This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft File: yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json) Hash identifier: Vk/vit24PJbuQQ+NLBSAArYJay4+IAxmy1XtD73A74o= Subject key identifier: 77:66:01:57:78:FC:A4:80:30:D2:BE:49:9C:BB:38:4B:4B:67:F8:D9 Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5 Certificate issuer: /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5 Certificate serial: 019BF763B1AB840C4B0013A79D4F95A4DDAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft Manifest number: 0C0C Signing time: Sun 25 Jan 2026 23:01:04 +0000 Manifest this update: Sun 25 Jan 2026 23:01:04 +0000 Manifest next update: Mon 26 Jan 2026 23:01:04 +0000 Files and hashes: 1: kmHpE0nIsqnNjXBHZzn8ghlLUAY.roa (hash: vHtrQdMnfFyM3Hed/jGaAR/NyxOc2xl8ZPzUXZL4Gvc=) 2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: +7kIG4pfYZyHyWx9HiehqDqvqja8i/8GrtmClPJS2bE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:b1:ab:84:0c:4b:00:13:a7:9d:4f:95:a4:dd:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5 Validity Not Before: Jan 25 23:01:04 2026 GMT Not After : Jan 26 23:01:04 2026 GMT Subject: CN=7766015778fca48030d2be499cbb384b4b67f8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:79:7a:29:06:e9:17:f7:7e:c8:d6:81:5f:0e: 4d:9a:d5:79:a9:73:88:27:25:b2:3e:da:29:59:c7: cf:36:db:4a:17:d3:d2:26:a5:b2:90:ed:a4:0d:de: f3:5b:73:e5:4f:eb:6c:4a:46:6d:22:b9:6b:86:2c: 2e:cd:0e:de:28:45:db:79:28:33:3c:42:c3:32:15: d9:16:7a:e4:97:d9:93:cf:ef:15:f3:30:ef:37:66: 82:13:59:42:58:f7:ee:19:87:b8:5f:ae:34:f4:c9: d0:1e:b9:3c:dd:f6:54:ed:f1:e1:b8:b1:3c:52:99: 5a:84:70:37:cd:b3:f7:0e:fa:79:f0:23:55:5a:7b: 84:96:58:28:93:a6:02:b8:3c:7f:81:32:24:20:08: db:62:b4:2b:4d:b4:1c:49:af:be:d5:6b:82:33:b2: 1f:3b:0d:e9:3e:cf:e3:8e:e8:b9:9d:db:b8:4a:15: 9e:47:7e:0f:dd:02:7d:93:5c:19:ad:fc:b3:e6:0f: 2e:ed:1a:3e:93:83:a9:71:a0:69:55:1c:bc:dd:03: 30:ce:1e:1e:30:4e:38:af:69:75:72:94:10:43:38: c1:d4:71:be:ae:35:29:85:ab:8e:f5:cf:43:b1:fb: 5d:5d:e3:c2:dd:34:54:51:97:1d:50:f0:62:97:8c: f4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:66:01:57:78:FC:A4:80:30:D2:BE:49:9C:BB:38:4B:4B:67:F8:D9 X509v3 Authority Key Identifier: keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ae:4e:1d:6b:3c:68:06:64:ae:b7:3a:a0:01:0c:7f:92:66: a0:0a:ce:6f:3c:6b:d2:79:b5:97:88:35:ce:9b:8b:64:1f:db: 2c:03:fb:38:e3:1a:0a:eb:df:54:11:51:ad:94:42:9b:40:ad: cc:ff:97:e3:67:72:06:8b:36:84:8d:cd:c1:40:06:dc:6c:31: a3:8a:c0:8e:19:de:98:46:cb:65:36:da:25:60:0e:d6:0d:09: d9:d7:ac:0b:c2:72:b3:79:2c:29:80:e3:a5:d2:bc:d2:79:d8: 97:d8:a9:42:21:23:92:c6:ba:79:b3:ad:74:e0:41:c7:07:cb: e7:2e:ab:09:22:49:79:12:34:3f:90:25:d7:c2:22:eb:5e:f4: f4:1b:85:ee:6e:98:32:59:26:30:ca:98:46:69:07:3e:de:ec: 64:b6:de:82:16:68:24:f4:88:61:2b:57:98:9b:f3:26:34:76: dd:29:5f:8d:fd:5e:fe:21:83:61:b6:fd:b5:be:3a:0e:9d:e4: 51:59:c0:35:df:36:01:61:a5:2e:b2:e2:aa:e7:6f:d4:43:c5: 8b:f2:85:b1:bb:3a:3b:61:47:e8:54:7a:8f:40:39:21:66:dd: ac:5b:f9:07:99:3c:dc:25:89:78:1c:cf:93:d5:f2:64:6a:ff: 8e:9b:08:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y7GrhAxLABOnnU+VpN2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZjliYWFiMWExM2RmMzBlZmYwZmNkNzgwYzRiYmM1NGJj M2U2ZDUwHhcNMjYwMTI1MjMwMTA0WhcNMjYwMTI2MjMwMTA0WjAzMTEwLwYDVQQD Eyg3NzY2MDE1Nzc4ZmNhNDgwMzBkMmJlNDk5Y2JiMzg0YjRiNjdmOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3l6KQbpF/d+yNaBXw5NmtV5qXOI JyWyPtopWcfPNttKF9PSJqWykO2kDd7zW3PlT+tsSkZtIrlrhiwuzQ7eKEXbeSgz PELDMhXZFnrkl9mTz+8V8zDvN2aCE1lCWPfuGYe4X6409MnQHrk83fZU7fHhuLE8 UplahHA3zbP3Dvp58CNVWnuEllgok6YCuDx/gTIkIAjbYrQrTbQcSa++1WuCM7If Ow3pPs/jjui5ndu4ShWeR34P3QJ9k1wZrfyz5g8u7Ro+k4OpcaBpVRy83QMwzh4e ME44r2l1cpQQQzjB1HG+rjUphauO9c9DsftdXePC3TRUUZcdUPBil4z0pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdmAVd4/KSAMNK+SZy7OEtLZ/jZMB8GA1UdIwQY MBaAFMj5uqsaE98w7/D814DEu8VLw+bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZTY3NjItMDk4OS00OGVmLWE4ZDIt ZGI0ODRjY2U3MjkzLzEveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zZTY3NjItMDk4OS00OGVmLWE4ZDItZGI0ODRjY2U3Mjkz LzEveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdq5OHWs8 aAZkrrc6oAEMf5JmoArObzxr0nm1l4g1zpuLZB/bLAP7OOMaCuvfVBFRrZRCm0Ct zP+X42dyBos2hI3NwUAG3Gwxo4rAjhnemEbLZTbaJWAO1g0J2desC8Jys3ksKYDj pdK80nnYl9ipQiEjksa6ebOtdOBBxwfL5y6rCSJJeRI0P5Al18Ii61709BuF7m6Y MlkmMMqYRmkHPt7sZLbeghZoJPSIYStXmJvzJjR23Slfjf1e/iGDYbb9tb46Dp3k UVnANd82AWGlLrLiqudv1EPFi/KFsbs6O2FH6FR6j0A5IWbdrFv5B5k83CWJeBzP k9XyZGr/jpsIJA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:18 2026 by rpki-client