This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft File: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft (raw, json) Hash identifier: 4OyadPwvfYSfD8FmLOKzhsZ8JmH76JfmM/aAomHGFPU= Subject key identifier: 20:67:1C:04:BE:BA:02:B8:06:37:3A:43:FB:A3:FA:DE:A3:C4:51:D7 Authority key identifier: C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49 Certificate issuer: /CN=c8e50ca17134837a50d3063d43d443385abe6f49 Certificate serial: 019BF5ABF7591B26370D7BABA29B94FD00A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft Manifest number: 175D Signing time: Sun 25 Jan 2026 15:00:46 +0000 Manifest this update: Sun 25 Jan 2026 15:00:46 +0000 Manifest next update: Mon 26 Jan 2026 15:00:46 +0000 Files and hashes: 1: KruYfdwnUNYxfXkcEK0pRrgHkqg.roa (hash: UrG6tcE8plAV8A8NaRxXB6Nz6rhzF4jRdCMcfNiMj5Q=) 2: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl (hash: 0hcHqNnT2Z+qzG7zJrX8605Ml8Cso1p3iBtovq/caIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:f7:59:1b:26:37:0d:7b:ab:a2:9b:94:fd:00:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8e50ca17134837a50d3063d43d443385abe6f49 Validity Not Before: Jan 25 15:00:46 2026 GMT Not After : Jan 26 15:00:46 2026 GMT Subject: CN=20671c04beba02b806373a43fba3fadea3c451d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:f9:6e:80:47:af:58:78:8c:a9:c1:3b:9d: 39:7d:63:62:04:88:95:ee:b0:d9:ec:d6:eb:b7:3e: af:d9:8b:31:fe:47:2e:63:28:31:50:96:2c:f4:17: e6:f0:a8:f0:67:b8:9a:8a:d1:b5:6d:48:76:d3:36: 2c:b9:f6:d3:a3:9d:d6:f8:2a:b2:45:55:b1:ba:0e: fc:0b:4d:55:01:bd:d7:c1:ff:b8:cf:41:b6:10:64: 66:e8:e8:b5:a5:05:6e:4f:82:d9:30:8e:bc:af:c8: f7:ca:41:6d:7d:ca:19:51:43:80:29:32:9b:b5:6d: 17:98:83:b5:dc:64:6c:0b:81:93:56:03:2a:37:3e: 06:9f:48:de:b0:4e:7b:35:48:2d:4f:92:6a:84:7e: 54:af:41:90:cf:6d:25:ae:0f:75:52:f4:2e:84:4c: 38:54:77:d2:aa:91:23:e7:89:db:38:f0:75:57:7b: d6:f4:73:4b:92:ad:47:c9:3c:07:d0:7d:6f:10:d3: 87:76:8d:19:ff:17:8e:f6:6d:2b:ef:43:5b:b0:00: 24:74:d5:27:ce:d8:39:40:6b:82:99:02:72:20:dc: f8:3a:59:7a:b3:80:ce:76:fb:83:7d:9c:28:8e:79: 95:9f:11:58:95:43:6f:28:48:09:0e:db:e3:0a:4f: e6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:67:1C:04:BE:BA:02:B8:06:37:3A:43:FB:A3:FA:DE:A3:C4:51:D7 X509v3 Authority Key Identifier: keyid:C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:17:52:85:0d:1f:f5:75:78:9e:9e:a6:ee:ea:c4:2f:78:8c: