This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft File: YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json) Hash identifier: UBiwXPL3Yh4sWM8Q/C4A2+axKB5k3Xkr/hTDy2OBErk= Subject key identifier: 42:0D:E9:8B:09:C4:7B:CE:84:70:B5:AE:1D:E4:49:D0:3B:9E:34:4F Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23 Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523 Certificate serial: 019BF9893931588CA7ECA50B3C0743F853D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft Manifest number: 16BF Signing time: Mon 26 Jan 2026 09:01:18 +0000 Manifest this update: Mon 26 Jan 2026 09:01:18 +0000 Manifest next update: Tue 27 Jan 2026 09:01:18 +0000 Files and hashes: 1: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: tbw0wGOO15kIsVhBkNrgzdwOx7zxgJgxmWxuP2chOT0=) 2: ds0HwgnE1wK4tusqij2iDAo4C4w.roa (hash: AV7GAfjJkTxxVqb/RhgxTIb2SMDdBmXXWKpB5XXq9g8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:39:31:58:8c:a7:ec:a5:0b:3c:07:43:f8:53:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523 Validity Not Before: Jan 26 09:01:18 2026 GMT Not After : Jan 27 09:01:18 2026 GMT Subject: CN=420de98b09c47bce8470b5ae1de449d03b9e344f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5e:9e:27:47:1f:d0:40:41:53:8f:7b:e1:ef: dd:7a:a7:4e:4d:ac:b0:f1:05:c3:0e:a2:9a:15:51: 94:42:71:db:49:3f:ae:e4:37:dd:a7:92:db:fa:3b: ec:5d:7f:c1:ce:e3:21:a9:44:ab:23:4a:f4:1a:e3: 9f:40:7c:c4:4d:9b:39:af:5d:dd:4b:91:a5:09:bb: ad:8d:3d:03:6c:d9:c2:93:c2:57:72:6f:97:b3:aa: bf:8a:f7:45:5d:a8:aa:6a:b2:02:25:05:cb:c7:69: d5:bf:42:55:26:d0:29:84:a2:71:fc:08:af:ea:7c: f6:0b:32:20:e6:b7:26:c7:65:f4:3d:ab:88:f3:19: 15:cc:63:e8:d8:62:7d:03:0f:4f:64:93:5b:23:20: 57:c5:44:aa:6d:ef:1d:bf:7c:2e:9d:52:8a:93:ad: ef:13:e3:eb:3c:86:86:8f:ac:9f:37:a8:b0:b8:9b: 2a:0e:ea:98:94:10:be:a9:1b:d8:1b:c1:a6:c1:0e: 6f:5f:bd:8b:d3:75:c2:d2:93:35:15:bf:bc:a9:e7: d7:60:b6:8f:6e:84:6e:87:91:b2:c5:36:c1:e1:1b: 5c:b3:48:b2:1b:68:78:8d:a6:b6:0a:48:8f:33:19: ef:ae:48:29:9a:d2:40:c2:a8:54:b2:33:25:4d:89: 17:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0D:E9:8B:09:C4:7B:CE:84:70:B5:AE:1D:E4:49:D0:3B:9E:34:4F X509v3 Authority Key Identifier: keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8e:7c:80:b9:fa:9e:b2:23:db:ed:51:71:ab:95:2e:7e:f7: e0:00:cf:ee:08:2d:ac:b0:3c:ea:81:67:e2:16:0f:c8:99:83: 