This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft File: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft (raw, json) Hash identifier: 5dvJMxJ7P2q/Jq2XnmS7hYQE8mwGd2vv93tjOeBdr7w= Subject key identifier: 52:39:2A:97:1E:14:B8:A1:27:05:AA:72:39:D2:62:30:42:D0:CC:8F Authority key identifier: 9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3 Certificate issuer: /CN=9d8f112756f1458dcf3e387a4be890f30ea949b3 Certificate serial: 019BB395744499721C9E8B1D4E04430DF0A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft Manifest number: 17C5 Signing time: Mon 12 Jan 2026 19:01:14 +0000 Manifest this update: Mon 12 Jan 2026 19:01:14 +0000 Manifest next update: Tue 13 Jan 2026 19:01:14 +0000 Files and hashes: 1: l0La-cqh0YtCqpb_P_ploY3jtxY.roa (hash: 96uWLiEvgAqq8mEo7+VReaVgrIrRgh/p9r34i4OMLOw=) 2: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl (hash: oZHpmYL4mebGCguOQrMsKCoyyT05Zy93FqxW8JeZ75c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 19:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:95:74:44:99:72:1c:9e:8b:1d:4e:04:43:0d:f0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d8f112756f1458dcf3e387a4be890f30ea949b3 Validity Not Before: Jan 12 19:01:14 2026 GMT Not After : Jan 13 19:01:14 2026 GMT Subject: CN=52392a971e14b8a12705aa7239d2623042d0cc8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:87:3f:a1:45:93:29:a4:28:d2:30:3c:1b: f4:0b:36:06:f8:ad:04:04:d2:aa:fa:51:75:2a:45: c6:f1:a1:1f:0d:74:a9:9d:15:1c:db:be:f4:28:1d: 90:8e:5c:20:30:77:56:79:2b:61:78:86:d9:8a:2b: 94:23:65:21:90:85:5f:3a:c2:1a:6e:d6:22:cb:c1: 7c:df:d5:3f:7d:06:eb:e6:38:ed:a1:2a:ce:4e:bc: 67:46:69:cc:fc:55:48:9a:d9:3a:e5:06:3b:fe:a3: 7b:d0:34:07:c0:d8:3a:3e:75:b1:cf:4d:6c:8d:56: 5e:85:33:76:6b:48:ec:75:bb:af:92:d2:c6:04:d7: 53:99:28:84:ab:62:12:47:89:72:d9:81:b3:67:67: 9f:6c:ce:4f:19:01:92:56:95:88:59:b8:e1:8a:df: c0:bb:cb:3e:f5:3d:c6:72:67:23:2f:7b:18:42:69: ae:fc:97:c3:88:7f:dc:7c:de:f4:20:ba:81:65:0c: 05:4f:42:ba:35:3f:14:b4:c3:6d:1f:f2:7a:9d:14: 25:8b:4b:05:12:12:f6:d9:c5:17:f5:33:f5:71:a6: 8d:ff:1a:9d:7d:7d:4e:ca:af:72:ec:eb:6d:16:26: 83:59:7c:aa:34:4a:04:5c:21:d7:ed:04:04:79:af: c8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:39:2A:97:1E:14:B8:A1:27:05:AA:72:39:D2:62:30:42:D0:CC:8F X509v3 Authority Key Identifier: keyid:9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:26:3d:66:4f:4b:58:e2:de:d9:8d:df:56:3b:01:59:f2:7c: 