This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft File: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft (raw, json) Hash identifier: Jyuz3LJi+KwQArafh0aE4UbCtuMvQ4GMFm+ooAs7Ya8= Subject key identifier: AA:55:4F:B0:6D:F8:3D:92:CE:D5:66:6B:72:AF:AC:F3:B1:85:99:7C Authority key identifier: D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F Certificate issuer: /CN=d3277a239664d245becf4214dde15923042a142f Certificate serial: 019BF8E3DEBFF729815E0506F6BA79D5DCA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft Manifest number: 112B Signing time: Mon 26 Jan 2026 06:00:41 +0000 Manifest this update: Mon 26 Jan 2026 06:00:41 +0000 Manifest next update: Tue 27 Jan 2026 06:00:41 +0000 Files and hashes: 1: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl (hash: Qc6G8TFVk6V5/TGSTHQmMFOMiW0SILnu6/ZNt6IR2F8=) 2: EAy4SNOanXhaxXxJSyGzCor_nI0.roa (hash: Ea+Uw6sz9cAh7cFY1x39RiJi5kY9NftCtSPZo+he5xo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e3:de:bf:f7:29:81:5e:05:06:f6:ba:79:d5:dc:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3277a239664d245becf4214dde15923042a142f Validity Not Before: Jan 26 06:00:41 2026 GMT Not After : Jan 27 06:00:41 2026 GMT Subject: CN=aa554fb06df83d92ced5666b72afacf3b185997c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1c:94:4a:24:a4:70:7c:9c:fb:d1:d7:c2:5a: 05:12:36:be:64:54:8b:6f:71:b4:30:70:a6:0f:ee: e9:d6:08:2c:fb:a8:f0:73:0a:d9:68:18:35:fe:10: 9b:58:e7:7e:23:63:af:6a:5d:a9:66:67:4a:9c:e5: cf:43:a3:ad:5f:84:8e:c5:83:98:aa:65:17:31:87: 49:34:76:f5:5e:de:90:ff:5a:38:c7:f7:2e:39:71: c0:12:9b:7c:57:94:c6:b1:85:d6:05:bf:3e:69:67: b3:2b:9d:57:63:43:a2:62:95:60:f2:ab:02:4a:17: d8:3c:d7:ba:e6:9c:a5:32:3e:98:50:80:f5:26:f5: f2:e9:a3:81:49:3f:6b:68:95:bb:26:38:3b:b4:f9: f5:46:4b:28:0c:bb:39:cb:6a:8b:28:7f:c6:91:fe: 38:1c:8a:e4:a0:8d:fd:c3:59:06:db:b8:60:e6:eb: a9:dd:49:cd:8c:ce:97:a9:a3:c4:de:e9:cd:8f:7a: b6:ae:f0:44:37:13:c1:8f:33:83:fc:66:ad:e2:60: 50:22:86:9d:29:3b:70:05:ef:88:57:81:8f:88:f7: 46:5e:b7:92:17:ad:de:ae:27:bc:93:8b:61:f9:23: 56:ae:58:49:b4:38:af:33:82:c1:63:56:00:b2:50: 69:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:55:4F:B0:6D:F8:3D:92:CE:D5:66:6B:72:AF:AC:F3:B1:85:99:7C X509v3 Authority Key Identifier: keyid:D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:28:fd:34:2b:fb:3d:08:cf:51:58:c7:2c:7e:93:64:32:e5: 