This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft File: yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft (raw, json) Hash identifier: G4KQTiuPLHC2SNKE8AOByGSzCWyg8m1rWmYQlUtnzBI= Subject key identifier: 4D:17:22:14:51:79:AD:BF:9C:8E:10:D7:C0:31:05:7E:7C:FE:E6:C9 Authority key identifier: CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D Certificate issuer: /CN=caafc093c3c4256d114a8edc0d06c73cb63e186d Certificate serial: 019BF5E41A5BFDE6C8387D6AC677BBDE6FBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 16:02:05 +0000 Manifest this update: Sun 25 Jan 2026 16:02:05 +0000 Manifest next update: Mon 26 Jan 2026 16:02:05 +0000 Files and hashes: 1: mS3XkJ4Q1gQOb2HyUmXLd_7xoqM.roa (hash: b9RP78cWIQGh4Wfub2kbb9UWqKpzH9C6agCfF1Zol/M=) 2: yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl (hash: EVFiDK8u41/NdCISDj9bC/8N9Hj/BS4krRMAtl7L53o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e4:1a:5b:fd:e6:c8:38:7d:6a:c6:77:bb:de:6f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caafc093c3c4256d114a8edc0d06c73cb63e186d Validity Not Before: Jan 25 16:02:05 2026 GMT Not After : Jan 26 16:02:05 2026 GMT Subject: CN=4d1722145179adbf9c8e10d7c031057e7cfee6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:82:f3:10:16:c6:a6:07:52:62:d6:6a:a4:36: a2:40:ad:c7:a3:27:1a:1a:e0:bf:72:ed:10:5a:4f: f0:b7:8c:11:e6:15:7d:27:0e:4b:0b:95:3d:ba:a6: 05:5d:e9:92:b4:85:3c:e6:7b:0d:d0:d6:a6:70:c6: 4a:6d:0f:5a:88:43:4a:13:e4:b7:70:9a:71:4e:8c: f2:db:8e:90:b8:28:15:da:94:ad:07:f8:f6:00:29: d1:7d:23:6c:2e:e4:a1:86:4e:c5:55:4c:ca:83:b3: d5:8c:ae:fa:7a:33:ca:41:8b:1d:bd:f6:eb:06:ea: a7:0b:36:80:4b:4d:f2:14:4d:52:c2:5f:82:fb:7d: ff:44:84:7b:4d:8c:e8:81:be:fe:b9:2f:a1:e4:12: 42:39:66:d5:91:9f:41:eb:49:d6:f1:65:cb:d1:d1: 3a:fc:e4:18:e5:42:19:09:a1:6e:da:c1:0a:08:f1: c2:1d:59:bd:e6:16:88:cd:9e:68:7f:8e:b1:e7:d9: 73:ca:4b:ca:61:a9:7e:64:c1:a7:8f:22:fb:39:ee: 89:83:aa:0b:ee:22:ed:f1:2d:aa:07:30:2b:6d:74: 24:48:8e:8d:15:70:48:e8:f9:6e:90:88:d8:32:da: 20:44:3c:c8:99:12:8d:69:7d:49:75:41:1d:b9:ee: 63:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:17:22:14:51:79:AD:BF:9C:8E:10:D7:C0:31:05:7E:7C:FE:E6:C9 X509v3 Authority Key Identifier: keyid:CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:85:45:51:c8:4d:33:b3:ff:9d:d5:9f:04:42:16:3e:f0:ea: d0:7f:75:c3:13:26:1f:9e:02:77:92:44:5b:f9:2d:40:25:de: f8:52:97:a4:9b:a0:cb:71:b1:d4:18:9e:42:c9:06:a5:8a:e7: 83:73:f0:54:5b:7a:e4:e5:b8:20:e6:42:1c:43:2b:46:67:e9: 19:2e:a0:2c:f2:ef:43:16:b1:61:bb:56:cd:48:f6:49:f1:fa: 12:cb:74:87:c7:69:b6:2c:a5:3b:36:7b:f8:b2:f9:3d:ce:bb: 17:a4:93:94:54:93:c5:61:f8:09:73:25:75:4f:fb:f8:9b:ed: bb:98:9d:39:fe:4f:2b:0e:40:90:50:a5:3d:1b:dc:64:da:a9: fe:68:60:8f:6b:5b:fb:52:86:8c:4b:34:e0:38:e8:52:22:a9: c6:43:a2:d3:b6:c7:3b:b8:0a:2b:43:9c:4e:dd:a4:c7:22:1b: 55:92:80:6e:a7:c3:17:9f:33:71:14:c4:2e:1d:fd:03:c9:8c: a3:2c:59:e2:41:b5:08:d9:4c:e7:a5:47:cc:98:c2:a6:04:e3: 72:db:b1:93:5a:29:91:b8:95:9b:ed:cd:5d:a0:7e:94:81:6d: 31:92:22:8f:36:d4:8d:9c:7f:45:cf:7d:1b:0c:e3:f2:42:17: 79:31:29:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv15Bpb/ebIOH1qxne73m+8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYWZjMDkzYzNjNDI1NmQxMTRhOGVkYzBkMDZjNzNjYjYz ZTE4NmQwHhcNMjYwMTI1MTYwMjA1WhcNMjYwMTI2MTYwMjA1WjAzMTEwLwYDVQQD Eyg0ZDE3MjIxNDUxNzlhZGJmOWM4ZTEwZDdjMDMxMDU3ZTdjZmVlNmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoLzEBbGpgdSYtZqpDaiQK3Hoyca GuC/cu0QWk/wt4wR5hV9Jw5LC5U9uqYFXemStIU85nsN0NamcMZKbQ9aiENKE+S3 cJpxTozy246QuCgV2pStB/j2ACnRfSNsLuShhk7FVUzKg7PVjK76ejPKQYsdvfbr BuqnCzaAS03yFE1Swl+C+33/RIR7TYzogb7+uS+h5BJCOWbVkZ9B60nW8WXL0dE6 /OQY5UIZCaFu2sEKCPHCHVm95haIzZ5of46x59lzykvKYal+ZMGnjyL7Oe6Jg6oL 7iLt8S2qBzArbXQkSI6NFXBI6PlukIjYMtogRDzImRKNaX1JdUEdue5jdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0XIhRRea2/nI4Q18AxBX58/ubJMB8GA1UdIwQY MBaAFMqvwJPDxCVtEUqO3A0Gxzy2PhhtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXFfQWs4UEVKVzBSU283Y0RRYkhQTFktR0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC84ODI1YjQtZmYwOC00OTE2LWFlMDUt ODkzZmJlNTkxMWIwLzEveXFfQWs4UEVKVzBSU283Y0RRYkhQTFktR0cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC84ODI1YjQtZmYwOC00OTE2LWFlMDUtODkzZmJlNTkxMWIw LzEveXFfQWs4UEVKVzBSU283Y0RRYkhQTFktR0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIVFUchN M7P/ndWfBEIWPvDq0H91wxMmH54Cd5JEW/ktQCXe+FKXpJugy3Gx1BieQskGpYrn g3PwVFt65OW4IOZCHEMrRmfpGS6gLPLvQxaxYbtWzUj2SfH6Est0h8dptiylOzZ7 +LL5Pc67F6STlFSTxWH4CXMldU/7+Jvtu5idOf5PKw5AkFClPRvcZNqp/mhgj2tb +1KGjEs04DjoUiKpxkOi07bHO7gKK0OcTt2kxyIbVZKAbqfDF58zcRTELh39A8mM oyxZ4kG1CNlM56VHzJjCpgTjctuxk1opkbiVm+3NXaB+lIFtMZIijzbUjZx/Rc99 Gwzj8kIXeTEpjA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:01 2026 by rpki-client