This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json) Hash identifier: /ygldABbgGCgOP9suw1B2GXbIVorFYEtiYruGXJ7EFM= Subject key identifier: 3B:21:66:5C:E3:F4:AF:C8:4D:A7:46:29:FF:EC:3C:DC:EE:E3:37:39 Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 019BC52D03211FD25C13481C09AD7EF1C6CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft Manifest number: 0BEF Signing time: Fri 16 Jan 2026 05:00:19 +0000 Manifest this update: Fri 16 Jan 2026 05:00:19 +0000 Manifest next update: Sat 17 Jan 2026 05:00:19 +0000 Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: QO7mFQRROfgCKizBaLtobCHI5uhWLqh6KtYAuYKTJ94=) 2: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=) 3: IcfiGiHhm-UnVbVbGBC_RtFqnfM.roa (hash: FGxn4dZpz1k+FXowXOdQoq7CmlfSlmu0geRbED6pnGQ=) 4: MWiV7graQLeuw4AYgJ4ZHIBAuZE.roa (hash: 5UScMx33ea6UI1n+yqJ+oTPgZkvCg216H08oUJCNoCY=) 5: d_rxJJRdc6lxglOZm6MPcxsRKVk.roa (hash: 09cxzd1TQUa9YcSDbUPMORsaaMIR6hUWI/wpDIjuvuY=) 6: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=) 7: h5YHyc0MmzGvq4YgXx8Mpbt82CY.roa (hash: hT18pU7cTeKJ68OyFrQNbEbvLKO/d8ePLsbG9hT8IJE=) 8: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=) 9: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 05:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c5:2d:03:21:1f:d2:5c:13:48:1c:09:ad:7e:f1:c6:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Jan 16 05:00:19 2026 GMT Not After : Jan 17 05:00:19 2026 GMT Subject: CN=3b21665ce3f4afc84da74629ffec3cdceee33739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b8:ac:70:64:33:bb:54:9c:79:d0:d9:86:a1: ad:6f:e2:5f:de:39:02:e0:16:a0:5c:fa:3b:f1:77: e6:2b:dd:c7:1b:3c:ad:5c:83:f8:a3:a3:69:6e:2d: 9d:c9:07:63:c7:27:be:4a:90:23:ff:d0:d1:b0:26: b9:31:d1:3d:a5:5f:f5:96:a9:b0:96:84:5c:88:16: e9:82:d6:43:62:59:cf:de:da:67:cb:05:ad:80:17: 8e:db:f0:28:c0:29:d2:f3:a5:9f:ea:7a:4c:49:5d: 60:71:19:57:d2:ba:6c:69:5c:0f:15:84:6b:f2:84: 4c:9a:40:9b:6f:43:07:5c:40:48:ae:bb:55:72:d8: 75:1b:e4:bd:ae:24:e0:1c:46:11:32:b4:e2:63:4d: 56:2e:98:50:9a:b0:1b:85:7c:8e:82:65:fc:75:18: 4b:6e:a7:a8:2e:61:9e:0b:f6:6e:4a:42:1d:ba:cc: 6a:ed:47:51:69:eb:22:d9:9f:10:62:8c:51:43:55: 0e:39:eb:fc:ef:57:31:c5:18:b0:75:25:3d:6d:08: a4:cd:49:e3:cb:2e:9c:aa:9d:0e:a7:7b:15:31:e9: 0a:7d:b2:9a:f0:ef:8c:42:ad:30:2c:3e:8a:e9:ef: 46:96:68:56:bd:ae:87:96:f3:1e:18:92:c6:a3:40: 44:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:21:66:5C:E3:F4:AF:C8:4D:A7:46:29:FF:EC:3C:DC:EE:E3:37:39 X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:8e:99:bb:64:d3:86:43:20:1a:a7:d3:06:5e:17:b3:1d:2f: 8a:0b:15:a3:04:a6:21:1e:56:a5:d9:eb:c3:a8:65:41:8c:a4: 68:88:3a:1a:5d:5b:fd:0d:4b:7d:a9:70:c1:cd:75:44:66:8d: a8:a0:35:a6:35:27:87:69:29:01:19:4c:81:27:e4:bb:51:67: c2:51:ad:0d:9f:11:72:a5:11:3d:62:f2:c0:d2:03:f8:98:f6: 01:0f:0c:f6:e0:01:b6:23:b4:66:be:af:a3:49:f9:2d:ee:ba: 6e:2e:c4:11:b0:78:4d:32:25:0a:5b:ad:b1:cb:25:22:7b:48: 0f:87:e1:b1:03:b9:4a:4e:fd:96:41:78:0f:a0:94:86:7c:4d: 16:a7:6e:24:7a:b7:fc:88:88:c4:df:ea:2e:cf:5f:34:31:4a: a2:bc:5b:c7:12:d1:c3:a2:c3:f6:db:95:9b:a4:9f:51:f9:83: aa:4e:00:19:4d:09:ae:14:f9:e8:0b:6e:e0:5b:62:5c:91:9d: 7e:14:a6:ff:d5:47:f6:25:62:c3:0a:f0:c9:52:ea:09:b4:37: a6:b5:2a:d4:93:ae:af:5b:63:2e:fc:03:c1:ec:bb:b9:37:96: a7:44:45:4f:0a:26:80:c0:f4:16:d4:cf:29:5f:20:02:6b:ad: 04:4b:31:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvFLQMhH9JcE0gcCa1+8cbNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjYwMTE2MDUwMDE5WhcNMjYwMTE3MDUwMDE5WjAzMTEwLwYDVQQD EygzYjIxNjY1Y2UzZjRhZmM4NGRhNzQ2MjlmZmVjM2NkY2VlZTMzNzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7iscGQzu1ScedDZhqGtb+Jf3jkC 4BagXPo78XfmK93HGzytXIP4o6Npbi2dyQdjxye+SpAj/9DRsCa5MdE9pV/1lqmw loRciBbpgtZDYlnP3tpnywWtgBeO2/AowCnS86Wf6npMSV1gcRlX0rpsaVwPFYRr 8oRMmkCbb0MHXEBIrrtVcth1G+S9riTgHEYRMrTiY01WLphQmrAbhXyOgmX8dRhL bqeoLmGeC/ZuSkIdusxq7UdRaesi2Z8QYoxRQ1UOOev871cxxRiwdSU9bQikzUnj yy6cqp0Op3sVMekKfbKa8O+MQq0wLD6K6e9GlmhWva6HlvMeGJLGo0BEPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDshZlzj9K/ITadGKf/sPNzu4zc5MB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ46Zu2TT hkMgGqfTBl4Xsx0vigsVowSmIR5Wpdnrw6hlQYykaIg6Gl1b/Q1Lfalwwc11RGaN qKA1pjUnh2kpARlMgSfku1FnwlGtDZ8RcqURPWLywNID+Jj2AQ8M9uABtiO0Zr6v o0n5Le66bi7EEbB4TTIlClutscslIntID4fhsQO5Sk79lkF4D6CUhnxNFqduJHq3 /IiIxN/qLs9fNDFKorxbxxLRw6LD9tuVm6SfUfmDqk4AGU0JrhT56Atu4FtiXJGd fhSm/9VH9iViwwrwyVLqCbQ3prUq1JOur1tjLvwDwey7uTeWp0RFTwomgMD0FtTP KV8gAmutBEsxyg== -----END CERTIFICATE-----Generated at Fri Jan 16 15:25:21 2026 by rpki-client