This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json) Hash identifier: h6M7YC98iUYljdFHwsSductf42KtOMUusrAX3ofHX2M= Subject key identifier: 8E:4E:C8:6C:3E:C5:D8:63:71:ED:38:17:26:85:85:18:CE:21:2C:B4 Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9 Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9 Certificate serial: 019BF3BE274EF20955A85A0BA384C4400491 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft Manifest number: 023E Signing time: Sun 25 Jan 2026 06:01:23 +0000 Manifest this update: Sun 25 Jan 2026 06:01:23 +0000 Manifest next update: Mon 26 Jan 2026 06:01:23 +0000 Files and hashes: 1: BtoXyxMSDIQKMTy6jmmOzPMifBs.roa (hash: 8KwO1lQ/lrfb32wFNdnAhNa5nkjafPNwoIk1Z923QrM=) 2: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: 0nqLiMPozbYYQvgS081Y9q4SUDDnOuylo5iqXXrJXwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:be:27:4e:f2:09:55:a8:5a:0b:a3:84:c4:40:04:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9 Validity Not Before: Jan 25 06:01:23 2026 GMT Not After : Jan 26 06:01:23 2026 GMT Subject: CN=8e4ec86c3ec5d86371ed381726858518ce212cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:84:d1:d1:12:28:19:80:ad:11:d4:3d:b5:6f: d9:0f:68:ac:31:3d:ee:19:8a:58:9f:08:a8:0f:1e: c5:e9:88:71:56:b8:1c:8c:d3:71:d2:4f:ee:22:92: ff:ad:bb:b0:a7:fb:6e:b4:19:41:00:d1:8a:5c:9c: 48:e4:01:bb:66:57:b9:36:11:7a:68:70:c5:87:2b: c4:12:9e:aa:42:12:8a:57:c6:ce:36:cb:a6:a8:f4: d6:f1:e6:a1:1f:3e:d7:06:2f:13:d2:a6:51:b2:c5: 91:55:2a:03:31:94:c0:7e:18:4a:7e:59:ba:90:9c: 4e:db:c9:d1:b8:9c:c4:8c:16:cf:59:5d:5a:35:14: b5:9d:98:c7:fe:6d:3e:8d:f1:f7:94:4f:12:c0:3a: 47:90:f5:bd:6f:40:5c:a9:65:b0:92:d7:da:fc:b8: 17:76:b1:bd:63:fc:62:2c:e8:d6:51:5a:94:cd:98: b1:07:ef:57:a5:d3:a3:7f:49:94:a4:8c:95:05:bc: 15:76:df:5c:19:9b:8f:00:e1:19:66:0b:ed:96:c7: 93:e1:f0:62:64:71:7b:78:64:06:3c:77:42:63:82: 87:fc:eb:da:b3:74:b6:e0:e9:f4:69:a4:10:58:6b: 98:b8:df:a6:0f:d9:98:cb:65:79:2a:55:45:87:7a: 97:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4E:C8:6C:3E:C5:D8:63:71:ED:38:17:26:85:85:18:CE:21:2C:B4 X509v3 Authority Key Identifier: keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:12:75:96:7d:db:63:13:47:79:5b:92:d3:ef:f1:0f:19:15: 1a:07:c6:5b:dd:cd:dd:62:15:c9:ff:12:49:f7:82:67:af:00: 5c:a0:10:ea:21:af:aa:6f:90:d8:3d:94:40:12:23:ea:24:9a: 0c:65:9b:9c:18:df:49:65:f3:51:2b:af:c7:bc:9b:00:dd:77: 92:85:50:2f:45:d6:0f:ac:c9:d1:e1:86:4e:b7:f1:23:5b:83: 54:00:a6:70:34:d3:e6:5c:f1:77:ec:ec:6d:7f:0c:bf:49:f6: 63:16:be:90:c8:ed:ec:e8:ab:97:65:9c:e8:41:37:ce:81:76: 83:e9:d4:b2:0b:b8:a8:aa:d3:6d:55:24:ab:cf:42:45:aa:a0: 50:4a:06:00:71:e6:42:a5:58:56:09:e6:2b:e7:23:72:c4:75: 29:74:72:7d:8a:14:8e:f5:28:40:47:87:83:12:36:fd:6d:62: 1d:57:81:9d:fc:d4:63:47:52:4f:d5:88:d9:2e:fc:53:6b:04: 35:ac:93:9a:28:70:cc:8c:87:5f:db:ea:16:c8:64:d9:f0:c8: a8:00:6a:65:2c:37:80:2d:f6:3b:3a:e3:c8:33:8f:a8:12:21: 62:b0:a2:ca:b9:6a:16:bb:e9:e2:4a:de:98:74:82:a5:c3:7d: 71:54:ba:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvidO8glVqFoLo4TEQASRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYjAzOGU1OTJmYTUyYzFlNDYzMzg0ZmY5MzJmYmU1YjBj YzcwYTkwHhcNMjYwMTI1MDYwMTIzWhcNMjYwMTI2MDYwMTIzWjAzMTEwLwYDVQQD Eyg4ZTRlYzg2YzNlYzVkODYzNzFlZDM4MTcyNjg1ODUxOGNlMjEyY2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoTR0RIoGYCtEdQ9tW/ZD2isMT3u GYpYnwioDx7F6YhxVrgcjNNx0k/uIpL/rbuwp/tutBlBANGKXJxI5AG7Zle5NhF6 aHDFhyvEEp6qQhKKV8bONsumqPTW8eahHz7XBi8T0qZRssWRVSoDMZTAfhhKflm6 kJxO28nRuJzEjBbPWV1aNRS1nZjH/m0+jfH3lE8SwDpHkPW9b0BcqWWwktfa/LgX drG9Y/xiLOjWUVqUzZixB+9XpdOjf0mUpIyVBbwVdt9cGZuPAOEZZgvtlseT4fBi ZHF7eGQGPHdCY4KH/Ovas3S24On0aaQQWGuYuN+mD9mYy2V5KlVFh3qX7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5OyGw+xdhjce04FyaFhRjOISy0MB8GA1UdIwQY MBaAFMqwOOWS+lLB5GM4T/ky++WwzHCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQt ODk3YTRjYzkyOTIyLzEveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQtODk3YTRjYzkyOTIy LzEveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihJ1ln3b YxNHeVuS0+/xDxkVGgfGW93N3WIVyf8SSfeCZ68AXKAQ6iGvqm+Q2D2UQBIj6iSa DGWbnBjfSWXzUSuvx7ybAN13koVQL0XWD6zJ0eGGTrfxI1uDVACmcDTT5lzxd+zs bX8Mv0n2Yxa+kMjt7Oirl2Wc6EE3zoF2g+nUsgu4qKrTbVUkq89CRaqgUEoGAHHm QqVYVgnmK+cjcsR1KXRyfYoUjvUoQEeHgxI2/W1iHVeBnfzUY0dST9WI2S78U2sE NayTmihwzIyHX9vqFshk2fDIqABqZSw3gC32OzrjyDOPqBIhYrCiyrlqFrvp4kre mHSCpcN9cVS6iw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:00 2026 by rpki-client