This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft File: 0YwgMKWXHEpUCWqO27ISEeVCFqc.mft (raw, json) Hash identifier: 08/GVQXe7B/RvkI4EFgav1kgkDFB07liDO+kk+ft8Eg= Subject key identifier: 57:A3:C6:CD:1C:9A:7A:E3:53:84:F9:8A:22:AC:AF:68:3D:06:09:FD Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7 Certificate issuer: /CN=d18c2030a5971c4a54096a8edbb21211e54216a7 Certificate serial: 019BF72C8E09791C37B0716DBEB361B5DA53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft Manifest number: 12D3 Signing time: Sun 25 Jan 2026 22:00:50 +0000 Manifest this update: Sun 25 Jan 2026 22:00:50 +0000 Manifest next update: Mon 26 Jan 2026 22:00:50 +0000 Files and hashes: 1: 0YwgMKWXHEpUCWqO27ISEeVCFqc.crl (hash: bcGopuiXrCn9f+7mT71QGUVb3OF4pWi9vTJ0BVdoNL0=) 2: lf7LSKbMZbGm86tBlbPIL648oFo.roa (hash: /K9bAYZ5YiuaJN+PfS4nniv3V/XkGZzBzxnTsucRsCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:8e:09:79:1c:37:b0:71:6d:be:b3:61:b5:da:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7 Validity Not Before: Jan 25 22:00:50 2026 GMT Not After : Jan 26 22:00:50 2026 GMT Subject: CN=57a3c6cd1c9a7ae35384f98a22acaf683d0609fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:08:d2:0b:16:6d:0c:56:cb:c7:ed:6c:bf:73: 7e:51:79:e2:30:d2:ce:ac:60:e0:a3:82:47:74:60: 63:68:8b:66:72:3e:c8:28:e1:b1:2e:bf:49:9e:31: 06:fe:53:5f:5f:26:8f:55:30:ec:02:74:31:29:70: e6:b5:96:2e:89:f7:43:75:76:ec:9c:94:7e:d3:8e: 2d:28:ed:ed:ff:21:fe:0a:a5:07:e9:c1:11:92:59: 21:0a:9c:e7:e0:96:07:a3:e9:06:75:52:e7:5e:fb: 77:4c:62:fe:49:1e:d6:ea:78:f0:54:28:13:5d:ab: d7:3e:3f:94:06:22:38:47:41:d2:9d:df:dd:90:da: 4c:7e:5c:88:cd:31:10:46:41:4c:56:37:40:c2:5e: 90:1e:18:0a:74:71:c7:73:d7:bf:51:4d:cf:8f:fa: 21:ac:f8:5a:db:49:be:37:3a:38:bf:50:70:18:95: d1:3d:32:de:fd:5e:fc:4c:bd:24:e2:8d:8f:b5:1c: 02:f5:7a:1f:0f:8e:94:bf:86:57:e8:59:be:45:98: 40:f1:5d:58:6a:a0:75:e9:32:42:64:16:2b:49:db: 75:cf:f3:b6:b5:66:81:1a:94:16:4a:50:44:95:dc: 51:6a:dc:24:d5:63:a0:7a:04:5b:2a:f3:20:21:63: 2b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A3:C6:CD:1C:9A:7A:E3:53:84:F9:8A:22:AC:AF:68:3D:06:09:FD X509v3 Authority Key Identifier: keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:be:40:4f:89:df:52:06:e6:51:37:86:6a:1b:a6:70:2f:22: e5:ed:44:b7:3a:86:aa:26:c3:42:8d:e9:7e:b6:2b:4f:ee:d4: 7d:3e:40:67:66:08:0a:7e:44:c4:88:d5:36:87:31:a3:db:7b: 9d:8b:64:1b:d4:1b:15:a5:2b:c3:ed:8a:fa:24:a6:87:6c:76: 41:f3:ac:e4:4d:b2:9f:c2:12:04:6c:6c:a9:46:8a:79:2a:82: 6b:ee:25:3e:9e:c0:ec:d2:96:1a:93:34:a6:0d:2b:fe:1c:d3: 75:ca:0e:f9:fa:95:01:8e:30:11:35:ee:b8:30:69:8c:25:d5: 91:a6:2d:99:ac:54:f5:9b:dd:77:39:f7:ea:11:bd:41:c0:04: 32:2d:29:b6:66:7f:8b:10:86:aa:9a:58:5a:fa:77:3a:55:92: 06:22:8b:6a:42:de:eb:ca:92:22:59:9f:be:20:05:02:a0:2e: 8c:b3:46:b1:b2:2b:d5:ee:64:9b:75:ad:44:c3:97:07:08:3b: d5:94:a6:5f:b0:8a:b2:de:28:49:b8:58:ec:be:60:02:a0:fb: 1d:4f:11:12:2f:9c:19:c1:d6:4f:5b:64:61:bb:2c:3a:53:68: 77:8b:91:82:ce:30:8a:b6:13:31:89:99:5a:1a:7b:15:ea:ee: 95:b0:de:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LI4JeRw3sHFtvrNhtdpTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOGMyMDMwYTU5NzFjNGE1NDA5NmE4ZWRiYjIxMjExZTU0 MjE2YTcwHhcNMjYwMTI1MjIwMDUwWhcNMjYwMTI2MjIwMDUwWjAzMTEwLwYDVQQD Eyg1N2EzYzZjZDFjOWE3YWUzNTM4NGY5OGEyMmFjYWY2ODNkMDYwOWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgjSCxZtDFbLx+1sv3N+UXniMNLO rGDgo4JHdGBjaItmcj7IKOGxLr9JnjEG/lNfXyaPVTDsAnQxKXDmtZYuifdDdXbs nJR+044tKO3t/yH+CqUH6cERklkhCpzn4JYHo+kGdVLnXvt3TGL+SR7W6njwVCgT XavXPj+UBiI4R0HSnd/dkNpMflyIzTEQRkFMVjdAwl6QHhgKdHHHc9e/UU3Pj/oh rPha20m+Nzo4v1BwGJXRPTLe/V78TL0k4o2PtRwC9XofD46Uv4ZX6Fm+RZhA8V1Y aqB16TJCZBYrSdt1z/O2tWaBGpQWSlBEldxRatwk1WOgegRbKvMgIWMrewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFejxs0cmnrjU4T5iiKsr2g9Bgn9MB8GA1UdIwQY MBaAFNGMIDCllxxKVAlqjtuyEhHlQhanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jNGYxNDQtNmU2OC00NmI4LTg1OGQt NTNhNjcyZDE0YjdhLzEvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9jNGYxNDQtNmU2OC00NmI4LTg1OGQtNTNhNjcyZDE0Yjdh LzEvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWL5AT4nf UgbmUTeGahumcC8i5e1EtzqGqibDQo3pfrYrT+7UfT5AZ2YICn5ExIjVNocxo9t7 nYtkG9QbFaUrw+2K+iSmh2x2QfOs5E2yn8ISBGxsqUaKeSqCa+4lPp7A7NKWGpM0 pg0r/hzTdcoO+fqVAY4wETXuuDBpjCXVkaYtmaxU9Zvddzn36hG9QcAEMi0ptmZ/ ixCGqppYWvp3OlWSBiKLakLe68qSIlmfviAFAqAujLNGsbIr1e5km3WtRMOXBwg7 1ZSmX7CKst4oSbhY7L5gAqD7HU8REi+cGcHWT1tkYbssOlNod4uRgs4wirYTMYmZ Whp7FerulbDe8g== -----END CERTIFICATE-----Generated at Mon Jan 26 01:08:46 2026 by rpki-client