This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft File: yeG79grg631AB2JxhcXxRyP_864.mft (raw, json) Hash identifier: 0tCIyWB2y5GWlpWtv7AbLpf5qTB3RPRjp504vzRl2Mo= Subject key identifier: 8B:34:27:E9:8E:3C:77:36:50:23:37:C2:3B:38:32:15:8D:00:29:E2 Authority key identifier: C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE Certificate issuer: /CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae Certificate serial: 019BF79A73039B31E4FA9B9CBA35427DD522 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft Manifest number: 032D Signing time: Mon 26 Jan 2026 00:00:52 +0000 Manifest this update: Mon 26 Jan 2026 00:00:52 +0000 Manifest next update: Tue 27 Jan 2026 00:00:52 +0000 Files and hashes: 1: T-09y-oUF-oVxc0rII_IKxv-tqo.roa (hash: mtxY/euYWXc5W24bVNJKERPEbeVn8RYrIiTpc8jewmU=) 2: yeG79grg631AB2JxhcXxRyP_864.crl (hash: GnmuIKIcxVZauufiPHU9oirEbIii+rQqzeRs/0i7bSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:73:03:9b:31:e4:fa:9b:9c:ba:35:42:7d:d5:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae Validity Not Before: Jan 26 00:00:52 2026 GMT Not After : Jan 27 00:00:52 2026 GMT Subject: CN=8b3427e98e3c7736502337c23b3832158d0029e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a2:ec:24:6f:02:dc:7d:83:cd:69:52:93:ea: f3:2f:5a:ef:fd:31:17:4f:63:e0:ee:3d:63:ce:96: fd:dc:ad:36:b5:6b:6d:a6:81:5b:4d:39:ff:1e:9f: 0f:bb:44:15:52:ec:03:58:85:16:f0:87:f1:c6:7b: 04:84:43:d2:2b:de:69:5d:7e:35:3a:e9:fe:cc:10: 86:12:ef:ef:0a:70:3e:10:a4:86:a6:a9:44:44:e3: 5c:37:64:47:62:c1:12:2f:ae:91:a0:16:91:44:84: 48:a5:97:aa:d6:b8:20:8f:3f:1b:3d:64:cf:22:f1: f4:5d:97:53:97:20:89:66:5b:86:06:44:eb:03:84: 58:ba:21:4d:8a:2f:8a:2b:e7:06:e0:d7:ab:89:0f: a8:ac:54:09:77:cf:e1:9c:32:f8:8f:08:32:7b:b7: 0f:7d:a7:1f:12:28:0b:68:1c:1d:24:16:d4:83:b2: 76:e5:80:f3:18:95:e7:fd:ec:ef:13:8b:b6:c2:d7: d6:bf:a8:24:eb:ab:12:76:ba:80:26:83:e8:8b:45: 13:85:e2:7d:ee:b3:60:b3:ff:57:e4:a1:6d:ac:2a: f0:0e:6d:8d:e3:b6:8d:e3:ff:26:c6:21:7d:06:f6: a7:f7:9a:df:eb:03:4c:a6:fc:ab:ca:e7:c0:48:a0: d9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:34:27:E9:8E:3C:77:36:50:23:37:C2:3B:38:32:15:8D:00:29:E2 X509v3 Authority Key Identifier: keyid:C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:91:f1:de:52:f5:5e:3d:2e:6b:78:37:0b:f4:f3:48:5d:16: 43:b6:1e:38:6a:16:80:53:29:c0:bc:39:71:6b:76:a7:96:b3: 62:95:8f:da:8f:f3:78:bd:eb:05:07:7a:7b:06:a5:1c:a7:f5: 19:17:c0:fb:70:c7:c1:eb:1b:69:a5:0d:2d:84:19:eb:ac:97: c0:3e:f7:9b:b0:b2:77:a6:33:f8:b4:10:f4:88:5c:a1:f7:e9: 05:07:c5:cb:3c:14:dd:2c:27:21:ad:32:65:b9:37:c2:ea:e1: ad:0d:6e:82:b6:3d:bc:d9:df:2c:24:94:ac:1d:81:63:93:27: 34:13:1c:fc:87:9a:14:5f:1f:80:c9:74:70:da:2e:38:f0:0f: 38:70:17:b5:fe:de:2f:c8:86:58:a0:2d:05:ed:2f:d7:05:2f: 9a:f1:dd:76:0e:3c:7a:b4:15:8e:1c:fd:0f:79:f5:85:b2:e6: c2:17:d8:47:73:08:a1:13:03:10:c4:0a:f3:5f:2a:0e:4e:36: 26:1a:0b:d6:db:6c:c5:61:5c:85:98:5e:84:06:c4:97:4a:e1: 52:0a:0e:05:cb:ec:aa:cc:7f:36:be:f0:80:95:19:bc:3c:6c: 07:31:a8:f9:4a:34:c4:c7:21:06:e4:17:be:dd:29:6f:7a:5a: f4:d8:c7:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mnMDmzHk+pucujVCfdUiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZTFiYmY2MGFlMGViN2Q0MDA3NjI3MTg1YzVmMTQ3MjNm ZmYzYWUwHhcNMjYwMTI2MDAwMDUyWhcNMjYwMTI3MDAwMDUyWjAzMTEwLwYDVQQD Eyg4YjM0MjdlOThlM2M3NzM2NTAyMzM3YzIzYjM4MzIxNThkMDAyOWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6LsJG8C3H2DzWlSk+rzL1rv/TEX T2Pg7j1jzpb93K02tWttpoFbTTn/Hp8Pu0QVUuwDWIUW8IfxxnsEhEPSK95pXX41 Oun+zBCGEu/vCnA+EKSGpqlERONcN2RHYsESL66RoBaRRIRIpZeq1rggjz8bPWTP IvH0XZdTlyCJZluGBkTrA4RYuiFNii+KK+cG4NeriQ+orFQJd8/hnDL4jwgye7cP facfEigLaBwdJBbUg7J25YDzGJXn/ezvE4u2wtfWv6gk66sSdrqAJoPoi0UTheJ9 7rNgs/9X5KFtrCrwDm2N47aN4/8mxiF9Bvan95rf6wNMpvyryufASKDZWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIs0J+mOPHc2UCM3wjs4MhWNACniMB8GA1UdIwQY MBaAFMnhu/YK4Ot9QAdicYXF8Ucj//OuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kYTUyOTYtZjczYi00NWQ2LWE5NDIt ZTEyOTZiMzJhMTFmLzEveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9kYTUyOTYtZjczYi00NWQ2LWE5NDItZTEyOTZiMzJhMTFm LzEveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5Hx3lL1 Xj0ua3g3C/TzSF0WQ7YeOGoWgFMpwLw5cWt2p5azYpWP2o/zeL3rBQd6ewalHKf1 GRfA+3DHwesbaaUNLYQZ66yXwD73m7Cyd6Yz+LQQ9IhcoffpBQfFyzwU3SwnIa0y Zbk3wurhrQ1ugrY9vNnfLCSUrB2BY5MnNBMc/IeaFF8fgMl0cNouOPAPOHAXtf7e L8iGWKAtBe0v1wUvmvHddg48erQVjhz9D3n1hbLmwhfYR3MIoRMDEMQK818qDk42 JhoL1ttsxWFchZhehAbEl0rhUgoOBcvsqsx/Nr7wgJUZvDxsBzGo+Uo0xMchBuQX vt0pb3pa9NjHIQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:56 2026 by rpki-client