This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json) Hash identifier: +4wCBgo7doD42jp0L8XpOinNO4d9bHohrK/xYJbGOEA= Subject key identifier: 05:52:95:CE:CC:A0:34:98:53:ED:80:69:C9:9F:AC:14:47:DD:8D:43 Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e Certificate serial: 019BF5070AA0798E1BDA5A3FFB741E5CFC75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft Manifest number: 0ED0 Signing time: Sun 25 Jan 2026 12:00:37 +0000 Manifest this update: Sun 25 Jan 2026 12:00:37 +0000 Manifest next update: Mon 26 Jan 2026 12:00:37 +0000 Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: Cm2wtWA6oYj1WuezjZa9cWfiQ0C5a+sPgMXsQMinaVE=) 2: XpDHF6qNAfRig2NmPZIIBwNiNAU.roa (hash: 9bFU4KF8zp5CMrxC2WFBFW2SFIScv756NVWyJZFeI1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:0a:a0:79:8e:1b:da:5a:3f:fb:74:1e:5c:fc:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e Validity Not Before: Jan 25 12:00:37 2026 GMT Not After : Jan 26 12:00:37 2026 GMT Subject: CN=055295cecca0349853ed8069c99fac1447dd8d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c5:01:4f:5c:18:25:0d:fa:47:69:d3:1e:80: 4d:b5:3a:cc:77:8a:7a:56:01:55:c3:50:00:dc:8f: 1b:24:ae:d6:78:7a:32:ff:8f:e5:c7:62:70:9c:5c: 01:78:6a:85:9f:82:c3:7f:c6:61:35:c2:03:c1:9d: c1:56:f8:7b:a4:79:ef:61:58:4a:af:ce:37:be:26: 39:13:fc:30:f6:93:95:0b:36:14:c7:5d:0d:5f:d1: d5:e1:f3:e4:00:04:b9:a0:60:0d:31:55:85:40:e3: 0d:94:5c:6f:98:a2:41:6e:60:b3:61:c4:d1:1d:bc: f5:33:39:69:b5:69:a3:07:ef:4d:c2:22:9b:0d:8b: 0d:e8:60:68:cc:18:2e:f4:46:10:d2:15:32:1a:df: 73:99:10:49:03:cd:d0:14:40:23:d7:d5:5e:e3:43: 6e:8c:00:20:93:8c:cf:4e:15:8f:51:e7:17:8c:bd: 4c:c1:d3:ba:38:80:1c:71:17:0e:34:db:6f:8d:28: 5c:64:31:90:49:ab:4b:c8:fe:5c:9c:ac:bf:a1:59: cf:d7:b6:e2:82:81:78:bc:f6:89:c0:ab:a3:2d:76: d8:0e:5e:f8:aa:d9:95:52:5d:de:5d:67:15:96:e6: b3:ad:5b:b1:4f:c9:c8:24:c5:e2:fa:cc:92:84:c1: d2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:52:95:CE:CC:A0:34:98:53:ED:80:69:C9:9F:AC:14:47:DD:8D:43 X509v3 Authority Key Identifier: keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:0f:19:a4:82:1d:3c:2a:ca:2a:83:10:38:13:a1:6e:7f:cd: 7c:83:b9:6c:8d:49:27:07:2a:b0:d6:82:e7:38:3d:60:a8:c2: 44:c5:3a:d1:33:93:1a:dd:27:78:7b:f7:85:c7:7e:a1:25:e8: cb:08:9a:25:7c:82:8d:66:a9:2a:c2:00:fc:7e:78:eb:73:89: 11:02:30:52:84:17:24:84:28:b3:a1:87:59:3e:64:74:bc:f8: 16:00:bd:c3:35:46:cf:e1:21:09:14:a9:56:ce:d6:20:ce:40: 55:96:f0:1c:3b:a6:b8:36:5f:bf:d7:ef:07:08:b5:65:21:03: 45:ce:5e:08:49:52:08:b4:c6:62:d9:55:7e:d5:48:bc:50:d8: 78:a1:a7:2a:3d:85:d8:0f:f3:5c:ed:aa:4c:ba:9b:35:aa:d1: 3a:3d:e9:01:00:6b:bc:81:6b:ec:69:08:c1:0d:eb:01:79:05: f4:9b:05:e2:e0:9e:76:dc:e6:1f:fa:73:5c:63:e7:56:91:0d: cf:74:68:79:6c:d7:7f:57:2e:93:53:ea:49:55:96:d3:99:6f: b0:64:64:d1:45:ad:9d:53:0f:52:b9:29:66:99:6e:d9:62:91: 3c:e7:cd:58:b7:c5:07:a0:5b:e2:54:e8:51:09:38:cb:36:41: 01:0e:94:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BwqgeY4b2lo/+3QeXPx1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkODg5ZmFkYWU3YmYyMTA3MmZhZGIzMmUxZWE3NjNiMGMy OTk0OGUwHhcNMjYwMTI1MTIwMDM3WhcNMjYwMTI2MTIwMDM3WjAzMTEwLwYDVQQD EygwNTUyOTVjZWNjYTAzNDk4NTNlZDgwNjljOTlmYWMxNDQ3ZGQ4ZDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cUBT1wYJQ36R2nTHoBNtTrMd4p6 VgFVw1AA3I8bJK7WeHoy/4/lx2JwnFwBeGqFn4LDf8ZhNcIDwZ3BVvh7pHnvYVhK r843viY5E/ww9pOVCzYUx10NX9HV4fPkAAS5oGANMVWFQOMNlFxvmKJBbmCzYcTR Hbz1MzlptWmjB+9NwiKbDYsN6GBozBgu9EYQ0hUyGt9zmRBJA83QFEAj19Ve40Nu jAAgk4zPThWPUecXjL1MwdO6OIAccRcONNtvjShcZDGQSatLyP5cnKy/oVnP17bi goF4vPaJwKujLXbYDl74qtmVUl3eXWcVluazrVuxT8nIJMXi+syShMHSRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVSlc7MoDSYU+2AacmfrBRH3Y1DMB8GA1UdIwQY MBaAFA2In62ue/IQcvrbMuHqdjsMKZSOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZTRiNzgtYWI5NC00NDljLWE0ZDUt YWJkYjYzYWNlN2U3LzEvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82ZTRiNzgtYWI5NC00NDljLWE0ZDUtYWJkYjYzYWNlN2U3 LzEvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOg8ZpIId PCrKKoMQOBOhbn/NfIO5bI1JJwcqsNaC5zg9YKjCRMU60TOTGt0neHv3hcd+oSXo ywiaJXyCjWapKsIA/H5463OJEQIwUoQXJIQos6GHWT5kdLz4FgC9wzVGz+EhCRSp Vs7WIM5AVZbwHDumuDZfv9fvBwi1ZSEDRc5eCElSCLTGYtlVftVIvFDYeKGnKj2F 2A/zXO2qTLqbNarROj3pAQBrvIFr7GkIwQ3rAXkF9JsF4uCedtzmH/pzXGPnVpEN z3RoeWzXf1cuk1PqSVWW05lvsGRk0UWtnVMPUrkpZplu2WKRPOfNWLfFB6Bb4lTo UQk4yzZBAQ6USQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:36 2026 by rpki-client