This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json) Hash identifier: 9+S5bgXkO3Q70QeLQhJK5L6f1TLNrW6ynHCljUWVrKI= Subject key identifier: 5B:35:59:6F:7C:DE:2B:CF:89:6C:1A:22:70:DC:41:89:07:35:D7:BC Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80 Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980 Certificate serial: 019BFCC16FEC0BB08D87E324039918EC1595 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft Manifest number: 0E70 Signing time: Tue 27 Jan 2026 00:01:34 +0000 Manifest this update: Tue 27 Jan 2026 00:01:34 +0000 Manifest next update: Wed 28 Jan 2026 00:01:34 +0000 Files and hashes: 1: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: UgZLXs9tBPEe+yk5chvatuXUgzRLkTfId0/sC2nWNpc=) 2: cIwuNOBQZVEAKmirlwvqGCKlAVA.roa (hash: MTQrQYMht/gMO7+xqgltPlCnk6FhdwKMEakt6nRw8pI=) 3: xTW_lD5hyFR2vQYBVeIQ8tHTVWU.roa (hash: +MCBleBXBQDx6fs7+ejDOMAZrsryKfTQT1EHgUrcOhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:6f:ec:0b:b0:8d:87:e3:24:03:99:18:ec:15:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980 Validity Not Before: Jan 27 00:01:34 2026 GMT Not After : Jan 28 00:01:34 2026 GMT Subject: CN=5b35596f7cde2bcf896c1a2270dc41890735d7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:83:53:0e:15:a7:c9:5d:ca:91:6a:48:51: 6f:f9:22:10:74:92:d7:7d:ee:37:9e:26:70:dd:91: b4:47:c5:fd:e3:d7:66:18:c0:1b:18:67:3f:11:ed: 20:2a:5d:dc:83:8b:c7:3a:fa:64:6b:40:62:b6:e1: aa:fb:04:61:cf:a9:ed:84:1a:b6:7a:f8:6b:c7:c8: 66:fb:3b:23:d4:44:18:50:be:4c:d2:91:c4:4c:b0: 05:af:06:18:1a:05:67:ec:13:28:5e:72:79:5f:79: 0b:db:14:41:10:2a:05:1d:2e:96:4d:18:b9:0a:d8: 32:a1:c7:9f:b3:c7:94:49:32:49:36:2d:0b:de:e1: d6:21:aa:40:f3:37:84:da:7e:d9:b5:2f:3a:c4:d5: a7:ae:77:b4:dc:ce:08:6f:e4:ae:25:14:9a:30:db: 61:29:b2:70:c5:05:cd:8a:53:ff:e1:70:c2:69:62: ce:e9:16:57:2e:63:5d:b5:26:0f:00:13:6c:cf:03: 3b:10:cb:57:fc:bf:42:ef:a1:83:fc:01:df:a2:64: 62:8e:ad:54:d5:01:ed:35:8e:4f:0c:7b:ff:17:6b: 03:ad:aa:d5:83:89:9e:a9:ea:93:6d:04:c1:7e:9c: 4a:01:68:36:aa:9f:bd:85:9e:65:5c:51:42:b5:c3: 01:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:35:59:6F:7C:DE:2B:CF:89:6C:1A:22:70:DC:41:89:07:35:D7:BC X509v3 Authority Key Identifier: keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:bf:bc:57:99:25:2a:7c:51:92:7b:d2:08:64:a5:27:1b:45: 04:cf:b6:5a:2c:33:46:0b:c6:2d:06:23:eb:c8:10:39:cc:fa: 64:4a:a9:2e:36:b9:7b:f4:f6:f3:df:94:82:2b:27:78:dc:7d: f2:e0:e1:46:9d:0d:94:d3:9f:61:1e:04:b7:e7:65:30:6b:3c: 36:0d:eb:4d:69:75:7f:3f:5e:f1:c8:08:fe:fd:14:ab:1b:a6: aa:62:39:07:a0:57:8f:06:de:33:16:45:de:7e:28:33:8e:1a: e0:37:be:24:b1:4c:9a:ca:dc:67:f7:d1:ed:7e:4f:b9:ba:b1: ed:47:ac:b4:2d:db:0d:de:d2:99:56:a6:06:f1:69:c8:a5:04: 37:90:17:8d:6a:72:87:91:f3:ff:a0:a2:ac:15:7d:42:06:1d: b9:bc:c0:ef:0f:ab:5a:33:e5:bc:40:e1:6f:c5:a1:d5:87:a6: cb:5a:ed:c3:46:0d:11:91:c8:59:9a:a2:3f:06:11:25:56:cb: 96:3e:b9:1b:1d:91:0e:2f:d5:bb:0f:e5:ee:92:f5:68:e8:a6: 61:b6:37:92:0c:a8:80:e8:c5:74:37:4c:b7:e3:a9:72:bd:3d: 2d:d5:b7:8d:a6:06:74:0b:70:55:a0:4d:31:5d:ba:56:9c:e1: 61:f2:25:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wW/sC7CNh+MkA5kY7BWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYzM0NDU1YzBkNGU0ZmMzYmEyZjFjNDZmMDhiNDc1Yzhm NmQ5ODAwHhcNMjYwMTI3MDAwMTM0WhcNMjYwMTI4MDAwMTM0WjAzMTEwLwYDVQQD Eyg1YjM1NTk2ZjdjZGUyYmNmODk2YzFhMjI3MGRjNDE4OTA3MzVkN2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroKDUw4Vp8ldypFqSFFv+SIQdJLX fe43niZw3ZG0R8X949dmGMAbGGc/Ee0gKl3cg4vHOvpka0BituGq+wRhz6nthBq2 evhrx8hm+zsj1EQYUL5M0pHETLAFrwYYGgVn7BMoXnJ5X3kL2xRBECoFHS6WTRi5 Ctgyocefs8eUSTJJNi0L3uHWIapA8zeE2n7ZtS86xNWnrne03M4Ib+SuJRSaMNth KbJwxQXNilP/4XDCaWLO6RZXLmNdtSYPABNszwM7EMtX/L9C76GD/AHfomRijq1U 1QHtNY5PDHv/F2sDrarVg4meqeqTbQTBfpxKAWg2qp+9hZ5lXFFCtcMBeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFs1WW983ivPiWwaInDcQYkHNde8MB8GA1UdIwQY MBaAFGPDRFXA1OT8O6LxxG8ItHXI9tmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDkt N2JmY2Q3ZTk0YjllLzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDktN2JmY2Q3ZTk0Yjll LzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALr+8V5kl KnxRknvSCGSlJxtFBM+2WiwzRgvGLQYj68gQOcz6ZEqpLja5e/T289+UgisneNx9 8uDhRp0NlNOfYR4Et+dlMGs8Ng3rTWl1fz9e8cgI/v0UqxumqmI5B6BXjwbeMxZF 3n4oM44a4De+JLFMmsrcZ/fR7X5Pubqx7UestC3bDd7SmVamBvFpyKUEN5AXjWpy h5Hz/6CirBV9QgYdubzA7w+rWjPlvEDhb8Wh1Yemy1rtw0YNEZHIWZqiPwYRJVbL lj65Gx2RDi/Vuw/l7pL1aOimYbY3kgyogOjFdDdMt+Opcr09LdW3jaYGdAtwVaBN MV26VpzhYfIldQ== -----END CERTIFICATE-----Generated at Tue Jan 27 08:51:02 2026 by rpki-client