This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft File: y2r1L3gkVTrztsuqc686F4wcWRM.mft (raw, json) Hash identifier: U5uQ+3IcNf/IL46KI55U06fuZteO2zugDWOK/uorKN8= Subject key identifier: 3A:4F:15:BF:41:A2:A0:0A:51:A6:9D:28:33:2B:7D:74:4D:05:92:0F Authority key identifier: CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13 Certificate issuer: /CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913 Certificate serial: 019BD68F94B51BA2988F53CD9D19E7D6E0F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft Manifest number: 01A5 Signing time: Mon 19 Jan 2026 14:01:32 +0000 Manifest this update: Mon 19 Jan 2026 14:01:32 +0000 Manifest next update: Tue 20 Jan 2026 14:01:32 +0000 Files and hashes: 1: e0bzE7I798JyP17GLDFXPRJiVH0.roa (hash: Yhotc+UtqlhBqu0SRVQeqH+Q/Mp28/ftrNlXHzifKKU=) 2: y2r1L3gkVTrztsuqc686F4wcWRM.crl (hash: HYxn6F6Jy5B9j5q6n3hyJnFc/xJHZqOeqsYZhLJ2qNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:8f:94:b5:1b:a2:98:8f:53:cd:9d:19:e7:d6:e0:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913 Validity Not Before: Jan 19 14:01:32 2026 GMT Not After : Jan 20 14:01:32 2026 GMT Subject: CN=3a4f15bf41a2a00a51a69d28332b7d744d05920f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a8:6c:15:d5:13:8e:e4:29:7a:3a:82:48:9b: 64:e0:b1:cf:63:05:4e:7c:a9:94:47:8d:21:ac:e1: 68:cd:fe:30:8e:00:29:3a:79:67:32:2d:51:f8:cf: 9c:85:e3:03:7e:52:b8:58:78:08:1d:a4:c3:90:82: 6b:56:de:80:19:04:2c:36:bd:00:d8:0c:61:55:7c: 68:02:9d:2f:30:38:9d:37:e8:b0:81:ca:e0:d3:7f: c2:a2:fa:34:f7:85:1f:d7:c4:87:07:51:be:46:2a: 6d:ae:22:4e:0f:e9:94:a6:c1:04:ce:97:07:a1:3c: 70:54:a9:ec:31:37:f7:1d:2d:43:4e:4f:cc:e5:bf: 25:c7:4e:9c:b5:f7:1d:d7:28:aa:8e:68:67:bb:06: b9:46:c9:ee:8f:7b:bb:30:15:24:74:53:9c:39:c9: fd:d5:a8:4d:d2:3b:0a:5a:01:62:8c:4e:b6:8d:5d: 16:d6:2e:ba:46:74:43:b5:a3:c3:96:1a:53:ef:40: a2:54:94:5b:9f:29:44:a6:44:f4:4c:b7:00:bb:3a: d7:da:d2:6e:65:35:f9:ef:81:e2:f6:a8:d6:34:24: 93:22:28:82:6a:14:2e:77:f1:03:8a:93:f1:02:da: 8e:ed:1a:13:16:f3:e5:19:36:ac:ab:b3:0c:5b:81: 66:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4F:15:BF:41:A2:A0:0A:51:A6:9D:28:33:2B:7D:74:4D:05:92:0F X509v3 Authority Key Identifier: keyid:CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:d3:6e:b8:4f:2e:94:97:ff:3b:d9:64:87:b3:f2:e2:09:b9: 52:6b:7c:5a:a6:2b:93:44:d8:a6:56:54:f1:1e:f5:7b:8a:3c: 