This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft File: cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft (raw, json) Hash identifier: tD+W7RE3savqjBtQVhWTWTTwtJBQiWXbj7FnD+bhdgM= Subject key identifier: 3E:26:60:E0:5C:74:7D:FF:B8:FC:A8:29:5A:EF:2C:66:6D:17:99:E6 Authority key identifier: 71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC Certificate issuer: /CN=7186e64b5823c4c61287858d9770c70df706b0cc Certificate serial: 019BF79A85290A1882FFC7C6A5B7B1D5B1D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 00:00:57 +0000 Manifest this update: Mon 26 Jan 2026 00:00:57 +0000 Manifest next update: Tue 27 Jan 2026 00:00:57 +0000 Files and hashes: 1: cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl (hash: YFNMCAaZju05dA+ZoGElyfw1iq40VcYDPhk+MGBaWuA=) 2: rbQLRQQ57T1QHNETgtQKDJDxvVs.roa (hash: LJ4g0UoBULTP2DaQsUUzIZ3AibWkiJwfnok2tkxhGgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:85:29:0a:18:82:ff:c7:c6:a5:b7:b1:d5:b1:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7186e64b5823c4c61287858d9770c70df706b0cc Validity Not Before: Jan 26 00:00:57 2026 GMT Not After : Jan 27 00:00:57 2026 GMT Subject: CN=3e2660e05c747dffb8fca8295aef2c666d1799e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7e:85:c4:c4:91:71:5d:1c:b2:74:6e:f3:90: 80:04:9f:8f:0b:fc:6c:9f:a8:9c:86:17:9f:cb:92: 31:c3:8a:f0:a1:4e:da:06:fe:23:39:fd:65:53:13: 85:52:35:e8:2b:50:d7:a0:3f:1f:7c:17:35:d2:d2: 9f:79:c5:d1:7e:f4:07:52:91:ff:dc:5b:ce:d6:57: 4f:38:c4:5e:94:b4:31:9d:09:03:b5:99:80:3b:76: 4d:47:3a:ad:42:79:b6:28:40:1c:59:e4:dd:56:cb: 99:58:f8:bd:cf:cb:55:24:80:87:09:a7:30:a4:7c: 3c:08:f3:a1:a9:d3:c2:65:31:8e:d8:4f:c0:4b:d4: 79:8e:4b:47:ee:55:e3:eb:34:b6:e7:1e:59:15:af: 28:39:44:ab:ba:4d:a7:48:4b:09:aa:49:84:4a:ac: ae:3e:1b:e6:e7:b2:f6:6b:f0:6a:8a:e6:60:57:b8: 60:ac:78:24:ff:33:5d:3c:0d:55:e4:27:be:52:05: 63:19:25:06:d1:4a:73:cd:14:ae:33:26:69:56:95: 2f:b0:e7:ec:5a:2f:9f:d6:d2:ed:15:5c:8d:72:b7: ec:35:b3:f2:56:4a:d3:49:8b:24:b3:d4:68:8c:6c: 45:ff:58:e9:fc:34:85:21:2a:9c:8b:5f:a9:ba:64: 80:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:26:60:E0:5C:74:7D:FF:B8:FC:A8:29:5A:EF:2C:66:6D:17:99:E6 X509v3 Authority Key Identifier: keyid:71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:35:81:fc:e5:67:7a:b5:4e:87:14:9f:3f:10:e5:29:92:f7: 46:4c:42:69:c2:a5:7a:5d:d7:13:80:a1:7e:3c:80:25:7a:c4: 