This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft File: rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json) Hash identifier: CHASVT8My+UEOQ2TU/zWW77D9/g0+ctpRbgnXAO2dOU= Subject key identifier: 86:EB:64:C4:72:1C:E4:D3:C1:C5:80:24:F8:95:18:30:BE:89:9F:4F Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70 Certificate issuer: /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870 Certificate serial: 019BF687FB73E784EB7D386E23A0B3EB210F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft Manifest number: 0A38 Signing time: Sun 25 Jan 2026 19:01:05 +0000 Manifest this update: Sun 25 Jan 2026 19:01:05 +0000 Manifest next update: Mon 26 Jan 2026 19:01:05 +0000 Files and hashes: 1: pfwLznvoYJJqfRCh4o2zmPQohuE.roa (hash: AfFbs4eSFCbfML477ZQsZuVVVQdsY3hUFmoLGoZMXTY=) 2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: neyBw6NzacLImxVw9h8ufnBIaPasW92MLmamEAualWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:fb:73:e7:84:eb:7d:38:6e:23:a0:b3:eb:21:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870 Validity Not Before: Jan 25 19:01:05 2026 GMT Not After : Jan 26 19:01:05 2026 GMT Subject: CN=86eb64c4721ce4d3c1c58024f8951830be899f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ae:84:24:2b:be:07:e2:f7:72:90:5d:e0:3d: ab:fa:92:8d:65:37:a8:09:62:40:d5:e9:46:58:6f: b7:9b:a3:0b:ff:86:17:a7:88:bb:28:41:ba:50:85: 4d:8b:c8:e2:ea:19:26:52:c1:c7:ed:d1:ee:b3:8f: b9:ab:56:c7:b9:0d:ce:e2:47:8a:6b:b4:01:ed:d0: 85:45:68:09:13:a2:2b:e1:a8:ce:e4:bb:7e:5a:59: e6:33:27:ac:99:36:56:48:d6:8f:8a:70:25:a8:30: 86:e5:8c:f7:b2:4b:18:3a:75:ea:5a:81:85:7f:a1: d1:80:07:41:84:35:ef:9f:88:0a:29:f8:36:cc:a1: 8f:b7:53:76:5f:9e:31:c7:3d:ff:f4:33:06:f4:61: 13:d1:a3:ea:5d:13:22:39:0f:e2:74:cc:14:67:41: ae:ba:e9:88:01:41:4e:7c:57:8d:bf:52:59:4f:0e: 96:35:6c:a5:46:6f:00:fb:d6:dd:5c:30:3e:64:a3: 18:2f:46:95:94:e9:c4:69:21:25:62:09:3f:81:27: 76:c7:db:14:fd:02:29:aa:31:a5:a4:a8:44:d1:42: 28:aa:cd:20:e9:4c:14:8b:15:9a:fa:ee:27:ac:ca: fd:3d:92:6f:0f:59:c8:cf:30:5d:c0:1e:ce:32:a1: de:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EB:64:C4:72:1C:E4:D3:C1:C5:80:24:F8:95:18:30:BE:89:9F:4F X509v3 Authority Key Identifier: keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:b3:40:56:16:6e:e6:d9:30:c6:95:a2:66:87:e7:10:1a:8f: e8:f4:dd:e7:e6:65:5f:6b:7e:67:ef:3f:db:4d:04:6e:21:d8: 85:7f:21:83:f3:e7:5d:5e:62:22:c5:9f:63:59:ca:ee:a9:d3: 50:4d:6c:08:b2:ac:71:ca:e2:e5:31:ff:3d:82:93:b0:05:9f: 24:5d:18:08:a9:36:18:56:ab:f9:67:97:23:ff:93:cf:09:cc: c0:dd:6c:14:3f:29:29:56:46:b5:81:1b:27:14:bf:19:e8:3e: 08:b4:e2:da:64:49:ca:0f:b4:6f:62:10:e0:0a:8b:86:bc:72: 5a:4c:97:91:30:bc:10:97:99:9d:f9:2b:bb:35:f6:42:8c:ba: 50:c6:f9:43:5d:29:10:4d:d1:05:56:c6:04:a3:24:eb:d0:23: c8:2a:cf:00:a7:f1:82:98:75:04:83:81:52:e6:52:43:10:64: 68:61:42:d1:e7:91:19:8a:2a:af:06:22:c7:07:0c:39:0c:59: c9:eb:0d:c0:b7:9c:2d:e5:f7:41:07:07:b3:1b:88:20:fb:c5: 58:aa:42:a9:68:d9:a1:9d:5d:2a:36:df:01:a8:d7:e5:d9:c1: ea:87:fb:6c:d7:ba:f1:7d:b6:72:31:d8:f2:1e:c3:04:5d:e6: 92:8a:b7:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h/tz54TrfThuI6Cz6yEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkODgzYTg2ZTgyZDBkOTEwZmNmNTlmOGZmOWY3YmYxYTY3 MTQ4NzAwHhcNMjYwMTI1MTkwMTA1WhcNMjYwMTI2MTkwMTA1WjAzMTEwLwYDVQQD Eyg4NmViNjRjNDcyMWNlNGQzYzFjNTgwMjRmODk1MTgzMGJlODk5ZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq6EJCu+B+L3cpBd4D2r+pKNZTeo CWJA1elGWG+3m6ML/4YXp4i7KEG6UIVNi8ji6hkmUsHH7dHus4+5q1bHuQ3O4keK a7QB7dCFRWgJE6Ir4ajO5Lt+WlnmMyesmTZWSNaPinAlqDCG5Yz3sksYOnXqWoGF f6HRgAdBhDXvn4gKKfg2zKGPt1N2X54xxz3/9DMG9GET0aPqXRMiOQ/idMwUZ0Gu uumIAUFOfFeNv1JZTw6WNWylRm8A+9bdXDA+ZKMYL0aVlOnEaSElYgk/gSd2x9sU /QIpqjGlpKhE0UIoqs0g6UwUixWa+u4nrMr9PZJvD1nIzzBdwB7OMqHesQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbrZMRyHOTTwcWAJPiVGDC+iZ9PMB8GA1UdIwQY MBaAFK2IOoboLQ2RD89Z+P+fe/GmcUhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YjA1NmQtMDlmNy00ZjEyLWIxYTIt YTU2YmYwY2Y0Y2JlLzEvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83YjA1NmQtMDlmNy00ZjEyLWIxYTItYTU2YmYwY2Y0Y2Jl LzEvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbNAVhZu 5tkwxpWiZofnEBqP6PTd5+ZlX2t+Z+8/200EbiHYhX8hg/PnXV5iIsWfY1nK7qnT UE1sCLKsccri5TH/PYKTsAWfJF0YCKk2GFar+WeXI/+TzwnMwN1sFD8pKVZGtYEb JxS/Geg+CLTi2mRJyg+0b2IQ4AqLhrxyWkyXkTC8EJeZnfkruzX2Qoy6UMb5Q10p EE3RBVbGBKMk69AjyCrPAKfxgph1BIOBUuZSQxBkaGFC0eeRGYoqrwYixwcMOQxZ yesNwLecLeX3QQcHsxuIIPvFWKpCqWjZoZ1dKjbfAajX5dnB6of7bNe68X22cjHY 8h7DBF3mkoq39Q== -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:46 2026 by rpki-client