61:b4:a9:b5:4e:32:21:ed:0d:10:5d:b9:4e:06:55:64:24:03: 61:9a:f6:d8:27:90:a5:3b:ba:0d:c6:ab:b1:6b:a2:05:44:2f: ec:8f:e3:db:ca:28:52:a1:f3:ed:a5:92:21:69:9e:c4:7d:29: f5:34:8e:01:3a:ea:62:b7:1b:49:72:0a:65:4e:30:94:d1:81: 56:13:e6:f5:8f:8e:07:49:75:0e:92:73:5b:04:fe:87:03:82: b2:65:c5:e9:e7:42:ed:86:0a:31:89:a7:0b:df:06:2c:12:9d: cb:c2:2a:04:d7:b1:a3:1e:31:c0:6f:3a:99:4b:a0:7e:fa:a5: 63:9e:f5:33:ca:9c:78:a9:1f:98:80:93:bc:a6:55:57:41:0e: a6:07:a7:00:b7:d0:be:cf:b6:73:2a:8a:3c:fa:94:c5:10:ff: 78:e5:07:e5:72:13:e4:6a:b0:02:ee:44:ec:14:a7:ba:38:e5: 5a:d4:0c:70:70:da:55:58:0f:ae:ab:6d:54:cd:35:4c:7f:c8: 9d:36:41:14:a6:35:a7:51:9f:f3:d2:ea:11:85:9c:f8:12:1d: 92:4f:bb:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iTkxWIyn7KULPAdD+FPXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMTA2ZDJkZmY3MTE2ZjM1YWI3ZmExMDI3NWE0NWUzODNi Y2U1MjMwHhcNMjYwMTI2MDkwMTE4WhcNMjYwMTI3MDkwMTE4WjAzMTEwLwYDVQQD Eyg0MjBkZTk4YjA5YzQ3YmNlODQ3MGI1YWUxZGU0NDlkMDNiOWUzNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF6eJ0cf0EBBU4974e/deqdOTayw 8QXDDqKaFVGUQnHbST+u5Dfdp5Lb+jvsXX/BzuMhqUSrI0r0GuOfQHzETZs5r13d S5GlCbutjT0DbNnCk8JXcm+Xs6q/ivdFXaiqarICJQXLx2nVv0JVJtAphKJx/Aiv 6nz2CzIg5rcmx2X0PauI8xkVzGPo2GJ9Aw9PZJNbIyBXxUSqbe8dv3wunVKKk63v E+PrPIaGj6yfN6iwuJsqDuqYlBC+qRvYG8GmwQ5vX72L03XC0pM1Fb+8qefXYLaP boRuh5GyxTbB4Rtcs0iyG2h4jaa2CkiPMxnvrkgpmtJAwqhUsjMlTYkX+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIN6YsJxHvOhHC1rh3kSdA7njRPMB8GA1UdIwQY MBaAFGEQbS3/cRbzWrf6ECdaReODvOUjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVJCdExmOXhGdk5hdF9vUUoxcEY0NE84NVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hMTZlYTUtMzg2Ny00NDA2LTlmMmEt YTQ5NDRlOTYyNWMwLzEvWVJCdExmOXhGdk5hdF9vUUoxcEY0NE84NVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hMTZlYTUtMzg2Ny00NDA2LTlmMmEtYTQ5NDRlOTYyNWMw LzEvWVJCdExmOXhGdk5hdF9vUUoxcEY0NE84NVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHo58gLn6 nrIj2+1RcauVLn734ADP7ggtrLA86oFn4hYPyJmDYbSptU4yIe0NEF25TgZVZCQD YZr22CeQpTu6DcarsWuiBUQv7I/j28ooUqHz7aWSIWmexH0p9TSOATrqYrcbSXIK ZU4wlNGBVhPm9Y+OB0l1DpJzWwT+hwOCsmXF6edC7YYKMYmnC98GLBKdy8IqBNex ox4xwG86mUugfvqlY571M8qceKkfmICTvKZVV0EOpgenALfQvs+2cyqKPPqUxRD/ eOUH5XIT5GqwAu5E7BSnujjlWtQMcHDaVVgPrqttVM01TH/InTZBFKY1p1Gf89Lq EYWc+BIdkk+7vw== -----END CERTIFICATE-----Generated at Mon Jan 26 13:48:53 2026 by rpki-client