This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft File: yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft (raw, json) Hash identifier: o3AmrehpUpgESEYt6F0rG6oNO8Yc0+x2qZRo6GDU01Y= Subject key identifier: F3:C5:77:20:56:ED:18:5C:83:DC:0D:92:A0:4A:6A:4B:E4:A7:EC:E0 Authority key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8 Certificate issuer: /CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8 Certificate serial: 019BF79A7BC49290AA42872E0BFC85F42F83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft Manifest number: 017E Signing time: Mon 26 Jan 2026 00:00:55 +0000 Manifest this update: Mon 26 Jan 2026 00:00:55 +0000 Manifest next update: Tue 27 Jan 2026 00:00:55 +0000 Files and hashes: 1: Pk6dmv-1h5zWIXu5Oty1Pp_3yV4.roa (hash: /ND/9TFeaNgP6XF6YHep3PGuc7vk/LLfQoeSDsS92Uk=) 2: yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl (hash: g34WN59wX1CEGyaw1sz9xzKJOH1J5f/jZm98lK458cA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:7b:c4:92:90:aa:42:87:2e:0b:fc:85:f4:2f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8 Validity Not Before: Jan 26 00:00:55 2026 GMT Not After : Jan 27 00:00:55 2026 GMT Subject: CN=f3c5772056ed185c83dc0d92a04a6a4be4a7ece0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:de:da:34:5b:b3:8f:a7:00:ba:35:f5:78:94: a4:f2:fc:fd:b2:4e:f3:0f:ec:d2:8a:eb:00:60:1e: e4:9d:09:36:cf:71:15:8a:7b:bd:63:84:13:f2:ad: b4:09:b2:fe:cb:a3:01:f7:2d:fd:62:81:2c:a0:f7: 5b:76:bc:7d:28:fd:45:40:a0:37:d4:24:4f:6d:24: d0:0b:75:6c:1a:29:0c:31:6e:00:ab:fa:2a:4d:3b: f7:a0:c3:3e:c8:bf:13:ab:9b:af:24:92:96:74:66: 4c:88:8a:4e:20:7a:a0:09:89:22:c3:59:5c:8c:d4: 90:4c:3b:c5:09:51:eb:7b:69:8f:20:09:3b:56:9c: 77:cb:f5:59:79:8e:ba:42:2e:ab:a8:7d:06:d7:ea: 67:99:3b:81:cf:4c:72:72:5c:4b:bc:2e:0b:11:3b: 08:fa:74:33:5e:64:c8:4f:b4:86:a3:c5:9c:f9:0e: 83:5f:b2:4f:68:4c:22:f2:5e:93:af:d0:61:33:fd: 63:bc:ae:d2:d8:f9:68:88:c0:ba:47:47:f8:61:0b: d5:3d:ba:3a:74:20:97:9c:e7:17:b2:65:3d:cc:63: 31:47:13:3d:03:bb:7c:99:77:9b:5b:5b:e9:49:cc: 0f:5e:88:fd:27:6e:b6:c3:17:17:57:bf:99:81:81: 5f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C5:77:20:56:ED:18:5C:83:DC:0D:92:A0:4A:6A:4B:E4:A7:EC:E0 X509v3 Authority Key Identifier: keyid:C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:44:3b:fe:67:38:88:8e:e9:f0:52:74:53:09:8f:97:7c:26: 1c:5f:2f:4e:f4:1b:0d:c0:17:df:58:12:62:2a:16:01:97:30: e6:9f:e7:7c:bb:2b:0a:e2:cb:b7:2a:ee:69:6f:bc:8a:6c:1d: e6:43:9a:6d:f6:17:59:67:8e:77:25:64:51:23:27:73:cc:cd: 36:67:7b:6e:af:38:5c:9e:4f:cf:4d:a0:15:48:92:e8:a9:47: f5:5c:6c:18:c1:5e:bc:7d:6d:bb:1f:1c:11:f4:9c:95:aa:b1: 55:45:ce:87:4f:6e:e2:ef:78:69:22:1c:fd:5e:f9:53:8c:36: 00:51:0e:b3:69:4f:01:cc:74:49:54:53:f5:29:a0:a7:11:e6: 5a:87:dd:bf:ff:a6:64:e5:3c:2c:80:95:16:7e:c7:59:03:04: 43:e7:74:01:1a:70:04:ab:98:00:b3:4c:ef:23:7c:3d:45:68: d7:ef:5f:fb:e1:66:b8:03:b8:1a:e6:21:0b:41:1f:c5:fa:6c: 6b:6b:ab:b5:4e:a9:3d:d9:54:47:23:d3:60:30:94:8a:16:69: 3c:2f:9d:4e:9d:93:c4:dd:e7:1c:a3:91:39:fc:39:b5:2b:b6: c4:67:34:87:3b:6e:1b:4e:27:9e:99:8c:64:04:6e:a5:7d:96: c2:3d:a9:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mnvEkpCqQocuC/yF9C+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZjM3NDZlMGM2YjA1MzE0N2I1MmE0ZWY0MGM0OGM3MGE3 ZjFjZDgwHhcNMjYwMTI2MDAwMDU1WhcNMjYwMTI3MDAwMDU1WjAzMTEwLwYDVQQD EyhmM2M1NzcyMDU2ZWQxODVjODNkYzBkOTJhMDRhNmE0YmU0YTdlY2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs97aNFuzj6cAujX1eJSk8vz9sk7z D+zSiusAYB7knQk2z3EVinu9Y4QT8q20CbL+y6MB9y39YoEsoPdbdrx9KP1FQKA3 1CRPbSTQC3VsGikMMW4Aq/oqTTv3oMM+yL8Tq5uvJJKWdGZMiIpOIHqgCYkiw1lc jNSQTDvFCVHre2mPIAk7Vpx3y/VZeY66Qi6rqH0G1+pnmTuBz0xyclxLvC4LETsI +nQzXmTIT7SGo8Wc+Q6DX7JPaEwi8l6Tr9BhM/1jvK7S2PloiMC6R0f4YQvVPbo6 dCCXnOcXsmU9zGMxRxM9A7t8mXebW1vpScwPXoj9J262wxcXV7+ZgYFf3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPFdyBW7Rhcg9wNkqBKakvkp+zgMB8GA1UdIwQY MBaAFMjzdG4MawUxR7UqTvQMSMcKfxzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVBOMGJneHJCVEZIdFNwTzlBeEl4d3BfSE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82NzhhOTYtNjk1Yy00MTg3LTkwOTMt MTBjNTQ2ZDc5YmE1LzEveVBOMGJneHJCVEZIdFNwTzlBeEl4d3BfSE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi82NzhhOTYtNjk1Yy00MTg3LTkwOTMtMTBjNTQ2ZDc5YmE1 LzEveVBOMGJneHJCVEZIdFNwTzlBeEl4d3BfSE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkQ7/mc4 iI7p8FJ0UwmPl3wmHF8vTvQbDcAX31gSYioWAZcw5p/nfLsrCuLLtyruaW+8imwd 5kOabfYXWWeOdyVkUSMnc8zNNmd7bq84XJ5Pz02gFUiS6KlH9VxsGMFevH1tux8c EfSclaqxVUXOh09u4u94aSIc/V75U4w2AFEOs2lPAcx0SVRT9SmgpxHmWofdv/+m ZOU8LICVFn7HWQMEQ+d0ARpwBKuYALNM7yN8PUVo1+9f++FmuAO4GuYhC0Efxfps a2urtU6pPdlURyPTYDCUihZpPC+dTp2TxN3nHKOROfw5tSu2xGc0hztuG04nnpmM ZARupX2Wwj2pZw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:40:33 2026 by rpki-client