This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json) Hash identifier: 84JkRzP+6uAlapdF1zUBjyjSosFj2fqyl7PLJpgYAsc= Subject key identifier: 31:02:4C:55:70:7E:E6:06:95:ED:AA:C5:C6:F9:70:59:1C:D5:3F:53 Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Certificate serial: 019BF4D045B3FECF0EF618CF31AF8F0F7360 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft Manifest number: 17F3 Signing time: Sun 25 Jan 2026 11:00:48 +0000 Manifest this update: Sun 25 Jan 2026 11:00:48 +0000 Manifest next update: Mon 26 Jan 2026 11:00:48 +0000 Files and hashes: 1: 5L2g6nDW06irIUq83phIZ53C1IA.roa (hash: JbdTWcKtL0GeFigj6GMvD4sLu582tKI8ZbvVxkhlvCI=) 2: AeVrZINs9Mwgw--CeQuhBL48V9o.roa (hash: tOULrw1qQEUkRt4Egsmhx0JNl0n1ptX0coLHQFBvARg=) 3: AzSbSNEJjHOAmPD-lEIirqfh5dg.roa (hash: ZHEBSxcyGtvAyqmQJ49m4K5zjUBmt85+2wE9Fs3EpwQ=) 4: UcKG60X0bY06GvhRzuyCZXPPpEs.roa (hash: CiNS7tumSY9kA1IK1COc42ZCVYSO1Vjftuq3lKqZ0Tg=) 5: VB7XO0ymTrFmXwqFwsQgqVfLeRw.roa (hash: 7CJ7QikKkqwN0XgN8t0cIqxMckNcSYUmDfhH8CM9bnM=) 6: c0IiT_bhf4sAeq2ZJ69mDEiSeKE.roa (hash: WC6msRGLImOXKWuJcuzV4dtFJSxBDOZv82faENvIVf0=) 7: f-sruYLmLAQF45fvBkTZ4sUoHrs.roa (hash: 8P04B1C9VS8sjuPoAqAxmLe2sS/eh9nL22FO4SV0ZsQ=) 8: rGoiQCmdvS4XmAkVedOPWx6pvfc.roa (hash: NENGKfJhaegTvTeAkQES6pzY2mWvrE4Gty5ShbLzPEM=) 9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: vkc6M71PdE32JzjywTl+ueFTdtJ1XD92/EFBG9OtzEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:45:b3:fe:cf:0e:f6:18:cf:31:af:8f:0f:73:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Validity Not Before: Jan 25 11:00:48 2026 GMT Not After : Jan 26 11:00:48 2026 GMT Subject: CN=31024c55707ee60695edaac5c6f970591cd53f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:66:1d:62:db:0b:13:3e:d9:f6:a1:b5:7b:70: 27:f6:45:a4:43:95:b1:e7:64:83:6f:76:44:cb:14: 7f:84:67:d5:88:c1:2f:83:35:af:92:4d:b1:3a:7d: 51:c9:e1:d6:1c:09:1a:30:89:7a:aa:b5:8c:9d:f1: 3e:40:ca:d3:2a:55:be:b9:33:15:c7:7b:5f:2c:0e: 0a:46:b2:e1:d3:6b:d8:83:82:71:c7:39:89:b7:87: 39:a3:17:73:cb:d7:86:f3:17:31:90:5f:ab:23:74: 55:93:e3:c1:0a:78:7c:13:e5:e7:a1:ac:a2:8c:39: 86:c6:e3:bb:1f:5a:c1:87:57:c1:ca:bc:68:f7:fc: 69:13:e6:f7:28:cc:c9:b7:63:40:a9:37:77:7f:a6: b6:28:aa:ba:39:e7:cd:8f:80:03:db:ac:4d:99:bf: bd:40:1f:c0:0f:80:b9:e1:0d:52:cc:bc:ae:84:9e: 29:90:55:f0:a4:a4:61:d2:51:0c:2e:2d:8c:4c:ef: b7:da:a1:e4:11:10:92:20:cc:3d:c3:4a:f9:87:4b: 42:1e:8a:b0:26:2b:8f:5c:a6:0c:db:71:be:ce:d8: