This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json) Hash identifier: cKOxnWABDT5Wjf6CNIJ4pAiUAFIxwAdiwnltQ4ahF5U= Subject key identifier: 20:51:3D:07:A1:DC:FC:75:A3:4D:69:FD:4E:E6:56:8A:26:C1:0D:53 Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7 Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7 Certificate serial: 019BF72CC17EAADA026322ED5DC299A8CFD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft Manifest number: 0809 Signing time: Sun 25 Jan 2026 22:01:03 +0000 Manifest this update: Sun 25 Jan 2026 22:01:03 +0000 Manifest next update: Mon 26 Jan 2026 22:01:03 +0000 Files and hashes: 1: 8IDx5l-vl87yboZtOHYH4Nxu2oU.roa (hash: LyXSZWGcyRZHN3eXs85eKbB2V3kbw5mcU0mpJ2FqTj4=) 2: FBT-vF2CcpLQNwXtIK41eliOmdU.roa (hash: d7F1API+Zjp2HL3r+LaBPUl+vvTa147uB3W0MbbAhyY=) 3: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: zS5bGa+3pELnQ0rr5dDc65rd+oAHTAgzCEu0ucJqDk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:c1:7e:aa:da:02:63:22:ed:5d:c2:99:a8:cf:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7 Validity Not Before: Jan 25 22:01:03 2026 GMT Not After : Jan 26 22:01:03 2026 GMT Subject: CN=20513d07a1dcfc75a34d69fd4ee6568a26c10d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b4:16:78:d4:83:13:37:c2:aa:91:e4:da:3c: cb:dd:26:f1:c3:77:56:ab:c0:68:fe:02:f1:04:ac: 6d:1f:69:59:96:ab:70:3d:e0:ee:e7:a8:cb:3f:0a: 5b:e7:f9:7c:4c:51:31:ea:63:da:21:bb:c6:3b:1b: 84:88:39:ea:27:dc:eb:b4:b0:5d:50:ed:28:6b:db: b0:4c:dc:d5:b9:48:47:4a:1c:6b:48:9c:5d:9c:75: 73:0c:87:50:36:b2:c9:2c:98:f6:21:a9:20:af:a8: ab:f8:19:b0:9d:94:41:3c:1b:86:12:8e:7a:41:92: 7a:75:09:06:05:b1:ab:05:03:dc:f7:ec:7b:8d:77: 7a:08:fb:28:e1:f4:d3:84:a0:d1:0a:47:0b:06:86: 66:c3:21:2e:9e:b5:91:0e:1c:bc:80:2c:3f:bd:63: ba:94:88:f9:d5:40:12:40:8d:a4:48:dd:3e:28:df: 76:4b:87:f4:67:c9:64:49:a1:eb:ee:31:1d:c1:12: 5a:a4:db:dd:9d:25:4c:5e:6f:a9:32:46:b8:8a:c5: d1:9d:ed:a3:25:f3:49:44:84:8f:67:ef:0a:c0:4a: 05:77:74:e4:f2:d3:b9:60:b3:a3:f8:7f:c5:53:3c: e3:7d:dc:9b:a6:85:0a:c5:3c:3c:e3:99:35:dc:96: cc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:51:3D:07:A1:DC:FC:75:A3:4D:69:FD:4E:E6:56:8A:26:C1:0D:53 X509v3 Authority Key Identifier: keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:1e:90:47:af:af:cb:a6:01:35:80:53:fd:3d:24:a0:5b:7e: 8f:38:50:5d:c3:5f:7b:a6:70:8d:ab:84:bb:a2:d3:12:ab:e0: