This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft File: yrk2s1-SzexekN8zvcUIZhwntFU.mft (raw, json) Hash identifier: icGnFiRiu6Z9oIq5FNILtI2w7MQDP5DZXkbnn4dXXvM= Subject key identifier: DC:31:E7:C6:9E:83:DB:9D:AB:A7:9F:76:8D:D0:8A:AD:D1:3B:89:31 Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55 Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455 Certificate serial: 019BF619C25EEBB6AFACD497943DC0CFBFAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft Manifest number: 0F1B Signing time: Sun 25 Jan 2026 17:00:41 +0000 Manifest this update: Sun 25 Jan 2026 17:00:41 +0000 Manifest next update: Mon 26 Jan 2026 17:00:41 +0000 Files and hashes: 1: L8uu4ebfrDkqdQimnWmdpvR7zrQ.roa (hash: Pgl4nKmggpktguryDKN7jPFRY/SQE3vFvuMFMU7msdI=) 2: t72vzDed8xwwFdYwzkhMty8CSXI.roa (hash: YW4OPr8TGjFQl6muhUEM/uVQLLBIy3RVHE6bb2pg68w=) 3: yrk2s1-SzexekN8zvcUIZhwntFU.crl (hash: r1bYUvmVGcZQe64igKtKrU4W0ik3cv6zA915B1UZvm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:c2:5e:eb:b6:af:ac:d4:97:94:3d:c0:cf:bf:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455 Validity Not Before: Jan 25 17:00:41 2026 GMT Not After : Jan 26 17:00:41 2026 GMT Subject: CN=dc31e7c69e83db9daba79f768dd08aadd13b8931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:24:ac:a4:fb:d0:08:2b:60:3f:7a:58:6c:3c: 78:1c:81:a4:78:6a:5a:69:2f:97:93:f0:ae:a8:43: 7e:3f:4c:5c:65:87:f2:26:39:5d:80:de:54:34:6d: bd:63:f5:ba:1a:4c:bb:fa:8c:c9:59:34:4f:ca:18: 6b:0a:a7:63:7d:69:e6:49:8f:a2:cc:36:0a:0e:c0: 92:3e:80:4d:8b:52:2b:b8:60:43:b8:5a:ab:01:59: 2c:16:16:8d:3f:83:49:0a:99:09:ce:5a:4d:42:f9: 54:c5:c1:30:3d:74:86:0b:b4:bd:ca:44:c5:c3:74: e0:00:a9:6c:cb:63:fb:b5:00:db:cb:59:ba:97:8a: 2e:7c:4d:e1:81:c6:94:67:de:bc:78:12:d9:bd:b1: 4e:64:59:c3:f7:d8:f6:78:a9:18:12:52:24:a2:0b: bc:e3:2a:80:76:a0:11:77:98:99:c2:07:a5:ba:b7: 5f:2b:d8:6d:06:92:b1:37:ab:16:98:ef:23:e3:83: 28:7c:20:f8:4d:fc:ae:a8:76:31:08:3b:58:a9:e5: 45:08:10:8b:30:b3:ee:c9:1f:48:6c:37:e0:a2:a4: 87:60:ba:0c:26:26:b5:be:22:65:0a:76:c9:04:c4: 52:af:63:b4:53:73:cd:e2:a6:72:a2:81:2d:2f:db: 43:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:31:E7:C6:9E:83:DB:9D:AB:A7:9F:76:8D:D0:8A:AD:D1:3B:89:31 X509v3 Authority Key Identifier: keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ab:32:ff:ad:68:65:e8:d4:13:e0:21:d7:a7:f3:03:16:05: 66:89:20:2d:bc:87:30:c1:8c:7f:75:62:26:d9:f2:cf:57:be: fd:2b:10:72:6d:30:49:7e:88:71:92:41:a2:41:45:16:44:db: 54:b8:14:cf:3a:d9:0f:d3:56:b9:8e:65:1c:41:96:7c:af:8d: ac:09:12:8b:b6:34:c3:cd:fb:61:8f:fc:aa:9d:89:51:38:39: ae:ae:9c:4d:3b:7c:2a:40:48:31:88:54:6b:b3:d1:9f:9f:87: e0:ea:6d:4d:ee:08:93:21:69:4f:2b:51:d2:d8:47:ef:73:d0: 56:02:d4:42:86:90:64:2d:da:23:1c:4b:a4:dd:fb:28:da:82: cb:69:68:a1:5f:3e:e1:9a:1c:e3:59:92:62:72:73:5e:9c:46: ea:2e:11:90:a4:b2:db:31:9b:c7:2c:03:4b:2d:ac:c9:55:b5: a4:fe:4c:42:af:90:fb:28:45:80:85:93:5a:4e:07:63:f0:03: c1:f3:98:b5:98:38:64:31:0a:00:9e:b2:ff:12:66:51:34:9b: ea:e1:e1:ea:c8:0d:64:ab:a7:67:b0:c0:8b:37:a8:10:51:0a: 2e:8d:a2:4c:70:e8:55:e0:f4:8f:ef:00:25:9c:d2:f7:b9:12: 7b:02:ec:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GcJe67avrNSXlD3Az7+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYjkzNmIzNWY5MmNkZWM1ZTkwZGYzM2JkYzUwODY2MWMy N2I0NTUwHhcNMjYwMTI1MTcwMDQxWhcNMjYwMTI2MTcwMDQxWjAzMTEwLwYDVQQD EyhkYzMxZTdjNjllODNkYjlkYWJhNzlmNzY4ZGQwOGFhZGQxM2I4OTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CSspPvQCCtgP3pYbDx4HIGkeGpa aS+Xk/CuqEN+P0xcZYfyJjldgN5UNG29Y/W6Gky7+ozJWTRPyhhrCqdjfWnmSY+i zDYKDsCSPoBNi1IruGBDuFqrAVksFhaNP4NJCpkJzlpNQvlUxcEwPXSGC7S9ykTF w3TgAKlsy2P7tQDby1m6l4oufE3hgcaUZ968eBLZvbFOZFnD99j2eKkYElIkogu8 4yqAdqARd5iZwgelurdfK9htBpKxN6sWmO8j44MofCD4TfyuqHYxCDtYqeVFCBCL MLPuyR9IbDfgoqSHYLoMJia1viJlCnbJBMRSr2O0U3PN4qZyooEtL9tDMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwx58aeg9udq6efdo3Qiq3RO4kxMB8GA1UdIwQY MBaAFMq5NrNfks3sXpDfM73FCGYcJ7RVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXJrMnMxLVN6ZXhla044enZjVUlaaHdudEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yZjk3N2EtYzBkYi00MzdlLTlmNjAt NTU5MjM2MGUzZThlLzEveXJrMnMxLVN6ZXhla044enZjVUlaaHdudEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yZjk3N2EtYzBkYi00MzdlLTlmNjAtNTU5MjM2MGUzZThl LzEveXJrMnMxLVN6ZXhla044enZjVUlaaHdudEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKsy/61o ZejUE+Ah16fzAxYFZokgLbyHMMGMf3ViJtnyz1e+/SsQcm0wSX6IcZJBokFFFkTb VLgUzzrZD9NWuY5lHEGWfK+NrAkSi7Y0w837YY/8qp2JUTg5rq6cTTt8KkBIMYhU a7PRn5+H4OptTe4IkyFpTytR0thH73PQVgLUQoaQZC3aIxxLpN37KNqCy2looV8+ 4Zoc41mSYnJzXpxG6i4RkKSy2zGbxywDSy2syVW1pP5MQq+Q+yhFgIWTWk4HY/AD wfOYtZg4ZDEKAJ6y/xJmUTSb6uHh6sgNZKunZ7DAizeoEFEKLo2iTHDoVeD0j+8A JZzS97kSewLsuw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:24 2026 by rpki-client