This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json) Hash identifier: fPCCkaic+Cpf9J8Nkg3FftTPyINKxItC4x0ONF8/oX4= Subject key identifier: C9:21:E2:45:65:79:68:3A:CE:9F:CA:75:E1:E7:1B:5C:39:6B:BA:C9 Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Certificate serial: 019BF6BEACA337EAC5F04E4ACF21E1D31A26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft Manifest number: 17F4 Signing time: Sun 25 Jan 2026 20:00:49 +0000 Manifest this update: Sun 25 Jan 2026 20:00:49 +0000 Manifest next update: Mon 26 Jan 2026 20:00:49 +0000 Files and hashes: 1: 5L2g6nDW06irIUq83phIZ53C1IA.roa (hash: JbdTWcKtL0GeFigj6GMvD4sLu582tKI8ZbvVxkhlvCI=) 2: AeVrZINs9Mwgw--CeQuhBL48V9o.roa (hash: tOULrw1qQEUkRt4Egsmhx0JNl0n1ptX0coLHQFBvARg=) 3: AzSbSNEJjHOAmPD-lEIirqfh5dg.roa (hash: ZHEBSxcyGtvAyqmQJ49m4K5zjUBmt85+2wE9Fs3EpwQ=) 4: UcKG60X0bY06GvhRzuyCZXPPpEs.roa (hash: CiNS7tumSY9kA1IK1COc42ZCVYSO1Vjftuq3lKqZ0Tg=) 5: VB7XO0ymTrFmXwqFwsQgqVfLeRw.roa (hash: 7CJ7QikKkqwN0XgN8t0cIqxMckNcSYUmDfhH8CM9bnM=) 6: c0IiT_bhf4sAeq2ZJ69mDEiSeKE.roa (hash: WC6msRGLImOXKWuJcuzV4dtFJSxBDOZv82faENvIVf0=) 7: f-sruYLmLAQF45fvBkTZ4sUoHrs.roa (hash: 8P04B1C9VS8sjuPoAqAxmLe2sS/eh9nL22FO4SV0ZsQ=) 8: rGoiQCmdvS4XmAkVedOPWx6pvfc.roa (hash: NENGKfJhaegTvTeAkQES6pzY2mWvrE4Gty5ShbLzPEM=) 9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: tFDiTmkfbLCoQUGleHTB4x/CJBmuq38sPNjC4fkQWS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:ac:a3:37:ea:c5:f0:4e:4a:cf:21:e1:d3:1a:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Validity Not Before: Jan 25 20:00:49 2026 GMT Not After : Jan 26 20:00:49 2026 GMT Subject: CN=c921e2456579683ace9fca75e1e71b5c396bbac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:40:26:3d:47:d3:a9:41:d9:71:1b:aa:2b: ab:b4:22:3f:17:a4:b3:a2:54:fb:2f:84:df:9b:e8: d4:47:d0:4a:c7:91:28:92:a9:d2:76:e2:9e:1e:13: 21:63:90:0f:69:25:91:f1:de:2f:ea:e3:3c:bf:4f: 28:6d:df:e4:bb:7c:cb:e5:9c:d0:a4:3a:b5:0d:08: 0f:66:af:0f:5d:1b:92:6e:b3:e4:78:65:cc:dd:1b: df:fc:d8:02:00:e9:15:1c:7a:4b:38:f5:13:84:b5: 40:7d:98:42:b7:02:a6:45:be:02:c0:20:ad:b5:b3: 2c:41:97:13:e7:34:75:3a:d8:16:05:4a:86:df:c4: 78:01:4a:cd:6b:da:8d:e4:55:68:9c:e5:92:5d:6c: a7:3b:1a:78:e8:11:dd:13:6b:bc:ca:51:fb:b6:8e: 9a:d1:b0:f6:19:33:c1:fa:97:cd:8a:49:d1:a7:17: a2:08:3e:ae:b3:90:48:dd:e9:0e:77:7c:11:91:6b: 49:26:50:eb:0e:54:3a:36:5b:42:b7:b2:77:b3:39: fb:af:9d:7e:aa:76:f2:43:23:95:3b:37:27:0a:f7: 