5c:f6:0c:22:b1:64:af:79:c8:b4:67:29:69:e7:4a:9b:54:45: 15:92:6b:b8:a5:f1:2e:f6:65:af:ca:90:96:3c:4d:01:db:a7: 50:17:11:ef:2c:58:b1:c3:83:d7:d3:28:58:fb:31:85:e0:90: 17:8a:a5:10:56:20:2d:9d:06:53:ac:e3:54:f3:56:7a:90:7b: b1:9f:dd:19:be:ff:3e:85:a8:7b:d7:cc:cd:fc:5a:da:76:05: 2c:9b:00:db:e2:5b:2c:dd:a9:75:28:f4:ea:cc:9e:0a:3f:6a: 9c:76:89:0e:08:24:82:c1:9b:8f:97:26:db:cd:fd:e6:28:c5: ec:a4:17:e7:b5:31:98:4e:51:61:53:88:17:35:2c:d5:92:b1: 40:fe:d2:99:3b:e0:4f:b4:8c:d7:63:3d:91:ce:89:67:9c:66: c5:be:22:6a:0f:29:8b:be:c6:30:51:a7:29:0e:be:45:4a:32: f6:b0:b7:bb:5d:d8:21:34:e5:9a:7c:29:ac:86:f0:85:a0:28: 49:e6:e2:0a:35:17:30:49:18:41:e8:51:a2:06:b6:e8:39:86: b2:22:09:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvWj5S1G6KYj1PNnRnn1uD0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNmFmNTJmNzgyNDU1M2FmM2I2Y2JhYTczYWYzYTE3OGMx YzU5MTMwHhcNMjYwMTE5MTQwMTMyWhcNMjYwMTIwMTQwMTMyWjAzMTEwLwYDVQQD EygzYTRmMTViZjQxYTJhMDBhNTFhNjlkMjgzMzJiN2Q3NDRkMDU5MjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKhsFdUTjuQpejqCSJtk4LHPYwVO fKmUR40hrOFozf4wjgApOnlnMi1R+M+cheMDflK4WHgIHaTDkIJrVt6AGQQsNr0A 2AxhVXxoAp0vMDidN+iwgcrg03/Covo094Uf18SHB1G+RiptriJOD+mUpsEEzpcH oTxwVKnsMTf3HS1DTk/M5b8lx06ctfcd1yiqjmhnuwa5Rsnuj3u7MBUkdFOcOcn9 1ahN0jsKWgFijE62jV0W1i66RnRDtaPDlhpT70CiVJRbnylEpkT0TLcAuzrX2tJu ZTX574Hi9qjWNCSTIiiCahQud/EDipPxAtqO7RoTFvPlGTasq7MMW4FmPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpPFb9BoqAKUaadKDMrfXRNBZIPMB8GA1UdIwQY MBaAFMtq9S94JFU687bLqnOvOheMHFkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTJyMUwzZ2tWVHJ6dHN1cWM2ODZGNHdjV1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNjlmNTAtMjc0MC00MjEzLTk2MTYt MWQ0YWE3ODFiNGQ0LzEveTJyMUwzZ2tWVHJ6dHN1cWM2ODZGNHdjV1JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNjlmNTAtMjc0MC00MjEzLTk2MTYtMWQ0YWE3ODFiNGQ0 LzEveTJyMUwzZ2tWVHJ6dHN1cWM2ODZGNHdjV1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv9NuuE8u lJf/O9lkh7Py4gm5Umt8WqYrk0TYplZU8R71e4o8XPYMIrFkr3nItGcpaedKm1RF FZJruKXxLvZlr8qQljxNAdunUBcR7yxYscOD19MoWPsxheCQF4qlEFYgLZ0GU6zj VPNWepB7sZ/dGb7/PoWoe9fMzfxa2nYFLJsA2+JbLN2pdSj06syeCj9qnHaJDggk gsGbj5cm28395ijF7KQX57UxmE5RYVOIFzUs1ZKxQP7SmTvgT7SM12M9kc6JZ5xm xb4iag8pi77GMFGnKQ6+RUoy9rC3u13YITTlmnwprIbwhaAoSebiCjUXMEkYQehR oga26DmGsiIJ5g== -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:54 2026 by rpki-client