This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json) Hash identifier: Eex/gI5/jo+ru4yfwBO2MfwCxRsfsINM3/p78K/SdeU= Subject key identifier: CB:AD:84:E8:6E:A6:91:10:18:2C:E4:CA:97:99:CB:D6:B2:D3:45:18 Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78 Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78 Certificate serial: 019BF4D0487B83CB6FEA0666F106DA4FBF3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft Manifest number: 0C36 Signing time: Sun 25 Jan 2026 11:00:49 +0000 Manifest this update: Sun 25 Jan 2026 11:00:49 +0000 Manifest next update: Mon 26 Jan 2026 11:00:49 +0000 Files and hashes: 1: wUbhJ1Q-nlV3uEvjLuk77UUB7Gc.roa (hash: R+RnalKmquQEDqC7KdcNQz1uImcCiR+mgzNPx6OERvI=) 2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: 2R1gcA9ew92Fj8r9KrspVNOvM5+ki4q3Uuv9/2Q5afE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:48:7b:83:cb:6f:ea:06:66:f1:06:da:4f:bf:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78 Validity Not Before: Jan 25 11:00:49 2026 GMT Not After : Jan 26 11:00:49 2026 GMT Subject: CN=cbad84e86ea69110182ce4ca9799cbd6b2d34518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6c:cc:1c:b6:de:4c:c0:99:45:db:6e:13:ef: b6:cd:45:83:46:5b:d5:c3:da:97:12:09:d1:3b:b1: 54:8b:43:6b:57:e8:cb:fb:3d:ad:57:6a:62:05:15: 5c:0a:6f:64:dd:78:0a:27:89:56:e9:55:31:65:6f: f0:0c:90:55:0b:f3:09:74:7b:00:c4:fc:58:e1:5c: 09:db:c5:4f:38:cc:a4:01:60:7e:4d:4a:c4:0e:dd: 86:4b:fa:3d:cb:df:13:35:ec:79:68:f6:c1:1c:1d: 25:06:eb:c2:56:de:7e:e1:bc:4d:53:aa:d5:87:1c: e3:c3:53:84:50:09:f8:c2:8f:52:25:d9:d0:c1:f7: 57:ca:5b:b2:79:a9:bc:0f:a7:4f:bb:c5:43:56:3d: d7:19:0b:e9:bb:ae:da:15:63:2b:f0:e0:51:ec:3b: e3:69:e2:ff:96:23:13:5e:6a:8c:28:5b:f2:30:ae: 0b:c6:bd:30:28:ec:e7:41:5f:c6:86:cf:a4:a9:e5: 7f:0e:fb:b3:06:77:94:e4:7b:c3:c6:88:c1:a2:95: d4:88:82:b4:00:9e:6a:50:b5:74:6e:b9:04:f5:0b: 3b:4c:9b:98:13:93:ac:a8:a9:f1:0e:49:5f:3f:1d: fe:bc:b9:f5:80:19:ff:49:00:16:81:43:1a:ed:5e: 8a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AD:84:E8:6E:A6:91:10:18:2C:E4:CA:97:99:CB:D6:B2:D3:45:18 X509v3 Authority Key Identifier: keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fa:01:7c:82:b4:36:28:d0:6d:33:88:9d:01:27:5d:f7:bd: 5a:7e:b3:e6:07:bd:00:a9:1b:ff:d9:44:cf:0e:ac:00:18:2c: 35:83:a3:3c:28:2d:68:bf:d1:d2:29:ed:05:23:d1:71:33:b4: 9d:9f:3d:d1:28:76:41:23:27:f5:14:c4:34:7e:31:8b:95:b5: ff:df:58:e5:c5:fa:75:e2:f0:da:ba:13:13:ab:41:56:b9:18: 6c:fc:d5:a9:05:f3:59:43:6f:5a:89:25:94:12:28:c8:ce:2e: 5b:56:22:87:c3:1e:f6:11:c1:20:7e:ff:dd:f7:40:9e:0e:7e: 4c:0b:b9:de:15:8c:c1:d7:fc:8b:dc:11:28:3d:a9:10:bd:3d: ad:5a:76:ad:3e:0e:24:71:18:0d:25:63:ff:0a:19:6b:7c:41: 10:58:1e:f0:42:99:2a:c0:50:f4:a4:98:db:77:02:06:de:2b: 00:fd:01:1e:41:08:13:5a:75:23:62:1a:82:7d:c1:40:b3:57: 88:fa:d7:c0:1f:a4:e7:92:a3:1b:88:f8:53:dd:24:6e:db:ab: 0e:dc:5f:57:1c:47:e3:36:31:4a:db:1c:52:3e:85:fd:3f:d5: 12:f4:32:4e:6d:6d:d6:03:5f:60:2b:86:bf:e1:d9:09:d2:dc: 0d:05:9a:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00Eh7g8tv6gZm8QbaT789MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZjE3ODAwZjE5NDNhZjFjNTE0Mjg0Y2MzYmU3ODBlOWMy MWRkNzgwHhcNMjYwMTI1MTEwMDQ5WhcNMjYwMTI2MTEwMDQ5WjAzMTEwLwYDVQQD EyhjYmFkODRlODZlYTY5MTEwMTgyY2U0Y2E5Nzk5Y2JkNmIyZDM0NTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2zMHLbeTMCZRdtuE++2zUWDRlvV w9qXEgnRO7FUi0NrV+jL+z2tV2piBRVcCm9k3XgKJ4lW6VUxZW/wDJBVC/MJdHsA xPxY4VwJ28VPOMykAWB+TUrEDt2GS/o9y98TNex5aPbBHB0lBuvCVt5+4bxNU6rV hxzjw1OEUAn4wo9SJdnQwfdXyluyeam8D6dPu8VDVj3XGQvpu67aFWMr8OBR7Dvj aeL/liMTXmqMKFvyMK4Lxr0wKOznQV/Ghs+kqeV/DvuzBneU5HvDxojBopXUiIK0 AJ5qULV0brkE9Qs7TJuYE5OsqKnxDklfPx3+vLn1gBn/SQAWgUMa7V6KqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuthOhuppEQGCzkypeZy9ay00UYMB8GA1UdIwQY MBaAFMrxeADxlDrxxRQoTMO+eA6cId14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjlhY2UtZjg2NC00NGQ3LWEwN2Ut ODA1OTdlYjQ0NDI2LzEveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NjlhY2UtZjg2NC00NGQ3LWEwN2UtODA1OTdlYjQ0NDI2 LzEveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfoBfIK0 NijQbTOInQEnXfe9Wn6z5ge9AKkb/9lEzw6sABgsNYOjPCgtaL/R0intBSPRcTO0 nZ890Sh2QSMn9RTENH4xi5W1/99Y5cX6deLw2roTE6tBVrkYbPzVqQXzWUNvWokl lBIoyM4uW1Yih8Me9hHBIH7/3fdAng5+TAu53hWMwdf8i9wRKD2pEL09rVp2rT4O JHEYDSVj/woZa3xBEFge8EKZKsBQ9KSY23cCBt4rAP0BHkEIE1p1I2Iagn3BQLNX iPrXwB+k55KjG4j4U90kbturDtxfVxxH4zYxStscUj6F/T/VEvQyTm1t1gNfYCuG v+HZCdLcDQWaNg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:00 2026 by rpki-client