This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft File: yXZVaQIejbR5y9ZKWgsrr74qjqw.mft (raw, json) Hash identifier: Lld4Mz9TNjRYRdMc0Ln3BBC/1R/bUMOShzCkeshiYeE= Subject key identifier: E3:76:F0:90:5E:D6:AC:35:F8:67:EF:63:28:89:35:A2:04:87:D9:0A Authority key identifier: C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC Certificate issuer: /CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac Certificate serial: 019BF6F558505767D350DCE30F1186E48C5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft Manifest number: 0865 Signing time: Sun 25 Jan 2026 21:00:32 +0000 Manifest this update: Sun 25 Jan 2026 21:00:32 +0000 Manifest next update: Mon 26 Jan 2026 21:00:32 +0000 Files and hashes: 1: XWyAqC54PDULToqtQuYDZQ188QY.roa (hash: IxPpQQWBadj7ekB4qtQqu1qywEMiFrvG8tw5fpRStfs=) 2: yXZVaQIejbR5y9ZKWgsrr74qjqw.crl (hash: x9G5K6M4f5c/4lLct3xWy6hDwGXpQz11XUpL1ni5yAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:58:50:57:67:d3:50:dc:e3:0f:11:86:e4:8c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac Validity Not Before: Jan 25 21:00:32 2026 GMT Not After : Jan 26 21:00:32 2026 GMT Subject: CN=e376f0905ed6ac35f867ef63288935a20487d90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e5:4e:22:49:13:9d:a0:11:b7:44:dc:f4:d8: 84:24:54:77:3a:12:6a:03:14:4d:16:c8:6e:ba:8e: 20:fe:02:f9:3a:88:4b:54:5a:81:4c:60:51:45:8d: 9e:7c:aa:64:45:0d:e3:2c:bc:ab:ef:18:33:cc:19: 58:56:4c:1a:59:a6:c9:43:f2:3d:5f:4b:c6:14:e2: ec:c3:70:7d:74:cd:14:56:d8:4d:ec:2c:e6:63:15: f3:94:14:2c:7d:20:e7:88:15:91:bf:a8:55:24:d3: e1:ff:19:91:57:f0:74:c3:92:ad:8d:d0:51:31:3f: e0:a2:38:e7:02:6c:97:06:f5:0b:1c:c3:cb:98:43: a0:55:05:f8:d1:ae:09:90:fa:be:2d:11:85:2c:7d: 88:c7:81:65:8c:7b:63:e8:1e:02:db:c4:bd:5a:c4: 54:37:b2:b2:54:5d:ac:41:53:1c:c1:c2:85:f7:e7: 44:ca:9b:83:85:cb:8f:15:76:23:4b:d5:9b:7b:36: 38:85:e6:1c:19:ef:eb:45:c4:5a:b6:65:0b:cb:fb: c7:4e:03:7b:77:4e:ac:55:02:af:ef:a1:e3:c7:10: 9c:fe:e1:af:80:e5:fd:ab:3c:20:b9:dc:96:39:41: 94:04:9c:b1:03:0b:a3:f1:12:a9:fe:d9:e3:02:21: 5f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:76:F0:90:5E:D6:AC:35:F8:67:EF:63:28:89:35:A2:04:87:D9:0A X509v3 Authority Key Identifier: keyid:C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:a2:3f:82:89:24:88:3c:72:a7:21:56:8f:87:ee:e0:d6:0a: b0:c2:5d:8a:fe:94:0b:3f:40:66:79:73:9a:3a:0b:76:41:20: 49:f3:28:93:64:a1:25:c5:83:bf:0e:8b:5f:7e:93:32:f8:78: 0f:19:2d:ad:02:be:8c:fc:b3:79:9d:12:31:13:e6:ef:d3:13: d9:8f:a5:7b:4c:ce:f3:b9:48:c5:04:6a:68:4c:c0:30:4d:08: 83:99:35:5a:b5:8a:e4:ae:c1:53:69:8b:d8:d8:ea:df:8f:a2: 5f:4a:32:3f:e3:cf:ce:9f:c5:32:67:d0:70:79:7c:48:12:a2: a1:20:f8:0c:66:8e:49:be:90:5b:b4:0f:0b:b8:9e:7a:11:71: 29:bb:68:b3:38:2e:22:7d:67:52:5e:73:8d:29:09:5f:c9:5f: 76:57:6f:8e:37:25:32:ad:24:71:33:ab:23:04:bc:97:e5:39: be:78:16:5b:e2:86:6b:db:83:c1:18:e6:1e:c0:a9:c0:2e:a9: 37:99:87:fd:6f:e1:7c:e1:ed:0d:ad:a6:47:d8:7f:31:4e:08: 7f:eb:3c:49:2f:20:eb:99:87:15:d5:e0:b6:e2:92:19:8b:b7: 4e:8c:9d:98:ee:90:88:b5:0b:49:c1:14:25:f8:73:14:9a:a1: 11:e2:43:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29VhQV2fTUNzjDxGG5IxeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NzY1NTY5MDIxZThkYjQ3OWNiZDY0YTVhMGIyYmFmYmUy YThlYWMwHhcNMjYwMTI1MjEwMDMyWhcNMjYwMTI2MjEwMDMyWjAzMTEwLwYDVQQD EyhlMzc2ZjA5MDVlZDZhYzM1Zjg2N2VmNjMyODg5MzVhMjA0ODdkOTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+VOIkkTnaARt0Tc9NiEJFR3OhJq AxRNFshuuo4g/gL5OohLVFqBTGBRRY2efKpkRQ3jLLyr7xgzzBlYVkwaWabJQ/I9 X0vGFOLsw3B9dM0UVthN7CzmYxXzlBQsfSDniBWRv6hVJNPh/xmRV/B0w5KtjdBR MT/gojjnAmyXBvULHMPLmEOgVQX40a4JkPq+LRGFLH2Ix4FljHtj6B4C28S9WsRU N7KyVF2sQVMcwcKF9+dEypuDhcuPFXYjS9WbezY4heYcGe/rRcRatmULy/vHTgN7 d06sVQKv76HjxxCc/uGvgOX9qzwgudyWOUGUBJyxAwuj8RKp/tnjAiFfDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFON28JBe1qw1+GfvYyiJNaIEh9kKMB8GA1UdIwQY MBaAFMl2VWkCHo20ecvWSloLK6++Ko6sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni84NjIzMjAtYzkzOC00NzUxLWFkMDct ZjQ4NGRhOGU2N2MzLzEveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni84NjIzMjAtYzkzOC00NzUxLWFkMDctZjQ4NGRhOGU2N2Mz LzEveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANaI/gokk iDxypyFWj4fu4NYKsMJdiv6UCz9AZnlzmjoLdkEgSfMok2ShJcWDvw6LX36TMvh4 DxktrQK+jPyzeZ0SMRPm79MT2Y+le0zO87lIxQRqaEzAME0Ig5k1WrWK5K7BU2mL 2Njq34+iX0oyP+PPzp/FMmfQcHl8SBKioSD4DGaOSb6QW7QPC7ieehFxKbtoszgu In1nUl5zjSkJX8lfdldvjjclMq0kcTOrIwS8l+U5vngWW+KGa9uDwRjmHsCpwC6p N5mH/W/hfOHtDa2mR9h/MU4If+s8SS8g65mHFdXgtuKSGYu3ToydmO6QiLULScEU JfhzFJqhEeJDjg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:57:19 2026 by rpki-client