0f:87:27:ec:04:65:20:ad:4c:a4:4b:4c:aa:68:c2:01:aa:79: a2:b3:f2:6d:45:f1:59:58:82:f6:8c:67:9a:a9:ca:e8:7e:c8: 0f:39:45:fa:60:c0:b7:85:a6:0a:da:dc:92:50:d2:a3:a7:5f: 42:fd:94:23:8e:08:43:a5:47:4a:ec:89:8d:1c:67:b9:f8:0b: 51:ba:36:28:8c:4d:ef:26:1e:de:43:91:f5:f3:a8:9d:0f:79: 60:b3:d1:40:c1:b5:fb:ce:7d:80:40:04:6e:42:c8:50:8e:fd: 5a:fd:e7:82:7d:95:d7:9f:37:b1:f2:c5:43:c1:bc:7a:41:a5: 1c:f1:78:23:88:ed:1d:7a:86:45:8a:1f:99:00:8c:3c:91:82: 99:03:07:ba:46:b9:6f:6d:80:f7:bd:3d:4a:ce:f8:c7:b5:64: b8:d7:cd:9d:01:03:99:08:6b:8e:88:71:9a:25:aa:12:1a:af: c3:77:da:fb:8a:92:80:69:d7:0f:97:cd:18:32:0e:a3:7b:a4: c2:f3:21:cc:9a:c8:37:2b:be:ec:0d:72:21:68:c1:f3:ba:5d: 4d:33:9e:7e:05:9f:da:7b:98:37:b8:29:a7:69:b0:6d:50:51: 0e:3e:83:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4496/9ymBXgUG9rp51dykMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMjc3YTIzOTY2NGQyNDViZWNmNDIxNGRkZTE1OTIzMDQy YTE0MmYwHhcNMjYwMTI2MDYwMDQxWhcNMjYwMTI3MDYwMDQxWjAzMTEwLwYDVQQD EyhhYTU1NGZiMDZkZjgzZDkyY2VkNTY2NmI3MmFmYWNmM2IxODU5OTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ByUSiSkcHyc+9HXwloFEja+ZFSL b3G0MHCmD+7p1ggs+6jwcwrZaBg1/hCbWOd+I2Oval2pZmdKnOXPQ6OtX4SOxYOY qmUXMYdJNHb1Xt6Q/1o4x/cuOXHAEpt8V5TGsYXWBb8+aWezK51XY0OiYpVg8qsC ShfYPNe65pylMj6YUID1JvXy6aOBST9raJW7Jjg7tPn1RksoDLs5y2qLKH/Gkf44 HIrkoI39w1kG27hg5uup3UnNjM6XqaPE3unNj3q2rvBENxPBjzOD/Gat4mBQIoad KTtwBe+IV4GPiPdGXreSF63erie8k4th+SNWrlhJtDivM4LBY1YAslBpxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpVT7Bt+D2SztVma3KvrPOxhZl8MB8GA1UdIwQY MBaAFNMneiOWZNJFvs9CFN3hWSMEKhQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHlkNkk1Wmswa1ctejBJVTNlRlpJd1FxRkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS82YjQzODYtZGYzZC00ZjljLWFmMWMt YzM3M2Y0NTNhMjQ1LzEvMHlkNkk1Wmswa1ctejBJVTNlRlpJd1FxRkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS82YjQzODYtZGYzZC00ZjljLWFmMWMtYzM3M2Y0NTNhMjQ1 LzEvMHlkNkk1Wmswa1ctejBJVTNlRlpJd1FxRkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyj9NCv7 PQjPUVjHLH6TZDLlD4cn7ARlIK1MpEtMqmjCAap5orPybUXxWViC9oxnmqnK6H7I DzlF+mDAt4WmCtrcklDSo6dfQv2UI44IQ6VHSuyJjRxnufgLUbo2KIxN7yYe3kOR 9fOonQ95YLPRQMG1+859gEAEbkLIUI79Wv3ngn2V1583sfLFQ8G8ekGlHPF4I4jt HXqGRYofmQCMPJGCmQMHuka5b22A9709Ss74x7VkuNfNnQEDmQhrjohxmiWqEhqv w3fa+4qSgGnXD5fNGDIOo3ukwvMhzJrINyu+7A1yIWjB87pdTTOefgWf2nuYN7gp p2mwbVBRDj6DZQ== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:51 2026 by rpki-client