This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft File: Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft (raw, json) Hash identifier: 6djK6Fon532v9B9zhdfAI2zxr0m1o7BZtCD41nQ6DVE= Subject key identifier: 92:F1:09:B2:AB:FD:11:88:F5:84:25:1E:B7:A8:F7:F5:11:84:1D:D8 Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1 Certificate issuer: /CN=63444210ea08ac529878d51917e3b30054d620d1 Certificate serial: 019BF350072DF35389F4F2989D0257D50C0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft Manifest number: 0A7A Signing time: Sun 25 Jan 2026 04:01:06 +0000 Manifest this update: Sun 25 Jan 2026 04:01:06 +0000 Manifest next update: Mon 26 Jan 2026 04:01:06 +0000 Files and hashes: 1: 3BL8eZrrcdZcTJ1LBnBwiUYEdtE.roa (hash: gGi4tuYYStPk3wMFWjGj3CvLXtTxUzhFdma4sHRM51w=) 2: 41tQWysTKuHBVA6VmoXFjeGNGS4.roa (hash: SbGJ4pnWOEPVdm/1K14ZaMe19ybQ3/PrMA7+GeRh8oY=) 3: 4WiiFb7SpGQeZVC2n3MrfOPqNzc.roa (hash: 62rrLyHxu3FWWfUcOvkJJ5Vd53nVehjwHYHOgE++3rc=) 4: GnPeNkJcWmVud11YHPGxCPwESaw.roa (hash: ibO2Cb+R8UorxLYYdEI5lPaQv6vYtWFXG95Sh2B2jxw=) 5: Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl (hash: qYIsilvwA4L7VRIcZBWZVL4fObztzB2Y1AvHxZ8rxS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:07:2d:f3:53:89:f4:f2:98:9d:02:57:d5:0c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1 Validity Not Before: Jan 25 04:01:06 2026 GMT Not After : Jan 26 04:01:06 2026 GMT Subject: CN=92f109b2abfd1188f584251eb7a8f7f511841dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ee:08:ca:9a:3c:15:4c:28:39:71:cb:d3:bc: c2:07:7e:0d:39:d1:d9:e9:6f:d2:72:40:d8:a9:d8: 01:52:88:a5:b4:d7:26:81:b3:8c:cb:4a:17:48:39: 6f:58:9a:79:d3:9c:80:46:d3:fe:c7:0d:08:17:d9: 93:a7:3f:d3:ec:13:33:8a:03:5a:07:9b:c2:f2:d8: e3:cd:a6:9a:22:d3:5b:ea:a7:3e:b5:16:73:a3:b0: b9:26:d6:1b:ce:5a:43:aa:09:90:a7:85:1e:bb:c2: c5:50:2f:c8:c5:86:d0:08:58:2e:c3:37:f7:a0:89: a2:b3:e4:c7:7b:f2:3f:c3:3d:e5:08:6e:5d:78:99: 11:05:f2:67:00:74:bf:be:da:4a:73:c0:c8:87:93: 63:81:2d:6f:d5:24:e5:38:3b:3a:34:89:c3:e3:61: a7:3c:4f:55:cc:88:2c:08:d9:f6:aa:21:b1:dc:b3: 5f:a7:d1:ef:a3:b8:ea:5a:17:4c:26:f5:86:bb:3d: 47:31:d3:95:34:3d:49:0b:b5:6e:d6:c9:1a:d0:0b: 28:6d:48:ca:81:08:78:8c:dc:a2:aa:5f:87:7c:ae: 91:70:f9:7e:02:26:ff:9e:c9:2f:38:d4:66:43:92: 3d:9b:4d:58:83:24:ea:07:f0:05:19:b1:7b:1c:b3: 35:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F1:09:B2:AB:FD:11:88:F5:84:25:1E:B7:A8:F7:F5:11:84:1D:D8 