This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft File: YRuftFY550kvKzYx9kD2q5r7YpA.mft (raw, json) Hash identifier: m4amuk1OEPhi+/Z21l2R/Yk3LeA/m9ZwmCsm3lJY7cY= Subject key identifier: 5B:0E:3A:A3:CB:D9:88:B6:2D:DE:0F:0E:CB:ED:DD:32:FC:79:6E:01 Authority key identifier: 61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90 Certificate issuer: /CN=611b9fb45639e7492f2b3631f640f6ab9afb6290 Certificate serial: 019BF50796B0EBBB68BD12577E084558F12D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft Manifest number: 028A Signing time: Sun 25 Jan 2026 12:01:13 +0000 Manifest this update: Sun 25 Jan 2026 12:01:13 +0000 Manifest next update: Mon 26 Jan 2026 12:01:13 +0000 Files and hashes: 1: 3-z9WVuuMK0MQ-O8ytcjQmUulmQ.roa (hash: QlGcIApQxI3USCeOW3H47w4RX3p+KD+avqAifqggosI=) 2: YRuftFY550kvKzYx9kD2q5r7YpA.crl (hash: M260z7w0vknCCY3KXeTSI9AsQCaE1u6TOVheUnZHIX4=) 3: eYKGIFqmXxArxKrm4dHPlBfdDkQ.roa (hash: OjAQmRNCdlZ/ho0O0hjfQYZhYcPqc7W3tUBnTWwRO0M=) 4: i8JTjG8kAd1c1HqV5LoJhukgMAE.roa (hash: u27SpMwjFzAC7wQTCgUg0cr2wavmv6lyaTijyCZtCvI=) 5: uKdnnQsot7mlRO752cNll6GISRQ.roa (hash: VbgboVS4OB0UdrRSp+d5djlaTMUsF7uI2qR/6y5b4JE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:96:b0:eb:bb:68:bd:12:57:7e:08:45:58:f1:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611b9fb45639e7492f2b3631f640f6ab9afb6290 Validity Not Before: Jan 25 12:01:13 2026 GMT Not After : Jan 26 12:01:13 2026 GMT Subject: CN=5b0e3aa3cbd988b62dde0f0ecbeddd32fc796e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:dc:7c:92:be:25:f6:e8:60:9e:44:1c:93: 25:2e:e2:65:4a:68:1b:1a:44:fe:31:92:e6:de:4c: 00:60:0d:85:94:e0:1b:8a:9c:e7:e5:96:91:72:3f: 10:19:35:47:52:da:6a:53:df:b6:5e:ed:82:cf:34: fa:56:43:22:57:2f:9a:92:37:a4:e2:6c:f2:78:be: 48:98:ff:6f:86:7e:04:90:c4:55:af:77:62:73:0f: 65:f0:5f:0c:4e:fd:03:52:f3:ae:b5:1b:ca:35:d2: c0:bd:55:70:37:71:d5:1d:20:de:33:ca:3b:02:65: 14:63:44:ec:ea:d6:db:3f:b5:d0:b1:c6:8b:ab:06: 8d:52:e8:cd:d6:ea:76:1a:9e:61:67:6a:bc:e0:21: 99:d7:ba:b1:40:6b:77:7e:72:50:78:b7:81:f6:78: d2:fc:05:9a:e4:4b:8e:b1:88:74:f9:be:0b:50:f4: e4:1b:b7:16:35:7f:85:6d:ac:be:bd:ff:69:d5:9f: ce:a5:c6:e2:f2:37:32:68:c1:bb:7a:54:58:e2:73: ba:4a:bf:1c:42:d5:1a:4f:94:ff:fb:77:8a:82:69: 1b:9a:48:cb:64:82:75:3c:c4:a4:dd:da:35:74:c9: 07:a6:67:28:3b:f1:3b:46:5b:cd:a8:99:e7:e6:f1: 5a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0E:3A:A3:CB:D9:88:B6:2D:DE:0F:0E:CB:ED:DD:32:FC:79:6E:01 X509v3 Authority Key Identifier: