This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft File: y2bnZjRVc9cVnWeU7a7bc5okH48.mft (raw, json) Hash identifier: qRgFSt3DHbi6CVgzy0vUyqqAQPpM6vDRxthlWHgGNIE= Subject key identifier: EE:30:74:E2:B6:C7:47:AF:D6:66:23:93:BE:CF:7D:02:8D:B9:D8:83 Authority key identifier: CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F Certificate issuer: /CN=cb66e766345573d7159d6794edaedb739a241f8f Certificate serial: 019BB09425A240D9DE16AA6C4C0A25668C0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft Manifest number: 0813 Signing time: Mon 12 Jan 2026 05:00:57 +0000 Manifest this update: Mon 12 Jan 2026 05:00:57 +0000 Manifest next update: Tue 13 Jan 2026 05:00:57 +0000 Files and hashes: 1: y2bnZjRVc9cVnWeU7a7bc5okH48.crl (hash: KjaMtxozCgaSmiTYQZcJGbuyR0r9Wz8YaGygSIXXfXE=) 2: zyxH_ZayU87vTJX81fgX-DVJmTk.roa (hash: v7IX/ua2uQXhjGalwVPCerFWeIG3hQEbj9ssotgdfjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:94:25:a2:40:d9:de:16:aa:6c:4c:0a:25:66:8c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb66e766345573d7159d6794edaedb739a241f8f Validity Not Before: Jan 12 05:00:57 2026 GMT Not After : Jan 13 05:00:57 2026 GMT Subject: CN=ee3074e2b6c747afd6662393becf7d028db9d883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:33:25:4f:a2:12:8e:d9:b5:dc:6f:6d:f5:43: 38:35:f6:78:f0:13:11:31:80:bc:1a:61:83:a0:5e: 74:67:fa:03:1d:2a:ce:2e:54:5b:1c:fc:4f:d3:9c: f6:65:f1:70:d2:f9:18:61:f1:7d:a6:12:e5:db:2d: 0e:6b:e1:23:5c:0e:80:91:6a:fd:cc:8e:10:88:c0: 7f:d7:07:fc:5f:d4:a7:dc:8b:84:1f:90:87:89:a5: 91:4e:0d:cd:27:3a:ea:a9:16:b5:a2:7f:cb:ec:86: 59:22:5f:53:a6:e3:41:31:05:e4:6e:a9:c7:86:2d: b7:52:f9:31:2b:0e:82:ea:fe:94:5d:a9:62:16:11: 2b:1a:c8:13:b6:31:b9:40:d7:48:5d:54:9b:67:51: 9d:53:e6:55:c7:84:21:64:b7:d8:af:8c:ac:cb:5c: c9:2b:d3:dd:33:f7:c0:13:bf:41:eb:56:00:9c:9c: 62:a3:32:16:cb:2c:6b:48:c9:bb:5a:b1:e2:fe:e3: 35:5a:6b:c4:ba:20:d2:03:1f:31:82:8b:e6:eb:97: 35:77:90:e5:0a:5a:de:1c:7f:66:f9:bd:1f:4a:57: dc:5b:8b:f3:77:ba:9e:8b:84:75:f0:5c:6d:7f:7f: b5:c2:0c:17:7b:16:18:c6:f9:07:d5:72:aa:2a:62: 48:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:30:74:E2:B6:C7:47:AF:D6:66:23:93:BE:CF:7D:02:8D:B9:D8:83 X509v3 Authority Key Identifier: keyid:CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:75:57:f2:37:f8:30:d9:cc:91:2b:b8:89:c7:99:a7:1c:b9: e1:cb:2c:8b:2b:4e:9b:ba:1b:b3:a6:d3:59:0d:80:4b:4f:44: 