This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json) Hash identifier: /l8KlRKbDkAWKGMykeu6/SCtco41Lh/QHHUxoLGABiU= Subject key identifier: F5:E8:13:57:50:15:5E:7A:07:2B:0A:7D:FE:A3:A1:B4:49:27:97:20 Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce Certificate serial: 019BD055816D3FD2E5C32DAEE764DF515802 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft Manifest number: 17D2 Signing time: Sun 18 Jan 2026 09:00:23 +0000 Manifest this update: Sun 18 Jan 2026 09:00:23 +0000 Manifest next update: Mon 19 Jan 2026 09:00:23 +0000 Files and hashes: 1: QPQtrPAdzjVTLUIL1R2LDnfS2LA.roa (hash: Y2kjypGDHo8r5S3vGzyX8p4vjhzMXiKa35ThvxEKdFQ=) 2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: 2sPHnwNubXvo6dcA4mJFIX5C0LsaabrH/s8BNZTc9uU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 09:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:55:81:6d:3f:d2:e5:c3:2d:ae:e7:64:df:51:58:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce Validity Not Before: Jan 18 09:00:23 2026 GMT Not After : Jan 19 09:00:23 2026 GMT Subject: CN=f5e8135750155e7a072b0a7dfea3a1b449279720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:97:95:e7:21:c0:44:7b:0f:9c:48:bb:d0:6f: 13:3a:dc:c2:f0:47:12:e0:11:f8:b5:10:9e:7c:0e: 1e:31:25:ab:a5:62:ab:23:48:51:44:0e:51:4c:4b: 33:80:ee:18:1c:3f:3e:11:d8:18:09:11:c7:ac:d2: 40:e9:da:93:f6:3b:fb:e5:94:46:5c:e6:97:4f:74: 77:3c:97:8d:fb:2a:51:f5:76:17:40:e5:f7:9e:4a: 8f:e6:a9:a3:8c:60:f3:90:39:22:2c:59:9b:c1:a0: b9:55:e0:4a:04:90:b6:d3:ea:f4:10:f7:26:fb:1b: 09:04:29:e1:65:b7:33:d7:c0:7c:6c:c7:72:0b:cb: 90:ce:3e:56:fd:36:8e:9f:07:36:22:c5:0f:1d:f7: fa:da:ab:56:14:8c:63:91:e7:11:c9:4b:e6:0f:30: d7:3b:ac:e8:b5:e3:55:8b:fe:97:9e:2f:e8:4c:68: 55:eb:a0:13:ac:2a:08:5b:43:2d:bf:62:1c:0a:dc: 19:c0:d5:78:4e:9d:3a:0e:a2:a4:70:8b:6b:df:aa: 1f:b8:26:9d:39:8a:ba:4c:bb:23:ad:a7:3a:e9:29: 03:08:17:1a:e5:d2:b6:41:d4:76:dd:01:8b:20:3e: a3:d5:9c:fd:6a:95:ba:32:15:8b:4d:83:f9:c8:cd: 48:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E8:13:57:50:15:5E:7A:07:2B:0A:7D:FE:A3:A1:B4:49:27:97:20 X509v3 Authority Key Identifier: keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:11:1b:72:aa:69:bd:9a:8b:0b:04:19:aa:e5:0f:8b:bc:4d: ef:32:fd:65:11:fa:a2:38:56:a9:67:aa:be:7d:30:08:73:ef: 18:ee:c7:5e:6c:df:df:34:88:0a:04:33:7a:08:cb:47:9d:74: c8:c2:d2:4e:e0:67:8d:a9:2b:ed:1d:07:ed:67:0a:40:98:c6: 3b:ac:f3:e2:63:4d:49:87:cc:ec:49:26:f3:38:b6:41:bd:31: df:2f:aa:a1:d2:9a:3c:1c:30:3a:5a:d3:7c:a0:be:c5:14:14: 0f:02:80:a5:19:8f:58:38:0e:fb:79:88:77:db:c6:50:ae:5e: 5e:3b:31:d5:c6:62:83:0f:7c:e0:de:07:66:10:cd:74:c2:88: 0a:34:d6:d4:ef:7f:f3:57:16:45:35:9e:e9:b8:4c:8a:ab:e4: 6d:cd:70:cf:e6:03:f7:48:0b:5e:66:4f:8c:e4:f4:d3:16:67: 26:40:75:89:b4:e5:95:86:41:2c:bb:97:16:72:69:22:0a:2e: 8c:03:f2:34:df:5a:a0:78:10:e1:14:fd:ca:54:ba:9d:b2:7c: d9:e6:b4:00:33:f9:be:fa:60:c4:31:a8:78:b0:10:15:ee:7d: 37:38:8e:b1:5d:dc:39:0e:19:e3:a9:ee:ef:91:bf:bd:83:bc: 6b:fa:02:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvQVYFtP9Llwy2u52TfUVgCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOTVlMWNiYzY3ZTc4MmRiZjlmOGU3NDRlNDM3MjY4YmRj YzM5Y2UwHhcNMjYwMTE4MDkwMDIzWhcNMjYwMTE5MDkwMDIzWjAzMTEwLwYDVQQD EyhmNWU4MTM1NzUwMTU1ZTdhMDcyYjBhN2RmZWEzYTFiNDQ5Mjc5NzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JeV5yHARHsPnEi70G8TOtzC8EcS 4BH4tRCefA4eMSWrpWKrI0hRRA5RTEszgO4YHD8+EdgYCRHHrNJA6dqT9jv75ZRG XOaXT3R3PJeN+ypR9XYXQOX3nkqP5qmjjGDzkDkiLFmbwaC5VeBKBJC20+r0EPcm +xsJBCnhZbcz18B8bMdyC8uQzj5W/TaOnwc2IsUPHff62qtWFIxjkecRyUvmDzDX O6zoteNVi/6Xni/oTGhV66ATrCoIW0Mtv2IcCtwZwNV4Tp06DqKkcItr36ofuCad OYq6TLsjrac66SkDCBca5dK2QdR23QGLID6j1Zz9apW6MhWLTYP5yM1IYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXoE1dQFV56BysKff6jobRJJ5cgMB8GA1UdIwQY MBaAFMuV4cvGfngtv5+OdE5Dcmi9zDnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83M2UwMGYtZTNlMy00ZDIzLWFkNmIt NzY2ODJlNzk0Y2MzLzEveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83M2UwMGYtZTNlMy00ZDIzLWFkNmItNzY2ODJlNzk0Y2Mz LzEveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOREbcqpp vZqLCwQZquUPi7xN7zL9ZRH6ojhWqWeqvn0wCHPvGO7HXmzf3zSICgQzegjLR510 yMLSTuBnjakr7R0H7WcKQJjGO6zz4mNNSYfM7Ekm8zi2Qb0x3y+qodKaPBwwOlrT fKC+xRQUDwKApRmPWDgO+3mId9vGUK5eXjsx1cZigw984N4HZhDNdMKICjTW1O9/ 81cWRTWe6bhMiqvkbc1wz+YD90gLXmZPjOT00xZnJkB1ibTllYZBLLuXFnJpIgou jAPyNN9aoHgQ4RT9ylS6nbJ82ea0ADP5vvpgxDGoeLAQFe59NziOsV3cOQ4Z46nu 75G/vYO8a/oCuw== -----END CERTIFICATE-----Generated at Sun Jan 18 17:58:15 2026 by rpki-client