This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft File: Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft (raw, json) Hash identifier: AzdZzHrXGa95f2+8eJDyOC3YwwaVJXYSjQUVP6oyvoc= Subject key identifier: 3D:E0:46:AB:3F:9D:2C:37:60:77:E0:AA:98:09:62:06:D3:49:A2:AB Authority key identifier: 62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A Certificate issuer: /CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a Certificate serial: 019BF7639619E725CE794193C6C5C34DEDE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft Manifest number: 0B2C Signing time: Sun 25 Jan 2026 23:00:57 +0000 Manifest this update: Sun 25 Jan 2026 23:00:57 +0000 Manifest next update: Mon 26 Jan 2026 23:00:57 +0000 Files and hashes: 1: Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl (hash: fk/a8Kl0/N8kOPeqtf0IU2XRJ5pntOCfCAxoD3BF4E0=) 2: rt1jmEWcts8v82w_w-CIFAF6XNA.roa (hash: 2a8J88cRjXc2S0NbaaMIdvXvo0cjbAPhTxZH/dueltY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:96:19:e7:25:ce:79:41:93:c6:c5:c3:4d:ed:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a Validity Not Before: Jan 25 23:00:57 2026 GMT Not After : Jan 26 23:00:57 2026 GMT Subject: CN=3de046ab3f9d2c376077e0aa98096206d349a2ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f5:19:54:d4:e8:38:fe:29:fa:a6:87:f1:04: e6:2f:8c:7d:50:77:9a:c4:d6:9c:9c:97:5e:b7:ea: d5:ab:bf:1b:0c:02:44:7f:a3:be:79:5c:3d:c3:74: 98:52:7e:b6:15:99:97:0c:5a:a2:0f:3f:5c:36:93: 88:91:e7:d0:3e:f0:8e:d6:d0:cb:a9:e3:44:47:4f: cf:af:83:58:e1:96:22:45:34:c3:ac:64:86:99:14: 32:75:05:ae:64:ce:7a:a5:dd:fc:25:51:81:47:f6: ec:92:56:89:c4:a5:08:70:fb:d4:28:a4:58:37:a4: c7:38:35:49:e0:58:52:a5:93:0a:b3:44:93:19:64: ba:11:67:88:22:fb:6a:47:ac:ac:46:d1:87:a7:89: cc:8c:d2:6f:74:60:fa:df:51:39:8e:87:99:af:1c: bf:b6:3a:42:db:34:3c:90:37:de:49:f5:84:19:c0: bd:43:45:31:06:38:9c:4d:bd:6b:06:0c:e5:f5:46: 0e:e9:46:9b:99:95:c3:df:df:aa:d3:b2:8d:be:dc: 89:72:20:38:ab:5e:6d:7e:b9:21:6b:0d:d7:31:5d: 5c:61:b9:44:58:9c:2d:57:61:66:97:dd:da:2b:7c: 94:58:c6:87:1c:73:20:13:37:55:70:81:b6:e0:4e: 49:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E0:46:AB:3F:9D:2C:37:60:77:E0:AA:98:09:62:06:D3:49:A2:AB X509v3 Authority Key Identifier: keyid:62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:30:18:9f:c7:dd:9e:36:00:b2:fa:2f:c2:4d:e9:61:8b:4b: fe:1b:4f:7a:09:ff:cc:6f:f8:b3:cd:8c:5b:7d:d1:e9:14:8c: e3:f9:b7:e5:91:a8:de:c7:3f:48:28:45:9b:4c:4e:6e:95:0a: ab:dd:37:ca:a8:ae:30:34:13:43:44:76:b5:83:98:9c:dc:a0: a1:94:67:c7:f9:ff:cd:5f:e7:5c:c7:bc:7b:ff:35:a8:64:b7: 12:be:d0:de:2a:d1:d3:f1:36:bb:0c:4f:68:aa:da:aa:01:26: b4:30:4d:59:61:d6:94:ed:2e:b1:74:bc:48:5a:9e:e3:bb:4e: 57:f1:a9:27:47:3e:f5:6a:8a:c2:9b:3e:d3:e1:70:0e:a6:cf: 71:b5:43:cb:23:c8:e4:73:0f:68:be:6c:17:13:20:8a:89:29: 00:8f:b4:8b:ef:fa:d7:a4:e2:7b:0b:dd:46:68:81:fb:8d:68: b6:b9:8f:96:09:0b:42:96:f3:f3:26:fc:95:dd:97:e9:2a:ae: 1c:d4:ff:f1:63:bf:f4:2c:4e:a1:04:3d:f8:c3:19:a5:1f:cf: 0b:e1:9c:4d:82:44:d5:70:66:ab:45:67:67:90:75:1a:b0:65: 16:db:48:34:72:07:12:c1:36:6f:61:df:1a:3e:d3:8d:44:49: 88:ba:ad:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y5YZ5yXOeUGTxsXDTe3gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZWY5Nzc1NTBmYTdjODEzZGVlNWMxYjkwZTk1MTFiOWM2 OGRkMGEwHhcNMjYwMTI1MjMwMDU3WhcNMjYwMTI2MjMwMDU3WjAzMTEwLwYDVQQD EygzZGUwNDZhYjNmOWQyYzM3NjA3N2UwYWE5ODA5NjIwNmQzNDlhMmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvUZVNToOP4p+qaH8QTmL4x9UHea xNacnJdet+rVq78bDAJEf6O+eVw9w3SYUn62FZmXDFqiDz9cNpOIkefQPvCO1tDL qeNER0/Pr4NY4ZYiRTTDrGSGmRQydQWuZM56pd38JVGBR/bsklaJxKUIcPvUKKRY N6THODVJ4FhSpZMKs0STGWS6EWeIIvtqR6ysRtGHp4nMjNJvdGD631E5joeZrxy/ tjpC2zQ8kDfeSfWEGcC9Q0UxBjicTb1rBgzl9UYO6UabmZXD39+q07KNvtyJciA4 q15tfrkhaw3XMV1cYblEWJwtV2Fml93aK3yUWMaHHHMgEzdVcIG24E5J+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3gRqs/nSw3YHfgqpgJYgbTSaKrMB8GA1UdIwQY MBaAFGLvl3VQ+nyBPe5cG5DpURucaN0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXUtWGRWRDZmSUU5N2x3YmtPbFJHNXhvM1FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84ZTM4ZDctZTdkNS00ZGQ4LWEzNjAt NTg0YTE0MGI4YjcxLzEvWXUtWGRWRDZmSUU5N2x3YmtPbFJHNXhvM1FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84ZTM4ZDctZTdkNS00ZGQ4LWEzNjAtNTg0YTE0MGI4Yjcx LzEvWXUtWGRWRDZmSUU5N2x3YmtPbFJHNXhvM1FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzAYn8fd njYAsvovwk3pYYtL/htPegn/zG/4s82MW33R6RSM4/m35ZGo3sc/SChFm0xObpUK q903yqiuMDQTQ0R2tYOYnNygoZRnx/n/zV/nXMe8e/81qGS3Er7Q3irR0/E2uwxP aKraqgEmtDBNWWHWlO0usXS8SFqe47tOV/GpJ0c+9WqKwps+0+FwDqbPcbVDyyPI 5HMPaL5sFxMgiokpAI+0i+/616TiewvdRmiB+41otrmPlgkLQpbz8yb8ld2X6Squ HNT/8WO/9CxOoQQ9+MMZpR/PC+GcTYJE1XBmq0VnZ5B1GrBlFttINHIHEsE2b2Hf Gj7TjURJiLqt7Q== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:55 2026 by rpki-client