This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json) Hash identifier: 5yOkmQD/+wEai7VT3OQNG8ZBcKMzU1FecsX90GAeTlk= Subject key identifier: B4:70:19:00:6D:6A:8C:1A:28:61:CA:89:3E:60:04:B5:06:9A:3F:4F Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe Certificate serial: 019C27744E4EDFB6D0F735559C9FE6D60057 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft Manifest number: 156D Signing time: Wed 04 Feb 2026 07:00:59 +0000 Manifest this update: Wed 04 Feb 2026 07:00:59 +0000 Manifest next update: Thu 05 Feb 2026 07:00:59 +0000 Files and hashes: 1: 1-DvsSSfIpJZDV3xPHOJo0DctRuY.roa (hash: NZc7Jrn95ssvSPyZ3Ab2YcErt8Xet8QyonFr2zEF4Wc=) 2: 1ecdqUBqZQ3YMtDjCwQiKG8xYaQ.roa (hash: zv1q8HwWUf+KPLhWoNogvMuGlLQD526bjlEhoqB7/Us=) 3: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: 75iBLVWIYH6ZENy9xZ9REyVrH7Uz8MFwQABCIHpN8Cg=) 4: 6kHXGgT89v6lDauvrrIDf_tZADI.roa (hash: 4Bzh7brDF5yrfdZSSwARwJRw98UbYl61jVu1+dOgNwM=) 5: ebjipFWkeRZ-FSLav9L063nACkg.roa (hash: 0BfNaXE7ist80wZpP4f8ndfGepYT1Q0OuP1Q88o/qgc=) 6: ffgs48VKPcr0qhMfZ8lwTlauDcc.roa (hash: smkj6/63EM/vzHvbo2HV23N0B61WRHhbXBiGwfiPVjs=) 7: fkMsC5FB3EXzKUDu0WEWZDYgRGg.roa (hash: GyXHiAiOBT4Wt1rYKLOCWwf00XoA39UOqU9gosFaCoA=) 8: xpkIemYjOTmWtKVmdzbJYcakWgs.roa (hash: fDGVOUTWmgFsRhq58PpHOedFqewxoUtUKqyowz57wYs=) 9: y6ZMA0bem_ypGe2FfpEWzTN8nno.roa (hash: 7OMxhExrtHyZxin9THZMP8/My2Hk6Y9f4O3yqoFNYvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:27:74:4e:4e:df:b6:d0:f7:35:55:9c:9f:e6:d6:00:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe Validity Not Before: Feb 4 07:00:59 2026 GMT Not After : Feb 5 07:00:59 2026 GMT Subject: CN=b47019006d6a8c1a2861ca893e6004b5069a3f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f4:ca:c7:11:9f:3c:47:6e:6c:2e:4a:a2:99: 11:b5:c1:69:5a:21:77:f8:e0:e7:21:0b:2b:47:06: ce:33:9b:84:e1:73:ef:d2:48:f6:42:7b:80:d7:e8: fb:e6:7d:0c:ba:95:d3:7e:96:74:20:3d:84:40:1d: df:5e:0c:b6:72:c5:c6:d5:e1:59:27:20:d8:fb:01: 33:ea:79:e1:b8:7c:68:49:3f:90:bf:01:5f:81:25: ea:13:c6:42:ed:13:c9:d2:7a:4a:37:fd:7e:1b:a0: bc:2c:bb:c0:a1:03:74:8a:5c:65:38:9a:17:e5:7d: 72:d7:5d:05:82:c4:67:89:7c:36:22:13:8f:6b:1c: 88:40:1d:a7:a0:ad:64:30:de:1d:1c:3f:8b:76:9d: e7:65:ff:28:05:a3:1a:d8:27:b8:75:fb:3e:da:c3: 6f:8a:93:1b:67:60:b9:fd:99:09:e6:a0:4d:67:6c: f9:fe:f3:bf:27:d5:f6:0e:d1:b4:2e:9a:22:82:d6: 13:e9:16:9d:53:b3:e6:ca:4d:ac:4c:ca:71:0c:72: 2a:77:2d:ab:6d:1c:53:f8:7f:ef:ed:35:cf:ef:55: 95:37:d4:8b:b0:80:e6:d9:b4:ee:06:1e:60:11:52: 