This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json) Hash identifier: fHaHR+k3L6n7NSG96tjngyw5Wqr9Y2QDtyEdiZud+Z4= Subject key identifier: 4B:8C:50:5A:7C:31:F9:5C:CB:44:95:9E:34:F2:F3:8C:11:31:89:5B Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0 Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0 Certificate serial: 019C051F85D6E7649D2828D554B623913601 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft Manifest number: 0786 Signing time: Wed 28 Jan 2026 15:01:17 +0000 Manifest this update: Wed 28 Jan 2026 15:01:17 +0000 Manifest next update: Thu 29 Jan 2026 15:01:17 +0000 Files and hashes: 1: VpnFqg4nLkv4hVZvAnrC7KmiNAU.roa (hash: 5iLmKrDX02BNsU1dvSS1ObOgIc5TS34EiCu+Rj74FUw=) 2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: wcaDkRuayAhEtkGjnNYII606dk20voRJueGq84HhC6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:1f:85:d6:e7:64:9d:28:28:d5:54:b6:23:91:36:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0 Validity Not Before: Jan 28 15:01:17 2026 GMT Not After : Jan 29 15:01:17 2026 GMT Subject: CN=4b8c505a7c31f95ccb44959e34f2f38c1131895b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1c:c6:09:4f:90:9b:c4:01:12:8a:a2:09:98: 5a:9f:1d:bc:8d:d2:62:9e:e2:4f:97:c9:22:d5:99: c1:97:fa:2b:fc:2b:73:ed:f9:5d:f0:5f:c8:30:c5: 7e:6b:c9:89:e9:0f:ec:fb:06:e5:54:c3:07:35:4f: bd:87:73:07:ad:74:cc:64:b1:8a:47:37:d0:7b:4d: 67:29:e5:9b:62:fb:08:ff:d0:d7:17:73:1a:03:d0: f3:40:cb:08:c1:01:d9:62:ba:27:bb:1d:3d:f4:d4: cc:1d:59:d3:bc:af:b6:12:9f:08:ad:31:fb:7b:9b: 7e:03:7f:ed:41:c9:a1:7f:12:12:47:58:ab:4a:f5: 45:c2:59:1a:34:42:d6:c8:f4:d1:78:6c:18:10:a6: c6:1c:ec:ce:a3:db:ed:97:0e:bd:3b:be:91:b8:e1: 91:d7:0b:b4:a0:1e:8c:04:d5:55:7c:1f:23:36:75: 02:2b:7e:d7:3b:ba:53:de:9e:09:e2:a1:17:79:dc: 90:0f:b0:28:0e:e6:d8:4f:38:ec:8b:26:01:12:1e: b9:90:09:19:51:2a:25:c6:17:63:df:4d:a1:9e:71: 96:8e:88:5d:2f:69:22:5b:05:9d:f9:71:cd:19:54: ee:6b:71:26:aa:5a:22:e4:6e:62:2d:e2:34:76:86: b6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8C:50:5A:7C:31:F9:5C:CB:44:95:9E:34:F2:F3:8C:11:31:89:5B X509v3 Authority Key Identifier: keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:9e:d8:de:e7:3a:af:ea:31:f8:c8:03:53:6a:88:7c:a5:56: d7:57:ab:44:04:ef:f0:21:94:df:69:3f:dc:b1:9d:b1:3e:8d: c1:2d:ef:d5:55:8e:f6:51:37:8e:ed:e1:bc:15:04:44:d4:a9: 5d:ac:7e:bd:52:7f:b2:68:2a:73:af:c1:7f:d1:6b:83:78:1c: 45:7b:e3:d4:c6:51:ee:d1:d3:5a:29:a2:7f:af:0f:d2:3e:6d: af:b8:41:a2:0d:17:b1:12:91:99:6e:59:a2:93:d8:a5:88:93: 2f:80:48:f9:dc:41:ab:2f:eb:f9:8d:2a:21:e5:b2:ca:7e:18: 98:28:6b:d7:71:4a:a9:05:19:56:42:79:83:1b:d0:f7:7d:71: cc:b4:87:1a:54:5b:62:6c:02:d8:0e:64:20:c6:9f:ea:49:a6: 46:f4:50:9e:da:d1:71:42:64:ef:6b:25:c4:81:63:9d:c4:d1: 8c:c4:4f:88:1d:3f:ae:d3:6b:5e:b4:ff:ff:30:e1:0f:54:f2: d0:a1:3f:8c:ba:08:ec:a5:27:2e:57:86:7b:22:36:53:27:3f: 5e:42:19:22:50:95:5c:88:6e:97:d0:b8:55:ce:45:e1:ec:aa: 39:06:fc:8b:42:5e:4a:17:86:76:5e:74:4e:84:27:e5:3c:f5: 3e:2d:8f:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwFH4XW52SdKCjVVLYjkTYBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZWI1ZmI3MzNhYmIzZTA3ZDc1ZmE4MGQ3YmU5Y2IxODEz Y2QzZTAwHhcNMjYwMTI4MTUwMTE3WhcNMjYwMTI5MTUwMTE3WjAzMTEwLwYDVQQD Eyg0YjhjNTA1YTdjMzFmOTVjY2I0NDk1OWUzNGYyZjM4YzExMzE4OTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BzGCU+Qm8QBEoqiCZhanx28jdJi nuJPl8ki1ZnBl/or/Ctz7fld8F/IMMV+a8mJ6Q/s+wblVMMHNU+9h3MHrXTMZLGK RzfQe01nKeWbYvsI/9DXF3MaA9DzQMsIwQHZYronux099NTMHVnTvK+2Ep8IrTH7 e5t+A3/tQcmhfxISR1irSvVFwlkaNELWyPTReGwYEKbGHOzOo9vtlw69O76RuOGR 1wu0oB6MBNVVfB8jNnUCK37XO7pT3p4J4qEXedyQD7AoDubYTzjsiyYBEh65kAkZ USolxhdj302hnnGWjohdL2kiWwWd+XHNGVTua3Emqloi5G5iLeI0doa2UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuMUFp8Mflcy0SVnjTy84wRMYlbMB8GA1UdIwQY MBaAFMvrX7czq7PgfXX6gNe+nLGBPNPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveS10ZnR6T3JzLUI5ZGZxQTE3NmNzWUU4MC1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wYTdjNGUtOTViYy00NTZiLThmNzQt MmNjZmIzYjQxMjYwLzEveS10ZnR6T3JzLUI5ZGZxQTE3NmNzWUU4MC1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wYTdjNGUtOTViYy00NTZiLThmNzQtMmNjZmIzYjQxMjYw LzEveS10ZnR6T3JzLUI5ZGZxQTE3NmNzWUU4MC1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYp7Y3uc6 r+ox+MgDU2qIfKVW11erRATv8CGU32k/3LGdsT6NwS3v1VWO9lE3ju3hvBUERNSp Xax+vVJ/smgqc6/Bf9Frg3gcRXvj1MZR7tHTWimif68P0j5tr7hBog0XsRKRmW5Z opPYpYiTL4BI+dxBqy/r+Y0qIeWyyn4YmChr13FKqQUZVkJ5gxvQ931xzLSHGlRb YmwC2A5kIMaf6kmmRvRQntrRcUJk72slxIFjncTRjMRPiB0/rtNrXrT//zDhD1Ty 0KE/jLoI7KUnLleGeyI2Uyc/XkIZIlCVXIhul9C4Vc5F4eyqOQb8i0JeSheGdl50 ToQn5Tz1Pi2Ppg== -----END CERTIFICATE-----Generated at Wed Jan 28 17:55:16 2026 by rpki-client