This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft File: yalITKcIq3cesduQuvyKEUwsPXk.mft (raw, json) Hash identifier: vXJ4M5o8yQ8jaqTAst/3tZo0fbaE83EjBB5aBcFL9CE= Subject key identifier: 91:1B:56:F5:8B:C4:7A:C6:D7:BA:3B:D0:C6:A0:80:76:D9:E4:D9:ED Authority key identifier: C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79 Certificate issuer: /CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79 Certificate serial: 019BF53F0C33ACFD0507FD47245FB8C58635 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 13:01:48 +0000 Manifest this update: Sun 25 Jan 2026 13:01:48 +0000 Manifest next update: Mon 26 Jan 2026 13:01:48 +0000 Files and hashes: 1: 3eahbNs7sLSlMwMQAPIK4WlF5S0.roa (hash: iShcDJZ7gmNtw4FSGePEabrCqu38c4kHe0CrQJ2Q7ow=) 2: MuKPEjpSeKLvjqZfVopVa-G44-Y.roa (hash: gXY94gXYWU1Pqibv85vvI+18JY770F42380MRYt28Gc=) 3: yalITKcIq3cesduQuvyKEUwsPXk.crl (hash: WXXKKMuJDB20RlW1nc/sIzIyqcQGNXy1GpT7rA0GR7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3f:0c:33:ac:fd:05:07:fd:47:24:5f:b8:c5:86:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79 Validity Not Before: Jan 25 13:01:48 2026 GMT Not After : Jan 26 13:01:48 2026 GMT Subject: CN=911b56f58bc47ac6d7ba3bd0c6a08076d9e4d9ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d4:ca:87:82:7c:a0:8f:8a:63:07:65:bc:95: 42:90:1a:7c:b9:1b:dc:7d:ea:67:66:ed:9a:dd:66: 77:8f:d8:24:b2:56:e0:fc:87:15:e2:cf:9e:6d:99: fb:90:26:db:66:6d:79:e1:03:0c:fa:59:5b:20:cf: 6f:34:3a:7f:cd:ec:f7:9b:b0:3e:3d:62:8f:81:5a: 53:36:18:c6:ea:5d:fe:a7:bc:f2:7c:48:d4:dd:2d: 2c:d7:d1:8f:d3:61:58:65:62:33:8f:cf:73:b0:53: 92:15:7c:8c:ba:18:0e:44:aa:61:58:ba:00:f0:b3: e8:b2:3a:d0:c8:ac:b8:dc:d5:e9:b9:70:59:ea:c4: cb:f5:6c:7e:32:aa:c5:7f:15:ee:1e:4a:b8:8d:d2: a6:87:99:b8:dc:e9:98:6d:5b:e5:fa:1e:eb:36:2a: 70:06:03:3e:a9:7f:68:e0:0c:a5:ba:00:ac:83:fd: 58:df:97:8e:57:54:3c:75:06:b2:fa:67:55:cd:38: 63:dc:85:32:51:2d:17:96:ec:e5:6c:0f:a8:9c:c1: 28:89:c2:03:1b:93:02:78:ad:e9:47:88:91:8f:50: fd:01:d6:7a:91:99:df:e2:e9:3a:81:c6:12:23:f2: 9c:27:18:22:96:a0:04:f0:a8:fd:5c:11:2b:3a:3f: 84:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1B:56:F5:8B:C4:7A:C6:D7:BA:3B:D0:C6:A0:80:76:D9:E4:D9:ED X509v3 Authority Key Identifier: keyid:C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ba:af:e3:c5:0c:fa:7e:cc:d1:6f:4e:74:0a:08:00:9f:d6: 06:2f:75:f9:3e:57:e7:c9:7b:4e:a0:3c:e7:30:4c:37:69:57: 