This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json) Hash identifier: lXVSOtWcYXlanzekYCqduOKBb5O2IWqgoBILh/DMEF0= Subject key identifier: D1:13:DD:3A:7B:89:8A:12:85:0A:19:EB:B6:6B:A3:B9:28:7D:94:5A Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47 Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447 Certificate serial: 019BF6F5A8FCCC6235B3A257684602F64E90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft Manifest number: 1308 Signing time: Sun 25 Jan 2026 21:00:53 +0000 Manifest this update: Sun 25 Jan 2026 21:00:53 +0000 Manifest next update: Mon 26 Jan 2026 21:00:53 +0000 Files and hashes: 1: VYZ5Fgld7RXGEOrVqR8rQ1goxUQ.roa (hash: cLhaanJStsJrz0IULm7aO3Ok7sBDzVaf9JM7x28CLYM=) 2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: EV34j8HX/82+nXgo9TcER2lTF2bfNwSa5pxfqlA/kUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:a8:fc:cc:62:35:b3:a2:57:68:46:02:f6:4e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447 Validity Not Before: Jan 25 21:00:53 2026 GMT Not After : Jan 26 21:00:53 2026 GMT Subject: CN=d113dd3a7b898a12850a19ebb66ba3b9287d945a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1f:7f:1e:95:b1:35:68:a2:c9:a9:d9:6a:fc: 5e:4c:6e:f5:37:f1:94:db:be:ce:f4:ab:86:d9:a4: 39:ce:32:99:e9:be:74:33:48:fc:c2:ff:5c:97:90: 40:ad:28:d0:c2:0c:81:a3:06:db:99:42:e2:d8:15: c9:e0:e1:e0:6b:22:a2:cd:92:bb:3c:06:b3:aa:72: 54:82:09:bf:08:26:1b:9c:42:1c:81:1e:5f:59:2e: ea:78:7d:01:ee:9b:78:b6:5a:19:6c:be:a5:97:18: af:9b:6a:e3:c9:66:dd:49:29:eb:04:6e:2f:92:fd: 3a:a2:cb:dd:0f:8a:b9:14:61:54:90:d8:71:2f:8b: d5:96:14:f2:37:9f:0d:f8:76:9a:47:32:6d:ea:61: 60:de:52:db:91:04:c6:24:d7:1c:6e:52:90:c0:47: ea:1b:f0:40:cf:4d:e2:01:bd:c7:49:9f:ef:21:e2: 21:41:0f:30:4e:21:53:2f:d9:99:2a:5f:44:9d:72: 21:a3:05:4c:1e:5c:ac:dd:9c:3b:15:dd:c1:81:49: ac:74:0f:8d:1c:a1:bf:23:a3:4c:7e:af:27:f2:90: aa:9a:37:f4:4e:4b:c7:46:1d:90:b6:57:4b:4e:17: 65:36:62:37:75:29:93:d2:48:f7:1e:b4:ad:26:6a: e0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:13:DD:3A:7B:89:8A:12:85:0A:19:EB:B6:6B:A3:B9:28:7D:94:5A X509v3 Authority Key Identifier: keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:bc:45:6f:d2:c0:04:6c:c2:de:8f:04:d2:3e:20:39:c7:de: b6:d5:c6:39:2b:e4:8b:33:f0:a5:78:3a:70:e2:0f:83:c6:bf: c1:85:4f:9f:84:b4:28:04:87:d3:e8:42:00:91:3b:50:23:99: 7c:89:e2:de:80:2b:5e:d9:ce:db:64:f7:d9:39:96:fe:81:b2: 92:ea:57:76:c3:7e:8f:3c:a2:36:23:d0:56:d8:ee:72:5e:93: 51:b5:2f:64:a4:1a:a5:8f:93:28:a5:fd:89:6a:41:f2:08:fa: 0b:b2:43:94:a6:38:34:fd:c1:04:98:54:72:b2:ad:6a:3e:4d: ff:f3:ab:07:a3:06:1d:80:49:43:d3:68:a5:4c:fc:c4:85:cb: 38:41:46:c9:1d:62:7f:d0:3e:07:62:1f:7b:f6:b0:d7:50:ad: 9d:53:b6:dd:91:c4:ed:8c:b9:3d:c0:18:53:2a:63:45:52:e8: 49:94:85:3a:af:9a:6d:67:9e:5d:13:e0:40:cc:c4:d0:41:e3: 6b:c8:98:fc:67:0e:66:bb:9b:fa:2a:a3:6b:43:84:a5:71:a6: 05:bc:00:e8:cc:d7:3c:49:f9:4b:4d:05:6d:ab:64:b9:ae:23: d2:e4:ef:d1:2a:61:e6:04:ae:2c:76:85:36:14:5e:09:22:76: 63:20:00:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29aj8zGI1s6JXaEYC9k6QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkODkzODEzMDdhZTVlM2IxYmE4NjU4Y2RhN2VlMmFkYTQx NDE0NDcwHhcNMjYwMTI1MjEwMDUzWhcNMjYwMTI2MjEwMDUzWjAzMTEwLwYDVQQD EyhkMTEzZGQzYTdiODk4YTEyODUwYTE5ZWJiNjZiYTNiOTI4N2Q5NDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx9/HpWxNWiiyanZavxeTG71N/GU 277O9KuG2aQ5zjKZ6b50M0j8wv9cl5BArSjQwgyBowbbmULi2BXJ4OHgayKizZK7 PAazqnJUggm/CCYbnEIcgR5fWS7qeH0B7pt4tloZbL6llxivm2rjyWbdSSnrBG4v kv06osvdD4q5FGFUkNhxL4vVlhTyN58N+HaaRzJt6mFg3lLbkQTGJNccblKQwEfq G/BAz03iAb3HSZ/vIeIhQQ8wTiFTL9mZKl9EnXIhowVMHlys3Zw7Fd3BgUmsdA+N HKG/I6NMfq8n8pCqmjf0TkvHRh2QtldLThdlNmI3dSmT0kj3HrStJmrgcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNET3Tp7iYoShQoZ67Zro7kofZRaMB8GA1UdIwQY MBaAFP2JOBMHrl47G6hljNp+4q2kFBRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kY2Y5YjctNmQ3Mi00NzVhLWJhYTct NjQ2ZWU2ZGZhNmI2LzEvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kY2Y5YjctNmQ3Mi00NzVhLWJhYTctNjQ2ZWU2ZGZhNmI2 LzEvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7xFb9LA BGzC3o8E0j4gOcfettXGOSvkizPwpXg6cOIPg8a/wYVPn4S0KASH0+hCAJE7UCOZ fIni3oArXtnO22T32TmW/oGykupXdsN+jzyiNiPQVtjucl6TUbUvZKQapY+TKKX9 iWpB8gj6C7JDlKY4NP3BBJhUcrKtaj5N//OrB6MGHYBJQ9NopUz8xIXLOEFGyR1i f9A+B2Ife/aw11CtnVO23ZHE7Yy5PcAYUypjRVLoSZSFOq+abWeeXRPgQMzE0EHj a8iY/GcOZrub+iqja0OEpXGmBbwA6MzXPEn5S00Fbatkua4j0uTv0Sph5gSuLHaF NhReCSJ2YyAAaw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:12:29 2026 by rpki-client