cc:59:40:8d:9e:ce:83:80:08:13:e8:9a:f5:09:21:36:b8:64: 97:c3:bd:8b:1e:ba:7a:55:b2:50:8a:ed:29:32:84:7c:ed:b1: e4:32:c5:41:e3:af:b6:0e:20:95:df:38:47:82:ab:43:d1:0b: f8:51:9a:8f:08:06:f3:2b:0e:d1:74:23:d0:d4:30:bf:72:a1: af:0f:a9:af:70:62:1f:08:6e:07:00:ed:b3:f9:3f:94:c7:68: 82:d5:9c:f3:f4:ac:39:33:a6:50:ee:67:73:d3:1f:48:99:62: 45:d1:16:83:e9:1e:0a:1c:ae:53:da:8c:d4:0e:9e:62:d5:e9: 11:b5:7e:ec:66:49:06:7b:df:b5:20:17:9b:87:be:d8:c1:40: a1:56:26:12:ff:0f:02:6b:e0:c1:88:a0:fb:d8:4c:29:d1:8d: bd:fb:00:e6:96:cb:df:80:d6:da:a6:9a:22:f4:4f:27:7f:d6: f4:c4:dc:c4:b0:e9:27:d9:3a:d1:82:e8:47:a3:6b:e0:a4:d9: a8:77:8d:3d:e6:43:88:cd:3b:a0:b9:82:7a:57:6b:36:9d:73: 4f:46:90:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LMF+qtoCYyLtXcKZqM/VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZjIzYzliN2IzZWEwNTQ5MTQyYjcwMTU5NzcwNmZjN2E2 Mzg1ZTcwHhcNMjYwMTI1MjIwMTAzWhcNMjYwMTI2MjIwMTAzWjAzMTEwLwYDVQQD EygyMDUxM2QwN2ExZGNmYzc1YTM0ZDY5ZmQ0ZWU2NTY4YTI2YzEwZDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorQWeNSDEzfCqpHk2jzL3Sbxw3dW q8Bo/gLxBKxtH2lZlqtwPeDu56jLPwpb5/l8TFEx6mPaIbvGOxuEiDnqJ9zrtLBd UO0oa9uwTNzVuUhHShxrSJxdnHVzDIdQNrLJLJj2Iakgr6ir+BmwnZRBPBuGEo56 QZJ6dQkGBbGrBQPc9+x7jXd6CPso4fTThKDRCkcLBoZmwyEunrWRDhy8gCw/vWO6 lIj51UASQI2kSN0+KN92S4f0Z8lkSaHr7jEdwRJapNvdnSVMXm+pMka4isXRne2j JfNJRISPZ+8KwEoFd3Tk8tO5YLOj+H/FUzzjfdybpoUKxTw845k13JbM4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBRPQeh3Px1o01p/U7mVoomwQ1TMB8GA1UdIwQY MBaAFMnyPJt7PqBUkUK3AVl3Bvx6Y4XnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWZJOG0zcy1vRlNSUXJjQldYY0dfSHBqaGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jY2M3M2ItOWM4Ny00NWQ1LTgxYzQt M2Y5MjJiNDAxNjhhLzEveWZJOG0zcy1vRlNSUXJjQldYY0dfSHBqaGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9jY2M3M2ItOWM4Ny00NWQ1LTgxYzQtM2Y5MjJiNDAxNjhh LzEveWZJOG0zcy1vRlNSUXJjQldYY0dfSHBqaGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANB6QR6+v y6YBNYBT/T0koFt+jzhQXcNfe6ZwjauEu6LTEqvgzFlAjZ7Og4AIE+ia9QkhNrhk l8O9ix66elWyUIrtKTKEfO2x5DLFQeOvtg4gld84R4KrQ9EL+FGajwgG8ysO0XQj 0NQwv3Khrw+pr3BiHwhuBwDts/k/lMdogtWc8/SsOTOmUO5nc9MfSJliRdEWg+ke ChyuU9qM1A6eYtXpEbV+7GZJBnvftSAXm4e+2MFAoVYmEv8PAmvgwYig+9hMKdGN vfsA5pbL34DW2qaaIvRPJ3/W9MTcxLDpJ9k60YLoR6Nr4KTZqHeNPeZDiM07oLmC eldrNp1zT0aQsQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:05 2026 by rpki-client