This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft File: _sY8Uk5V3zS_dYKCd1PnenaZx6I.mft (raw, json) Hash identifier: mwpev6XLGeWwFVg9A9kcZEoptrP6dLM5jc+s4kGuwPs= Subject key identifier: D6:28:04:7F:76:E4:75:D0:72:7A:BA:F9:D2:50:A6:3F:D9:71:DF:DC Authority key identifier: FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2 Certificate issuer: /CN=fec63c524e55df34bf7582827753e77a7699c7a2 Certificate serial: 019BD9C78E0B5A2FE49B7E1BC35967A53A2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft Manifest number: 13E0 Signing time: Tue 20 Jan 2026 05:01:32 +0000 Manifest this update: Tue 20 Jan 2026 05:01:32 +0000 Manifest next update: Wed 21 Jan 2026 05:01:32 +0000 Files and hashes: 1: PDlzLdRSfiCWn5Cn9n1N3CZ3lEA.roa (hash: EEEk6xoAWgV2qpYCMx9BhEvvCT14wds/MjLsIpjnFvU=) 2: _sY8Uk5V3zS_dYKCd1PnenaZx6I.crl (hash: 51RNAiyL2azVfjgQhjQidQdy0YjSPLgVZh8aRomKphs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:c7:8e:0b:5a:2f:e4:9b:7e:1b:c3:59:67:a5:3a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fec63c524e55df34bf7582827753e77a7699c7a2 Validity Not Before: Jan 20 05:01:32 2026 GMT Not After : Jan 21 05:01:32 2026 GMT Subject: CN=d628047f76e475d0727abaf9d250a63fd971dfdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:df:43:90:ff:63:95:d1:4a:30:7b:16:69:57: 1a:7f:7c:34:32:aa:dd:f1:90:99:ac:04:d4:c4:d6: 14:b5:54:23:3b:24:a3:eb:40:bf:60:0b:e1:29:e4: a0:68:ee:ef:89:5e:ef:42:79:0f:05:ae:fb:b0:a1: 39:b2:34:27:92:3e:e6:63:51:67:52:71:ad:6d:a6: 6c:23:5e:03:c1:bb:12:24:59:03:c7:bb:ec:31:51: 44:53:e8:a4:0a:12:8e:a7:26:86:58:93:57:90:cd: 69:26:24:13:03:1a:1d:5c:84:8f:80:44:8e:a3:f6: 0a:5a:ac:2c:2f:a2:a7:f6:51:31:ae:eb:6e:86:4a: 96:2d:50:00:da:5b:3c:ff:50:48:a4:66:a1:8f:fa: cc:44:69:d4:7c:10:30:84:8b:d9:7d:9f:a4:14:9f: 0b:e0:50:78:13:30:9d:dc:18:20:79:0c:79:6f:a1: 5a:af:dd:fb:97:6f:9c:4c:00:44:f4:a0:cf:f2:8a: 8e:20:31:d1:d5:ed:dd:24:81:a1:56:e2:c9:da:83: 1c:fb:7a:36:bf:0f:ec:49:18:f9:be:8a:2f:f0:d6: fe:81:e3:79:c8:3d:58:27:43:21:06:73:4a:c9:06: b8:a6:89:c5:bb:99:5c:7d:ee:41:5f:fa:94:bf:6b: d7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:28:04:7F:76:E4:75:D0:72:7A:BA:F9:D2:50:A6:3F:D9:71:DF:DC X509v3 Authority Key Identifier: keyid:FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ab:52:fa:ec:0a:28:74:7e:eb:78:f4:74:a7:5d:26:3d:a6: 1c:e9:3d:cf:2e:e6:7c:eb:66:39:b5:57:1a:94:d5:c2:1c:b6: 