This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft File: yjuG5lRw-ZTfptb-6OJk22LiSvk.mft (raw, json) Hash identifier: 6vlofor/JI7EUAqtFqJTRauxyMPPs8IhXbtEPQUvzgY= Subject key identifier: 81:D1:31:37:62:07:99:A0:0A:04:48:1C:75:2C:80:67:5F:6F:86:AA Authority key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9 Certificate issuer: /CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9 Certificate serial: 019BF687F579866397D45A7CC6C540DAFAD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft Manifest number: 17F1 Signing time: Sun 25 Jan 2026 19:01:03 +0000 Manifest this update: Sun 25 Jan 2026 19:01:03 +0000 Manifest next update: Mon 26 Jan 2026 19:01:03 +0000 Files and hashes: 1: 3Ogv-65T1Kg_Y0PwX3iWSALH4hk.roa (hash: Zkr3qlEk5NZQXDe7nwoX/wyvk4zh4il5FQTwuh5WfIw=) 2: cpTfXtYH4v1rSjqKtu9ZqpUx3xM.roa (hash: ovwDXS3yKtACozUh0/9y9dib/PgNmZTku682Xe84kxM=) 3: yCVmIRzNa3tIF_MU4qrOr7DResw.roa (hash: obCtvPuMFr0+7aVoRxpK/YudJ9U9WEay72ENhR3GLLg=) 4: yjuG5lRw-ZTfptb-6OJk22LiSvk.crl (hash: UbtwHoZz2BSX3E4TbWE0dkcyIMz3kyzsrS4rd+4q/0Y=) 5: yzMl80kUPFPXCVyuhTRWq2l6-PU.roa (hash: 10HhilhYAwZngg7Yfm2XzCkVn++CZDGvggSHZV4Fd0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:f5:79:86:63:97:d4:5a:7c:c6:c5:40:da:fa:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9 Validity Not Before: Jan 25 19:01:03 2026 GMT Not After : Jan 26 19:01:03 2026 GMT Subject: CN=81d13137620799a00a04481c752c80675f6f86aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:9d:5d:97:dc:a9:4e:53:51:34:99:ab:83: 74:49:dd:60:55:ec:bb:65:b5:a2:c0:78:44:be:e6: 8e:5c:37:46:b2:c8:54:a0:7a:c4:e9:65:63:74:2e: 26:68:15:f6:02:0a:c0:e8:93:7a:b1:b7:6f:4e:ed: 54:13:4a:86:44:1d:d1:a9:da:c1:52:c4:09:0c:78: 97:a0:c2:11:86:7c:12:3d:0e:ca:b8:0f:70:b4:69: 56:4d:ac:12:03:71:43:a1:c8:25:9e:da:7d:4e:bb: 04:65:df:24:4e:14:9b:ba:78:7b:1e:e8:1c:8f:0a: 97:3d:9d:a5:41:88:26:a3:7f:fc:42:84:14:0e:c9: 56:92:aa:01:76:a2:e7:ef:bb:3b:95:09:06:ce:00: 47:a6:22:66:56:28:dc:0c:88:e4:bb:d1:e7:bc:8c: 0d:30:8a:d9:1c:9a:f2:e4:71:7a:22:f8:87:be:53: 78:47:ff:38:ea:42:8a:14:c7:e4:53:89:93:26:53: b4:54:1b:1f:44:4e:4b:14:19:e4:1a:0e:6b:13:1f: 19:70:2c:77:a2:db:6e:d0:1a:81:2b:08:75:a4:ef: 1d:9f:76:60:84:85:61:a3:dc:ea:7c:fb:d9:dd:50: ec:2a:a7:46:e2:26:11:a1:1f:15:49:e7:45:11:ba: b4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D1:31:37:62:07:99:A0:0A:04:48:1C:75:2C:80:67:5F:6F:86:AA X509v3 Authority Key Identifier: keyid:CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:c5:99:5e:ee:ef:90:fa:54:46:4b:23:a1:8f:2b:1c:69:62: 2c:5e:a0:dd:6e:fc:8c:f1:4c:e9:e8:15:50:ad:34:5e:3c:50: 5a:a6:79:91:6a:5c:e1:5f:05:a1:85:c6:2b:96:6c:87:58:56: 42:2f:58:9f:ee:71:1e:c1:a0:d0:39:90:af:c1:4d:01:3c:7c: bd:77:f0:0f:f3:fb:5b:02:42:fc:46:a4:94:48:2d:f2:e6:57: 46:79:66:60:13:f9:ec:5d:3e:77:3e:3b:bd:0b:c4:d6:f4:2c: f0:47:e8:c1:bd:d1:93:d9:84:3f:87:6e:20:52:98:dc:8a:10: a1:6d:fa:b0:46:95:73:8c:a1:f3:62:3b:46:db:0f:95:dd:fb: 4a:e9:4d:30:61:f8:aa:c3:03:fe:48:21:59:7c:2c:b5:14:64: b0:49:0e:a3:15:79:b8:70:c1:1f:b9:86:f8:4a:68:a3:f8:da: 81:b6:f0:e9:1e:22:e6:35:04:ef:39:d9:3c:9a:41:cc:fd:b6: 5f:0c:bd:8f:e5:cc:97:c8:8f:cb:fb:d4:e5:7d:e6:a3:55:02: 16:82:f5:53:34:fd:bc:d1:46:9f:f6:39:d5:76:cb:17:ac:2d: 70:e4:59:c9:59:76:ba:c6:bc:e1:d6:5f:a5:61:94:a1:3d:eb: cf:f1:10:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h/V5hmOX1Fp8xsVA2vrRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhM2I4NmU2NTQ3MGY5OTRkZmE2ZDZmZWU4ZTI2NGRiNjJl MjRhZjkwHhcNMjYwMTI1MTkwMTAzWhcNMjYwMTI2MTkwMTAzWjAzMTEwLwYDVQQD Eyg4MWQxMzEzNzYyMDc5OWEwMGEwNDQ4MWM3NTJjODA2NzVmNmY4NmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaKdXZfcqU5TUTSZq4N0Sd1gVey7 ZbWiwHhEvuaOXDdGsshUoHrE6WVjdC4maBX2AgrA6JN6sbdvTu1UE0qGRB3RqdrB UsQJDHiXoMIRhnwSPQ7KuA9wtGlWTawSA3FDocglntp9TrsEZd8kThSbunh7Hugc jwqXPZ2lQYgmo3/8QoQUDslWkqoBdqLn77s7lQkGzgBHpiJmVijcDIjku9HnvIwN MIrZHJry5HF6IviHvlN4R/846kKKFMfkU4mTJlO0VBsfRE5LFBnkGg5rEx8ZcCx3 ottu0BqBKwh1pO8dn3ZghIVho9zqfPvZ3VDsKqdG4iYRoR8VSedFEbq0UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHRMTdiB5mgCgRIHHUsgGdfb4aqMB8GA1UdIwQY MBaAFMo7huZUcPmU36bW/ujiZNti4kr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWp1RzVsUnctWlRmcHRiLTZPSmsyMkxpU3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zZGFlNzEtMWFjZi00MTk2LTk2MDgt OTUzMWQyNGUwNjEwLzEveWp1RzVsUnctWlRmcHRiLTZPSmsyMkxpU3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8zZGFlNzEtMWFjZi00MTk2LTk2MDgtOTUzMWQyNGUwNjEw LzEveWp1RzVsUnctWlRmcHRiLTZPSmsyMkxpU3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzcWZXu7v kPpURksjoY8rHGliLF6g3W78jPFM6egVUK00XjxQWqZ5kWpc4V8FoYXGK5Zsh1hW Qi9Yn+5xHsGg0DmQr8FNATx8vXfwD/P7WwJC/EaklEgt8uZXRnlmYBP57F0+dz47 vQvE1vQs8Efowb3Rk9mEP4duIFKY3IoQoW36sEaVc4yh82I7RtsPld37SulNMGH4 qsMD/kghWXwstRRksEkOoxV5uHDBH7mG+Epoo/jagbbw6R4i5jUE7znZPJpBzP22 Xwy9j+XMl8iPy/vU5X3mo1UCFoL1UzT9vNFGn/Y51XbLF6wtcORZyVl2usa84dZf pWGUoT3rz/EQaA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:05 2026 by rpki-client