This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft File: yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json) Hash identifier: WKJCJZLS3/kya8uTjSBDN4q1tvIB2M8SF84aC60cHKc= Subject key identifier: 50:73:61:B9:E6:53:25:E4:31:AC:FC:95:94:A0:78:11:22:57:2C:F2 Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c Certificate serial: 019BF49912BDFA45FF5E240F610F11FDF14F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft Manifest number: 083E Signing time: Sun 25 Jan 2026 10:00:30 +0000 Manifest this update: Sun 25 Jan 2026 10:00:30 +0000 Manifest next update: Mon 26 Jan 2026 10:00:30 +0000 Files and hashes: 1: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: LacCYqLnysXnFCef2eO/qa/G06RrCut1+h+bOXMPLrE=) 2: ykn6ra4wP0urmcyUyxV1FWZ2Kp0.roa (hash: IJ1D7ZuY9/uNKyGnyBgDEp0dSpIFh5mPiRSScoZkO+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:12:bd:fa:45:ff:5e:24:0f:61:0f:11:fd:f1:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c Validity Not Before: Jan 25 10:00:30 2026 GMT Not After : Jan 26 10:00:30 2026 GMT Subject: CN=507361b9e65325e431acfc9594a0781122572cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b0:34:13:dc:ac:8c:d8:46:f7:65:9a:4d:e8: d1:1d:4a:d9:b2:1a:1e:75:ca:ca:b7:e4:8a:d9:f5: 53:1a:d7:c7:23:b8:45:26:e3:5b:a9:9c:dd:37:6f: 1f:28:7a:04:91:be:89:f6:ea:a5:ef:1e:38:6b:50: 80:94:8f:02:a4:9d:46:ff:29:fc:7b:44:14:57:ae: 10:02:f9:31:14:01:44:0d:8e:f8:bc:ac:7c:57:72: 50:52:64:d9:93:d4:1d:af:1e:26:51:f6:a8:4c:fd: 84:1e:3c:f0:27:71:7e:61:08:9f:5d:e0:44:fe:f6: 5f:e6:3d:f8:91:e3:39:d1:07:4a:13:29:5b:f9:11: dc:77:2a:43:53:0b:a8:a5:89:32:89:df:87:d0:22: ae:e9:31:ce:65:77:e6:2b:a4:83:ff:ed:f8:d1:48: 1a:50:16:18:67:01:96:db:7f:e2:d9:53:45:86:2a: 23:d5:a7:aa:19:bb:ed:d6:b9:52:5f:d7:3c:f4:9e: 3b:82:04:94:04:d0:ce:2d:63:e6:0e:83:b5:80:92: e4:96:7c:61:b6:07:15:6a:5f:4a:ce:f0:7d:a4:c9: e8:be:85:13:42:64:70:4b:9b:18:47:25:b7:b6:34: 67:29:72:29:25:64:0e:0c:67:51:78:ed:a4:f2:94: 99:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:73:61:B9:E6:53:25:E4:31:AC:FC:95:94:A0:78:11:22:57:2C:F2 X509v3 Authority Key Identifier: keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:7b:77:aa:eb:cb:cb:1f:e8:4d:bb:08:fa:64:8e:f0:fd:38: 42:a5:d7:94:c4:3f:6c:f1:82:10:5d:74:7a:73:12:cd:1a:af: 8c:3e:d3:f5:0b:72:08:f2:46:a7:a9:3b:48:29:74:7a:ca:9e: 73:28:ea:4e:d0:58:39:fe:fc:d5:f3:b4:13:6d:01:f4:1b:ba: fc:1a:64:28:0b:da:98:4a:08:c5:e5:d7:62:89:17:aa:50:6c: 96:d0:25:e2:57:97:d1:3b:20:9e:27:25:3e:e5:b9:a7:60:09: 28:8e:1c:12:3d:31:ae:ed:b8:79:12:21:eb:27:ff:cb:31:ad: 11:03:ca:48:f3:8b:2c:be:6d:b2:9d:95:2c:17:72:6f:c3:d1: 37:91:87:72:b3:61:36:ba:65:f8:31:d0:5f:21:96:fb:a0:c6: 46:9b:d1:ad:ce:d9:2f:53:4e:f3:58:0d:b9:31:4c:9e:3a:e1: 65:00:8a:a8:81:98:bd:e3:08:1f:1d:d9:de:b8:d8:9b:a6:07: b7:85:6c:cc:01:93:36:0c:cc:79:df:3b:e4:a5:e9:41:0b:8c: 2c:45:85:df:d5:39:f3:68:75:42:29:e4:b9:d2:18:03:d9:14: db:eb:e9:5e:01:6e:1f:cc:a5:2a:ae:47:97:31:ee:e3:7a:f8: ab:3f:6e:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mRK9+kX/XiQPYQ8R/fFPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YTRiYmQ3OGFmMzYzZmE1YmVlZTYzMmU4YmRjNDhiNjI5 NzM0M2MwHhcNMjYwMTI1MTAwMDMwWhcNMjYwMTI2MTAwMDMwWjAzMTEwLwYDVQQD Eyg1MDczNjFiOWU2NTMyNWU0MzFhY2ZjOTU5NGEwNzgxMTIyNTcyY2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7A0E9ysjNhG92WaTejRHUrZshoe dcrKt+SK2fVTGtfHI7hFJuNbqZzdN28fKHoEkb6J9uql7x44a1CAlI8CpJ1G/yn8 e0QUV64QAvkxFAFEDY74vKx8V3JQUmTZk9Qdrx4mUfaoTP2EHjzwJ3F+YQifXeBE /vZf5j34keM50QdKEylb+RHcdypDUwuopYkyid+H0CKu6THOZXfmK6SD/+340Uga UBYYZwGW23/i2VNFhioj1aeqGbvt1rlSX9c89J47ggSUBNDOLWPmDoO1gJLklnxh tgcVal9KzvB9pMnovoUTQmRwS5sYRyW3tjRnKXIpJWQODGdReO2k8pSZlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBzYbnmUyXkMaz8lZSgeBEiVyzyMB8GA1UdIwQY MBaAFMiku9eK82P6W+7mMui9xItilzQ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8yNDZiNGQtNGQzZS00ZTAyLThjMDct YWM2OGE1MGQwYzk5LzEveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8yNDZiNGQtNGQzZS00ZTAyLThjMDctYWM2OGE1MGQwYzk5 LzEveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3t3quvL yx/oTbsI+mSO8P04QqXXlMQ/bPGCEF10enMSzRqvjD7T9QtyCPJGp6k7SCl0esqe cyjqTtBYOf781fO0E20B9Bu6/BpkKAvamEoIxeXXYokXqlBsltAl4leX0Tsgnicl PuW5p2AJKI4cEj0xru24eRIh6yf/yzGtEQPKSPOLLL5tsp2VLBdyb8PRN5GHcrNh Nrpl+DHQXyGW+6DGRpvRrc7ZL1NO81gNuTFMnjrhZQCKqIGYveMIHx3Z3rjYm6YH t4VszAGTNgzMed875KXpQQuMLEWF39U582h1QinkudIYA9kU2+vpXgFuH8ylKq5H lzHu43r4qz9u+Q== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:18 2026 by rpki-client