32:1a:26:c1:e1:16:92:d3:a1:64:db:1c:8a:b1:70:01:27:5e: c0:a2:95:1c:7a:e7:28:7d:19:49:bb:c3:7c:18:2a:ac:ff:97: a0:98:8e:6b:09:50:2a:ba:52:6c:e9:d6:9a:91:5b:d4:c3:c2: 2f:3d:ba:6e:45:a0:80:f4:35:cb:fe:8f:b1:06:a6:67:22:cc: 06:2c:a3:1c:ba:27:b9:4f:10:00:eb:3f:fe:b5:61:a3:b3:51: 87:44:a9:63:a2:66:39:6a:60:83:79:81:44:b1:8e:97:08:8a: 78:01:45:94:fd:39:75:1a:e2:ad:1b:83:53:bb:96:1b:25:7b: dc:d6:14:d4:54:e0:0f:0b:76:14:ad:ed:e9:eb:cf:4f:5f:e9: fe:93:a3:c3:8f:94:a0:3c:c1:fa:e9:f9:87:cf:73:1f:44:7e: dd:5d:3d:bd:2e:80:ba:c6:04:16:63:c1:55:d8:3e:9b:74:53: 33:ce:4c:ef:26:8f:92:e0:9f:2a:ce:12:d4:50:3d:af:6d:7e: 69:88:0e:a4:6f:8e:27:bd:63:e4:d6:52:bd:ee:7c:f6:45:b4: d4:8d:a8:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwlCWiQNneFqpsTAolZowNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNjZlNzY2MzQ1NTczZDcxNTlkNjc5NGVkYWVkYjczOWEy NDFmOGYwHhcNMjYwMTEyMDUwMDU3WhcNMjYwMTEzMDUwMDU3WjAzMTEwLwYDVQQD EyhlZTMwNzRlMmI2Yzc0N2FmZDY2NjIzOTNiZWNmN2QwMjhkYjlkODgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDMlT6ISjtm13G9t9UM4NfZ48BMR MYC8GmGDoF50Z/oDHSrOLlRbHPxP05z2ZfFw0vkYYfF9phLl2y0Oa+EjXA6AkWr9 zI4QiMB/1wf8X9Sn3IuEH5CHiaWRTg3NJzrqqRa1on/L7IZZIl9TpuNBMQXkbqnH hi23UvkxKw6C6v6UXaliFhErGsgTtjG5QNdIXVSbZ1GdU+ZVx4QhZLfYr4ysy1zJ K9PdM/fAE79B61YAnJxiozIWyyxrSMm7WrHi/uM1WmvEuiDSAx8xgovm65c1d5Dl ClreHH9m+b0fSlfcW4vzd7qei4R18Fxtf3+1wgwXexYYxvkH1XKqKmJIrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4wdOK2x0ev1mYjk77PfQKNudiDMB8GA1UdIwQY MBaAFMtm52Y0VXPXFZ1nlO2u23OaJB+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTJiblpqUlZjOWNWbldlVTdhN2JjNW9rSDQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80NTg5MGUtNmY3MS00ZDM2LTk4OGEt NjViZjc5YjBhOTg5LzEveTJiblpqUlZjOWNWbldlVTdhN2JjNW9rSDQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi80NTg5MGUtNmY3MS00ZDM2LTk4OGEtNjViZjc5YjBhOTg5 LzEveTJiblpqUlZjOWNWbldlVTdhN2JjNW9rSDQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnVX8jf4 MNnMkSu4iceZpxy54cssiytOm7obs6bTWQ2AS09EMhomweEWktOhZNscirFwASde wKKVHHrnKH0ZSbvDfBgqrP+XoJiOawlQKrpSbOnWmpFb1MPCLz26bkWggPQ1y/6P sQamZyLMBiyjHLonuU8QAOs//rVho7NRh0SpY6JmOWpgg3mBRLGOlwiKeAFFlP05 dRrirRuDU7uWGyV73NYU1FTgDwt2FK3t6evPT1/p/pOjw4+UoDzB+un5h89zH0R+ 3V09vS6AusYEFmPBVdg+m3RTM85M7yaPkuCfKs4S1FA9r21+aYgOpG+OJ71j5NZS ve589kW01I2oXQ== -----END CERTIFICATE-----Generated at Mon Jan 12 13:02:33 2026 by rpki-client