This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft File: lYjYtMeqRamyzXN8YUhx63GBur4.mft (raw, json) Hash identifier: AOxYA7Clg8qvZ0aY/D3wEBjUBC9lFdwq4tfTiPkXZSU= Subject key identifier: F9:AF:66:A5:88:E3:35:77:DC:CE:8A:5A:CC:5D:2D:97:7C:D7:91:25 Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE Certificate issuer: /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe Certificate serial: 019BF5077AA24C2776DCF04C4440AE945963 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft Manifest number: 164D Signing time: Sun 25 Jan 2026 12:01:06 +0000 Manifest this update: Sun 25 Jan 2026 12:01:06 +0000 Manifest next update: Mon 26 Jan 2026 12:01:06 +0000 Files and hashes: 1: 2nWQF39Iwb18W2QaNPcJ8wLWKO4.roa (hash: Y42qQxUJOveLJJBE2Ti4Rz4U/hBNZ5LB97/p6A86eqc=) 2: T-FG9QXYVrOvJD0ZFGx161F8-rE.roa (hash: fwBMGesT+i5+7hG4n6yFeYoLnMkVAp9abEUuKCI4Q+A=) 3: Y-Fl2pXcpykA2Ovy6Yiek0-GPJc.roa (hash: UtkgCH0IjnyruhNFvhdGIcEEQiu591rlsNdVQP1mlI0=) 4: aPrjwirQfjp2ASokssf7k_O--fQ.roa (hash: KQgnCiQXpKRoobrn80mbP5Rs8dHibT88YV5+D84Zc98=) 5: iXwUxzso3pt35Li0dSOoT5DmX3U.roa (hash: glAbr9K3ZOByGif0Hc8fgA/M/XOvS9j+i7ULdB74cTs=) 6: lYjYtMeqRamyzXN8YUhx63GBur4.crl (hash: 4FC7VdsFJOEgWighBtE0le17zoYsK2Si0aqFZtP5D48=) 7: voqwh4ljJMAQM4zcSBxWmbzYHCA.roa (hash: lgapnEK9Q6w/tzBbAcuBz1bvcQ9NlQDVQ41y/zqkihE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:7a:a2:4c:27:76:dc:f0:4c:44:40:ae:94:59:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe Validity Not Before: Jan 25 12:01:06 2026 GMT Not After : Jan 26 12:01:06 2026 GMT Subject: CN=f9af66a588e33577dcce8a5acc5d2d977cd79125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:4c:1a:ee:da:e7:ac:f0:7a:c0:c3:1d:10: e5:4d:af:b9:62:05:db:85:6c:13:07:8c:96:b5:5b: cb:65:9f:db:2c:80:95:de:78:37:6c:d3:42:58:40: c0:2d:03:3e:ac:68:cc:88:76:68:98:f6:61:a5:5f: f0:b9:11:fd:92:2f:83:6d:82:e0:ab:39:99:7b:20: 8a:be:4a:98:22:90:47:1f:2b:2e:f0:bf:fa:db:3c: 8a:ad:d7:57:05:2a:6a:6f:bb:ff:b4:88:b4:c8:4f: 69:ff:3b:c0:fd:7b:4d:d5:29:48:0a:69:44:26:5b: ce:75:ac:61:38:82:d7:89:0b:86:b3:f4:86:06:df: 1e:39:36:b6:77:75:da:51:13:20:48:10:1a:f2:f4: b6:dc:c8:08:a4:f1:bf:55:54:64:c1:62:5b:14:9e: 50:e6:05:b0:9c:7f:48:22:41:2c:4e:48:23:55:10: ad:cf:3e:b1:bf:0e:01:a1:30:ae:cb:09:4c:b3:c4: d2:09:39:32:62:a0:e4:4c:bb:b0:ea:02:72:56:19: 97:15:35:46:95:f9:63:5e:1b:aa:f7:6f:40:b5:d8: 24:25:34:77:e5:ff:0b:c9:c0:1a:cb:76:57:ac:9a: 16:e9:7c:b6:cb:41:69:46:12:1f:85:9a:88:ec:9b: f4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AF:66:A5:88:E3:35:77:DC:CE:8A:5A:CC:5D:2D:97:7C:D7:91:25 