29:ff:22:f6:e3:d2:44:21:15:a1:3e:2f:0f:ae:3e: 3c:7c:5b:53:6f:6d:c1:6b:39:aa:3e:c3:9b:9e:de: 40:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:21:E2:45:65:79:68:3A:CE:9F:CA:75:E1:E7:1B:5C:39:6B:BA:C9 X509v3 Authority Key Identifier: keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:33:0d:d5:af:44:85:6d:9a:c6:bd:41:04:cc:01:13:f3:42: e8:c9:f6:62:c6:55:3c:77:ad:cd:07:36:08:40:a8:fc:91:c9: e4:4a:dc:35:76:96:c7:5c:13:63:36:4b:1e:78:6f:3f:b9:d7: 3f:66:7c:bf:39:e9:ad:9f:91:c1:b6:9c:2a:ca:8b:f9:a8:b2: 4d:a3:c5:58:15:22:58:af:34:e0:dc:b4:f8:1c:aa:8f:a2:5e: d4:67:a3:5a:7f:ce:76:9c:2c:83:4c:d5:44:1f:c3:b5:2e:ce: 2d:c6:d5:cc:a6:59:76:a7:17:f0:30:b9:e8:26:db:2e:85:5a: 79:00:55:15:f5:a0:f4:10:d8:d9:9e:7c:2d:28:05:aa:5e:94: 2b:eb:d8:dd:93:f2:82:90:36:6f:d3:aa:aa:cf:4e:df:69:24: f0:e3:8d:f6:5f:d3:8d:c6:f3:ef:54:27:b8:e4:c2:ad:10:64: 93:a3:97:fb:a6:ea:e5:5b:f4:3c:f2:6f:fb:80:47:da:c9:25: 3a:25:d4:da:3d:e4:b7:cf:23:e2:34:cb:e9:eb:c1:d2:f6:08: 8b:c8:9d:39:ad:60:22:58:5d:d0:53:0d:03:a5:ab:60:fa:fe: df:bb:a0:ef:ca:b8:a3:17:34:57:c0:68:50:33:8a:33:bb:fc: b2:27:cf:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vqyjN+rF8E5KzyHh0xomMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh YzZmMDUwHhcNMjYwMTI1MjAwMDQ5WhcNMjYwMTI2MjAwMDQ5WjAzMTEwLwYDVQQD EyhjOTIxZTI0NTY1Nzk2ODNhY2U5ZmNhNzVlMWU3MWI1YzM5NmJiYWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOVAJj1H06lB2XEbqiurtCI/F6Sz olT7L4Tfm+jUR9BKx5EokqnSduKeHhMhY5APaSWR8d4v6uM8v08obd/ku3zL5ZzQ pDq1DQgPZq8PXRuSbrPkeGXM3Rvf/NgCAOkVHHpLOPUThLVAfZhCtwKmRb4CwCCt tbMsQZcT5zR1OtgWBUqG38R4AUrNa9qN5FVonOWSXWynOxp46BHdE2u8ylH7to6a 0bD2GTPB+pfNiknRpxeiCD6us5BI3ekOd3wRkWtJJlDrDlQ6NltCt7J3szn7r51+ qnbyQyOVOzcnCvcp/yL249JEIRWhPi8Prj48fFtTb23BazmqPsObnt5AGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkh4kVleWg6zp/KdeHnG1w5a7rJMB8GA1UdIwQY MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt YzI1Nzc5MmRhZGM0LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0 LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjMN1a9E hW2axr1BBMwBE/NC6Mn2YsZVPHetzQc2CECo/JHJ5ErcNXaWx1wTYzZLHnhvP7nX P2Z8vznprZ+RwbacKsqL+aiyTaPFWBUiWK804Ny0+Byqj6Je1GejWn/Odpwsg0zV RB/DtS7OLcbVzKZZdqcX8DC56CbbLoVaeQBVFfWg9BDY2Z58LSgFql6UK+vY3ZPy gpA2b9Oqqs9O32kk8OON9l/Tjcbz71QnuOTCrRBkk6OX+6bq5Vv0PPJv+4BH2skl OiXU2j3kt88j4jTL6evB0vYIi8idOa1gIlhd0FMNA6WrYPr+37ug78q4oxc0V8Bo UDOKM7v8sifPog== -----END CERTIFICATE-----Generated at Sun Jan 25 22:36:46 2026 by rpki-client