This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft File: yAkUktLOioDAh7h2-R1qPCm-eiU.mft (raw, json) Hash identifier: aFRqrrnKwXyMaa7yB2B8QGTKncHVmG8tmziN02aKJjM= Subject key identifier: 1B:02:20:52:EB:8F:9B:1B:7C:83:87:57:46:7D:C9:BB:93:93:67:F3 Authority key identifier: C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25 Certificate issuer: /CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25 Certificate serial: 019BF6BE8AC5471242823F539A5A5434DB04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft Manifest number: 0DE2 Signing time: Sun 25 Jan 2026 20:00:40 +0000 Manifest this update: Sun 25 Jan 2026 20:00:40 +0000 Manifest next update: Mon 26 Jan 2026 20:00:40 +0000 Files and hashes: 1: 8dsL3d0zKteGNgXAMQBV42lOios.roa (hash: Pev55fmq4J10EVCjxW4G+QGn2d3P5hztkv0FQEW8Zn0=) 2: yAkUktLOioDAh7h2-R1qPCm-eiU.crl (hash: yt57yTlxsmcdetjfnis3DxBZjaZdwKGSSbfa7RWH1L4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:8a:c5:47:12:42:82:3f:53:9a:5a:54:34:db:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25 Validity Not Before: Jan 25 20:00:40 2026 GMT Not After : Jan 26 20:00:40 2026 GMT Subject: CN=1b022052eb8f9b1b7c838757467dc9bb939367f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6f:0e:83:05:85:31:ff:d1:3f:1b:42:e0:3d: 66:4d:fc:5c:9d:26:69:9c:8f:fd:e3:f8:b8:f7:1a: f5:6e:c2:14:3a:6b:57:5c:19:4e:26:57:66:45:66: 11:e2:e3:46:05:ed:47:87:a2:55:0b:3f:ae:f5:50: 37:b1:f4:54:55:1a:3b:6d:ab:00:44:9e:df:81:46: fb:72:3d:cb:ac:29:ce:bf:2d:72:ca:a5:e9:aa:8c: b5:f6:1b:d8:cd:aa:3f:ba:a9:94:66:c9:e7:04:58: 26:fa:ae:d9:dd:ab:05:f4:bd:2d:10:4f:74:6a:fa: 52:04:f8:91:71:85:44:e5:1a:bb:dd:4a:ab:0c:32: 8b:f7:64:08:f2:5f:48:ef:ce:46:61:54:d3:df:53: 51:63:1a:d2:26:0f:fd:02:d7:be:12:f7:0e:2d:95: 93:12:a4:27:99:a1:24:8c:cd:d0:ad:4c:55:75:b8: df:ee:f9:d7:23:49:7e:f6:34:43:e3:6a:b8:70:17: f7:51:0e:15:56:f2:dc:6d:06:87:3a:ca:d5:b7:e2: f7:6e:2e:f5:55:21:05:a3:d1:b2:bd:b2:73:e6:29: 2f:04:c6:e9:e8:94:ca:74:53:8e:ec:7b:30:83:f6: cf:62:62:f3:6b:67:ea:a5:d9:b3:fd:37:63:b6:4f: 06:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:02:20:52:EB:8F:9B:1B:7C:83:87:57:46:7D:C9:BB:93:93:67:F3 X509v3 Authority Key Identifier: keyid:C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a9:6a:f6:57:3f:3a:3c:ee:cd:f8:83:aa:6f:e9:b3:c6:c8: c8:fa:88:fa:eb:89:39:4b:0e:1c:8f:db:52:b8:89:12:1e:e7: 