This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft File: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft (raw, json) Hash identifier: 5mMBCDqaPSGgzBIjHPyeXDOLdSSsHpAzMwubQFbEUvc= Subject key identifier: F5:61:BD:E8:53:53:EA:CC:E0:6C:AD:82:06:15:59:4C:B2:40:A7:AF Authority key identifier: 8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E Certificate issuer: /CN=8d80b45455d89731f87bb53f4dbe641189837d4e Certificate serial: 019BF7D26F5CD853BD65E4DFA8991ACBEB06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft Manifest number: 0487 Signing time: Mon 26 Jan 2026 01:02:01 +0000 Manifest this update: Mon 26 Jan 2026 01:02:01 +0000 Manifest next update: Tue 27 Jan 2026 01:02:01 +0000 Files and hashes: 1: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl (hash: 8B9zyPTJSTmgZTnLhaINZ0UnPhtUGDipjatDAx8zrPI=) 2: mq6jdAhoY64n-S89EB8sdE29Spk.roa (hash: bvsiwXRJB+1a6z+HtrBRTvbHG/Lsx8kIyh6UkUd8Cek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:6f:5c:d8:53:bd:65:e4:df:a8:99:1a:cb:eb:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d80b45455d89731f87bb53f4dbe641189837d4e Validity Not Before: Jan 26 01:02:01 2026 GMT Not After : Jan 27 01:02:01 2026 GMT Subject: CN=f561bde85353eacce06cad820615594cb240a7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c9:5c:09:30:03:9c:a3:28:22:3c:de:54:b9: 08:de:21:b5:53:d0:b3:97:64:c6:7b:73:47:97:7b: 19:b5:ea:ff:07:35:06:35:ea:1e:6b:95:5e:ba:14: 31:ac:c0:61:f7:c0:6b:b5:27:fd:86:af:cc:56:2d: b6:96:7a:8f:77:d4:6b:e9:65:ee:e6:51:fb:e9:ad: e0:e6:3e:48:42:72:ef:39:7e:1f:bb:eb:8a:cc:71: a6:cd:79:8b:51:89:0e:01:c6:70:92:54:63:00:9c: d3:6c:92:bd:c6:5e:fc:8b:97:7e:02:10:d8:e6:ef: c0:15:52:bd:b2:89:77:63:80:5a:6f:77:f8:42:95: b9:a7:ce:95:cf:87:9c:b0:e6:c7:86:77:2c:2f:a7: 8c:73:82:65:93:16:f7:13:dd:77:d4:52:0e:00:d3: e7:66:eb:ae:ba:26:aa:ce:ef:8c:fd:60:67:14:5d: b7:d5:37:47:ad:fb:a2:36:28:51:6f:67:cd:35:0f: d8:8e:a1:63:2c:ce:02:94:0f:23:fa:be:e3:ac:01: fc:80:2e:e9:e6:76:51:96:1d:e3:43:d0:23:76:a3: 1b:05:41:48:f2:2e:6f:1f:56:c2:47:51:c8:58:01: 77:99:cb:03:a0:65:d4:d8:eb:68:09:dc:76:b0:cf: b7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:61:BD:E8:53:53:EA:CC:E0:6C:AD:82:06:15:59:4C:B2:40:A7:AF X509v3 Authority Key Identifier: keyid:8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:77:6a:f5:7f:44:35:ed:a5:74:6f:ff:81:fb:95:0b:a4:af: aa:b4:26:ae:15:10:82:67:6d:de:14:98:7e:ec:7e:56:43:83: 14:ed:6a:51:1d:d4:24:df:8f:3a:b2:c0:48:89:cb:c5:10:d2: d4:27:f3:be:ae:a7:15:94:67:81:81:be:9a:fa:a6:6b:f4:de: 61:30:3f:a6:13:47:88:fa:00:73:13:56:99:85:83:ee:cf:9b: 81:0d:d5:8f:59:20:e6:b5:f5:6a:c1:c4:95:7e:fc:5d:03:d1: 05:4e:42:cf:a0:64:4f:f5:6a:00:c1:f1:d8:d5:3c:b0:7a:fe: 69:12:fe:8c:25:7f:e0:d1:ae:44:f5:d7:e1:46:43:32:fa:72: 7f:c2:72:8f:66:94:07:d0:92:de:48:9f:ae:45:71:41:7a:39: f8:af:f7:a6:ee:ed:4f:09:2c:d1:2c:5d:7a:4d:1b:1c:93:73: 94:55:2a:56:ed:7f:d1:27:ba:c0:6e:b5:d7:cc:1e:51:61:2c: d1:92:a9:a5:e7:3a:b7:d0:c8:a3:99:6a:12:9e:03:3d:85:25: a1:ca:e0:38:23:bc:ab:51:82:9a:40:e7:88:58:aa:18:0f:d8: 65:72:12:35:4f:d3:9d:bc:38:4f:5d:f1:a9:6b:9e:54:07:5d: 12:5c:ad:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30m9c2FO9ZeTfqJkay+sGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODBiNDU0NTVkODk3MzFmODdiYjUzZjRkYmU2NDExODk4 MzdkNGUwHhcNMjYwMTI2MDEwMjAxWhcNMjYwMTI3MDEwMjAxWjAzMTEwLwYDVQQD EyhmNTYxYmRlODUzNTNlYWNjZTA2Y2FkODIwNjE1NTk0Y2IyNDBhN2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4slcCTADnKMoIjzeVLkI3iG1U9Cz l2TGe3NHl3sZter/BzUGNeoea5VeuhQxrMBh98BrtSf9hq/MVi22lnqPd9Rr6WXu 5lH76a3g5j5IQnLvOX4fu+uKzHGmzXmLUYkOAcZwklRjAJzTbJK9xl78i5d+AhDY 5u/AFVK9sol3Y4Bab3f4QpW5p86Vz4ecsObHhncsL6eMc4Jlkxb3E9131FIOANPn Zuuuuiaqzu+M/WBnFF231TdHrfuiNihRb2fNNQ/YjqFjLM4ClA8j+r7jrAH8gC7p 5nZRlh3jQ9AjdqMbBUFI8i5vH1bCR1HIWAF3mcsDoGXU2OtoCdx2sM+3CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVhvehTU+rM4GytggYVWUyyQKevMB8GA1UdIwQY MBaAFI2AtFRV2Jcx+Hu1P02+ZBGJg31OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallDMFZGWFlsekg0ZTdVX1RiNWtFWW1EZlU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hZTBlNjgtYTNiNi00NjczLTgxZTct MzgwZTViZGZhNWUwLzEvallDMFZGWFlsekg0ZTdVX1RiNWtFWW1EZlU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hZTBlNjgtYTNiNi00NjczLTgxZTctMzgwZTViZGZhNWUw LzEvallDMFZGWFlsekg0ZTdVX1RiNWtFWW1EZlU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXdq9X9E Ne2ldG//gfuVC6SvqrQmrhUQgmdt3hSYfux+VkODFO1qUR3UJN+POrLASInLxRDS 1Cfzvq6nFZRngYG+mvqma/TeYTA/phNHiPoAcxNWmYWD7s+bgQ3Vj1kg5rX1asHE lX78XQPRBU5Cz6BkT/VqAMHx2NU8sHr+aRL+jCV/4NGuRPXX4UZDMvpyf8Jyj2aU B9CS3kifrkVxQXo5+K/3pu7tTwks0Sxdek0bHJNzlFUqVu1/0Se6wG6118weUWEs 0ZKppec6t9DIo5lqEp4DPYUlocrgOCO8q1GCmkDniFiqGA/YZXISNU/Tnbw4T13x qWueVAddElytMA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:10 2026 by rpki-client