This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json) Hash identifier: Q0UiMAJOL/qjlNGNw98Xz94TxJBZFBZ8P4oaDM0fJRk= Subject key identifier: 06:DB:BE:E8:6A:87:B3:32:BD:BC:11:A1:EB:72:C9:EC:24:08:9B:8F Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9 Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9 Certificate serial: 019BFBAE4C4E0B8E4D978E2BB174CE4A7628 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft Manifest number: 17F4 Signing time: Mon 26 Jan 2026 19:01:02 +0000 Manifest this update: Mon 26 Jan 2026 19:01:02 +0000 Manifest next update: Tue 27 Jan 2026 19:01:02 +0000 Files and hashes: 1: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: C/t7F0QLynMBCUdvrzoU87a4i4wPofgSjkI9IotMr7E=) 2: nibctkm7wr91rBA37l_8PQxYVLc.roa (hash: VamjklOdSeVjkVgODzUFUtdlbnnylLnD0/pDvfa31T8=) 3: t8mVoTfmckCvsyVdwBCx2WY3_SU.roa (hash: punRHqDIXE83AX4muw8qvjP6n1JcfvmchVlgv85rsL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:4c:4e:0b:8e:4d:97:8e:2b:b1:74:ce:4a:76:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9 Validity Not Before: Jan 26 19:01:02 2026 GMT Not After : Jan 27 19:01:02 2026 GMT Subject: CN=06dbbee86a87b332bdbc11a1eb72c9ec24089b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:da:ea:ab:ea:c8:0a:38:59:50:dd:43:66:a9: 30:b0:07:f4:8c:47:73:76:43:63:0a:5e:44:ae:f4: 44:99:47:54:37:e3:07:69:fe:f9:b5:94:dd:9a:ca: d4:b5:6f:dd:d8:19:10:c5:c4:b7:22:4a:99:27:5f: 11:ed:ad:aa:32:02:ee:1e:d0:ec:0b:58:75:94:3a: f8:c1:21:29:b3:ec:ad:98:72:a2:43:48:18:f6:e7: b4:08:a9:a7:b1:76:aa:06:e1:b9:34:e8:c2:0c:40: cc:18:e7:70:ca:a2:5a:9f:56:a0:17:8e:09:58:36: f2:17:02:e1:c8:4b:f2:96:16:ce:75:0b:75:c1:e3: 8e:89:91:92:88:d5:58:17:95:d1:7e:1d:82:3f:b3: d5:b5:f8:2d:de:76:03:f0:08:81:0d:f6:a9:c9:38: db:83:b6:a0:a0:9b:c3:f6:b5:7f:48:74:55:21:62: 81:c7:a5:3a:48:8e:36:9c:05:e1:71:64:35:ed:a7: 4d:8f:14:57:00:97:6f:23:b4:08:b3:38:4c:dd:51: bc:0b:b0:7b:fa:3a:87:f9:7b:3d:df:89:2f:44:68: 8b:ff:e2:c1:0a:5a:9c:9c:ed:76:0f:3d:dd:24:c4: fc:1a:45:ce:16:6c:11:29:ce:ba:9d:7d:36:81:a8: e6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DB:BE:E8:6A:87:B3:32:BD:BC:11:A1:EB:72:C9:EC:24:08:9B:8F X509v3 Authority Key Identifier: keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a3:18:75:e4:c8:52:2d:10:c1:da:74:54:46:24:a7:b6:aa: 10:71:5d:29:54:be:e0:f1:35:50:e5:c0:f7:ea:a8:00:ee:b6: 02:7b:d8:0d:c1:7d:32:7a:d7:aa:ee:0f:94:b0:81:fa:6a:3c: df:a3:6a:e1:c4:41:6e:b1:e3:43:a1:5b:04:43:5a:08:97:7c: 62:7d:49:e3:72:80:65:17:26:95:66:a3:8d:11:ac:83:3e:68: f1:0a:8d:c0:d2:75:8d:f1:8d:74:9c:9e:8c:2c:00:55:10:14: f3:1f:69:9f:3d:78:d1:1c:d6:98:ff:f9:fe:99:ec:a5:4f:ce: 2f:3b:92:d4:b3:57:25:39:c4:f9:d9:e8:b6:30:5e:e9:85:a1: 7b:1b:98:5c:e7:79:33:8a:a5:22:8b:0d:e5:96:6d:40:92:38: 2f:f8:8f:52:ac:36:61:b9:38:6d:ab:36:26:d9:ad:33:39:81: 1f:ee:bb:1e:3c:bf:20:cc:99:8b:c5:36:2b:5c:69:d3:df:26: 98:78:18:eb:99:d5:1f:01:4d:30:5f:19:85:e7:69:a5:bc:ea: 82:03:41:ab:dd:dd:3a:24:ad:02:be:cf:00:d1:33:77:ed:76: 0b:a8:7b:99:f6:6f:27:7e:f8:b9:89:18:aa:df:36:6e:bb:c9: 57:d0:ce:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rkxOC45Nl44rsXTOSnYoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzOGM1MDljYjc3YjAxNDliNmY2NmY1MDE5Zjg1OGIzYWNm OTQyZTkwHhcNMjYwMTI2MTkwMTAyWhcNMjYwMTI3MTkwMTAyWjAzMTEwLwYDVQQD EygwNmRiYmVlODZhODdiMzMyYmRiYzExYTFlYjcyYzllYzI0MDg5YjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1trqq+rICjhZUN1DZqkwsAf0jEdz dkNjCl5ErvREmUdUN+MHaf75tZTdmsrUtW/d2BkQxcS3IkqZJ18R7a2qMgLuHtDs C1h1lDr4wSEps+ytmHKiQ0gY9ue0CKmnsXaqBuG5NOjCDEDMGOdwyqJan1agF44J WDbyFwLhyEvylhbOdQt1weOOiZGSiNVYF5XRfh2CP7PVtfgt3nYD8AiBDfapyTjb g7agoJvD9rV/SHRVIWKBx6U6SI42nAXhcWQ17adNjxRXAJdvI7QIszhM3VG8C7B7 +jqH+Xs934kvRGiL/+LBClqcnO12Dz3dJMT8GkXOFmwRKc66nX02gajmrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbbvuhqh7MyvbwRoetyyewkCJuPMB8GA1UdIwQY MBaAFGOMUJy3ewFJtvZvUBn4WLOs+ULpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84NjBhNWUtZTBkMC00NGY1LTljNTQt M2NjNGZmOWFhMWJjLzEvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84NjBhNWUtZTBkMC00NGY1LTljNTQtM2NjNGZmOWFhMWJj LzEvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6MYdeTI Ui0Qwdp0VEYkp7aqEHFdKVS+4PE1UOXA9+qoAO62AnvYDcF9MnrXqu4PlLCB+mo8 36Nq4cRBbrHjQ6FbBENaCJd8Yn1J43KAZRcmlWajjRGsgz5o8QqNwNJ1jfGNdJye jCwAVRAU8x9pnz140RzWmP/5/pnspU/OLzuS1LNXJTnE+dnotjBe6YWhexuYXOd5 M4qlIosN5ZZtQJI4L/iPUqw2Ybk4bas2JtmtMzmBH+67Hjy/IMyZi8U2K1xp098m mHgY65nVHwFNMF8ZhedppbzqggNBq93dOiStAr7PANEzd+12C6h7mfZvJ374uYkY qt82brvJV9DOTQ== -----END CERTIFICATE-----Generated at Mon Jan 26 23:02:34 2026 by rpki-client