This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft File: lYs3Q2qJ-sosT35g-axNR6GZrWY.mft (raw, json) Hash identifier: uiSJNXEUe/WDQiKAlKeKzGP4KzupsQpFsEhfoQgsTeI= Subject key identifier: 6F:64:25:CD:80:46:84:66:E1:86:8B:A1:E1:E4:B9:7B:44:88:4C:38 Authority key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66 Certificate issuer: /CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66 Certificate serial: 019BFB0945FE580DAD2055C6B7B21049ABB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 16:00:47 +0000 Manifest this update: Mon 26 Jan 2026 16:00:47 +0000 Manifest next update: Tue 27 Jan 2026 16:00:47 +0000 Files and hashes: 1: lYs3Q2qJ-sosT35g-axNR6GZrWY.crl (hash: PLxWVG1uNreGIVqs483Ib8pjz+n4KYuQ+kSAUZ4RVKg=) 2: weY_2856hTe3pr2rRDSeNZrrwGY.roa (hash: AgQxLvovPKe7WQZGV1eUhCzA8gghQ7NklaBXL9qGr3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:45:fe:58:0d:ad:20:55:c6:b7:b2:10:49:ab:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66 Validity Not Before: Jan 26 16:00:47 2026 GMT Not After : Jan 27 16:00:47 2026 GMT Subject: CN=6f6425cd80468466e1868ba1e1e4b97b44884c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bb:84:d2:07:54:93:09:6d:f5:9a:e9:fc:88: f1:14:97:76:0a:ab:c8:85:67:e4:78:ef:99:18:2d: 89:9b:f7:52:77:12:c5:6c:b2:59:3b:6d:7e:48:76: ef:13:db:86:b6:0a:55:f2:39:7f:4b:6e:e9:c8:95: 26:00:13:2c:4a:48:61:fb:53:e5:05:3f:da:61:07: bc:84:89:8d:61:53:30:7f:71:dc:6a:d0:85:cc:a6: 40:32:d8:b4:7c:86:9b:6e:ae:a2:94:dc:30:67:d9: c0:62:94:3d:4b:b3:89:14:65:02:df:a5:c0:f3:d5: d9:60:a9:17:6e:f5:b2:26:01:f7:7b:61:cf:b0:e9: 24:5a:81:16:66:a7:51:fc:bc:e9:f4:23:80:04:bb: 62:96:7f:6c:e5:12:4a:77:32:d3:3c:cb:29:cf:54: a4:0e:26:bb:a4:1b:a0:40:2d:5d:3c:65:bb:14:1d: a5:10:49:10:f9:6c:4a:2c:04:5b:eb:2a:b1:49:11: 7c:fd:09:c0:e8:34:f6:58:30:a4:12:07:df:fd:bb: ef:33:a1:da:d6:95:11:21:6b:06:58:3d:d3:c3:05: ea:ab:7b:f0:d2:15:f7:85:58:b5:be:d6:1f:5f:e4: a7:1c:da:88:ca:55:7f:a9:68:df:d9:14:66:e5:b4: ae:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:64:25:CD:80:46:84:66:E1:86:8B:A1:E1:E4:B9:7B:44:88:4C:38 X509v3 Authority Key Identifier: keyid:95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:8c:8f:85:8a:66:2a:7e:6a:25:73:6d:60:ce:ba:a6:6f:a1: c5:ab:ec:62:60:ec:0e:5b:88:02:20:c1:ef:68:eb:a7:8a:de: 1a:6e:0c:d1:f4:c9:97:b5:d4:8c:93:4c:a6:63:85:3b:57:90: 