This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft File: _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json) Hash identifier: VK4O60EYlTTDpalw6/bNoXL/fO3OMie2QwQwEwVbG3U= Subject key identifier: 31:38:BA:F8:2B:62:38:C4:54:B0:AD:4F:A6:EE:07:0A:C2:3D:E8:2E Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de Certificate serial: 019BFC8A54CE02078244977654A4297D777A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft Manifest number: 05F7 Signing time: Mon 26 Jan 2026 23:01:22 +0000 Manifest this update: Mon 26 Jan 2026 23:01:22 +0000 Manifest next update: Tue 27 Jan 2026 23:01:22 +0000 Files and hashes: 1: 0nWWPWTzcFI4eXCWW9KNezctiis.roa (hash: pAWgyFDAcV7gKpwPZNLLbv0IAPB9JFrQF+fLymJ/cyQ=) 2: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: nbZxmPGV9oHe6eNXbd8gYQ6DFeitjaea/A+hEI8sq5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:54:ce:02:07:82:44:97:76:54:a4:29:7d:77:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de Validity Not Before: Jan 26 23:01:22 2026 GMT Not After : Jan 27 23:01:22 2026 GMT Subject: CN=3138baf82b6238c454b0ad4fa6ee070ac23de82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:e7:4b:53:6d:f9:38:de:0e:ea:a9:25:12: a7:31:25:67:a1:d0:ab:44:78:9f:58:66:27:be:a3: f1:2a:d0:da:00:9d:1b:9a:03:db:fc:b2:eb:92:a8: 66:21:85:c7:b5:32:b8:8d:b9:d7:3a:91:94:cb:1b: be:bc:18:8f:e8:5a:d9:a0:12:83:a9:82:25:ed:f5: c6:30:e8:c0:2e:84:26:2f:ff:86:93:fb:b6:83:cb: ac:7f:ba:d7:14:d8:17:1e:62:04:fb:e6:73:c3:0d: fc:ba:ba:0e:0c:84:19:91:56:a3:54:36:c5:b5:2f: 85:d6:f7:a8:15:c9:aa:39:39:09:40:8c:47:b3:7d: 78:c8:bc:98:14:28:49:13:f9:c5:e8:bc:ee:f8:bf: f7:26:a7:ca:13:f8:9d:79:99:80:dd:fb:fd:54:b8: 15:af:51:ad:05:0f:f7:8f:71:22:70:9b:7a:3d:b5: 43:d0:fa:7e:a3:45:7a:31:33:7c:74:9c:3e:00:7d: 32:7b:d4:31:ac:4b:14:89:f4:91:20:c2:1c:42:8f: d3:fe:a2:ae:f7:bd:3e:9e:b8:05:3d:ad:a4:ef:3d: 0f:b9:ce:ae:e3:2b:2e:2d:56:37:97:2d:88:da:16: 6d:56:ef:1b:0d:cf:3a:6a:6e:9c:04:51:67:52:04: 6f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:38:BA:F8:2B:62:38:C4:54:B0:AD:4F:A6:EE:07:0A:C2:3D:E8:2E X509v3 Authority Key Identifier: keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0d:34:04:81:d8:ec:30:68:c3:5e:30:0a:fb:f8:b5:81:f1: 61:4e:6a:53:d9:ff:00:38:cf:7c:bb:aa:4c:ea:0b:35:09:47: 21:76:44:de:ef:49:30:64:90:54:bb:f1:10:58:13:71:89:ad: b5:ec:77:de:04:62:76:62:53:72:03:fc:a5:05:86:4a:8c:1f: a3:6f:90:75:8f:16:4f:d7:81:8d:b9:80:e1:ab:e2:e3:53:4b: 06:93:8d:11:32:75:b6:fc:47:65:11:5a:bb:49:26:7d:47:2a: 3b:75:11:43:e3:ca:44:50:ba:39:51:b4:e4:fe:b9:3e:be:27: 12:be:2d:2b:07:bf:68:69:78:a8:a8:c2:62:96:61:ad:85:c9: d9:ec:d3:aa:1a:e0:39:01:3b:67:17:d8:0c:60:85:6b:bc:bb: c9:0b:69:63:20:fb:3c:5f:7f:3a:9d:69:64:8a:ca:62:ab:35: 4a:e3:23:73:f1:6d:97:14:a8:98:88:01:30:b5:d6:ed:88:64: 8b:05:f9:1a:e9:41:43:88:46:74:55:b9:a0:f7:c5:1d:de:5a: 9c:15:29:aa:43:98:f3:90:de:45:76:fc:8c:26:0a:29:25:56: 87:c5:0c:0b:c8:a4:3d:01:28:85:d8:10:90:21:81:7e:c4:b8: ed:0d:3b:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ilTOAgeCRJd2VKQpfXd6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMjlhNGIzZjBhM2FmOGJiZWQ2MDI5YThiMjY1ZGM5MzIw NGU3ZGUwHhcNMjYwMTI2MjMwMTIyWhcNMjYwMTI3MjMwMTIyWjAzMTEwLwYDVQQD EygzMTM4YmFmODJiNjIzOGM0NTRiMGFkNGZhNmVlMDcwYWMyM2RlODJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoujnS1Nt+TjeDuqpJRKnMSVnodCr RHifWGYnvqPxKtDaAJ0bmgPb/LLrkqhmIYXHtTK4jbnXOpGUyxu+vBiP6FrZoBKD qYIl7fXGMOjALoQmL/+Gk/u2g8usf7rXFNgXHmIE++Zzww38uroODIQZkVajVDbF tS+F1veoFcmqOTkJQIxHs314yLyYFChJE/nF6Lzu+L/3JqfKE/ideZmA3fv9VLgV r1GtBQ/3j3EicJt6PbVD0Pp+o0V6MTN8dJw+AH0ye9QxrEsUifSRIMIcQo/T/qKu 970+nrgFPa2k7z0Puc6u4ysuLVY3ly2I2hZtVu8bDc86am6cBFFnUgRv/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDE4uvgrYjjEVLCtT6buBwrCPeguMB8GA1UdIwQY MBaAFP8ppLPwo6+LvtYCmosmXckyBOfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kN2E0ODQtM2Q0YS00OGJmLWI1MTYt Y2FmMmY3YTViNWY0LzEvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9kN2E0ODQtM2Q0YS00OGJmLWI1MTYtY2FmMmY3YTViNWY0 LzEvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQ00BIHY 7DBow14wCvv4tYHxYU5qU9n/ADjPfLuqTOoLNQlHIXZE3u9JMGSQVLvxEFgTcYmt tex33gRidmJTcgP8pQWGSowfo2+QdY8WT9eBjbmA4avi41NLBpONETJ1tvxHZRFa u0kmfUcqO3URQ+PKRFC6OVG05P65Pr4nEr4tKwe/aGl4qKjCYpZhrYXJ2ezTqhrg OQE7ZxfYDGCFa7y7yQtpYyD7PF9/Op1pZIrKYqs1SuMjc/FtlxSomIgBMLXW7Yhk iwX5GulBQ4hGdFW5oPfFHd5anBUpqkOY85DeRXb8jCYKKSVWh8UMC8ikPQEohdgQ kCGBfsS47Q07vQ== -----END CERTIFICATE-----Generated at Tue Jan 27 06:24:34 2026 by rpki-client