X509v3 Authority Key Identifier: keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e5:e6:90:2d:41:ad:91:25:b0:22:bc:1f:fc:44:d2:b4:6c: d2:76:95:44:fa:7c:ee:ae:b4:e5:18:9b:27:aa:bc:c9:98:33: b4:6f:77:b7:60:da:27:da:b3:ff:34:4d:3e:1f:fd:81:f4:03: 43:2e:53:0e:08:25:e2:ed:2e:a4:12:ca:85:3a:05:85:e3:02: 77:61:68:be:cc:c3:20:34:50:33:6e:74:61:ab:3e:4c:ed:9b: f6:e3:b7:6d:43:d8:40:92:ec:cf:c8:8b:24:5c:c5:77:44:7e: a1:fa:71:69:53:1a:70:ab:f7:ee:39:71:fa:ea:27:9e:b3:85: 23:00:a6:e5:4e:f0:ea:37:76:fb:a4:22:30:fa:96:45:e4:a4: ec:84:44:ba:d5:30:a0:ec:9b:02:c3:6a:db:b0:81:07:f0:39: 03:e6:bb:59:d4:7c:66:7e:6a:4c:26:c8:a1:53:45:a2:e6:d8: ac:7b:d8:96:d7:d9:4f:e7:12:7e:a8:38:31:28:1a:1f:67:c1: b9:b8:54:ad:42:ee:ab:cc:2a:45:51:da:9d:5d:0c:e9:7a:69: 33:ed:bd:f6:dc:e4:95:b6:2c:46:47:0c:c5:78:e5:40:f6:d7: 46:9c:13:7f:f5:78:f9:fb:41:9b:e7:f7:23:07:35:fa:66:27: 1a:7d:32:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUAct81OJ9PKYnQJX1QwOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDQ0MjEwZWEwOGFjNTI5ODc4ZDUxOTE3ZTNiMzAwNTRk NjIwZDEwHhcNMjYwMTI1MDQwMTA2WhcNMjYwMTI2MDQwMTA2WjAzMTEwLwYDVQQD Eyg5MmYxMDliMmFiZmQxMTg4ZjU4NDI1MWViN2E4ZjdmNTExODQxZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu4Iypo8FUwoOXHL07zCB34NOdHZ 6W/SckDYqdgBUoiltNcmgbOMy0oXSDlvWJp505yARtP+xw0IF9mTpz/T7BMzigNa B5vC8tjjzaaaItNb6qc+tRZzo7C5JtYbzlpDqgmQp4Ueu8LFUC/IxYbQCFguwzf3 oImis+THe/I/wz3lCG5deJkRBfJnAHS/vtpKc8DIh5NjgS1v1STlODs6NInD42Gn PE9VzIgsCNn2qiGx3LNfp9Hvo7jqWhdMJvWGuz1HMdOVND1JC7Vu1ska0AsobUjK gQh4jNyiql+HfK6RcPl+Aib/nskvONRmQ5I9m01YgyTqB/AFGbF7HLM1twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLxCbKr/RGI9YQlHreo9/URhB3YMB8GA1UdIwQY MBaAFGNEQhDqCKxSmHjVGRfjswBU1iDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lZGVhNmUtNjZjYy00ZmIxLWE0NTQt ZmU4MzdmOThlMDI2LzEvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lZGVhNmUtNjZjYy00ZmIxLWE0NTQtZmU4MzdmOThlMDI2 LzEvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+XmkC1B rZElsCK8H/xE0rRs0naVRPp87q605RibJ6q8yZgztG93t2DaJ9qz/zRNPh/9gfQD Qy5TDggl4u0upBLKhToFheMCd2FovszDIDRQM250Yas+TO2b9uO3bUPYQJLsz8iL JFzFd0R+ofpxaVMacKv37jlx+uonnrOFIwCm5U7w6jd2+6QiMPqWReSk7IREutUw oOybAsNq27CBB/A5A+a7WdR8Zn5qTCbIoVNFoubYrHvYltfZT+cSfqg4MSgaH2fB ubhUrULuq8wqRVHanV0M6XppM+299tzklbYsRkcMxXjlQPbXRpwTf/V4+ftBm+f3 Iwc1+mYnGn0ybw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:56:19 2026 by rpki-client