This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft File: yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft (raw, json) Hash identifier: 71YVI6aYXTtdc7i+ulrrCkUOyxxoMQYrLwKY2tD3rl4= Subject key identifier: 75:13:3C:71:E8:D0:DA:CD:AA:A0:7D:F9:A2:86:39:19:47:38:FF:5B Authority key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5 Certificate issuer: /CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5 Certificate serial: 019BF763A0CF5829D923343309C07764112A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft Manifest number: 147E Signing time: Sun 25 Jan 2026 23:00:59 +0000 Manifest this update: Sun 25 Jan 2026 23:00:59 +0000 Manifest next update: Mon 26 Jan 2026 23:00:59 +0000 Files and hashes: 1: YjABWXq1K-e_wEund0ue5nxCxOU.roa (hash: PI1L0CXgsAmafCm4unnTqfAaCBg3v/MEpLRsMdPwg9s=) 2: yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl (hash: kCqK0YWaBLXmr5w2to++o9d0tsrkxJoHot0PNWZRoDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:a0:cf:58:29:d9:23:34:33:09:c0:77:64:11:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5 Validity Not Before: Jan 25 23:00:59 2026 GMT Not After : Jan 26 23:00:59 2026 GMT Subject: CN=75133c71e8d0dacdaaa07df9a28639194738ff5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:13:62:37:98:84:23:59:60:24:81:2d:ad:40: 61:5b:8e:84:ab:c3:9e:27:5d:cc:d0:63:e2:36:84: 6d:dd:b3:94:b3:75:38:cf:98:f6:f5:b1:74:97:b3: 99:e4:ea:b0:0d:ff:1a:f9:e3:96:6a:2f:76:c6:06: 45:3a:f1:6e:5e:35:09:57:6d:50:0e:70:c5:27:00: 77:09:70:33:f1:3e:36:2a:97:27:0f:47:a6:73:fd: 74:04:33:12:8f:ce:0b:85:1e:25:4d:7f:c7:4c:5a: 5b:95:57:79:eb:52:95:2d:a6:af:93:5d:55:f3:e4: 1c:3f:dc:9e:c8:d2:36:0a:4d:ea:24:ab:e2:9e:61: 25:51:48:29:b7:65:63:50:5b:81:a9:44:04:71:53: 16:fb:3a:b0:84:aa:5b:91:e3:32:2e:c8:a6:89:26: 55:41:05:3f:31:80:45:9b:85:57:86:ce:1a:d6:c5: 47:32:32:11:a8:43:25:de:2e:e0:d7:c6:cd:19:6e: 37:98:37:99:29:02:12:39:a2:4d:ea:ef:22:7b:2d: 9b:c0:c3:6e:b6:34:15:4d:c8:12:9b:77:f5:70:67: f4:3e:31:ed:ff:4e:df:0c:70:1c:7a:8e:a7:23:e0: 48:31:6e:27:c4:f6:72:ec:c2:ab:dc:23:3e:36:7e: 31:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:13:3C:71:E8:D0:DA:CD:AA:A0:7D:F9:A2:86:39:19:47:38:FF:5B X509v3 Authority Key Identifier: keyid:C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:cf:b5:f3:70:7f:16:3f:1a:51:62:73:39:a9:f8:9b:30:ce: 13:4b:2e:96:7c:85:4f:7f:9b:e9:ae:d7:0b:b4:57:d5:3d:e0: 1b:a1:1f:58:6b:42:8a:2c:20:0d:d4:ec:20:cc:d8:be:06:b6: d6:02:f1:f9:d4:4c:19:21:e4:87:8b:8b:c0:01:cc:9a:c8:91: b4:d0:12:fa:2f:b4:eb:34:78:74:62:9c:d9:d9:ea:e0:f9:d9: 54:65:91:cc:cb:b7:4b:c4:54:53:e9:c8:8a:8a:9a:61:0a:f3: f9:2b:fc:51:b1:6b:08:e9:48:46:0f:23:0c:c1:69:10:47:ab: 2e:47:13:cf:c7:d5:ea:57:50:fe:c4:37:94:91:fe:24:96:b4: ce:10:a0:fd:ab:c8:fe:1a:f3:33:9c:ca:8e:fa:57:0b:8c:75: 9b:6d:df:af:62:13:fc:a3:f9:e2:79:3b:6f:9a:5a:cc:14:42: c9:8e:6e:18:dc:05:29:b2:ef:66:9f:a6:3b:2a:43:e4:b7:8b: 9c:6a:8e:b5:97:db:cb:73:c0:65:bd:a5:9e:59:54:15:23:19: 91:9a:cf:a0:2e:2f:e7:71:b3:35:7a:ff:a8:9c:a0:9f:67:3d: 34:cb:5b:bf:78:08:d0:87:d3:c2:f5:28:c1:03:a8:a1:9c:a3: 2b:c9:b1:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y6DPWCnZIzQzCcB3ZBEqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YWIzYzViNjlhZjVjMjE4ZGQ0YWY3NjRjOTQzNjZjNjQ2 ZjgzYTUwHhcNMjYwMTI1MjMwMDU5WhcNMjYwMTI2MjMwMDU5WjAzMTEwLwYDVQQD Eyg3NTEzM2M3MWU4ZDBkYWNkYWFhMDdkZjlhMjg2MzkxOTQ3MzhmZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhNiN5iEI1lgJIEtrUBhW46Eq8Oe J13M0GPiNoRt3bOUs3U4z5j29bF0l7OZ5OqwDf8a+eOWai92xgZFOvFuXjUJV21Q DnDFJwB3CXAz8T42KpcnD0emc/10BDMSj84LhR4lTX/HTFpblVd561KVLaavk11V 8+QcP9yeyNI2Ck3qJKvinmElUUgpt2VjUFuBqUQEcVMW+zqwhKpbkeMyLsimiSZV QQU/MYBFm4VXhs4a1sVHMjIRqEMl3i7g18bNGW43mDeZKQISOaJN6u8iey2bwMNu tjQVTcgSm3f1cGf0PjHt/07fDHAceo6nI+BIMW4nxPZy7MKr3CM+Nn4xRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUTPHHo0NrNqqB9+aKGORlHOP9bMB8GA1UdIwQY MBaAFMirPFtpr1whjdSvdkyUNmxkb4OlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUtzOFcybXZYQ0dOMUs5MlRKUTJiR1J2ZzZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hMjZiMGYtMzM1My00ZTU5LWJmNzAt MTE4NDU0Y2NkNDEyLzEveUtzOFcybXZYQ0dOMUs5MlRKUTJiR1J2ZzZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hMjZiMGYtMzM1My00ZTU5LWJmNzAtMTE4NDU0Y2NkNDEy LzEveUtzOFcybXZYQ0dOMUs5MlRKUTJiR1J2ZzZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEs+183B/ Fj8aUWJzOan4mzDOE0sulnyFT3+b6a7XC7RX1T3gG6EfWGtCiiwgDdTsIMzYvga2 1gLx+dRMGSHkh4uLwAHMmsiRtNAS+i+06zR4dGKc2dnq4PnZVGWRzMu3S8RUU+nI ioqaYQrz+Sv8UbFrCOlIRg8jDMFpEEerLkcTz8fV6ldQ/sQ3lJH+JJa0zhCg/avI /hrzM5zKjvpXC4x1m23fr2IT/KP54nk7b5pazBRCyY5uGNwFKbLvZp+mOypD5LeL nGqOtZfby3PAZb2lnllUFSMZkZrPoC4v53GzNXr/qJygn2c9NMtbv3gI0IfTwvUo wQOooZyjK8mxjQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:47 2026 by rpki-client