This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json) Hash identifier: K5zRgaZgMd0vT2XdMZt4sC1BKVzr5bJdFpuodsk0Z+M= Subject key identifier: 79:9F:4A:EF:4A:70:8F:31:11:4E:72:54:22:ED:FC:05:28:B8:A0:C2 Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34 Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34 Certificate serial: 019BFAD228D30BEEC701C6C03824A9F1242C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft Manifest number: 10D8 Signing time: Mon 26 Jan 2026 15:00:35 +0000 Manifest this update: Mon 26 Jan 2026 15:00:35 +0000 Manifest next update: Tue 27 Jan 2026 15:00:35 +0000 Files and hashes: 1: YFo06dx0o1PHDC6LUgSFCDM_MLE.roa (hash: i0OcIk2lCb0oZECkABY1EIzkvkdWAble7uuQNpGV6Q8=) 2: cIShs-dj-a-jUHC5O2QcH4JFtqE.roa (hash: sqvBQpMmwNFJ+qbqQywFjzcQM3kVnXmjI7ID549RLQI=) 3: gd9FyMAEx2zDcAvRasWsSCt8jII.roa (hash: 3gHwGEwP5km+DCt4+0KzZKC5xkxi0OUUMqCX1cypjtI=) 4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: 0HwHRiolhhhf0dvITTO2F+E6V1mQzd11Zutq75Bkx1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:28:d3:0b:ee:c7:01:c6:c0:38:24:a9:f1:24:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34 Validity Not Before: Jan 26 15:00:35 2026 GMT Not After : Jan 27 15:00:35 2026 GMT Subject: CN=799f4aef4a708f31114e725422edfc0528b8a0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a4:7d:eb:26:9d:ab:aa:45:d2:c4:70:ec:fa: 7d:c0:f2:5a:38:33:c6:f3:78:b8:99:bd:e2:a9:e9: 3e:e0:cf:ad:fe:47:c2:51:46:37:a9:ee:dd:74:07: 6f:7d:70:ac:33:76:a8:11:1c:a5:77:6e:f1:c8:2b: 99:83:31:ae:7e:64:1a:df:16:89:3f:6c:df:71:f5: a5:15:dd:bb:15:b4:70:b3:65:55:88:5a:6f:77:46: fc:62:33:3b:f7:1d:5d:f5:bd:e0:d4:0f:a6:81:c3: 75:89:47:f5:0b:11:f0:67:1a:c7:a2:54:49:6b:fe: 22:48:39:67:e3:e6:5f:ca:32:b5:12:29:95:33:79: 45:d5:9c:86:8e:ea:9a:54:7b:1f:b9:d2:76:87:c7: 0b:b9:c5:69:47:7b:cf:f1:47:95:91:93:19:79:8f: 92:b5:52:73:24:57:b4:7a:91:9f:c1:1e:38:c1:bb: 09:a4:3b:ec:f5:26:ae:fc:ec:aa:22:68:32:20:da: b2:e2:e1:4a:93:9c:9a:a5:16:02:91:93:b7:6f:1b: ce:d0:5a:9d:37:81:97:82:c5:1c:94:07:17:be:42: b1:9f:a5:26:f2:59:c7:9a:65:06:c6:d4:41:ae:68: 67:3b:54:15:76:0c:6e:e8:76:a1:b1:6f:20:30:31: 7c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9F:4A:EF:4A:70:8F:31:11:4E:72:54:22:ED:FC:05:28:B8:A0:C2 X509v3 Authority Key Identifier: keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ad:64:74:75:21:d7:8d:bf:f3:01:25:00:16:22:7b:84:fc: fc:b9:39:5d:da:44:bf:61:b9:0e:38:8d:7b:e1:37:6d:10:7d: 6b:d2:f0:f6:8a:a1:22:9d:36:41:1e:fe:e1:0a:cb:d3:40:6f: cf:45:0c:c8:60:82:f4:d8:75:c7:ca:2a:92:f0:28:f5:c3:0a: aa:1d:e2:39:ea:6c:d5:81:7a:a9:4b:2b:92:da:33:85:09:7b: 81:04:c2:38:dc:8e:12:0c:5a:1d:69:d1:10:2e:74:9b:1d:eb: 71:26:59:81:4a:1a:d1:1d:66:2a:30:a3:f0:01:e8:b5:d8:03: 37:ae:37:ed:94:99:51:73:51:ac:ea:bf:99:69:6b:75:b5:24: 38:f2:fe:57:6b:4d:95:c5:64:0b:b3:42:27:e7:84:bc:01:d0: 3b:69:1a:0d:da:ea:43:da:b7:be:be:d9:0f:ce:e6:de:2c:35: 24:a3:02:4d:b5:3b:80:0b:3a:13:1f:34:87:7e:48:a7:d4:3c: 74:12:51:80:ff:bb:46:c1:48:ee:54:bd:2c:b5:e0:25:6a:c6: 3a:af:e9:d1:2f:0a:84:4d:13:4d:7b:ca:27:ee:47:4e:4d:4c: 2b:86:4a:10:5f:29:60:fb:33:5a:47:c7:71:41:fc:aa:97:fd: 77:4d:1c:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60ijTC+7HAcbAOCSp8SQsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYjdjMjBiNTVhNDcwZGFiODkyZjRjOTFlYTAwMTBiZDFj MzlmMzQwHhcNMjYwMTI2MTUwMDM1WhcNMjYwMTI3MTUwMDM1WjAzMTEwLwYDVQQD Eyg3OTlmNGFlZjRhNzA4ZjMxMTE0ZTcyNTQyMmVkZmMwNTI4YjhhMGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaR96yadq6pF0sRw7Pp9wPJaODPG 83i4mb3iqek+4M+t/kfCUUY3qe7ddAdvfXCsM3aoERyld27xyCuZgzGufmQa3xaJ P2zfcfWlFd27FbRws2VViFpvd0b8YjM79x1d9b3g1A+mgcN1iUf1CxHwZxrHolRJ a/4iSDln4+ZfyjK1EimVM3lF1ZyGjuqaVHsfudJ2h8cLucVpR3vP8UeVkZMZeY+S tVJzJFe0epGfwR44wbsJpDvs9Sau/OyqImgyINqy4uFKk5yapRYCkZO3bxvO0Fqd N4GXgsUclAcXvkKxn6Um8lnHmmUGxtRBrmhnO1QVdgxu6HahsW8gMDF8JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmfSu9KcI8xEU5yVCLt/AUouKDCMB8GA1UdIwQY MBaAFMu3wgtVpHDauJL0yR6gAQvRw580MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgt MjU2MzM5NzM2YzJiLzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgtMjU2MzM5NzM2YzJi LzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADK1kdHUh 142/8wElABYie4T8/Lk5XdpEv2G5DjiNe+E3bRB9a9Lw9oqhIp02QR7+4QrL00Bv z0UMyGCC9Nh1x8oqkvAo9cMKqh3iOeps1YF6qUsrktozhQl7gQTCONyOEgxaHWnR EC50mx3rcSZZgUoa0R1mKjCj8AHotdgDN6437ZSZUXNRrOq/mWlrdbUkOPL+V2tN lcVkC7NCJ+eEvAHQO2kaDdrqQ9q3vr7ZD87m3iw1JKMCTbU7gAs6Ex80h35Ip9Q8 dBJRgP+7RsFI7lS9LLXgJWrGOq/p0S8KhE0TTXvKJ+5HTk1MK4ZKEF8pYPszWkfH cUH8qpf9d00cCA== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:22 2026 by rpki-client