43:88:bb:ce:a9:be:95:6d:b9:d5:c1:ed:ae:40:84:7f:9b:08: 26:78:32:9c:41:45:2c:bb:85:19:ac:42:f1:32:f2:4d:bd:de: 35:2b:dd:aa:82:f8:44:00:45:07:9a:04:83:d3:b6:1d:4b:ba: 0b:17:a9:20:99:d8:71:ea:44:84:a8:6e:c3:96:4c:88:c8:4a: f6:62:d1:c1:62:6d:42:6e:c8:a1:70:3f:72:b0:76:08:03:ac: f1:62:86:4e:88:43:6c:c1:8a:e8:26:9b:d7:16:15:9c:33:48: bc:4e:dd:dd:4f:ac:d9:39:fa:0b:57:69:81:29:02:ac:48:a7: 0a:4a:b8:a4:ed:5c:11:a8:3c:8b:4a:26:24:3c:f5:a4:86:b9: 1a:d1:ff:45:92:3c:51:ea:1c:6c:4d:1b:63:85:a1:90:d1:0c: c0:49:ff:ad:cb:18:34:70:0c:db:13:03:7f:b1:36:1f:a1:96: 50:8b:50:73:70:58:14:04:7b:7a:4a:f5:c2:45:2d:86:1e:3b: a4:6e:10:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CUX+WA2tIFXGt7IQSau2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1OGIzNzQzNmE4OWZhY2EyYzRmN2U2MGY5YWM0ZDQ3YTE5 OWFkNjYwHhcNMjYwMTI2MTYwMDQ3WhcNMjYwMTI3MTYwMDQ3WjAzMTEwLwYDVQQD Eyg2ZjY0MjVjZDgwNDY4NDY2ZTE4NjhiYTFlMWU0Yjk3YjQ0ODg0YzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmruE0gdUkwlt9Zrp/IjxFJd2CqvI hWfkeO+ZGC2Jm/dSdxLFbLJZO21+SHbvE9uGtgpV8jl/S27pyJUmABMsSkhh+1Pl BT/aYQe8hImNYVMwf3HcatCFzKZAMti0fIabbq6ilNwwZ9nAYpQ9S7OJFGUC36XA 89XZYKkXbvWyJgH3e2HPsOkkWoEWZqdR/Lzp9COABLtiln9s5RJKdzLTPMspz1Sk Dia7pBugQC1dPGW7FB2lEEkQ+WxKLARb6yqxSRF8/QnA6DT2WDCkEgff/bvvM6Ha 1pURIWsGWD3TwwXqq3vw0hX3hVi1vtYfX+SnHNqIylV/qWjf2RRm5bSuCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9kJc2ARoRm4YaLoeHkuXtEiEw4MB8GA1UdIwQY MBaAFJWLN0NqifrKLE9+YPmsTUehma1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFlzM1EycUotc29zVDM1Zy1heE5SNkdacldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lMzFmMzktYzlmNC00MmMyLWEwM2Ut MTIxMjUzMTJiMmEzLzEvbFlzM1EycUotc29zVDM1Zy1heE5SNkdacldZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9lMzFmMzktYzlmNC00MmMyLWEwM2UtMTIxMjUzMTJiMmEz LzEvbFlzM1EycUotc29zVDM1Zy1heE5SNkdacldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4yPhYpm Kn5qJXNtYM66pm+hxavsYmDsDluIAiDB72jrp4reGm4M0fTJl7XUjJNMpmOFO1eQ Q4i7zqm+lW251cHtrkCEf5sIJngynEFFLLuFGaxC8TLyTb3eNSvdqoL4RABFB5oE g9O2HUu6CxepIJnYcepEhKhuw5ZMiMhK9mLRwWJtQm7IoXA/crB2CAOs8WKGTohD bMGK6Cab1xYVnDNIvE7d3U+s2Tn6C1dpgSkCrEinCkq4pO1cEag8i0omJDz1pIa5 GtH/RZI8UeocbE0bY4WhkNEMwEn/rcsYNHAM2xMDf7E2H6GWUItQc3BYFAR7ekr1 wkUthh47pG4Qeg== -----END CERTIFICATE-----Generated at Mon Jan 26 19:38:58 2026 by rpki-client