X509v3 Authority Key Identifier: keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:61:2f:fb:cb:eb:f7:1c:ce:8a:31:4f:2d:32:b3:d0:8c:37: a1:de:45:ee:87:3a:3b:e1:9d:ae:ad:cd:bb:8a:27:30:8b:da: 2f:89:58:aa:a0:2f:da:ab:5d:6e:58:03:c2:6e:3f:3d:54:48: 18:38:c9:27:b9:02:1f:0e:f7:3c:04:65:92:3c:32:f6:c0:70: 0b:ed:53:79:08:cf:a9:40:74:3e:b1:e2:62:11:2f:b0:d6:3b: 3b:cc:3a:69:30:39:11:cf:7e:44:9c:2e:dd:53:90:02:5c:30: 6b:63:f2:30:65:92:ba:1b:a7:4f:ad:4f:fb:4f:c9:18:f7:b2: f1:ef:46:0d:ac:89:6d:d4:93:e6:bb:8c:4d:43:84:3c:b2:ab: 62:dc:5c:c7:ad:ac:0b:47:66:81:30:5f:a8:82:40:3c:65:04: 5f:7c:27:f2:1c:1c:4b:18:64:3f:bc:3e:bb:e8:10:1d:f2:19: b4:4e:75:0a:73:fc:83:4e:47:f0:cd:85:f0:93:98:5c:7e:56: 90:e6:0a:a0:77:ff:b2:d4:b3:50:44:c8:e2:99:48:f2:ee:e2: e6:85:0b:bf:de:e0:c9:f0:7e:8a:b2:e4:ea:e5:d7:57:51:ab: 36:34:2f:db:c6:92:5b:e0:03:56:2b:d8:ad:3a:c3:dd:34:c2: f5:50:ee:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B3qiTCd23PBMRECulFljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ODhkOGI0YzdhYTQ1YTliMmNkNzM3YzYxNDg3MWViNzE4 MWJhYmUwHhcNMjYwMTI1MTIwMTA2WhcNMjYwMTI2MTIwMTA2WjAzMTEwLwYDVQQD EyhmOWFmNjZhNTg4ZTMzNTc3ZGNjZThhNWFjYzVkMmQ5NzdjZDc5MTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXFMGu7a56zwesDDHRDlTa+5YgXb hWwTB4yWtVvLZZ/bLICV3ng3bNNCWEDALQM+rGjMiHZomPZhpV/wuRH9ki+DbYLg qzmZeyCKvkqYIpBHHysu8L/62zyKrddXBSpqb7v/tIi0yE9p/zvA/XtN1SlICmlE JlvOdaxhOILXiQuGs/SGBt8eOTa2d3XaURMgSBAa8vS23MgIpPG/VVRkwWJbFJ5Q 5gWwnH9IIkEsTkgjVRCtzz6xvw4BoTCuywlMs8TSCTkyYqDkTLuw6gJyVhmXFTVG lfljXhuq929AtdgkJTR35f8LycAay3ZXrJoW6Xy2y0FpRhIfhZqI7Jv0nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmvZqWI4zV33M6KWsxdLZd815ElMB8GA1UdIwQY MBaAFJWI2LTHqkWpss1zfGFIcetxgbq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFlqWXRNZXFSYW15elhOOFlVaHg2M0dCdXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wMGMzYWItNGE3Zi00Zjc0LWI1NTYt YTQ4OGJkNDIwMjRmLzEvbFlqWXRNZXFSYW15elhOOFlVaHg2M0dCdXI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wMGMzYWItNGE3Zi00Zjc0LWI1NTYtYTQ4OGJkNDIwMjRm LzEvbFlqWXRNZXFSYW15elhOOFlVaHg2M0dCdXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2Ev+8vr 9xzOijFPLTKz0Iw3od5F7oc6O+Gdrq3Nu4onMIvaL4lYqqAv2qtdblgDwm4/PVRI GDjJJ7kCHw73PARlkjwy9sBwC+1TeQjPqUB0PrHiYhEvsNY7O8w6aTA5Ec9+RJwu 3VOQAlwwa2PyMGWSuhunT61P+0/JGPey8e9GDayJbdST5ruMTUOEPLKrYtxcx62s C0dmgTBfqIJAPGUEX3wn8hwcSxhkP7w+u+gQHfIZtE51CnP8g05H8M2F8JOYXH5W kOYKoHf/stSzUETI4plI8u7i5oULv97gyfB+irLk6uXXV1GrNjQv28aSW+ADVivY rTrD3TTC9VDuNw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:44:10 2026 by rpki-client