This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: /CoIMMShAHTTGPZ2pXHbORwgRzEPTtjZuWgZSrJyuuY= Subject key identifier: 99:49:1A:05:56:0D:29:B3:E7:92:AE:6D:5A:16:87:6E:9D:B4:0C:56 Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 019BF6F600E1CF05BFF53BE6C9A7E7C1FE1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 17EF Signing time: Sun 25 Jan 2026 21:01:15 +0000 Manifest this update: Sun 25 Jan 2026 21:01:15 +0000 Manifest next update: Mon 26 Jan 2026 21:01:15 +0000 Files and hashes: 1: 1FtPTBCuaFKFdfLMe7kvs8wBT2U.roa (hash: cKQ2d36EvAcAkY7lWf5+zr4pq/8g+Yc09UpRwXaS9fU=) 2: 286ljgduSQ23zXxMskYIQVpjxXw.roa (hash: 7kRo+hhGrmwGIHUv917EDTqyatYEBV1hJSeuWZhlap4=) 3: 4PDvFK89C4F409g_XmWPwr7q1a0.roa (hash: 9lF1IQm65iaYh5J0JpeOleT0SuGGi5cwQEdnoe/v5JQ=) 4: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: NA4g5TJ1tQfrt1r7IWx/ewXf810TU9TXBoMXJcuEIe8=) 5: XpUefWEiJeIsRivUE_i8Xfs2GR8.roa (hash: PBHeI5NfF0k/v47sxglrYiZdodvTKkFHSpMBQlDcdXc=) 6: ZIFHSotu32VSRWz3yy7p-c2LO-A.roa (hash: HtmF/vHud7OvPwqTimOkx4Bd9iGAFPGDNsHwtbVJBZ0=) 7: Zc2NwjC7aoT6KGmTlpJCVRtAAxM.roa (hash: Lw8AgQnNa+u3srZTik73U4zlVyuicSwiTs/U27h1T58=) 8: a0ljWjjOMmlqv-KUZ9yfJ5o3o08.roa (hash: HgXqjfFgX4E4spO/gFoOPoWjpP4kI1tcmHiNguLieIw=) 9: bPL_MeYosxpJav1FZrlBnVGpssY.roa (hash: xbaf1MsiC38LB8r3yBiWSr3FjpTVnJNfGoxcFxBJEYM=) 10: tXhbIuVpYeE_jd1CU4lv2cgwfnw.roa (hash: lxyF6ei0/QTcu7Po0gkCzFazsZNHVkwJorFWOFgBWYI=) 11: vjXTFvPzZIb1zeRSL_kprTEdqbI.roa (hash: JwHjdybMdJ5oxvKoHkQM559e6BBUTavDx0DxnmOgdS0=) 12: yvxp8xW14Xp2PiR7kJbkc75G14A.roa (hash: o93DGCCTavhE3gLHe6hFNvurmN1iNt5bMJ8d0jqfGPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f6:00:e1:cf:05:bf:f5:3b:e6:c9:a7:e7:c1:fe:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Jan 25 21:01:15 2026 GMT Not After : Jan 26 21:01:15 2026 GMT Subject: CN=99491a05560d29b3e792ae6d5a16876e9db40c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3d:c7:4c:7a:c6:d4:5f:61:61:07:da:11:0c: c5:17:18:6d:dd:e0:b5:83:32:d3:c6:8e:b1:e2:be: 35:d8:74:55:0f:0c:b1:0f:e1:83:4a:c5:e1:37:43: 4f:66:04:3f:5e:23:c1:bf:c8:27:a7:11:d0:c6:d1: 89:08:43:a3:8e:95:02:70:c0:86:44:75:ba:1d:19: 06:16:9c:2e:23:e4:dc:69:e4:ba:61:fb:7c:95:37: 08:5b:c1:04:23:66:50:11:0f:f6:3b:bf:04:28:09: 4e:a3:ca:92:4f:b9:34:5c:73:05:9e:bc:9b:3c:61: eb:52:50:fb:92:f2:0f:3b:d6:11:f3:9f:36:99:b4: 42:b2:0a:9a:fb:74:74:f1:5b:07:7a:1e:92:e4:b3: 38:2c:f6:40:04:71:6d:e3:a5:54:9b:7c:24:78:75: f7:de:f0:fe:a0:e4:8e:85:f2:ac:0d:b5:ed:e0:a5: 6e:68:03:7a:e1:b9:1e:28:af:a5:51:85:ae:e5:4a: 5a:ce:75:5c:90:5a:c8:d8:04:02:0a:20:71:99:4b: 95:ba:9c:f0:4d:d9:87:a0:47:ae:c5:2a:71:be:68: fe:f2:b1:b4:97:b1:56:d2:0b:f6:01:91:9e:02:18: 82:f1:45:34:4f:e2:2d:c9:7f:bb:7a:a4:6d:e0:ca: 4b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:49:1A:05:56:0D:29:B3:E7:92:AE:6D:5A:16:87:6E:9D:B4:0C:56 X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:85:6a:99:f7:a5:ab:f7:89:2f:88:c7:71:13:06:45:79:5b: 69:3c:8b:75:d2:26:c7:b0:38:e0:52:0f:11:4c:46:f5:dc:a8: 7f:91:e8:c7:b6:5b:0d:e0:5f:21:24:2a:61:40:4d:3e:bb:9e: 76:77:4b:d2:7a:20:e7:c3:e2:e7:97:d1:55:48:07:88:32:bd: 4e:b6:91:e2:52:61:e8:f6:32:46:e4:1d:3c:dc:c8:ed:0a:c5: c9:f8:6f:5f:d1:9d:cb:a2:a3:59:76:6a:8a:03:c3:50:d1:96: 08:30:cf:12:30:05:cc:b3:05:71:c3:d8:8e:7c:1f:a1:4c:ce: 83:5b:4f:be:3e:81:e2:0a:3b:ca:a4:7a:6e:30:4f:e1:05:ad: 4e:43:ca:35:65:71:16:09:91:5e:ef:03:72:52:b3:23:d1:1b: 4e:dd:cb:01:3f:f2:4c:f3:01:e0:66:13:1a:20:77:48:51:3b: aa:9f:94:66:64:c0:1c:6f:bf:55:a4:15:20:32:90:6f:42:01: 99:e1:56:5c:d4:1f:68:7d:7e:92:d2:2a:08:74:8e:7f:43:00: 89:58:3e:4d:fb:59:c5:a5:96:48:af:83:b5:f3:de:54:53:87: b8:5e:e7:af:2e:95:1e:a0:1e:7d:8a:fc:f2:f2:d9:95:3f:a9: fa:c3:e7:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29gDhzwW/9Tvmyafnwf4fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjYwMTI1MjEwMTE1WhcNMjYwMTI2MjEwMTE1WjAzMTEwLwYDVQQD Eyg5OTQ5MWEwNTU2MGQyOWIzZTc5MmFlNmQ1YTE2ODc2ZTlkYjQwYzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6z3HTHrG1F9hYQfaEQzFFxht3eC1 gzLTxo6x4r412HRVDwyxD+GDSsXhN0NPZgQ/XiPBv8gnpxHQxtGJCEOjjpUCcMCG RHW6HRkGFpwuI+TcaeS6Yft8lTcIW8EEI2ZQEQ/2O78EKAlOo8qST7k0XHMFnryb PGHrUlD7kvIPO9YR8582mbRCsgqa+3R08VsHeh6S5LM4LPZABHFt46VUm3wkeHX3 3vD+oOSOhfKsDbXt4KVuaAN64bkeKK+lUYWu5UpaznVckFrI2AQCCiBxmUuVupzw TdmHoEeuxSpxvmj+8rG0l7FW0gv2AZGeAhiC8UU0T+ItyX+7eqRt4MpLaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlJGgVWDSmz55KubVoWh26dtAxWMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4Vqmfel q/eJL4jHcRMGRXlbaTyLddImx7A44FIPEUxG9dyof5Hox7ZbDeBfISQqYUBNPrue dndL0nog58Pi55fRVUgHiDK9TraR4lJh6PYyRuQdPNzI7QrFyfhvX9Gdy6KjWXZq igPDUNGWCDDPEjAFzLMFccPYjnwfoUzOg1tPvj6B4go7yqR6bjBP4QWtTkPKNWVx FgmRXu8DclKzI9EbTt3LAT/yTPMB4GYTGiB3SFE7qp+UZmTAHG+/VaQVIDKQb0IB meFWXNQfaH1+ktIqCHSOf0MAiVg+TftZxaWWSK+DtfPeVFOHuF7nry6VHqAefYr8 8vLZlT+p+sPnWg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:23 2026 by rpki-client