aa:56:df:95:a2:26:ec:0a:e3:d8:45:8a:d2:98:99: a0:2c:6b:66:4f:07:cc:a4:d4:60:ad:cb:e6:fd:18: 22:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:02:4C:55:70:7E:E6:06:95:ED:AA:C5:C6:F9:70:59:1C:D5:3F:53 X509v3 Authority Key Identifier: keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e0:5d:51:61:06:fd:d6:34:a7:c1:4b:ac:c1:b0:f0:fa:46: cd:d5:40:72:e8:cb:31:8b:b5:cc:12:b8:cb:78:a1:81:8c:c8: 0a:11:54:20:0c:65:4b:42:32:56:da:83:78:4e:23:8d:3b:c3: 5a:c4:df:4e:39:35:15:a2:41:7d:2a:8f:ea:6c:bf:fd:54:3b: 3e:e0:db:7f:f6:e9:68:5a:4b:83:29:98:33:ce:99:33:96:3b: 56:2e:e6:a9:1e:24:5e:2c:31:93:07:b0:ef:f3:d8:e8:24:5e: 18:54:eb:fd:36:1b:dd:2a:eb:73:db:aa:7f:90:52:a1:94:cc: a4:97:0d:b6:e8:b0:c6:b0:84:55:e0:72:fa:67:5c:dc:5f:a2: 4e:63:b6:e4:2c:26:85:4f:40:c2:05:4d:eb:78:e4:1b:d4:e5: b2:b0:88:f7:a2:fe:17:35:ff:3f:d9:10:5d:1e:20:8f:0b:a6: 0f:f8:a0:c7:84:02:f8:e2:5e:48:a4:5b:b1:bb:0c:19:f2:01: da:90:14:b5:c5:88:05:c5:09:86:dc:01:34:c7:59:5c:1c:7e: ee:69:52:60:b8:9b:eb:93:b9:fb:eb:aa:27:84:70:5b:f4:06: 2a:50:71:e5:14:85:87:00:93:51:84:f1:c4:89:2d:cb:e4:39: 29:a9:f6:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00EWz/s8O9hjPMa+PD3NgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh YzZmMDUwHhcNMjYwMTI1MTEwMDQ4WhcNMjYwMTI2MTEwMDQ4WjAzMTEwLwYDVQQD EygzMTAyNGM1NTcwN2VlNjA2OTVlZGFhYzVjNmY5NzA1OTFjZDUzZjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGYdYtsLEz7Z9qG1e3An9kWkQ5Wx 52SDb3ZEyxR/hGfViMEvgzWvkk2xOn1RyeHWHAkaMIl6qrWMnfE+QMrTKlW+uTMV x3tfLA4KRrLh02vYg4JxxzmJt4c5oxdzy9eG8xcxkF+rI3RVk+PBCnh8E+Xnoayi jDmGxuO7H1rBh1fByrxo9/xpE+b3KMzJt2NAqTd3f6a2KKq6OefNj4AD26xNmb+9 QB/AD4C54Q1SzLyuhJ4pkFXwpKRh0lEMLi2MTO+32qHkERCSIMw9w0r5h0tCHoqw JiuPXKYM23G+ztiqVt+VoibsCuPYRYrSmJmgLGtmTwfMpNRgrcvm/RgiQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDECTFVwfuYGle2qxcb5cFkc1T9TMB8GA1UdIwQY MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt YzI1Nzc5MmRhZGM0LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0 LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOBdUWEG /dY0p8FLrMGw8PpGzdVAcujLMYu1zBK4y3ihgYzIChFUIAxlS0IyVtqDeE4jjTvD WsTfTjk1FaJBfSqP6my//VQ7PuDbf/bpaFpLgymYM86ZM5Y7Vi7mqR4kXiwxkwew 7/PY6CReGFTr/TYb3Srrc9uqf5BSoZTMpJcNtuiwxrCEVeBy+mdc3F+iTmO25Cwm hU9AwgVN63jkG9TlsrCI96L+FzX/P9kQXR4gjwumD/igx4QC+OJeSKRbsbsMGfIB 2pAUtcWIBcUJhtwBNMdZXBx+7mlSYLib65O5++uqJ4RwW/QGKlBx5RSFhwCTUYTx xIkty+Q5Kan2yg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:22:17 2026 by rpki-client