This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft File: yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json) Hash identifier: 1130+bgYL/7R6uG+E/R+xjaPQS/WU8U4f5VxBAeVD04= Subject key identifier: 53:56:EE:0F:C3:D1:84:B2:6D:76:FF:1B:C0:A3:AE:D9:FC:0A:04:8D Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Certificate serial: 019BF53EA68AA29ABDBC3F2C837E27651033 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft Manifest number: 17F4 Signing time: Sun 25 Jan 2026 13:01:22 +0000 Manifest this update: Sun 25 Jan 2026 13:01:22 +0000 Manifest next update: Mon 26 Jan 2026 13:01:22 +0000 Files and hashes: 1: C0mI0v3AUYRPG8yTqF1QgFx7xU0.roa (hash: NZkJ/jcOZzqhSAxEfG1FbsPeSS23tdRhxk92nPlXNFM=) 2: JTcKp_-HzhWS07Rh-pfbwQal9BE.roa (hash: K+FwMVfzlkVxN/6tFJRIps6Jd4mzYW6vjm8IFKOQH8g=) 3: U-ONT3QFPmL6bgDFPQrkc4UkItw.roa (hash: jHrm5ubltObAwz/kEr5+twdpGR7UoJHw+XLZONVGw4I=) 4: fIbLyWDcpEVajMwX0IRFmbRboBM.roa (hash: qO1PWw5QDsqq+kEFxL2W+jiNK15/wTUl2EHHtmkWM64=) 5: nbAQ4BPt9n4nKfMqMproTXSCv8M.roa (hash: XXF2LQVa1HbRIXhKxBQckeiuDt9Ut4eLmMQeCOw1aKI=) 6: qcBd1Q5bVW4seHpjXwWwpkJfYnQ.roa (hash: dRY1xnWd/ZI7zspxffS1quMRwGNyT+a2Sy2Dp6pe8Ys=) 7: rZHZ_k5hgir55AATjETSpEWsH80.roa (hash: 8tYYoFYaWJCj2Pb7rbLdOHuTB+Gfcdd0okrBmCgEOAE=) 8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: 4yQBgPJxZM4hih7fLNdm/jYOKPUsKphqwB/ga2Ljz7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:a6:8a:a2:9a:bd:bc:3f:2c:83:7e:27:65:10:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Validity Not Before: Jan 25 13:01:22 2026 GMT Not After : Jan 26 13:01:22 2026 GMT Subject: CN=5356ee0fc3d184b26d76ff1bc0a3aed9fc0a048d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f3:8e:12:1a:1b:a0:bd:60:38:50:9e:4c:02: 34:fb:ef:ab:12:3a:c6:f6:3d:e2:cd:64:06:77:f2: b6:ba:39:15:33:33:2f:b4:e1:4d:2e:63:b7:e7:bc: 0c:7a:e6:57:c7:3e:76:84:45:c7:82:4f:7e:45:49: db:d0:48:8c:54:03:e8:ae:71:60:48:72:1b:c3:74: 3d:29:4c:20:df:f8:46:01:c8:77:94:88:bc:8f:23: 12:9b:76:8b:2e:68:ba:ba:3d:96:b7:53:cf:c5:53: 39:5e:33:d3:93:33:66:8d:07:f1:34:31:f3:0f:3a: ac:9e:4e:4e:f6:83:84:cf:e3:51:45:8d:d0:3a:fd: 64:c4:60:fa:d9:37:3d:25:ed:d5:d5:ab:90:29:df: 15:95:2b:35:d2:e1:43:e3:72:09:37:77:12:88:87: 2f:92:69:60:83:63:11:34:98:f0:59:ba:b2:bf:8b: b6:f9:43:6f:79:c3:ad:dd:ed:61:0b:4e:f7:27:b0: 50:c6:f1:19:28:fe:f9:ac:f9:2e:3d:4e:f2:11:c5: 6b:5f:ba:fe:1f:6c:ad:99:9e:74:28:7b:d4:0c:f3: 50:e6:8e:48:49:4c:91:cc:aa:37:4b:ec:15:f1:71: 68:cf:9b:16:ba:c6:74:37:5a:a0:4c:68:78:5a:12: 