This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json) Hash identifier: iKXZKD1JG/BZvpfKPEkSzgVhv/qTUOVWApCuNv19Iwg= Subject key identifier: D4:70:5A:29:37:A8:34:84:3A:BA:8A:0D:F4:12:12:56:2C:F9:C8:C1 Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19 Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19 Certificate serial: 019BF53EBD2A156080D53C0CEFEC4D6AB56F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft Manifest number: 0ECE Signing time: Sun 25 Jan 2026 13:01:28 +0000 Manifest this update: Sun 25 Jan 2026 13:01:28 +0000 Manifest next update: Mon 26 Jan 2026 13:01:28 +0000 Files and hashes: 1: HXXJ5U9DGvbbZuWvDguPFDAOEkc.roa (hash: mEsE8YsZsxlgLGJIZIrrf3uSCgdInsp4ueGy7PdnCmU=) 2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: 1G3YC/+8CgO+UVYJ6MNUT5ayFzSn0NlCZVL4BtsmoLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:bd:2a:15:60:80:d5:3c:0c:ef:ec:4d:6a:b5:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19 Validity Not Before: Jan 25 13:01:28 2026 GMT Not After : Jan 26 13:01:28 2026 GMT Subject: CN=d4705a2937a834843aba8a0df41212562cf9c8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:68:82:16:be:cd:19:88:f8:58:5b:0a:c2:8e: 14:e4:2e:76:05:07:bc:50:79:b9:4b:a3:98:6a:5a: 62:2a:b8:8a:eb:b1:69:01:86:96:4c:32:fb:d5:48: 89:c3:62:53:2d:e5:98:85:53:bc:d5:56:3a:59:65: 40:4e:c6:1d:bb:03:3b:62:0b:b1:47:73:1a:70:03: b2:29:9c:82:c2:86:af:86:dd:fb:23:ff:5a:dd:38: 4b:21:19:a4:ef:2d:26:b0:e3:c6:4b:64:06:5a:2a: b0:b5:85:88:eb:79:89:ef:6f:96:f6:be:65:8c:85: 3b:bb:6b:12:87:3c:a2:66:5b:f5:b7:38:44:ed:38: 06:55:e4:85:b7:c1:88:35:4e:bc:16:9c:cb:68:63: dc:bd:ac:84:af:7e:7e:d0:54:c1:13:79:f0:0f:59: eb:ce:b9:db:ce:bc:a2:d0:8e:c5:06:39:7f:8f:a8: cc:27:a6:09:b2:c9:95:a2:4a:b1:a8:55:1b:71:9f: ad:1f:d7:95:79:46:26:a1:58:d6:3c:b9:11:0d:97: 3f:ce:49:87:ed:fd:84:71:5c:c9:27:ca:38:9f:57: b4:d9:0b:02:e8:83:06:ed:01:e8:7d:5e:3c:b6:02: 06:a1:0c:2f:83:76:0b:e9:e6:3f:cf:14:a7:0e:3e: 02:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:70:5A:29:37:A8:34:84:3A:BA:8A:0D:F4:12:12:56:2C:F9:C8:C1 X509v3 Authority Key Identifier: keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e5:c0:6d:15:30:d0:b6:41:84:2c:1e:da:be:2f:15:4b:b8: 1b:33:fe:ee:54:67:4f:d0:41:04:c7:db:54:c4:b9:2a:5c:61: d1:a8:ad:c1:ca:67:41:02:a1:0f:fe:25:9a:5b:40:da:ad:91: d7:06:29:cb:89:92:3c:de:8c:9c:85:40:fe:38:15:49:cd:3f: ea:92:5e:d2:94:0d:27:68:4b:68:4f:53:05:b6:78:e6:e6:84: 1f:e4:46:2f:c1:09:19:b3:7f:2a:06:fd:f1:0b:9a:26:55:c1: 77:ee:f2:a9:4c:b7:80:9a:f5:28:fd:31:02:20:fc:e7:5d:e8: e3:e6:ea:21:89:e2:42:9b:b1:10:e1:8b:dc:61:63:61:42:44: b9:10:c2:99:e4:c8:ea:6f:d0:41:95:6c:0c:fb:f2:59:44:61: 72:d9:4f:f9:81:30:e8:19:b2:d2:9f:83:3a:55:a0:9a:34:a7: 2b:5d:a5:a4:a6:7a:8a:cf:9b:3b:a7:33:74:b5:b2:cd:b1:ae: 75:6b:7d:3a:37:c2:d3:65:9e:9b:1a:0c:ec:7b:ed:83:87:ce: 13:06:4d:cf:fd:e2:ac:8e:8e:c9:57:97:ca:76:f7:05:2e:ae: 72:25:af:ff:46:5f:f7:61:d5:dc:7a:f2:06:93:28:5e:b2:3d: 93:34:e4:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pr0qFWCA1TwM7+xNarVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZWU0MTA3NGUzNTk5MGFmZTRmNTBhODRlNDJlYjA5NTg0 YTJmMTkwHhcNMjYwMTI1MTMwMTI4WhcNMjYwMTI2MTMwMTI4WjAzMTEwLwYDVQQD EyhkNDcwNWEyOTM3YTgzNDg0M2FiYThhMGRmNDEyMTI1NjJjZjljOGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmiCFr7NGYj4WFsKwo4U5C52BQe8 UHm5S6OYalpiKriK67FpAYaWTDL71UiJw2JTLeWYhVO81VY6WWVATsYduwM7Ygux R3MacAOyKZyCwoavht37I/9a3ThLIRmk7y0msOPGS2QGWiqwtYWI63mJ72+W9r5l jIU7u2sShzyiZlv1tzhE7TgGVeSFt8GINU68FpzLaGPcvayEr35+0FTBE3nwD1nr zrnbzryi0I7FBjl/j6jMJ6YJssmVokqxqFUbcZ+tH9eVeUYmoVjWPLkRDZc/zkmH 7f2EcVzJJ8o4n1e02QsC6IMG7QHofV48tgIGoQwvg3YL6eY/zxSnDj4C6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRwWik3qDSEOrqKDfQSElYs+cjBMB8GA1UdIwQY MBaAFMruQQdONZkK/k9QqE5C6wlYSi8ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMt Yjg1MTg5MDk4MjBmLzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMtYjg1MTg5MDk4MjBm LzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+XAbRUw 0LZBhCwe2r4vFUu4GzP+7lRnT9BBBMfbVMS5Klxh0aitwcpnQQKhD/4lmltA2q2R 1wYpy4mSPN6MnIVA/jgVSc0/6pJe0pQNJ2hLaE9TBbZ45uaEH+RGL8EJGbN/Kgb9 8QuaJlXBd+7yqUy3gJr1KP0xAiD8513o4+bqIYniQpuxEOGL3GFjYUJEuRDCmeTI 6m/QQZVsDPvyWURhctlP+YEw6Bmy0p+DOlWgmjSnK12lpKZ6is+bO6czdLWyzbGu dWt9OjfC02WemxoM7Hvtg4fOEwZNz/3irI6OyVeXynb3BS6uciWv/0Zf92HV3Hry BpMoXrI9kzTkjA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:00:31 2026 by rpki-client