This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft File: yAYJ8hhRvff3TtGPDwnfku23U1U.mft (raw, json) Hash identifier: eQ/F4lB0CcHTI8CGE4xNgIQZC2QqTGS9luLc8Cfw50A= Subject key identifier: 92:E5:71:A9:4E:EF:03:6A:21:E6:7E:0C:F4:25:FA:F6:3B:8D:40:F4 Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55 Certificate issuer: /CN=c80609f21851bdf7f74ed18f0f09df92edb75355 Certificate serial: 019BF7D1FCEF968CE7385911B48B21D9D280 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft Manifest number: 0FAE Signing time: Mon 26 Jan 2026 01:01:32 +0000 Manifest this update: Mon 26 Jan 2026 01:01:32 +0000 Manifest next update: Tue 27 Jan 2026 01:01:32 +0000 Files and hashes: 1: 7dhm2Zcd4Yp-TNCgcfPEdG07eU0.roa (hash: Ku59KYA/bpOTiSrNCRzEUdSrtiwxD1BQ8G4rzI5+xwk=) 2: yAYJ8hhRvff3TtGPDwnfku23U1U.crl (hash: Ml/dH+hFRB7mbRrgIAi6DHC6qzO0RySXIf3BGF05aws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:fc:ef:96:8c:e7:38:59:11:b4:8b:21:d9:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355 Validity Not Before: Jan 26 01:01:32 2026 GMT Not After : Jan 27 01:01:32 2026 GMT Subject: CN=92e571a94eef036a21e67e0cf425faf63b8d40f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c5:2e:ed:7f:4c:82:42:9b:44:cd:b0:d6:c9: 15:8b:d3:5a:8b:2c:73:71:57:5c:95:e4:e5:90:83: 61:1e:fd:ec:6b:d8:05:e7:c4:14:ea:5e:de:2a:cf: 79:75:75:c3:85:8e:c2:5f:e5:83:cd:cd:ed:63:ea: 36:45:f5:65:f1:59:25:38:c2:53:25:ca:95:95:30: b6:8b:d4:c6:02:eb:b0:2d:c8:b3:c4:8f:bd:ad:02: 05:2c:c1:14:cf:91:00:2e:c3:de:62:24:09:9e:cf: 74:08:bc:23:fc:73:cc:0e:fd:36:b3:79:e0:17:6f: c0:f5:88:dd:77:f6:8a:19:1f:9b:f4:10:75:14:9d: f0:66:0e:b2:23:db:8d:17:39:5d:91:99:df:5e:53: 24:0b:7b:2c:76:fb:0f:5f:48:23:5a:37:3f:89:80: b4:ab:3c:43:77:72:a4:f7:5f:59:41:78:bf:ca:f7: 0d:25:68:8e:a3:58:ee:10:85:5f:b8:b7:df:ed:8e: 0d:11:7e:0b:15:63:7f:08:11:ec:3f:a0:d4:13:51: 3f:8f:6e:18:e3:13:a6:8a:e7:bf:e2:79:2f:ba:6f: 4a:4e:4b:8c:72:b3:fc:53:60:d3:f9:5a:7d:30:e2: 66:5b:1d:84:14:f1:b7:86:88:18:c9:a1:94:22:b6: 31:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E5:71:A9:4E:EF:03:6A:21:E6:7E:0C:F4:25:FA:F6:3B:8D:40:F4 X509v3 Authority Key Identifier: keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ba:62:00:89:80:2c:d5:53:dd:d4:38:fd:32:66:56:0b:ba: 89:ac:be:94:e2:fd:e5:5d:9e:2c:29:76:19:7d:d6:06:37:f6: cc:cf:ea:5b:54:80:5c:6d:70:04:a0:b2:51:f0:3e:60:f1:d1: 57:f2:56:e2:fc:fe:aa:25:14:70:62:f2:f0:27:09:3c:a7:49: 73:14:9f:0e:77:22:8d:27:e9:09:9b:ff:19:5c:ed:72:d4:b8: 71:53:fa:ac:cd:67:57:2f:f9:81:32:c8:65:ec:fe:ef:75:77: 0f:53:4b:6c:48:39:48:81:be:02:63:c4:f7:4f:2f:75:3b:57: e7:c7:48:f9:b0:0d:c1:05:8c:36:2d:c8:07:56:38:f2:cf:c4: 1f:5d:70:12:4e:03:32:12:67:49:04:34:2d:22:70:16:02:b7: fe:8a:f4:07:56:19:b4:32:89:d4:ce:38:5c:1a:32:ef:08:01: 46:10:14:02:e1:66:d8:2f:83:72:8f:40:95:66:cd:f7:bf:5c: 21:aa:4b:8b:a4:ad:bd:f1:bc:fd:a1:91:4c:47:85:7c:d2:b4: e3:0a:9c:eb:2d:c1:76:38:3e:18:68:1c:67:33:ab:b7:52:9a: c0:35:95:7d:72:0a:cc:ed:45:55:49:8a:1b:dd:7d:dd:f5:82: 39:ca:ea:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30fzvloznOFkRtIsh2dKAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MDYwOWYyMTg1MWJkZjdmNzRlZDE4ZjBmMDlkZjkyZWRi NzUzNTUwHhcNMjYwMTI2MDEwMTMyWhcNMjYwMTI3MDEwMTMyWjAzMTEwLwYDVQQD Eyg5MmU1NzFhOTRlZWYwMzZhMjFlNjdlMGNmNDI1ZmFmNjNiOGQ0MGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMUu7X9MgkKbRM2w1skVi9Naiyxz cVdcleTlkINhHv3sa9gF58QU6l7eKs95dXXDhY7CX+WDzc3tY+o2RfVl8VklOMJT JcqVlTC2i9TGAuuwLcizxI+9rQIFLMEUz5EALsPeYiQJns90CLwj/HPMDv02s3ng F2/A9Yjdd/aKGR+b9BB1FJ3wZg6yI9uNFzldkZnfXlMkC3ssdvsPX0gjWjc/iYC0 qzxDd3Kk919ZQXi/yvcNJWiOo1juEIVfuLff7Y4NEX4LFWN/CBHsP6DUE1E/j24Y 4xOmiue/4nkvum9KTkuMcrP8U2DT+Vp9MOJmWx2EFPG3hogYyaGUIrYx4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLlcalO7wNqIeZ+DPQl+vY7jUD0MB8GA1UdIwQY MBaAFMgGCfIYUb33907Rjw8J35Ltt1NVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUFZSjhoaFJ2ZmYzVHRHUER3bmZrdTIzVTFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lYzkxNTktZGFiNC00MjgwLWI0NGMt NGNiY2U1YmFiYWE3LzEveUFZSjhoaFJ2ZmYzVHRHUER3bmZrdTIzVTFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lYzkxNTktZGFiNC00MjgwLWI0NGMtNGNiY2U1YmFiYWE3 LzEveUFZSjhoaFJ2ZmYzVHRHUER3bmZrdTIzVTFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLpiAImA LNVT3dQ4/TJmVgu6iay+lOL95V2eLCl2GX3WBjf2zM/qW1SAXG1wBKCyUfA+YPHR V/JW4vz+qiUUcGLy8CcJPKdJcxSfDncijSfpCZv/GVztctS4cVP6rM1nVy/5gTLI Zez+73V3D1NLbEg5SIG+AmPE908vdTtX58dI+bANwQWMNi3IB1Y48s/EH11wEk4D MhJnSQQ0LSJwFgK3/or0B1YZtDKJ1M44XBoy7wgBRhAUAuFm2C+Dco9AlWbN979c IapLi6StvfG8/aGRTEeFfNK04wqc6y3Bdjg+GGgcZzOrt1KawDWVfXIKzO1FVUmK G9193fWCOcrqFQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:40 2026 by rpki-client