This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json) Hash identifier: w3x1+T6DTyq+WDEzEbKkTSLfc3tZ0Svo0fcOruFpyCQ= Subject key identifier: 11:63:22:1E:09:82:04:0C:57:7A:81:E6:91:83:0D:71:84:44:06:97 Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69 Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69 Certificate serial: 019BF650E54DFD1734915579C4EBA99F15B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft Manifest number: 177D Signing time: Sun 25 Jan 2026 18:00:55 +0000 Manifest this update: Sun 25 Jan 2026 18:00:55 +0000 Manifest next update: Mon 26 Jan 2026 18:00:55 +0000 Files and hashes: 1: D4tyxDwHbBDY6loeNMrI_qWSNIE.roa (hash: VUYKqJjCtizhOmCO0vEKUF1mkjsOrBaXggAOIPV76PI=) 2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: wLXIyDo/IXIoE1cGjhuesAhDvP+XhHtFjEeYrYbx8lI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:e5:4d:fd:17:34:91:55:79:c4:eb:a9:9f:15:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69 Validity Not Before: Jan 25 18:00:55 2026 GMT Not After : Jan 26 18:00:55 2026 GMT Subject: CN=1163221e0982040c577a81e691830d7184440697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b0:18:fa:b2:b8:17:1d:b3:19:93:7c:a1:a5: 39:82:89:60:09:f9:dd:0f:6b:68:50:1f:a1:51:59: e6:9a:8b:59:41:5c:ea:be:92:81:15:79:9e:66:ea: 64:61:11:ac:10:9a:c7:13:a8:2f:8f:7a:0b:81:29: de:19:00:9e:39:62:b5:7f:ca:f0:5b:0b:c6:a3:eb: ea:87:78:cf:e0:f1:86:e1:ee:45:6e:9b:1c:2d:6a: 4c:e5:7b:8e:7d:06:57:d7:a4:5d:95:ea:08:cf:05: 1b:76:83:d2:de:f1:af:39:c2:16:72:f7:bb:8e:01: 3e:f2:b7:c3:0e:60:c7:e7:d9:57:ef:9b:4e:73:58: 5e:9d:1c:2a:65:4d:db:2b:0c:b2:89:1d:2f:29:52: 4e:45:c8:ab:1c:35:47:a8:a9:2d:fc:f2:53:4d:c3: 7d:36:55:c1:e7:dc:17:e2:fa:18:a3:eb:21:46:d9: 62:1f:17:5e:e0:ac:d3:7a:1a:c6:fb:13:70:dc:54: e8:95:c5:8d:9f:81:fc:9f:2f:c6:f1:3e:85:7e:be: a3:36:f5:00:69:dc:d6:ec:ee:65:d3:9d:8b:99:52: b3:5b:94:ea:df:05:15:fb:2c:ea:16:05:9d:a0:50: 4a:f0:67:e4:3d:40:0f:5b:9d:5f:b7:ae:6a:7d:a5: 35:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:63:22:1E:09:82:04:0C:57:7A:81:E6:91:83:0D:71:84:44:06:97 X509v3 Authority Key Identifier: keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:da:1a:99:e5:13:5b:15:02:c6:c3:e7:51:84:69:85:68:30: d6:5e:01:32:40:1a:56:4a:0a:c9:cc:c5:57:50:f9:b7:eb:28: 88:04:b5:44:2c:f4:95:ab:4a:ab:a9:9f:d0:9a:cf:02:c8:e2: 00:2b:1d:e3:09:ba:bb:aa:04:9e:29:e6:ec:2e:22:18:2d:f9: 05:4e:c0:fd:c9:0d:c3:e7:d5:48:46:be:da:dc:d1:ea:c2:1c: 48:2e:25:8a:3d:6a:13:4a:78:58:2f:31:71:37:83:0c:08:0f: 5d:84:d7:ff:5d:21:a6:05:9d:bb:7b:93:33:76:52:b9:26:72: 75:e5:62:49:36:73:e2:23:98:09:9c:52:b2:73:24:63:99:0d: ca:e1:cd:fd:67:32:1a:22:32:f8:20:16:1a:b2:24:79:41:0e: 14:27:75:a2:7c:6f:24:33:13:60:6d:d7:ab:c1:11:c9:84:c0: 30:47:4e:62:b5:d8:05:b9:40:b4:80:a5:b5:3f:ed:fa:33:0c: 70:ec:e6:83:45:18:7d:76:50:61:7e:ab:96:9a:aa:82:ba:87: 63:d8:22:d8:d1:c9:59:d7:d5:f6:58:bb:59:10:d8:99:72:06: 98:df:d8:3c:fd:05:25:68:bd:b6:dc:8b:3c:02:0d:0f:c7:70: c7:2a:6d:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UOVN/Rc0kVV5xOupnxWxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhM2JjYTg3NjQ5NDY5MzJiYTJkYThiZGI3ZDEzY2Q4Njg5 NWFmNjkwHhcNMjYwMTI1MTgwMDU1WhcNMjYwMTI2MTgwMDU1WjAzMTEwLwYDVQQD EygxMTYzMjIxZTA5ODIwNDBjNTc3YTgxZTY5MTgzMGQ3MTg0NDQwNjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrAY+rK4Fx2zGZN8oaU5golgCfnd D2toUB+hUVnmmotZQVzqvpKBFXmeZupkYRGsEJrHE6gvj3oLgSneGQCeOWK1f8rw WwvGo+vqh3jP4PGG4e5FbpscLWpM5XuOfQZX16RdleoIzwUbdoPS3vGvOcIWcve7 jgE+8rfDDmDH59lX75tOc1henRwqZU3bKwyyiR0vKVJORcirHDVHqKkt/PJTTcN9 NlXB59wX4voYo+shRtliHxde4KzTehrG+xNw3FTolcWNn4H8ny/G8T6Ffr6jNvUA adzW7O5l052LmVKzW5Tq3wUV+yzqFgWdoFBK8GfkPUAPW51ft65qfaU1jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFjIh4JggQMV3qB5pGDDXGERAaXMB8GA1UdIwQY MBaAFMo7yodklGkyui2ovbfRPNhola9pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80ZTBmMmYtNDBiNy00NGQ5LTlmYTAt MDEyZGRlYWRmNzVlLzEveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80ZTBmMmYtNDBiNy00NGQ5LTlmYTAtMDEyZGRlYWRmNzVl LzEveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9oameUT WxUCxsPnUYRphWgw1l4BMkAaVkoKyczFV1D5t+soiAS1RCz0latKq6mf0JrPAsji ACsd4wm6u6oEninm7C4iGC35BU7A/ckNw+fVSEa+2tzR6sIcSC4lij1qE0p4WC8x cTeDDAgPXYTX/10hpgWdu3uTM3ZSuSZydeViSTZz4iOYCZxSsnMkY5kNyuHN/Wcy GiIy+CAWGrIkeUEOFCd1onxvJDMTYG3Xq8ERyYTAMEdOYrXYBblAtICltT/t+jMM cOzmg0UYfXZQYX6rlpqqgrqHY9gi2NHJWdfV9li7WRDYmXIGmN/YPP0FJWi9ttyL PAIND8dwxyptLQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:13 2026 by rpki-client