This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft File: YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft (raw, json) Hash identifier: kuMuqyqcJusQbi1XnupplMhfMD/OCT62R9VyXf83RTc= Subject key identifier: D8:BA:FB:73:57:3C:18:36:F7:0B:AA:3E:98:05:52:4A:84:25:73:25 Authority key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98 Certificate issuer: /CN=6149cbba3e6629beaebfb69668678ada51744898 Certificate serial: 019BF83FD7A3F3C586FD457FA02096255ED5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft Manifest number: 1512 Signing time: Mon 26 Jan 2026 03:01:32 +0000 Manifest this update: Mon 26 Jan 2026 03:01:32 +0000 Manifest next update: Tue 27 Jan 2026 03:01:32 +0000 Files and hashes: 1: YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl (hash: TOkB5GKga0UatGZjDxXjNFHueh9vIDcMBjWr07Qbd4A=) 2: v872mIxxwSGV2ha6Yd9jq9CMUao.roa (hash: 1G9sBjvfPqj7U0dttH4sUsWBNP9ecKYoKzenyr22mAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:d7:a3:f3:c5:86:fd:45:7f:a0:20:96:25:5e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6149cbba3e6629beaebfb69668678ada51744898 Validity Not Before: Jan 26 03:01:32 2026 GMT Not After : Jan 27 03:01:32 2026 GMT Subject: CN=d8bafb73573c1836f70baa3e9805524a84257325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f3:a0:e4:6d:0f:b3:f0:1d:c1:df:23:30:83: e1:23:ee:fc:93:38:ee:3d:75:38:4d:e8:7f:7f:d7: 9d:4a:0f:17:d8:ec:04:ff:ff:1b:ec:cf:c4:15:c8: 84:07:63:ca:27:4c:77:6b:d6:d3:41:7f:67:32:5c: 24:16:26:1c:d3:e4:e2:47:e2:db:64:c4:dc:89:b4: 47:6e:03:67:ae:b5:a6:c9:88:ff:4b:b9:78:d4:3a: ba:42:f4:63:34:c4:fd:de:0a:e5:16:8a:c9:32:60: ba:c3:49:85:4a:6e:0e:59:8a:6e:d0:59:41:59:ef: 96:31:a6:e9:2b:29:eb:e7:20:03:7b:14:cc:6e:cc: 7c:2b:f7:5b:8b:54:d8:4f:46:d8:fd:f7:df:89:2d: 30:d3:15:e2:3b:af:1a:63:7d:7c:d5:3e:6a:98:0b: f7:af:1e:af:c3:3c:e1:8f:23:5d:95:2a:92:2c:ff: 65:ab:ff:c1:43:ea:d7:e4:e0:b5:2e:21:f9:71:e7: 6b:eb:a9:7f:f8:aa:9b:c4:bf:2c:27:56:07:5b:b2: 54:4b:ae:a5:c2:78:c0:d6:52:a2:d1:a4:95:7c:bc: 28:9f:18:50:00:ff:37:7b:04:2d:6d:a9:5f:d5:6d: 66:87:45:8a:f9:05:5d:cc:6d:54:51:43:7c:1d:bb: a8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BA:FB:73:57:3C:18:36:F7:0B:AA:3E:98:05:52:4A:84:25:73:25 X509v3 Authority Key Identifier: keyid:61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:bf:85:9c:86:fe:0f:e6:ee:08:8e:7f:0f:74:05:8b:7d:1d: 2c:cc:9b:47:f2:e7:86:49:9f:cd:79:f3:a2:89:61:06:27:ed: cc:39:cc:ea:a4:85:c3:0c:46:ec:b2:88:d2:52:a1:8b:fb:5a: 00:2a:a4:ed:31:9c:42:a4:69:14:82:93:c7:32:73:12:0e:16: 45:b1:9e:4b:e1:53:7b:7d:e7:47:d3:fd:01:e9:2f:9b:f9:83: d7:80:81:09:ae:c8:63:22:b8:3b:8b:9f:94:10:a7:04:89:51: 37:1d:c9:e8:21:e4:97:07:6c:40:72:30:96:79:c4:ab:bc:37: 45:35:ea:39:30:64:6d:a4:70:42:db:ee:68:7d:dc:66:c4:7e: 6c:41:4f:64:07:3d:42:b2:4c:37:e3:df:69:a0:a1:d1:8a:dd: 17:a1:03:52:cd:d1:9a:d2:ba:3c:8f:3b:ea:92:4c:b1:01:d5: 58:fe:f1:c6:cb:00:e9:c9:5f:69:79:0e:8c:8b:03:cd:c5:a9: 96:4b:e1:b3:d2:40:92:67:99:9a:96:73:7c:54:ca:bf:09:6d: 64:2b:ad:5c:99:0b:b9:2e:91:11:cb:99:53:4a:33:25:a8:c9: 10:ad:cc:f6:95:7a:91:a2:b9:52:d3:74:96:89:b2:86:c3:6e: 86:8f:f6:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P9ej88WG/UV/oCCWJV7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNDljYmJhM2U2NjI5YmVhZWJmYjY5NjY4Njc4YWRhNTE3 NDQ4OTgwHhcNMjYwMTI2MDMwMTMyWhcNMjYwMTI3MDMwMTMyWjAzMTEwLwYDVQQD EyhkOGJhZmI3MzU3M2MxODM2ZjcwYmFhM2U5ODA1NTI0YTg0MjU3MzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/Og5G0Ps/Adwd8jMIPhI+78kzju PXU4Teh/f9edSg8X2OwE//8b7M/EFciEB2PKJ0x3a9bTQX9nMlwkFiYc0+TiR+Lb ZMTcibRHbgNnrrWmyYj/S7l41Dq6QvRjNMT93grlForJMmC6w0mFSm4OWYpu0FlB We+WMabpKynr5yADexTMbsx8K/dbi1TYT0bY/fffiS0w0xXiO68aY3181T5qmAv3 rx6vwzzhjyNdlSqSLP9lq//BQ+rX5OC1LiH5cedr66l/+KqbxL8sJ1YHW7JUS66l wnjA1lKi0aSVfLwonxhQAP83ewQtbalf1W1mh0WK+QVdzG1UUUN8HbuoXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNi6+3NXPBg29wuqPpgFUkqEJXMlMB8GA1UdIwQY MBaAFGFJy7o+Zim+rr+2lmhnitpRdEiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yM2Y1MzItZmU4Ni00MTk4LThjM2It NGQ0M2Y2NmFiNzMxLzEvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yM2Y1MzItZmU4Ni00MTk4LThjM2ItNGQ0M2Y2NmFiNzMx LzEvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKr+FnIb+ D+buCI5/D3QFi30dLMybR/LnhkmfzXnzoolhBiftzDnM6qSFwwxG7LKI0lKhi/ta ACqk7TGcQqRpFIKTxzJzEg4WRbGeS+FTe33nR9P9Aekvm/mD14CBCa7IYyK4O4uf lBCnBIlRNx3J6CHklwdsQHIwlnnEq7w3RTXqOTBkbaRwQtvuaH3cZsR+bEFPZAc9 QrJMN+PfaaCh0YrdF6EDUs3RmtK6PI876pJMsQHVWP7xxssA6clfaXkOjIsDzcWp lkvhs9JAkmeZmpZzfFTKvwltZCutXJkLuS6REcuZU0ozJajJEK3M9pV6kaK5UtN0 lomyhsNuho/2Sw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:36 2026 by rpki-client