5f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:56:EE:0F:C3:D1:84:B2:6D:76:FF:1B:C0:A3:AE:D9:FC:0A:04:8D X509v3 Authority Key Identifier: keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:44:98:2f:36:39:ad:33:19:ff:d2:23:68:0a:4e:17:f9:84: 11:77:b6:4a:b9:31:6e:27:d4:0f:36:68:cf:5c:39:b8:ab:58: fe:d7:30:e7:86:94:3f:e6:07:93:73:ed:14:f2:13:ed:59:a8: d4:d4:2d:45:b4:36:bb:95:c9:2e:39:0b:21:95:99:b6:30:e2: f0:4b:f7:f9:0e:3b:aa:f6:f6:c1:de:48:c2:10:fb:67:51:3a: 36:ca:b5:be:d0:bb:2f:41:b1:dc:4f:2d:bb:96:b8:0e:22:41: 28:41:e0:72:c1:70:48:99:95:5f:ab:33:19:2e:ac:fe:37:fd: 0a:29:20:f2:71:57:ae:a7:f2:d3:08:aa:53:4c:f8:8e:69:5b: 43:a6:e3:f1:23:e1:f9:5e:93:05:22:e4:e6:29:32:89:ea:9b: 70:ad:e4:9b:68:97:2b:34:fd:31:06:57:89:7a:43:c5:f8:cb: 5f:ad:90:eb:53:fd:90:f9:d1:28:e7:ca:ae:93:f8:f9:93:1d: cd:11:b5:4d:d4:de:a5:79:26:61:e8:55:0b:0c:d9:be:85:8e: cd:e9:36:71:3d:09:50:d2:52:0a:a0:b3:d5:bd:3c:05:f3:63: b6:f7:cb:61:00:cd:aa:23:73:5a:ee:b0:ba:b8:89:ff:a4:07: 0d:71:59:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PqaKopq9vD8sg34nZRAzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZWNlNDFjYmMyYzMwNjI2ZWYyYTI4ZDE4MzlmMmQ2YzQ3 NTdmM2YwHhcNMjYwMTI1MTMwMTIyWhcNMjYwMTI2MTMwMTIyWjAzMTEwLwYDVQQD Eyg1MzU2ZWUwZmMzZDE4NGIyNmQ3NmZmMWJjMGEzYWVkOWZjMGEwNDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvOOEhoboL1gOFCeTAI0+++rEjrG 9j3izWQGd/K2ujkVMzMvtOFNLmO357wMeuZXxz52hEXHgk9+RUnb0EiMVAPornFg SHIbw3Q9KUwg3/hGAch3lIi8jyMSm3aLLmi6uj2Wt1PPxVM5XjPTkzNmjQfxNDHz Dzqsnk5O9oOEz+NRRY3QOv1kxGD62Tc9Je3V1auQKd8VlSs10uFD43IJN3cSiIcv kmlgg2MRNJjwWbqyv4u2+UNvecOt3e1hC073J7BQxvEZKP75rPkuPU7yEcVrX7r+ H2ytmZ50KHvUDPNQ5o5ISUyRzKo3S+wV8XFoz5sWusZ0N1qgTGh4WhJfkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNW7g/D0YSybXb/G8Cjrtn8CgSNMB8GA1UdIwQY MBaAFMrs5By8LDBibvKijRg58tbEdX8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWIt ZDg1MWU0MGQ1N2JmLzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWItZDg1MWU0MGQ1N2Jm LzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0SYLzY5 rTMZ/9IjaApOF/mEEXe2SrkxbifUDzZoz1w5uKtY/tcw54aUP+YHk3PtFPIT7Vmo 1NQtRbQ2u5XJLjkLIZWZtjDi8Ev3+Q47qvb2wd5IwhD7Z1E6Nsq1vtC7L0Gx3E8t u5a4DiJBKEHgcsFwSJmVX6szGS6s/jf9Cikg8nFXrqfy0wiqU0z4jmlbQ6bj8SPh +V6TBSLk5ikyieqbcK3km2iXKzT9MQZXiXpDxfjLX62Q61P9kPnRKOfKrpP4+ZMd zRG1TdTepXkmYehVCwzZvoWOzek2cT0JUNJSCqCz1b08BfNjtvfLYQDNqiNzWu6w uriJ/6QHDXFZtw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:26 2026 by rpki-client