3b:7d:c0:25:ec:a0: 60:61:32:9b:06:64:04:bb:37:90:a8:2c:28:0f:b2: 5c:ee:57:05:26:e4:2a:61:09:e0:b8:0c:89:03:2d: 95:8f:a1:41:e9:7e:e0:95:7d:9d:05:04:6a:a2:55: 3b:c5:ff:31:ad:0f:5d:36:f1:ca:e8:84:1e:d6:29: 91:eb:50:93:13:ae:bf:dd:27:0d:9b:27:e3:47:71: fb:fb:c9:95:d1:cc:25:e3:ae:19:fe:e0:7b:6f:ad: 49:b0:f4:e7:b8:ee:2d:ab:9a:ce:32:8b:40:61:9a: 5b:64:fb:fb:c2:00:7b:9b:9d:6f:ff:e6:f1:2a:3b: 64:cd:93:f7:9b:41:b0:34:d0:10:af:ac:63:9e:f7: d2:dc:7b:3b:04:96:10:64:95:51:fd:0f:38:0a:a2: c3:6f:75:48:73:36:3c:ca:b3:fd:c5:0e:60:a6:15: 7c:9d:51:1e:9b:e8:84:d1:55:ac:50:8b:e0:a0:e6: 59:76:d3:8f:c0:74:a8:6c:bf:80:d1:1c:7f:a0:82: 53:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D6:15:25:36:AD:84:97:25:36:EA:4C:73:0C:91:9B:69:CA:39:CF X509v3 Authority Key Identifier: keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ca:20:36:80:c6:f3:de:d2:8f:3a:da:75:47:fd:cf:82:e7: c4:15:dc:21:cd:29:5b:13:2a:0b:f4:93:a9:9a:c3:1a:70:ce: 7f:61:00:46:d9:af:6f:a4:5c:67:a3:f8:df:aa:ab:a5:c8:ac: 4e:21:45:3a:52:6e:63:13:01:ed:4f:83:b1:9b:dd:cf:f8:60: 61:0a:0f:a7:60:90:ec:5b:0e:a5:b1:36:8e:c8:df:83:07:4e: b7:c8:48:e3:12:55:6f:97:5a:c8:b1:ae:90:73:24:d9:eb:51: fd:dd:ff:fb:04:9a:c6:96:d2:50:29:aa:70:b1:b3:e5:87:5c: 21:87:a0:91:9b:fe:7f:8d:c7:83:dc:79:6b:c1:35:4f:4d:60: 29:f5:d4:ed:9d:c9:57:92:5a:be:e9:30:09:cc:d2:84:92:e3: d0:b7:a4:4c:e6:68:4a:16:ca:bc:87:75:a3:22:da:bb:14:16: 1c:6c:c4:a1:29:e2:bd:da:86:ed:63:44:1c:8d:f6:b0:35:c1: 60:6e:37:3b:bb:54:46:a3:cc:7a:87:75:32:0c:50:9e:9b:38: 4b:86:e1:82:7c:e2:17:2a:9b:d0:56:77:69:f4:df:33:23:47: ad:1c:71:6f:4b:ef:ac:7b:1e:96:71:18:b7:e4:be:00:6d:d0: 73:ea:75:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7dv0iQ1aUfSK7XBUBAZ/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDc0NWViZmNlYzM4MmRmMjUyYzJmNzUwZGI2NDhmNGYw MzRhYmYwHhcNMjYwMTI2MTgwMDM3WhcNMjYwMTI3MTgwMDM3WjAzMTEwLwYDVQQD EygxN2Q2MTUyNTM2YWQ4NDk3MjUzNmVhNGM3MzBjOTE5YjY5Y2EzOWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIRm9w81YPsudOJ0E0eyRNCTaZqZ VowZbkmo4Gd0hZl2ZfyMJ/F+/F8sCJu95CQIyZDdpzc7fcAl7KBgYTKbBmQEuzeQ qCwoD7Jc7lcFJuQqYQnguAyJAy2Vj6FB6X7glX2dBQRqolU7xf8xrQ9dNvHK6IQe 1imR61CTE66/3ScNmyfjR3H7+8mV0cwl464Z/uB7b61JsPTnuO4tq5rOMotAYZpb ZPv7wgB7m51v/+bxKjtkzZP3m0GwNNAQr6xjnvfS3Hs7BJYQZJVR/Q84CqLDb3VI czY8yrP9xQ5gphV8nVEem+iE0VWsUIvgoOZZdtOPwHSobL+A0Rx/oIJTBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfWFSU2rYSXJTbqTHMMkZtpyjnPMB8GA1UdIwQY MBaAFMvXRev87Dgt8lLC91DbZI9PA0q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YjMyOWYtZjRmNS00YWYwLWE4MWUt OTJiNjc5NmM3N2NjLzEveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi82YjMyOWYtZjRmNS00YWYwLWE4MWUtOTJiNjc5NmM3N2Nj LzEveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsogNoDG 897SjzradUf9z4LnxBXcIc0pWxMqC/STqZrDGnDOf2EARtmvb6RcZ6P436qrpcis TiFFOlJuYxMB7U+DsZvdz/hgYQoPp2CQ7FsOpbE2jsjfgwdOt8hI4xJVb5dayLGu kHMk2etR/d3/+wSaxpbSUCmqcLGz5YdcIYegkZv+f43Hg9x5a8E1T01gKfXU7Z3J V5JavukwCczShJLj0LekTOZoShbKvId1oyLauxQWHGzEoSnivdqG7WNEHI32sDXB YG43O7tURqPMeod1MgxQnps4S4bhgnziFyqb0FZ3afTfMyNHrRxxb0vvrHselnEY t+S+AG3Qc+p1Ig== -----END CERTIFICATE-----Generated at Mon Jan 26 23:02:32 2026 by rpki-client