This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft File: yvYTMRp4acM1ymbLQjzG6LL6kCw.mft (raw, json) Hash identifier: p1k47LWSsAk/J3ARh5XBaujnrI5v/qwTLT2rZIkCLGo= Subject key identifier: 14:71:61:E9:D5:16:42:82:28:2A:40:68:E9:39:E0:E8:CD:8F:28:1B Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C Certificate issuer: /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c Certificate serial: 019BF6F5CB96DCA081CD6A4E0D1ADAF68B89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 21:01:01 +0000 Manifest this update: Sun 25 Jan 2026 21:01:01 +0000 Manifest next update: Mon 26 Jan 2026 21:01:01 +0000 Files and hashes: 1: 1w-DEGovWlGeUvxZrEhAkhZFri0.roa (hash: erRkVrb3pyj6Yu2qx5hIETEqq580z4OTzTDEWJgauCE=) 2: yvYTMRp4acM1ymbLQjzG6LL6kCw.crl (hash: sYP+SezKEE67TRzhj+aeD3G6QaAYiMMETzzrp4jCH1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:cb:96:dc:a0:81:cd:6a:4e:0d:1a:da:f6:8b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c Validity Not Before: Jan 25 21:01:01 2026 GMT Not After : Jan 26 21:01:01 2026 GMT Subject: CN=147161e9d5164282282a4068e939e0e8cd8f281b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d7:ce:72:6c:52:c2:10:40:63:ef:a5:67:ce: 35:54:95:e3:2f:d8:0a:47:59:3a:37:66:d4:bd:cf: 96:f2:1d:74:83:23:6c:72:5a:7d:ed:95:98:06:82: ae:56:03:af:36:33:83:b2:8c:ad:05:03:ee:6e:12: ee:4c:c4:8a:d1:2d:8f:29:82:53:c0:93:13:09:e2: 45:be:61:8e:67:3c:bd:83:a1:66:5e:da:e2:3e:3d: fb:12:c4:c7:63:0d:31:77:dd:38:5c:de:c4:a7:a2: 58:c9:b0:e5:79:1d:16:44:07:76:c4:a9:4b:8c:de: 9c:02:7d:b4:79:be:2d:00:a6:28:50:08:47:61:d9: ef:ba:c9:87:a9:11:67:42:47:8e:66:5f:02:94:20: 72:40:03:80:b3:df:79:bd:18:87:96:c8:76:cb:e6: 4b:ee:d8:79:b0:2b:47:b4:bd:37:56:f8:a5:66:2e: fc:56:01:b5:59:56:00:a6:16:22:2d:99:92:60:01: 43:1c:94:87:17:6e:de:33:b1:d6:8c:81:c7:70:4e: fc:37:d9:53:2e:a8:33:54:99:24:21:4e:29:18:b7: 5d:5a:66:7a:36:ed:29:b2:0e:a6:78:c4:0a:99:c3: 21:ee:1b:e1:c0:35:4e:41:7d:9e:36:3c:6e:a8:8b: a4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:71:61:E9:D5:16:42:82:28:2A:40:68:E9:39:E0:E8:CD:8F:28:1B X509v3 Authority Key Identifier: keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:6a:96:f6:b6:5a:b4:b7:cd:7c:85:f6:cb:66:9d:7b:1c:26: 85:db:5f:d6:65:c4:bc:b0:c3:4b:20:a6:15:65:0e:a3:2e:2c: 6a:47:10:f1:cc:93:df:e3:88:86:ef:2f:46:f8:03:4b:f0:d4: bf:37:1f:f8:e3:09:48:3d:21:85:38:f9:ae:64:41:b7:7d:68: 78:c5:80:6d:4d:f7:08:d9:13:84:76:aa:45:29:fc:a4:59:d9: 57:ff:63:b5:9e:16:3c:1a:6b:52:de:9b:95:a9:63:83:c7:bf: 3d:10:b8:d0:4f:78:e4:d2:95:c0:37:f7:ef:c9:2f:6d:a1:45: 0f:7a:52:b5:f2:4e:f0:f3:b2:2f:01:99:ee:bc:b0:20:90:fb: b5:dd:29:44:02:14:7d:55:cb:12:a3:2e:98:02:81:a3:f6:12: b6:63:82:41:b8:45:ec:70:60:ef:f2:f3:be:cf:d1:bc:1b:e2: ab:56:a3:88:d3:a9:66:1e:30:9e:b1:69:d6:03:4d:b0:20:d3: cd:01:0c:e0:ee:0a:7f:10:c2:43:a2:f6:e6:96:dd:66:4a:32: 83:4a:bb:91:37:0f:8d:7e:c0:fd:ba:c6:e4:02:ae:b5:d6:0c: 47:f1:c0:fa:36:1b:32:72:db:fb:a9:94:c2:29:3b:0b:90:1c: cf:8b:6f:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29cuW3KCBzWpODRra9ouJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZjYxMzMxMWE3ODY5YzMzNWNhNjZjYjQyM2NjNmU4YjJm YTkwMmMwHhcNMjYwMTI1MjEwMTAxWhcNMjYwMTI2MjEwMTAxWjAzMTEwLwYDVQQD EygxNDcxNjFlOWQ1MTY0MjgyMjgyYTQwNjhlOTM5ZTBlOGNkOGYyODFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodfOcmxSwhBAY++lZ841VJXjL9gK R1k6N2bUvc+W8h10gyNsclp97ZWYBoKuVgOvNjODsoytBQPubhLuTMSK0S2PKYJT wJMTCeJFvmGOZzy9g6FmXtriPj37EsTHYw0xd904XN7Ep6JYybDleR0WRAd2xKlL jN6cAn20eb4tAKYoUAhHYdnvusmHqRFnQkeOZl8ClCByQAOAs995vRiHlsh2y+ZL 7th5sCtHtL03VvilZi78VgG1WVYAphYiLZmSYAFDHJSHF27eM7HWjIHHcE78N9lT LqgzVJkkIU4pGLddWmZ6Nu0psg6meMQKmcMh7hvhwDVOQX2eNjxuqIuk6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRxYenVFkKCKCpAaOk54OjNjygbMB8GA1UdIwQY MBaAFMr2EzEaeGnDNcpmy0I8xuiy+pAsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NGVhNGItM2ZmMC00ZjdiLTlkODMt YzMxMGVjYTNjMDdiLzEveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85NGVhNGItM2ZmMC00ZjdiLTlkODMtYzMxMGVjYTNjMDdi LzEveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmqW9rZa tLfNfIX2y2adexwmhdtf1mXEvLDDSyCmFWUOoy4sakcQ8cyT3+OIhu8vRvgDS/DU vzcf+OMJSD0hhTj5rmRBt31oeMWAbU33CNkThHaqRSn8pFnZV/9jtZ4WPBprUt6b laljg8e/PRC40E945NKVwDf378kvbaFFD3pStfJO8POyLwGZ7rywIJD7td0pRAIU fVXLEqMumAKBo/YStmOCQbhF7HBg7/Lzvs/RvBviq1ajiNOpZh4wnrFp1gNNsCDT zQEM4O4KfxDCQ6L25pbdZkoyg0q7kTcPjX7A/brG5AKutdYMR/HA+jYbMnLb+6mU wik7C5Acz4tvlA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:08:57 2026 by rpki-client