This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json) Hash identifier: zWVdgKjUm0kUOEzpPeDqIYFF7X8toeylGbnLQ3waXSs= Subject key identifier: 70:3E:09:B1:BC:CA:B0:68:AC:7C:AB:51:A5:4B:B3:03:7F:F4:AA:B1 Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c Certificate serial: 019BF8ADDB17E89E0ADACCACD7536F4B575F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft Manifest number: 184D Signing time: Mon 26 Jan 2026 05:01:41 +0000 Manifest this update: Mon 26 Jan 2026 05:01:41 +0000 Manifest next update: Tue 27 Jan 2026 05:01:41 +0000 Files and hashes: 1: 8k6e6tLHuHflnB7ormvclxauUmc.roa (hash: s9/elzDSDtEaxUqqdzsznzVcfRJE4413P0clrqDdTG8=) 2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: sT37dnb33vXoC4EJnTdBNBSghMo04ik+jlmXeXCIeyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:db:17:e8:9e:0a:da:cc:ac:d7:53:6f:4b:57:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c Validity Not Before: Jan 26 05:01:41 2026 GMT Not After : Jan 27 05:01:41 2026 GMT Subject: CN=703e09b1bccab068ac7cab51a54bb3037ff4aab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9f:0d:1b:f5:cd:37:1b:a5:bf:d5:33:17:c6: c4:76:6a:50:42:56:b5:17:37:6c:cc:6d:17:0a:b3: 5b:fc:e7:8c:11:9c:d3:cf:11:69:07:61:29:35:34: 7d:79:0f:d7:c9:d7:5e:bd:4b:9f:d9:81:3b:4b:38: 94:98:cf:37:e4:6b:d9:06:f6:a0:cc:df:00:4d:c2: 25:12:b0:57:1b:15:bf:78:a4:09:df:45:79:73:d7: d3:ff:12:c4:99:eb:4b:14:68:84:5a:16:8d:75:97: bf:70:7a:89:5b:4a:bf:f8:6c:f4:cc:58:6c:c7:0b: 18:e7:f5:59:2d:98:2a:a6:ed:71:39:d9:75:70:8d: 10:7a:81:c8:d5:7a:81:6f:0f:65:fd:ae:6a:71:ff: 79:b1:a1:ca:8c:92:1b:74:68:b4:44:b3:0f:ea:fc: c0:2e:eb:dd:bd:68:79:15:83:c5:e0:4f:12:6d:35: 38:dd:c9:8f:c4:05:d8:d0:d4:e0:a0:5d:be:ac:40: 8b:ba:40:e7:bf:dd:ec:59:1c:4b:17:b3:d0:2f:d8: c3:54:70:0b:61:44:41:fa:a8:d1:8e:cf:15:92:94: d3:3e:8e:6c:45:7f:65:31:39:d7:ea:04:7e:4c:7c: 05:50:04:68:86:a5:4c:4b:c6:37:91:97:51:c7:bc: d3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3E:09:B1:BC:CA:B0:68:AC:7C:AB:51:A5:4B:B3:03:7F:F4:AA:B1 X509v3 Authority Key Identifier: keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:47:55:91:8e:e8:df:2e:40:3c:9b:94:61:d4:63:55:50:f9: 40:5a:e5:ab:b3:05:9a:cb:e6:c3:e1:f3:3e:26:41:bb:15:b3: 56:3a:e8:de:69:30:f6:1b:16:95:b6:70:88:72:48:4c:c3:ca: 8c:18:2c:3f:4a:32:69:14:e7:6a:3d:d5:3e:12:e7:83:1a:1d: 13:66:d8:24:0a:b5:91:e4:8c:d9:ca:0e:a6:19:95:7d:36:cd: f5:95:1d:ba:86:dd:c5:8c:6d:a4:7a:31:aa:0e:09:a7:dd:7d: ec:69:77:24:2a:86:aa:3b:42:b0:ac:99:a5:6c:f6:55:c0:70: 23:34:0e:02:4e:5b:57:b0:7e:45:31:35:69:e9:a7:09:a3:68: e9:61:0d:10:7c:21:e9:2e:cb:8a:6f:d8:f1:4c:18:52:58:86: 05:f9:9e:9d:87:d4:54:b1:c2:3a:ee:9e:de:91:db:c5:9d:e9: ad:1d:43:31:10:1f:da:4c:6c:16:0f:c4:f4:65:a8:f4:4b:74: e6:c4:05:92:ef:42:e6:a3:5b:ea:e5:bf:26:bd:09:1a:8e:32: 2a:d9:8e:9f:46:08:8d:08:63:16:e1:b0:ba:95:c5:7e:93:06: ab:01:1d:6a:4e:35:59:2d:e0:51:7e:60:6e:8f:14:41:63:20: f6:52:5c:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rdsX6J4K2sys11NvS1dfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZGMyNWVhM2EwYTcyOWVkOGU2ZTlhNzNkYTg5NmQ4NGY5 NTQzOWMwHhcNMjYwMTI2MDUwMTQxWhcNMjYwMTI3MDUwMTQxWjAzMTEwLwYDVQQD Eyg3MDNlMDliMWJjY2FiMDY4YWM3Y2FiNTFhNTRiYjMwMzdmZjRhYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop8NG/XNNxulv9UzF8bEdmpQQla1 FzdszG0XCrNb/OeMEZzTzxFpB2EpNTR9eQ/XyddevUuf2YE7SziUmM835GvZBvag zN8ATcIlErBXGxW/eKQJ30V5c9fT/xLEmetLFGiEWhaNdZe/cHqJW0q/+Gz0zFhs xwsY5/VZLZgqpu1xOdl1cI0QeoHI1XqBbw9l/a5qcf95saHKjJIbdGi0RLMP6vzA LuvdvWh5FYPF4E8SbTU43cmPxAXY0NTgoF2+rECLukDnv93sWRxLF7PQL9jDVHAL YURB+qjRjs8VkpTTPo5sRX9lMTnX6gR+THwFUARohqVMS8Y3kZdRx7zTIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHA+CbG8yrBorHyrUaVLswN/9KqxMB8GA1UdIwQY MBaAFMvcJeo6CnKe2Obppz2olthPlUOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81ZGExZTYtMjQ2Zi00NDkzLTk5MmUt MjJjNzlhZWExMjdjLzEveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS81ZGExZTYtMjQ2Zi00NDkzLTk5MmUtMjJjNzlhZWExMjdj LzEveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkdVkY7o 3y5APJuUYdRjVVD5QFrlq7MFmsvmw+HzPiZBuxWzVjro3mkw9hsWlbZwiHJITMPK jBgsP0oyaRTnaj3VPhLngxodE2bYJAq1keSM2coOphmVfTbN9ZUduobdxYxtpHox qg4Jp9197Gl3JCqGqjtCsKyZpWz2VcBwIzQOAk5bV7B+RTE1aemnCaNo6WENEHwh 6S7Lim/Y8UwYUliGBfmenYfUVLHCOu6e3pHbxZ3prR1DMRAf2kxsFg/E9GWo9Et0 5sQFku9C5qNb6uW/Jr0JGo4yKtmOn0YIjQhjFuGwupXFfpMGqwEdak41WS3gUX5g bo8UQWMg9lJctA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:02:24 2026 by rpki-client