This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft File: yAA8l5YD986hKsoB68IFfDb9fzA.mft (raw, json) Hash identifier: L+lIInVXVUx03/nOdnyCVKa3k3EvxQdwydvd7QHkJE8= Subject key identifier: 24:51:E5:EB:BC:FE:AC:14:CB:39:B5:90:E9:61:9C:D1:54:BF:AA:24 Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30 Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30 Certificate serial: 019BF619CE95C1EE9A4EB9016CA216322973 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft Manifest number: 0D0A Signing time: Sun 25 Jan 2026 17:00:44 +0000 Manifest this update: Sun 25 Jan 2026 17:00:44 +0000 Manifest next update: Mon 26 Jan 2026 17:00:44 +0000 Files and hashes: 1: 4NkVvtcGrZVKXcIHUXN3aX5aR-U.roa (hash: uUV3NRxzmHCDo1hNed6mKPC9qoNr+1AXHF3xP4nPhT8=) 2: CsyMHLJsqJsWQMS5RZVl3HT44Ig.roa (hash: eTv1DPwyjyPAv2oxMpOhG4oCNxnU96J8zTE8wkeBsrA=) 3: VX7ZDp6l2UyCZjm0hRN6nGJk9i8.roa (hash: B+CJtwt+tc0wqY8DQhcHcXdy6r3buq290Njel11LhmU=) 4: yAA8l5YD986hKsoB68IFfDb9fzA.crl (hash: HjGKiaTkkzSh2zNjkfVmHennEvZU56Ib0sxAJ5uCaik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:ce:95:c1:ee:9a:4e:b9:01:6c:a2:16:32:29:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30 Validity Not Before: Jan 25 17:00:44 2026 GMT Not After : Jan 26 17:00:44 2026 GMT Subject: CN=2451e5ebbcfeac14cb39b590e9619cd154bfaa24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a3:9e:02:7f:41:37:4c:01:94:ef:e1:6f:ee: 82:c9:08:86:1c:13:61:72:16:8d:3f:be:e4:13:5d: 4e:ae:01:15:05:2c:67:ab:c6:59:da:4e:f9:5c:ff: 9c:4a:f2:b5:fa:fe:55:f3:63:6a:56:30:17:bc:88: 5a:16:d4:b0:4c:2f:5d:21:61:6a:49:b9:82:26:41: 07:ec:b6:64:bd:55:80:31:ca:97:ee:b9:22:b5:99: 71:04:a1:7f:82:48:2c:c8:54:f7:df:30:fd:96:a9: 21:2f:73:66:88:ec:0b:4c:35:18:e5:1b:ad:72:06: 8f:de:b0:00:3f:73:07:c6:f7:b5:10:ec:7e:8c:86: f0:64:7c:90:ba:db:78:94:d0:35:00:20:93:1f:f2: f7:df:52:c8:6c:bc:a0:39:e2:51:ca:46:27:19:9d: de:98:99:54:32:3a:bd:dd:4e:e7:54:b1:3e:28:e4: 5c:85:8f:9d:ca:93:00:83:19:50:10:3e:4f:bd:a3: 47:88:f5:47:98:7c:5c:82:8e:7b:30:79:1c:d3:1e: bb:c5:29:ec:8e:6e:a4:f6:40:d4:05:6e:2e:e6:c6: 7f:bb:8f:81:c4:0f:78:c5:88:d5:b6:ce:b4:4c:a7: 07:a4:d1:90:88:2e:ca:27:c4:93:df:3d:0f:08:9a: 46:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:51:E5:EB:BC:FE:AC:14:CB:39:B5:90:E9:61:9C:D1:54:BF:AA:24 X509v3 Authority Key Identifier: keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:0c:b3:f6:29:87:ca:85:31:aa:0a:95:f7:7a:a5:5e:d6:7d: a1:61:aa:28:a4:d5:c0:ec:b0:ba:e2:e3:29:74:93:04:c4:3f: 48:ab:4e:1e:8b:27:c1:c7:6e:23:92:0b:af:d2:b8:0c:c5:82: 21:a2:59:0c:50:61:b8:8a:fd:dc:28:ea:91:fb:f5:68:06:ed: 2d:0c:d5:9f:34:c6:e8:69:77:c6:0f:c5:a6:4d:00:5f:99:83: 26:e9:59:5a:36:29:e3:b0:19:90:30:aa:11:4a:c9:a7:1d:83: 43:e7:63:06:46:8d:bf:73:13:92:47:d6:e5:4b:38:bd:d7:8c: ef:3e:cb:1b:cb:44:e2:08:30:47:93:b6:e7:97:21:9f:3e:29: 4d:2c:dd:21:7c:88:f6:86:64:6d:11:2d:ca:e6:1f:ac:67:be: dd:be:3e:ce:4a:e9:e0:bc:69:a5:16:14:ce:5b:b5:a2:84:d6: ce:b8:dc:53:8c:20:0d:30:b5:7b:aa:ef:29:0f:44:3a:36:e4: d9:c4:9c:58:1d:96:9f:5b:cb:0d:59:bb:78:5d:0c:e3:12:9f: 84:fa:92:04:f8:2a:96:81:09:57:ef:b8:12:d7:8c:58:89:36: a7:d5:21:62:0f:24:65:80:30:a5:3b:d2:a4:7d:37:b9:8d:57: 1f:34:b9:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gc6Vwe6aTrkBbKIWMilzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MDAzYzk3OTYwM2Y3Y2VhMTJhY2EwMWViYzIwNTdjMzZm ZDdmMzAwHhcNMjYwMTI1MTcwMDQ0WhcNMjYwMTI2MTcwMDQ0WjAzMTEwLwYDVQQD EygyNDUxZTVlYmJjZmVhYzE0Y2IzOWI1OTBlOTYxOWNkMTU0YmZhYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qOeAn9BN0wBlO/hb+6CyQiGHBNh chaNP77kE11OrgEVBSxnq8ZZ2k75XP+cSvK1+v5V82NqVjAXvIhaFtSwTC9dIWFq SbmCJkEH7LZkvVWAMcqX7rkitZlxBKF/gkgsyFT33zD9lqkhL3NmiOwLTDUY5Rut cgaP3rAAP3MHxve1EOx+jIbwZHyQutt4lNA1ACCTH/L331LIbLygOeJRykYnGZ3e mJlUMjq93U7nVLE+KORchY+dypMAgxlQED5PvaNHiPVHmHxcgo57MHkc0x67xSns jm6k9kDUBW4u5sZ/u4+BxA94xYjVts60TKcHpNGQiC7KJ8ST3z0PCJpGQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRR5eu8/qwUyzm1kOlhnNFUv6okMB8GA1UdIwQY MBaAFMgAPJeWA/fOoSrKAevCBXw2/X8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUFBOGw1WUQ5ODZoS3NvQjY4SUZmRGI5ZnpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wM2NhMDEtYjk1OS00MWE2LTgxMzMt MDcyMjg4MTJkMDE3LzEveUFBOGw1WUQ5ODZoS3NvQjY4SUZmRGI5ZnpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8wM2NhMDEtYjk1OS00MWE2LTgxMzMtMDcyMjg4MTJkMDE3 LzEveUFBOGw1WUQ5ODZoS3NvQjY4SUZmRGI5ZnpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwyz9imH yoUxqgqV93qlXtZ9oWGqKKTVwOywuuLjKXSTBMQ/SKtOHosnwcduI5ILr9K4DMWC IaJZDFBhuIr93Cjqkfv1aAbtLQzVnzTG6Gl3xg/Fpk0AX5mDJulZWjYp47AZkDCq EUrJpx2DQ+djBkaNv3MTkkfW5Us4vdeM7z7LG8tE4ggwR5O255chnz4pTSzdIXyI 9oZkbREtyuYfrGe+3b4+zkrp4LxppRYUzlu1ooTWzrjcU4wgDTC1e6rvKQ9EOjbk 2cScWB2Wn1vLDVm7eF0M4xKfhPqSBPgqloEJV++4EteMWIk2p9UhYg8kZYAwpTvS pH03uY1XHzS5vg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:02:22 2026 by rpki-client