This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json) Hash identifier: nwcVK6yE/y7ZR6OCxrRbb3ZQaiFRXyUsSdnbwBWTsbg= Subject key identifier: C6:81:57:DF:54:D5:85:9D:F4:1E:78:B6:EE:6D:92:24:CD:6F:3E:EA Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1 Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1 Certificate serial: 019BF651CA984582B392F069B949B646C353 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft Manifest number: 0FAE Signing time: Sun 25 Jan 2026 18:01:53 +0000 Manifest this update: Sun 25 Jan 2026 18:01:53 +0000 Manifest next update: Mon 26 Jan 2026 18:01:53 +0000 Files and hashes: 1: txC54j_S7HZrQJFinO7KZYt-RYQ.roa (hash: Brb/AGg54bXB31WxKutqNfmuYrMVTPjvpdr/gdDFZQ0=) 2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: 1iMkgRDcSr/fBbN0PagtRSZsfH+xEpBAbCgLc7piO/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:ca:98:45:82:b3:92:f0:69:b9:49:b6:46:c3:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1 Validity Not Before: Jan 25 18:01:53 2026 GMT Not After : Jan 26 18:01:53 2026 GMT Subject: CN=c68157df54d5859df41e78b6ee6d9224cd6f3eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:53:c8:ac:18:29:fe:b1:20:8f:91:fe:04:e7: aa:cd:a9:87:80:3a:28:20:38:49:55:f1:e6:bc:4e: 72:3e:eb:e3:59:d4:6d:c3:6d:3f:b6:b3:cd:d7:49: cd:3e:21:c4:51:52:b0:15:95:a3:81:f7:31:b3:7d: 2b:b1:97:3e:e9:23:22:90:26:49:9c:1c:52:a5:55: 93:98:52:e1:2d:2d:58:d9:a7:9b:e1:bf:ee:3d:10: 12:72:e1:89:1d:dd:d6:08:40:eb:03:b7:e2:53:0b: a6:6c:49:a4:64:eb:b1:dd:a5:59:aa:66:9a:6c:b0: 45:c4:5f:5a:26:55:a2:5b:e4:3d:00:fb:ef:fc:55: cf:9e:52:ed:2f:03:06:bb:61:71:22:d7:f5:82:bf: e6:40:02:04:30:ed:fc:99:00:41:9f:c9:c7:2d:0d: 27:96:ab:9c:69:5e:7d:45:54:b4:33:4f:58:4c:30: 5d:0a:df:d4:ca:1a:89:92:ff:ab:c6:b6:ee:de:40: 4d:3a:5d:9a:ca:21:60:dc:e7:9b:eb:c5:52:3e:71: f6:fd:b2:86:a9:84:93:03:c5:66:1c:c9:5c:c5:47: 23:1d:20:84:9e:f7:aa:47:dd:28:07:c5:24:2e:ca: 43:85:d9:54:6b:46:6f:e2:5d:94:43:c1:6a:79:00: 3a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:81:57:DF:54:D5:85:9D:F4:1E:78:B6:EE:6D:92:24:CD:6F:3E:EA X509v3 Authority Key Identifier: keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ab:00:a0:c7:a1:ef:f8:d8:13:24:a1:ff:e1:62:87:b6:84: 72:5b:2c:49:b1:78:a3:b0:a7:a5:2d:59:bb:56:d1:19:5e:bf: 03:13:46:05:b9:80:4f:f3:e6:84:19:8b:ee:40:c7:5a:d5:14: 84:10:25:c7:b1:f4:95:01:4c:22:52:50:00:2f:8e:8f:4f:f8: 1b:67:6b:26:8e:46:52:6b:4e:a2:34:1e:19:f2:f1:da:f4:64: c6:61:06:a1:d5:af:3b:3f:99:93:bf:b9:eb:32:e9:d8:9b:be: 5c:df:c1:94:94:66:fa:4a:7a:15:2f:41:d5:f4:41:1e:f8:89: 43:09:b1:5b:e8:6e:f8:19:fd:96:7e:91:d0:b8:2a:3c:a9:54: 36:1a:3a:51:59:c5:82:e9:48:b0:55:29:fb:b4:0e:6d:ba:02: 82:47:f8:7c:76:38:ec:7a:d0:53:a3:cb:52:d0:01:17:f1:50: 31:a9:33:e0:86:d5:3f:41:94:3a:5f:f2:50:fc:02:95:1a:45: 4f:6c:e8:48:45:98:87:01:a9:10:a0:14:88:12:75:92:42:d1: 4c:8a:3c:1b:17:c2:89:c4:40:66:c3:79:f4:91:25:ee:5a:e8: 88:c2:74:a7:a5:1f:65:86:28:b7:c7:86:d8:a6:8a:e4:de:c4: ae:08:96:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UcqYRYKzkvBpuUm2RsNTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MzY3MDk4N2QwMWQ0MWVlMmI1NjQ2OThjODI3MWY1MGRl ZTRjZTEwHhcNMjYwMTI1MTgwMTUzWhcNMjYwMTI2MTgwMTUzWjAzMTEwLwYDVQQD EyhjNjgxNTdkZjU0ZDU4NTlkZjQxZTc4YjZlZTZkOTIyNGNkNmYzZWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFPIrBgp/rEgj5H+BOeqzamHgDoo IDhJVfHmvE5yPuvjWdRtw20/trPN10nNPiHEUVKwFZWjgfcxs30rsZc+6SMikCZJ nBxSpVWTmFLhLS1Y2aeb4b/uPRAScuGJHd3WCEDrA7fiUwumbEmkZOux3aVZqmaa bLBFxF9aJlWiW+Q9APvv/FXPnlLtLwMGu2FxItf1gr/mQAIEMO38mQBBn8nHLQ0n lqucaV59RVS0M09YTDBdCt/UyhqJkv+rxrbu3kBNOl2ayiFg3Oeb68VSPnH2/bKG qYSTA8VmHMlcxUcjHSCEnveqR90oB8UkLspDhdlUa0Zv4l2UQ8FqeQA6rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaBV99U1YWd9B54tu5tkiTNbz7qMB8GA1UdIwQY MBaAFMg2cJh9AdQe4rVkaYyCcfUN7kzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYt MmE2MGNjOThhOGQzLzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYtMmE2MGNjOThhOGQz LzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKsAoMeh 7/jYEySh/+Fih7aEclssSbF4o7CnpS1Zu1bRGV6/AxNGBbmAT/PmhBmL7kDHWtUU hBAlx7H0lQFMIlJQAC+Oj0/4G2drJo5GUmtOojQeGfLx2vRkxmEGodWvOz+Zk7+5 6zLp2Ju+XN/BlJRm+kp6FS9B1fRBHviJQwmxW+hu+Bn9ln6R0LgqPKlUNho6UVnF gulIsFUp+7QObboCgkf4fHY47HrQU6PLUtABF/FQMakz4IbVP0GUOl/yUPwClRpF T2zoSEWYhwGpEKAUiBJ1kkLRTIo8GxfCicRAZsN59JEl7lroiMJ0p6UfZYYot8eG 2KaK5N7ErgiWCw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:13 2026 by rpki-client