16:f8:40:c9:0a:6d:fd:76:13:be:75:fd:ec:f9:d5:78:63:b4: b3:78:39:7c:c1:39:78:78:ac:76:4c:d1:40:18:96:49:4c:fb: b5:ff:5c:87:50:98:0e:01:62:5c:d0:ac:d9:8b:59:0f:45:1a: d8:41:86:42:64:6c:d2:41:c3:17:7e:a2:4b:e6:52:68:84:0f: 44:5d:03:af:ce:c9:fb:4b:3e:69:29:ee:8e:1b:ca:48:bc:4a: 8c:16:dc:0d:51:88:5d:32:5e:53:fb:ec:d3:90:9a:85:3c:0e: 1a:f3:a4:60:59:d6:fb:64:44:31:5c:8e:1d:4a:e8:64:80:dc: 3f:d5:a2:fb:20:45:75:4d:ef:65:0b:ba:d2:b9:42:e5:92:28: e6:30:99:69:a5:44:04:59:87:67:fd:b1:d8:e8:f8:9b:50:61: 00:54:2c:19:7d:ea:02:25:63:54:c8:db:4c:29:7d:8c:40:f4: 20:eb:c9:df:26:ae:13:c5:a6:d6:86:10:49:9e:fa:3c:51:c9: 14:35:70:7b:32:c2:9c:17:44:fe:e2:52:c0:7a:1e:3e:50:c9: 27:57:26:f4:03:53:3f:0c:b5:99:78:cf:8c:d6:84:94:8e:6d: 80:26:e3:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzlXREmXIcnosdTgRDDfCgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOGYxMTI3NTZmMTQ1OGRjZjNlMzg3YTRiZTg5MGYzMGVh OTQ5YjMwHhcNMjYwMTEyMTkwMTE0WhcNMjYwMTEzMTkwMTE0WjAzMTEwLwYDVQQD Eyg1MjM5MmE5NzFlMTRiOGExMjcwNWFhNzIzOWQyNjIzMDQyZDBjYzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujyHP6FFkymkKNIwPBv0CzYG+K0E BNKq+lF1KkXG8aEfDXSpnRUc2770KB2QjlwgMHdWeStheIbZiiuUI2UhkIVfOsIa btYiy8F839U/fQbr5jjtoSrOTrxnRmnM/FVImtk65QY7/qN70DQHwNg6PnWxz01s jVZehTN2a0jsdbuvktLGBNdTmSiEq2ISR4ly2YGzZ2efbM5PGQGSVpWIWbjhit/A u8s+9T3GcmcjL3sYQmmu/JfDiH/cfN70ILqBZQwFT0K6NT8UtMNtH/J6nRQli0sF EhL22cUX9TP1caaN/xqdfX1Oyq9y7OttFiaDWXyqNEoEXCHX7QQEea/IrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFI5KpceFLihJwWqcjnSYjBC0MyPMB8GA1UdIwQY MBaAFJ2PESdW8UWNzz44ekvokPMOqUmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblk4UkoxYnhSWTNQUGpoNlMtaVE4dzZwU2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83YTZlMjEtZDQwYi00ZWViLWIzY2It MDBlZDkwMjY5YmI0LzEvblk4UkoxYnhSWTNQUGpoNlMtaVE4dzZwU2JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83YTZlMjEtZDQwYi00ZWViLWIzY2ItMDBlZDkwMjY5YmI0 LzEvblk4UkoxYnhSWTNQUGpoNlMtaVE4dzZwU2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCY9Zk9L WOLe2Y3fVjsBWfJ8FvhAyQpt/XYTvnX97PnVeGO0s3g5fME5eHisdkzRQBiWSUz7 tf9ch1CYDgFiXNCs2YtZD0Ua2EGGQmRs0kHDF36iS+ZSaIQPRF0Dr87J+0s+aSnu jhvKSLxKjBbcDVGIXTJeU/vs05CahTwOGvOkYFnW+2REMVyOHUroZIDcP9Wi+yBF dU3vZQu60rlC5ZIo5jCZaaVEBFmHZ/2x2Oj4m1BhAFQsGX3qAiVjVMjbTCl9jED0 IOvJ3yauE8Wm1oYQSZ76PFHJFDVwezLCnBdE/uJSwHoePlDJJ1cm9ANTPwy1mXjP jNaElI5tgCbjlQ== -----END CERTIFICATE-----Generated at Tue Jan 13 04:57:27 2026 by rpki-client