This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft File: YictaPs4lesim2j41DNBJLlnxw4.mft (raw, json) Hash identifier: D+VgJmdpW91xH2tIqGcsR+W91Wsq1bUg69lNaTj7IKY= Subject key identifier: 0C:BC:4F:15:F7:C9:A2:B4:FA:5D:96:DA:D8:BD:DC:BE:69:E8:14:E8 Authority key identifier: 62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E Certificate issuer: /CN=62272d68fb3895eb229b68f8d4334124b967c70e Certificate serial: 019BF575047A1CFCFB516793EEF04DEEA89E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft Manifest number: 1258 Signing time: Sun 25 Jan 2026 14:00:45 +0000 Manifest this update: Sun 25 Jan 2026 14:00:45 +0000 Manifest next update: Mon 26 Jan 2026 14:00:45 +0000 Files and hashes: 1: 33i2qqWu0X5QxMYwp4hgjABiqq4.roa (hash: 1hHMiIhJSj+gJrD8TbC5dlRZ8I3xR9/+D7WQxWbZlNU=) 2: YictaPs4lesim2j41DNBJLlnxw4.crl (hash: eupjWuVO7xeoVoNl8yGmYQySfk3T1MFOTKGGNUwoHss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:04:7a:1c:fc:fb:51:67:93:ee:f0:4d:ee:a8:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62272d68fb3895eb229b68f8d4334124b967c70e Validity Not Before: Jan 25 14:00:45 2026 GMT Not After : Jan 26 14:00:45 2026 GMT Subject: CN=0cbc4f15f7c9a2b4fa5d96dad8bddcbe69e814e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:3b:44:c7:a6:9d:e0:c0:65:d7:14:16:4e: ae:37:99:b1:b9:d3:6d:10:05:34:6a:aa:ff:04:df: 06:62:87:10:f3:6e:8c:a4:7b:8d:dc:f2:87:f8:25: ab:54:df:13:f2:7a:96:10:78:ac:07:17:46:a8:7f: 9b:87:30:d6:82:33:31:d6:5e:db:07:85:62:fb:cd: 75:6d:d5:37:e4:6f:a8:5b:e3:5c:0b:52:6b:0c:a6: b6:33:e0:fe:7a:d2:87:1f:36:ec:f4:41:f4:3f:d3: 7e:4e:8a:6d:a6:dd:73:02:0f:f6:0c:49:65:24:5d: 51:04:92:8c:ac:e4:d1:f1:08:73:e5:dc:75:9f:2a: 17:eb:a1:12:73:b9:4a:ae:d5:8b:33:5a:2c:f8:02: a6:7b:8c:ae:e0:82:91:3b:89:b8:99:c1:7b:f1:5a: 07:54:5d:dc:80:a4:4f:f0:8a:c2:3e:9f:c5:d7:0e: a5:53:ed:01:b2:f3:09:b3:9a:81:9e:2a:c8:0c:fb: 08:4e:0c:2c:38:37:b4:4e:d9:a0:7b:2b:5a:4e:e7: 22:21:77:c6:ba:f9:77:87:74:57:c2:e4:d1:4c:c1: aa:d9:a8:96:85:9b:4b:ce:4c:4f:3d:97:64:01:a7: 79:aa:70:38:54:4a:8a:5f:b7:c6:76:e8:a5:d4:2d: 26:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BC:4F:15:F7:C9:A2:B4:FA:5D:96:DA:D8:BD:DC:BE:69:E8:14:E8 X509v3 Authority Key Identifier: keyid:62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f4:8f:37:39:78:34:7b:fc:da:f9:0a:2d:98:08:cb:f3:20: 15:33:ff:c5:38:10:f2:82:5b:11:f0:90:b1:5b:09:60:59:b5: