This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json) Hash identifier: 96sz5kQaYcJ/1Vw31GQyQuqXJEGDx2yftWLQCUQGKI4= Subject key identifier: 78:4E:35:CB:55:23:D7:27:EF:53:84:9E:D4:CF:50:4C:E4:55:CA:A6 Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b Certificate serial: 019BF91B5A64A71A488C1E7C4AED3873A69C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft Manifest number: 0F1F Signing time: Mon 26 Jan 2026 07:01:17 +0000 Manifest this update: Mon 26 Jan 2026 07:01:17 +0000 Manifest next update: Tue 27 Jan 2026 07:01:17 +0000 Files and hashes: 1: WZPWcS6HaU2HzVdr7DRxZ-pjOJE.roa (hash: F58q4gWz10PJi3pePWbZTjvTAbHmgaZfqkLlGVghmM0=) 2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: OPxQCwrjyq3xML+Pt2MIkj6GV2UIM8YBmg2VTg0290I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:5a:64:a7:1a:48:8c:1e:7c:4a:ed:38:73:a6:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b Validity Not Before: Jan 26 07:01:17 2026 GMT Not After : Jan 27 07:01:17 2026 GMT Subject: CN=784e35cb5523d727ef53849ed4cf504ce455caa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c5:3c:d1:e3:ec:64:8f:bb:55:a0:d6:44:68: ac:e3:16:b9:fc:e8:b7:f9:e5:78:02:04:ea:bc:72: 46:44:56:74:65:70:c4:82:eb:db:ef:2b:ff:3c:16: 83:90:52:df:06:08:ce:10:2c:c6:b7:17:6b:e7:7c: 0f:24:aa:59:a4:ca:82:7b:fe:db:11:fc:37:32:cb: f2:3d:c5:f6:b8:5a:e8:fd:7e:b0:69:32:6d:44:21: 24:4b:b5:b0:65:0f:44:f8:87:91:df:94:ce:29:bb: 1b:1d:66:80:8b:e2:9d:59:2b:4e:de:de:29:d4:97: 07:b0:78:e1:ec:4b:35:1d:6a:59:5f:a8:3d:c7:ad: e3:9f:66:cb:18:42:bb:02:bf:32:cc:24:b7:0a:33: 0e:af:35:5d:31:76:3b:2f:18:5f:8f:1f:df:fe:41: e6:d9:fd:48:9b:8d:fd:a0:ef:f0:3e:99:5e:be:ab: 1a:37:d4:bc:1a:ec:20:82:63:9a:74:35:7e:46:58: 11:c5:28:b6:52:8d:76:b0:57:0e:a1:bc:cb:7a:19: 50:1e:88:42:f9:0c:b9:b2:1e:5b:11:0c:04:a5:7f: 5f:8e:65:a7:45:31:a9:cd:af:c8:dc:c3:4c:b6:fe: bb:a1:95:30:57:fd:ef:0d:bb:f7:bd:5c:11:c0:ff: 1c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4E:35:CB:55:23:D7:27:EF:53:84:9E:D4:CF:50:4C:E4:55:CA:A6 X509v3 Authority Key Identifier: keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:99:8a:8e:2e:12:fc:fd:0c:59:df:f7:f4:c0:64:49:56:3d: c4:05:d1:11:57:c9:5d:ff:3b:91:52:03:7b:e3:46:42:64:f3: dd:96:60:cc:a9:f3:23:4c:ab:22:26:39:09:e1:12:30:65:e7: 98:39:32:94:65:87:6a:10:10:f1:17:41:d4:e7:29:44:90:0b: a4:0d:5e:22:99:e2:33:af:9f:b3:12:37:4a:a3:98:c2:d9:af: bb:55:7d:f3:38:5d:39:81:39:81:7d:ef:69:cf:d4:37:66:3e: 99:a6:99:c6:60:a8:b5:36:97:4a:c7:aa:19:3f:8f:e1:47:a0: a9:79:35:27:cd:04:45:b5:53:eb:94:ac:83:42:50:7d:4a:2d: 64:7e:c7:0a:77:5e:66:1c:39:81:b2:32:88:09:91:89:0c:11: 53:e8:e4:c5:4e:f8:81:fd:f7:a0:a3:b6:22:08:9b:b7:b4:93: 14:64:b9:63:be:2f:da:dc:9c:63:36:15:88:16:39:bf:9e:ad: c3:96:4f:d1:08:3b:7f:69:1d:a3:ae:16:ef:f5:a6:db:f0:44: 8f:ce:de:22:6f:98:80:96:ac:cc:28:12:1d:68:ca:b4:b2:42: 3f:ca:49:35:76:f7:a1:1d:16:f5:4d:08:2f:34:10:66:94:1b: 7e:db:df:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G1pkpxpIjB58Su04c6acMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MTg0YTQ1MDViMDU3NjA1OGZkMzMzMDU5YmZmMTUzYWU2 ZWFkNWIwHhcNMjYwMTI2MDcwMTE3WhcNMjYwMTI3MDcwMTE3WjAzMTEwLwYDVQQD Eyg3ODRlMzVjYjU1MjNkNzI3ZWY1Mzg0OWVkNGNmNTA0Y2U0NTVjYWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8U80ePsZI+7VaDWRGis4xa5/Oi3 +eV4AgTqvHJGRFZ0ZXDEguvb7yv/PBaDkFLfBgjOECzGtxdr53wPJKpZpMqCe/7b Efw3MsvyPcX2uFro/X6waTJtRCEkS7WwZQ9E+IeR35TOKbsbHWaAi+KdWStO3t4p 1JcHsHjh7Es1HWpZX6g9x63jn2bLGEK7Ar8yzCS3CjMOrzVdMXY7Lxhfjx/f/kHm 2f1Im439oO/wPplevqsaN9S8GuwggmOadDV+RlgRxSi2Uo12sFcOobzLehlQHohC +Qy5sh5bEQwEpX9fjmWnRTGpza/I3MNMtv67oZUwV/3vDbv3vVwRwP8c/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhONctVI9cn71OEntTPUEzkVcqmMB8GA1UdIwQY MBaAFMgYSkUFsFdgWP0zMFm/8VOubq1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYt NWZiZjMzYWNkODNlLzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYtNWZiZjMzYWNkODNl LzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpmKji4S /P0MWd/39MBkSVY9xAXREVfJXf87kVIDe+NGQmTz3ZZgzKnzI0yrIiY5CeESMGXn mDkylGWHahAQ8RdB1OcpRJALpA1eIpniM6+fsxI3SqOYwtmvu1V98zhdOYE5gX3v ac/UN2Y+maaZxmCotTaXSseqGT+P4UegqXk1J80ERbVT65Ssg0JQfUotZH7HCnde Zhw5gbIyiAmRiQwRU+jkxU74gf33oKO2Igibt7STFGS5Y74v2tycYzYViBY5v56t w5ZP0Qg7f2kdo64W7/Wm2/BEj87eIm+YgJaszCgSHWjKtLJCP8pJNXb3oR0W9U0I LzQQZpQbftvfIA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:35:56 2026 by rpki-client