bf:3d:8a:65:b0:00:87:65:6b:d2:61:84:db:4c:93:b4:5f:e6: 9a:93:12:2d:e1:3f:4c:b6:d0:83:5b:64:b3:c7:e6:62:7f:e8: 89:46:ef:33:7d:fc:5a:14:29:e0:1a:5e:26:31:ba:f4:cd:33: c2:74:1d:2a:ee:0f:bd:8d:d4:de:7c:b1:bd:bd:4d:51:1f:63: a8:45:32:9c:5b:10:4d:6a:57:22:9e:19:39:c4:57:4f:19:dd: 4a:a2:57:59:f9:99:f5:19:70:40:c0:0d:d4:f7:e0:57:dd:f4: 9c:6b:89:64:9e:c0:bb:57:f8:f6:7a:9d:c4:44:09:d7:41:48: ac:79:d8:3a:1a:db:d3:22:86:13:70:2e:b1:42:31:9d:4d:f0: 50:aa:c3:0b:09:1b:d1:15:da:a1:66:d2:0a:97:10:ac:b2:68: 3e:5c:7c:de:d2:44:f9:ab:3f:b9:c8:59:db:44:e2:f5:86:89: 91:3b:49:89:24:ed:d3:78:89:84:8a:aa:b9:45:30:15:07:40: 1c:98:1c:e0:00:17:87:0d:a1:06:63:37:0f:bd:50:8b:30:62: 87:32:62:32:69:97:b3:e2:a1:63:d1:4e:60:1b:a0:e9:12:b6: 6e:13:58:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q/dZGyY3DXuropuU/QCpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZTUwY2ExNzEzNDgzN2E1MGQzMDYzZDQzZDQ0MzM4NWFi ZTZmNDkwHhcNMjYwMTI1MTUwMDQ2WhcNMjYwMTI2MTUwMDQ2WjAzMTEwLwYDVQQD EygyMDY3MWMwNGJlYmEwMmI4MDYzNzNhNDNmYmEzZmFkZWEzYzQ1MWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTv5boBHr1h4jKnBO505fWNiBIiV 7rDZ7Nbrtz6v2Ysx/kcuYygxUJYs9Bfm8KjwZ7iaitG1bUh20zYsufbTo53W+Cqy RVWxug78C01VAb3Xwf+4z0G2EGRm6Oi1pQVuT4LZMI68r8j3ykFtfcoZUUOAKTKb tW0XmIO13GRsC4GTVgMqNz4Gn0jesE57NUgtT5JqhH5Ur0GQz20lrg91UvQuhEw4 VHfSqpEj54nbOPB1V3vW9HNLkq1HyTwH0H1vENOHdo0Z/xeO9m0r70NbsAAkdNUn ztg5QGuCmQJyINz4Oll6s4DOdvuDfZwojnmVnxFYlUNvKEgJDtvjCk/mLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBnHAS+ugK4Bjc6Q/uj+t6jxFHXMB8GA1UdIwQY MBaAFMjlDKFxNIN6UNMGPUPUQzhavm9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU9VTW9YRTBnM3BRMHdZOVE5UkRPRnEtYjBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iMTMwYjUtNWZjYy00MTk2LTkwNzUt NWVmZjczZTg5ZmJiLzEveU9VTW9YRTBnM3BRMHdZOVE5UkRPRnEtYjBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iMTMwYjUtNWZjYy00MTk2LTkwNzUtNWVmZjczZTg5ZmJi LzEveU9VTW9YRTBnM3BRMHdZOVE5UkRPRnEtYjBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRdShQ0f 9XV4np6m7urEL3iMvz2KZbAAh2Vr0mGE20yTtF/mmpMSLeE/TLbQg1tks8fmYn/o iUbvM338WhQp4BpeJjG69M0zwnQdKu4PvY3U3nyxvb1NUR9jqEUynFsQTWpXIp4Z OcRXTxndSqJXWfmZ9RlwQMAN1PfgV930nGuJZJ7Au1f49nqdxEQJ10FIrHnYOhrb 0yKGE3AusUIxnU3wUKrDCwkb0RXaoWbSCpcQrLJoPlx83tJE+as/uchZ20Ti9YaJ kTtJiSTt03iJhIqquUUwFQdAHJgc4AAXhw2hBmM3D71QizBihzJiMmmXs+KhY9FO YBug6RK2bhNYbg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:42 2026 by rpki-client