bf:25:ad:d0:90:9b:0f:5c:2d:19:19:b4:c0:bb:a6:9c:3c:1f: 07:ad:80:0d:99:3c:ca:e2:c0:3f:f2:cd:49:70:af:97:e1:e6: ef:a5:d7:97:43:64:9b:84:cd:80:1c:df:60:71:89:23:e7:14: a7:3c:25:ca:41:cc:af:f0:2f:e0:8d:34:d9:8e:5f:a1:16:7b: 22:ba:1f:5b:81:f9:9f:4b:e8:0e:42:22:04:f3:b2:b1:dd:25: 8a:21:b2:2c:f9:27:7a:94:0b:7b:1a:56:62:c8:23:4a:7b:0e: f4:39:4a:fb:41:6d:ec:75:27:c6:c9:f3:76:b4:d7:be:37:ab: 16:90:dc:e5:57:26:cb:a3:42:27:6d:ec:df:c2:50:88:a8:e5: d9:2c:c6:74:81:63:35:65:f2:4b:df:8f:09:94:8f:26:bb:92: e9:1e:68:19:aa:04:24:53:3e:9f:be:f6:32:53:4f:29:22:37: b2:05:46:ba:b5:da:cc:6b:2b:dd:bb:27:e2:92:23:01:6e:a1: 68:dd:77:f1:8e:7d:a0:40:09:78:38:90:c1:15:e1:10:30:d3: b3:56:4c:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dQR6HPz7UWeT7vBN7qieMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjcyZDY4ZmIzODk1ZWIyMjliNjhmOGQ0MzM0MTI0Yjk2 N2M3MGUwHhcNMjYwMTI1MTQwMDQ1WhcNMjYwMTI2MTQwMDQ1WjAzMTEwLwYDVQQD EygwY2JjNGYxNWY3YzlhMmI0ZmE1ZDk2ZGFkOGJkZGNiZTY5ZTgxNGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUo7RMemneDAZdcUFk6uN5mxudNt EAU0aqr/BN8GYocQ826MpHuN3PKH+CWrVN8T8nqWEHisBxdGqH+bhzDWgjMx1l7b B4Vi+811bdU35G+oW+NcC1JrDKa2M+D+etKHHzbs9EH0P9N+Toptpt1zAg/2DEll JF1RBJKMrOTR8Qhz5dx1nyoX66ESc7lKrtWLM1os+AKme4yu4IKRO4m4mcF78VoH VF3cgKRP8IrCPp/F1w6lU+0BsvMJs5qBnirIDPsITgwsODe0TtmgeytaTuciIXfG uvl3h3RXwuTRTMGq2aiWhZtLzkxPPZdkAad5qnA4VEqKX7fGduil1C0m0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAy8TxX3yaK0+l2W2ti93L5p6BToMB8GA1UdIwQY MBaAFGInLWj7OJXrIpto+NQzQSS5Z8cOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWljdGFQczRsZXNpbTJqNDFETkJKTGxueHc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My85MzEyYTItZGEyMC00ODNmLTk3OTct OTdmZDc2YjgwODI3LzEvWWljdGFQczRsZXNpbTJqNDFETkJKTGxueHc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My85MzEyYTItZGEyMC00ODNmLTk3OTctOTdmZDc2YjgwODI3 LzEvWWljdGFQczRsZXNpbTJqNDFETkJKTGxueHc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/SPNzl4 NHv82vkKLZgIy/MgFTP/xTgQ8oJbEfCQsVsJYFm1vyWt0JCbD1wtGRm0wLumnDwf B62ADZk8yuLAP/LNSXCvl+Hm76XXl0Nkm4TNgBzfYHGJI+cUpzwlykHMr/Av4I00 2Y5foRZ7IrofW4H5n0voDkIiBPOysd0liiGyLPknepQLexpWYsgjSnsO9DlK+0Ft 7HUnxsnzdrTXvjerFpDc5Vcmy6NCJ23s38JQiKjl2SzGdIFjNWXyS9+PCZSPJruS 6R5oGaoEJFM+n772MlNPKSI3sgVGurXazGsr3bsn4pIjAW6haN138Y59oEAJeDiQ wRXhEDDTs1ZMBA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:36 2026 by rpki-client