82:29:af:bd:4c:ce:79:a0:3d:2d:54:53:3d:ab:51:86:d3:35: aa:24:98:23:7b:6e:a9:4c:3f:d5:75:56:dc:ca:18:bc:34:7c: 6c:ff:24:00:08:3d:11:4e:0b:e3:60:12:8a:6f:41:b9:51:f3: f0:d2:a5:21:47:e3:4e:44:b3:2b:85:cb:35:54:59:7d:5a:d6: 55:87:b6:98:fc:89:56:d1:f3:4b:a9:c2:76:77:6b:97:23:1f: e5:5d:5c:c5:52:47:9b:90:f5:57:4f:59:c2:33:08:34:e1:6a: 4f:01:95:5b:09:42:b7:09:a8:5f:72:2f:2a:88:ba:fe:e9:81: 27:61:ba:3d:26:38:ee:45:9d:e6:17:25:06:fa:ec:00:1a:9c: 45:5d:96:4c:88:28:47:97:e2:ce:98:68:98:f9:38:ed:47:dc: e1:fd:8b:17:08:19:f4:db:8d:68:97:8e:fb:d3:de:42:b0:23: d8:19:99:5e:75:e6:9c:49:7f:62:56:e7:e1:ae:da:0d:d2:23: d1:5b:90:07:59:7b:aa:e2:61:f5:0c:0e:59:ba:27:cf:34:3f: 4b:1e:70:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3moUpChiC/8fGpbex1bHWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxODZlNjRiNTgyM2M0YzYxMjg3ODU4ZDk3NzBjNzBkZjcw NmIwY2MwHhcNMjYwMTI2MDAwMDU3WhcNMjYwMTI3MDAwMDU3WjAzMTEwLwYDVQQD EygzZTI2NjBlMDVjNzQ3ZGZmYjhmY2E4Mjk1YWVmMmM2NjZkMTc5OWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH6FxMSRcV0csnRu85CABJ+PC/xs n6ichhefy5Ixw4rwoU7aBv4jOf1lUxOFUjXoK1DXoD8ffBc10tKfecXRfvQHUpH/ 3FvO1ldPOMRelLQxnQkDtZmAO3ZNRzqtQnm2KEAcWeTdVsuZWPi9z8tVJICHCacw pHw8CPOhqdPCZTGO2E/AS9R5jktH7lXj6zS25x5ZFa8oOUSruk2nSEsJqkmESqyu Phvm57L2a/BqiuZgV7hgrHgk/zNdPA1V5Ce+UgVjGSUG0UpzzRSuMyZpVpUvsOfs Wi+f1tLtFVyNcrfsNbPyVkrTSYsks9RojGxF/1jp/DSFISqci1+pumSAYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4mYOBcdH3/uPyoKVrvLGZtF5nmMB8GA1UdIwQY MBaAFHGG5ktYI8TGEoeFjZdwxw33BrDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1libVMxZ2p4TVlTaDRXTmwzREhEZmNHc013LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hMjA5NjMtZmFkNy00ZTM0LWJmMWUt NjU4YjgwMGE1ZDYxLzEvY1libVMxZ2p4TVlTaDRXTmwzREhEZmNHc013Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9hMjA5NjMtZmFkNy00ZTM0LWJmMWUtNjU4YjgwMGE1ZDYx LzEvY1libVMxZ2p4TVlTaDRXTmwzREhEZmNHc013LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETWB/OVn erVOhxSfPxDlKZL3RkxCacKlel3XE4ChfjyAJXrEgimvvUzOeaA9LVRTPatRhtM1 qiSYI3tuqUw/1XVW3MoYvDR8bP8kAAg9EU4L42ASim9BuVHz8NKlIUfjTkSzK4XL NVRZfVrWVYe2mPyJVtHzS6nCdndrlyMf5V1cxVJHm5D1V09ZwjMINOFqTwGVWwlC twmoX3IvKoi6/umBJ2G6PSY47kWd5hclBvrsABqcRV2WTIgoR5fizphomPk47Ufc 4f2LFwgZ9NuNaJeO+9PeQrAj2BmZXnXmnEl/Ylbn4a7aDdIj0VuQB1l7quJh9QwO WbonzzQ/Sx5w+w== -----END CERTIFICATE-----Generated at Mon Jan 26 11:10:47 2026 by rpki-client