0c:d5:9a:0a:19:7c:91:b7:e9:ac:64:ae:63:52:f8:50:71:33: 36:23:89:95:9f:e2:0a:55:2b:45:a7:70:2d:5d:7b:98:db:d5: 3a:50:34:5a:41:37:f5:3b:88:41:d4:a1:f1:dd:65:4f:a6:ff: 0d:a1:6a:01:06:0c:73:36:ac:fb:a4:5d:dc:6f:10:dc:51:06: b8:81:50:22:2f:82:b3:08:e8:f1:7d:29:dc:68:d2:5c:e4:b0: 9c:5d:df:4f:85:9c:f4:18:e1:22:2b:d4:98:32:88:fb:bb:02: d7:d3:33:f8:37:e6:3f:bc:1e:2d:76:db:eb:5c:ca:ff:6f:a0: ed:af:28:8f:72:80:7c:98:d0:bb:36:61:9f:b0:84:c5:b2:c9: d7:cf:9b:09:61:f8:3e:6e:82:5a:2e:9c:10:20:de:8d:d6:63: 68:f4:9a:37:e5:4e:d0:e8:65:1c:01:da:f7:e0:2d:bb:19:75: ee:01:16:1c:49:3c:9f:54:14:58:8f:40:9a:07:47:e7:c2:7b: 4a:a1:47:97:da:c4:73:ed:d2:2d:51:fe:c8:37:09:10:57:3f: c9:3c:f0:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PwwzrP0FB/1HJF+4xYY1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YTk0ODRjYTcwOGFiNzcxZWIxZGI5MGJhZmM4YTExNGMy YzNkNzkwHhcNMjYwMTI1MTMwMTQ4WhcNMjYwMTI2MTMwMTQ4WjAzMTEwLwYDVQQD Eyg5MTFiNTZmNThiYzQ3YWM2ZDdiYTNiZDBjNmEwODA3NmQ5ZTRkOWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldTKh4J8oI+KYwdlvJVCkBp8uRvc fepnZu2a3WZ3j9gkslbg/IcV4s+ebZn7kCbbZm154QMM+llbIM9vNDp/zez3m7A+ PWKPgVpTNhjG6l3+p7zyfEjU3S0s19GP02FYZWIzj89zsFOSFXyMuhgORKphWLoA 8LPosjrQyKy43NXpuXBZ6sTL9Wx+MqrFfxXuHkq4jdKmh5m43OmYbVvl+h7rNipw BgM+qX9o4AylugCsg/1Y35eOV1Q8dQay+mdVzThj3IUyUS0XluzlbA+onMEoicID G5MCeK3pR4iRj1D9AdZ6kZnf4uk6gcYSI/KcJxgilqAE8Kj9XBErOj+E7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEbVvWLxHrG17o70MaggHbZ5NntMB8GA1UdIwQY MBaAFMmpSEynCKt3HrHbkLr8ihFMLD15MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWFsSVRLY0lxM2Nlc2R1UXV2eUtFVXdzUFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yNWU2NjAtNDA1Ni00MmNjLWE4YjAt ZDA1MTdkYjI2ZGFkLzEveWFsSVRLY0lxM2Nlc2R1UXV2eUtFVXdzUFhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8yNWU2NjAtNDA1Ni00MmNjLWE4YjAtZDA1MTdkYjI2ZGFk LzEveWFsSVRLY0lxM2Nlc2R1UXV2eUtFVXdzUFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbqv48UM +n7M0W9OdAoIAJ/WBi91+T5X58l7TqA85zBMN2lXDNWaChl8kbfprGSuY1L4UHEz NiOJlZ/iClUrRadwLV17mNvVOlA0WkE39TuIQdSh8d1lT6b/DaFqAQYMczas+6Rd 3G8Q3FEGuIFQIi+Cswjo8X0p3GjSXOSwnF3fT4Wc9BjhIivUmDKI+7sC19Mz+Dfm P7weLXbb61zK/2+g7a8oj3KAfJjQuzZhn7CExbLJ18+bCWH4Pm6CWi6cECDejdZj aPSaN+VO0OhlHAHa9+Atuxl17gEWHEk8n1QUWI9AmgdH58J7SqFHl9rEc+3SLVH+ yDcJEFc/yTzw2g== -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:22 2026 by rpki-client