0d:02:32:ae:b4:16:74:a8:2f:2b:f2:53:e7:fe:9b: 15:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:70:19:00:6D:6A:8C:1A:28:61:CA:89:3E:60:04:B5:06:9A:3F:4F X509v3 Authority Key Identifier: keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f8:ec:7a:45:83:e2:b8:a5:d8:c9:1c:ab:ec:a9:90:ea:38: 43:ce:d4:5c:1e:19:28:35:51:5b:90:e8:a2:c4:d9:48:34:ee: 7f:0b:50:10:80:e5:ea:4e:96:46:23:d5:32:02:85:c2:35:54: 5e:78:db:d0:e4:29:67:d5:2e:29:b1:9e:58:bf:94:03:cc:76: 11:b8:8c:ff:4f:67:cc:29:0c:25:a2:a4:b3:79:aa:1a:f3:29: 2f:3c:93:40:ad:c3:ac:aa:26:57:2e:55:4d:9b:a5:91:3c:5b: 78:11:fe:2d:6a:cb:3e:ca:ad:b1:3f:84:e6:c7:89:6e:c8:a2: 6b:94:c3:eb:d8:5e:37:f9:8b:99:c8:93:d2:49:a8:c0:e5:6a: 5f:f3:3c:5a:37:4a:11:7f:66:c3:8f:80:bc:55:8c:1e:0a:56: 91:6b:f2:33:ce:33:94:4d:64:1f:8e:13:a9:8d:99:98:f8:fe: 79:c7:20:a7:cc:ac:ac:55:a3:12:ed:25:a7:12:2b:53:cb:ae: 54:fb:a9:7b:f9:84:52:59:19:d0:a3:ab:37:df:4a:c3:46:37: 2f:8f:de:12:77:a7:26:28:ec:e7:fe:91:5f:b8:cd:90:8c:33: 14:b6:1a:96:74:7f:b1:83:4d:89:9e:41:41:3d:eb:af:31:4a: b5:75:7f:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwndE5O37bQ9zVVnJ/m1gBXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ODI0N2QzZjgxNDcyZGJiYTA2ZGJlYTliZDE5Yzc4NWQx OGJhYmUwHhcNMjYwMjA0MDcwMDU5WhcNMjYwMjA1MDcwMDU5WjAzMTEwLwYDVQQD EyhiNDcwMTkwMDZkNmE4YzFhMjg2MWNhODkzZTYwMDRiNTA2OWEzZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvTKxxGfPEdubC5KopkRtcFpWiF3 +ODnIQsrRwbOM5uE4XPv0kj2QnuA1+j75n0MupXTfpZ0ID2EQB3fXgy2csXG1eFZ JyDY+wEz6nnhuHxoST+QvwFfgSXqE8ZC7RPJ0npKN/1+G6C8LLvAoQN0ilxlOJoX 5X1y110FgsRniXw2IhOPaxyIQB2noK1kMN4dHD+Ldp3nZf8oBaMa2Ce4dfs+2sNv ipMbZ2C5/ZkJ5qBNZ2z5/vO/J9X2DtG0LpoigtYT6RadU7Pmyk2sTMpxDHIqdy2r bRxT+H/v7TXP71WVN9SLsIDm2bTuBh5gEVINAjKutBZ0qC8r8lPn/psVaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRwGQBtaowaKGHKiT5gBLUGmj9PMB8GA1UdIwQY MBaAFNmCR9P4FHLbugbb6pvRnHhdGLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgt YTMwMzI2MTU2NjBjLzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgtYTMwMzI2MTU2NjBj LzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/jsekWD 4ril2Mkcq+ypkOo4Q87UXB4ZKDVRW5DoosTZSDTufwtQEIDl6k6WRiPVMgKFwjVU Xnjb0OQpZ9UuKbGeWL+UA8x2EbiM/09nzCkMJaKks3mqGvMpLzyTQK3DrKomVy5V TZulkTxbeBH+LWrLPsqtsT+E5seJbsiia5TD69heN/mLmciT0kmowOVqX/M8WjdK EX9mw4+AvFWMHgpWkWvyM84zlE1kH44TqY2ZmPj+eccgp8ysrFWjEu0lpxIrU8uu VPupe/mEUlkZ0KOrN99Kw0Y3L4/eEnenJijs5/6RX7jNkIwzFLYalnR/sYNNiZ5B QT3rrzFKtXV/MA== -----END CERTIFICATE-----Generated at Wed Feb 4 08:30:31 2026 by rpki-client