5b:62:e5:93:f8:16:8c:b5:42:c4:76:b2:48:1e:f8:01:bb:5f: ea:4b:a5:30:4e:11:1d:c4:55:6a:ee:d5:3b:eb:90:e6:39:eb: 11:11:1e:57:87:fd:2f:e5:48:ee:b0:73:55:97:11:ca:5c:fc: 47:d7:42:d9:96:6c:f8:2c:e3:d2:55:c2:38:f3:a2:ab:09:82: 8a:93:49:de:49:a0:7f:6b:e7:26:31:06:b1:55:df:9d:fe:96: ad:ab:3d:a5:ae:b6:1d:45:04:51:ee:15:d4:4f:f5:98:b7:0f: 9a:87:74:05:a6:ab:59:af:79:74:71:f5:45:2d:a4:36:12:65: 89:cf:65:be:6e:42:75:b3:67:e3:b1:15:46:53:95:99:82:fb: 63:3d:c2:49:74:60:c7:b3:08:55:79:bf:e6:94:7b:73:9b:a5: 94:09:75:47:d0:1c:a6:af:03:a6:cd:3a:ea:a9:9c:9e:9f:0b: c6:b9:3a:63:37:aa:3a:d5:40:8f:07:11:4c:48:6a:41:08:48: 4f:24:2c:4c:bf:e1:f4:5c:f7:cd:fa:0a:48:a4:0f:63:5d:9d: 2e:b8:73:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vorFRxJCgj9TmlpUNNsEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MDkxNDkyZDJjZThhODBjMDg3Yjg3NmY5MWQ2YTNjMjli ZTdhMjUwHhcNMjYwMTI1MjAwMDQwWhcNMjYwMTI2MjAwMDQwWjAzMTEwLwYDVQQD EygxYjAyMjA1MmViOGY5YjFiN2M4Mzg3NTc0NjdkYzliYjkzOTM2N2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW8OgwWFMf/RPxtC4D1mTfxcnSZp nI/94/i49xr1bsIUOmtXXBlOJldmRWYR4uNGBe1Hh6JVCz+u9VA3sfRUVRo7basA RJ7fgUb7cj3LrCnOvy1yyqXpqoy19hvYzao/uqmUZsnnBFgm+q7Z3asF9L0tEE90 avpSBPiRcYVE5Rq73UqrDDKL92QI8l9I785GYVTT31NRYxrSJg/9Ate+EvcOLZWT EqQnmaEkjM3QrUxVdbjf7vnXI0l+9jRD42q4cBf3UQ4VVvLcbQaHOsrVt+L3bi71 VSEFo9GyvbJz5ikvBMbp6JTKdFOO7Hswg/bPYmLza2fqpdmz/Tdjtk8G/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsCIFLrj5sbfIOHV0Z9ybuTk2fzMB8GA1UdIwQY MBaAFMgJFJLSzoqAwIe4dvkdajwpvnolMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUFrVWt0TE9pb0RBaDdoMi1SMXFQQ20tZWlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jMzVhOTktZjg3YS00MjExLWFmN2Et ODFlMjEwNmE1ODU3LzEveUFrVWt0TE9pb0RBaDdoMi1SMXFQQ20tZWlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9jMzVhOTktZjg3YS00MjExLWFmN2EtODFlMjEwNmE1ODU3 LzEveUFrVWt0TE9pb0RBaDdoMi1SMXFQQ20tZWlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqlq9lc/ OjzuzfiDqm/ps8bIyPqI+uuJOUsOHI/bUriJEh7nW2Llk/gWjLVCxHaySB74Abtf 6kulME4RHcRVau7VO+uQ5jnrEREeV4f9L+VI7rBzVZcRylz8R9dC2ZZs+Czj0lXC OPOiqwmCipNJ3kmgf2vnJjEGsVXfnf6Wras9pa62HUUEUe4V1E/1mLcPmod0Baar Wa95dHH1RS2kNhJlic9lvm5CdbNn47EVRlOVmYL7Yz3CSXRgx7MIVXm/5pR7c5ul lAl1R9Acpq8Dps066qmcnp8Lxrk6YzeqOtVAjwcRTEhqQQhITyQsTL/h9Fz3zfoK SKQPY12dLrhzDQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:55 2026 by rpki-client