02:c3:53:00:16:54:a5:9d:a8:2a:51:8e:b9:41:0b:37:ec:a2: 43:2d:cd:4f:d3:6e:b0:62:58:88:1a:f4:b8:08:5d:c0:94:ae: bf:06:e8:e5:8f:b6:3b:3c:8e:94:5f:2e:1b:19:04:e9:d0:38: ae:7a:29:3c:29:3b:66:3a:11:6f:ce:50:f2:1c:28:23:9b:a7: 4b:0d:bb:27:86:d9:21:4e:49:b7:42:c1:9a:e8:52:bc:80:c1: ca:3c:ad:9f:8c:28:40:61:86:20:76:65:bf:12:49:73:e5:1f: cb:82:3c:96:b3:d4:ad:07:e8:e4:7c:fc:f4:86:3d:7e:de:2a: 26:47:95:0b:d4:6e:66:58:8d:2f:58:17:39:08:ae:45:b3:40: 81:23:22:4e:e7:b2:af:0a:7c:a3:64:dd:88:70:4f:ca:ed:a8: 94:f5:76:22:af:ec:1c:e3:99:ee:14:7a:fe:9e:ad:c0:c4:ac: 58:aa:2d:6a:89:be:2c:84:69:87:c2:52:aa:51:21:71:65:62: f4:65:3a:09:31:7f:37:62:6c:73:9e:89:7b:91:6a:b5:5e:25: b0:66:8a:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZx44LWi/km34bw1lnpTotMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYzYzYzUyNGU1NWRmMzRiZjc1ODI4Mjc3NTNlNzdhNzY5 OWM3YTIwHhcNMjYwMTIwMDUwMTMyWhcNMjYwMTIxMDUwMTMyWjAzMTEwLwYDVQQD EyhkNjI4MDQ3Zjc2ZTQ3NWQwNzI3YWJhZjlkMjUwYTYzZmQ5NzFkZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5N9DkP9jldFKMHsWaVcaf3w0Mqrd 8ZCZrATUxNYUtVQjOySj60C/YAvhKeSgaO7viV7vQnkPBa77sKE5sjQnkj7mY1Fn UnGtbaZsI14DwbsSJFkDx7vsMVFEU+ikChKOpyaGWJNXkM1pJiQTAxodXISPgESO o/YKWqwsL6Kn9lExrutuhkqWLVAA2ls8/1BIpGahj/rMRGnUfBAwhIvZfZ+kFJ8L 4FB4EzCd3BggeQx5b6Far937l2+cTABE9KDP8oqOIDHR1e3dJIGhVuLJ2oMc+3o2 vw/sSRj5voov8Nb+geN5yD1YJ0MhBnNKyQa4ponFu5lcfe5BX/qUv2vXewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYoBH925HXQcnq6+dJQpj/Zcd/cMB8GA1UdIwQY MBaAFP7GPFJOVd80v3WCgndT53p2mceiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3NZOFVrNVYzelNfZFlLQ2QxUG5lbmFaeDZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jY2ExMTUtMmI5My00YWZkLWFkMDIt YjMxZGY3MTE3NzE1LzEvX3NZOFVrNVYzelNfZFlLQ2QxUG5lbmFaeDZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9jY2ExMTUtMmI5My00YWZkLWFkMDItYjMxZGY3MTE3NzE1 LzEvX3NZOFVrNVYzelNfZFlLQ2QxUG5lbmFaeDZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6tS+uwK KHR+63j0dKddJj2mHOk9zy7mfOtmObVXGpTVwhy2AsNTABZUpZ2oKlGOuUELN+yi Qy3NT9NusGJYiBr0uAhdwJSuvwbo5Y+2OzyOlF8uGxkE6dA4rnopPCk7ZjoRb85Q 8hwoI5unSw27J4bZIU5Jt0LBmuhSvIDByjytn4woQGGGIHZlvxJJc+Ufy4I8lrPU rQfo5Hz89IY9ft4qJkeVC9RuZliNL1gXOQiuRbNAgSMiTueyrwp8o2TdiHBPyu2o lPV2Iq/sHOOZ7hR6/p6twMSsWKotaom+LIRph8JSqlEhcWVi9GU6CTF/N2Jsc56J e5FqtV4lsGaKEg== -----END CERTIFICATE-----Generated at Tue Jan 20 07:36:17 2026 by rpki-client