keyid:61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:68:b6:2c:3a:69:da:c2:9b:85:d7:63:1c:dd:8e:e3:1b:5e: 9c:2c:49:e1:fc:56:0c:7b:e6:95:1f:b3:81:8a:70:a9:c7:83: 0f:45:81:6f:05:41:b2:87:cb:e0:d9:5f:1a:6f:38:4c:ac:7b: 90:fe:3f:42:0c:01:2a:65:5b:12:50:92:6a:aa:05:34:d8:87: 93:0f:d8:0a:c6:70:b6:0b:1c:b6:57:9a:87:fb:59:91:ef:15: ae:ea:09:1d:74:b9:ba:97:57:c8:d2:28:08:ef:71:33:be:5e: 8f:11:a5:cb:8d:93:b2:9d:45:9c:a9:2c:1c:00:a7:9f:aa:7f: 12:b6:1c:6c:b4:51:c8:a9:d0:5c:98:63:44:7d:36:c5:ee:1a: b3:28:a2:67:2e:bb:81:e6:12:2f:5e:67:cd:a1:44:e8:05:83: 9c:67:c6:c2:d1:f2:64:7c:ee:40:2b:cb:a4:71:a8:82:1f:17: a4:68:91:8d:6a:1f:64:a8:9c:f5:39:0c:f6:2c:8e:40:25:e9: f6:00:9a:b3:f8:a5:df:35:8d:87:8a:d2:ab:1e:a3:7e:29:f6: 1f:4c:3d:3c:b1:51:b1:aa:9d:93:5b:29:b1:ac:b5:80:4b:66: 4f:fd:4c:3a:ba:0a:41:fc:92:4d:6f:df:86:40:78:55:93:32: 49:4d:73:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B5aw67tovRJXfghFWPEtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMWI5ZmI0NTYzOWU3NDkyZjJiMzYzMWY2NDBmNmFiOWFm YjYyOTAwHhcNMjYwMTI1MTIwMTEzWhcNMjYwMTI2MTIwMTEzWjAzMTEwLwYDVQQD Eyg1YjBlM2FhM2NiZDk4OGI2MmRkZTBmMGVjYmVkZGQzMmZjNzk2ZTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6jcfJK+JfboYJ5EHJMlLuJlSmgb GkT+MZLm3kwAYA2FlOAbipzn5ZaRcj8QGTVHUtpqU9+2Xu2CzzT6VkMiVy+akjek 4mzyeL5ImP9vhn4EkMRVr3dicw9l8F8MTv0DUvOutRvKNdLAvVVwN3HVHSDeM8o7 AmUUY0Ts6tbbP7XQscaLqwaNUujN1up2Gp5hZ2q84CGZ17qxQGt3fnJQeLeB9njS /AWa5EuOsYh0+b4LUPTkG7cWNX+Fbay+vf9p1Z/Opcbi8jcyaMG7elRY4nO6Sr8c QtUaT5T/+3eKgmkbmkjLZIJ1PMSk3do1dMkHpmcoO/E7RlvNqJnn5vFa5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsOOqPL2Yi2Ld4PDsvt3TL8eW4BMB8GA1UdIwQY MBaAFGEbn7RWOedJLys2MfZA9qua+2KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVJ1ZnRGWTU1MGt2S3pZeDlrRDJxNXI3WXBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi84NDgyZDItNzIzMy00MTc3LTk5MmYt N2Q3NWUyYjFhN2I5LzEvWVJ1ZnRGWTU1MGt2S3pZeDlrRDJxNXI3WXBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi84NDgyZDItNzIzMy00MTc3LTk5MmYtN2Q3NWUyYjFhN2I5 LzEvWVJ1ZnRGWTU1MGt2S3pZeDlrRDJxNXI3WXBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2i2LDpp 2sKbhddjHN2O4xtenCxJ4fxWDHvmlR+zgYpwqceDD0WBbwVBsofL4NlfGm84TKx7 kP4/QgwBKmVbElCSaqoFNNiHkw/YCsZwtgsctleah/tZke8VruoJHXS5updXyNIo CO9xM75ejxGly42Tsp1FnKksHACnn6p/ErYcbLRRyKnQXJhjRH02xe4asyiiZy67 geYSL15nzaFE6AWDnGfGwtHyZHzuQCvLpHGogh8XpGiRjWofZKic9TkM9iyOQCXp 9gCas/il3zWNh4rSqx6jfin2H0w9PLFRsaqdk1spsay1gEtmT/1MOroKQfySTW/f hkB4VZMySU1z6Q== -----END CERTIFICATE-----Generated at Sun Jan 25 18:15:09 2026 by rpki-client