This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft File: yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json) Hash identifier: 0CQqjSf+PDVERMAR8tZOAfSFlonMeaiVhVUHqFolkHQ= Subject key identifier: 2E:DD:BA:BB:D1:E8:AD:D9:D4:4D:CE:D5:FB:38:E1:71:26:E7:8F:08 Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59 Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59 Certificate serial: 019BF7635AEEBB21BBB1763CFB65EE6A0CDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft Manifest number: 1097 Signing time: Sun 25 Jan 2026 23:00:42 +0000 Manifest this update: Sun 25 Jan 2026 23:00:42 +0000 Manifest next update: Mon 26 Jan 2026 23:00:42 +0000 Files and hashes: 1: 0Lwj5i1c4Zxo9S7reLT043tZQto.roa (hash: YQ43Pzm8kIwiUn3utvGc8HdrkEgRWVgYKvbGV3IgZ04=) 2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: 2M53PyFJUCb0PYsSPhyjWVOIYeUdYND0OjxU+gUS1OA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:5a:ee:bb:21:bb:b1:76:3c:fb:65:ee:6a:0c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59 Validity Not Before: Jan 25 23:00:42 2026 GMT Not After : Jan 26 23:00:42 2026 GMT Subject: CN=2eddbabbd1e8add9d44dced5fb38e17126e78f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b8:98:f3:c3:8d:97:25:f3:63:bc:e4:c8:72: 0d:80:b1:ff:72:be:2d:18:29:cd:f0:57:01:d0:6a: ef:bc:b7:99:59:88:a6:ff:83:37:9e:ca:3b:e3:60: c3:40:26:30:27:0e:1f:07:ce:fa:6b:50:60:0e:fa: b7:4b:47:48:2e:f5:78:d6:ff:4b:fb:b8:84:cb:38: e7:6d:84:11:05:be:34:73:f4:b7:5c:fc:b5:ef:c6: a2:6a:67:b2:7e:3e:1f:78:04:fd:ab:af:d6:e7:e3: d2:99:6c:75:b8:b6:16:68:0e:74:44:36:3e:8b:f9: e9:2b:ab:9d:e9:8e:d0:8a:04:52:00:41:b4:11:6f: 6c:2b:27:ad:7d:86:2d:c8:20:b5:95:81:62:58:3c: bf:4a:7b:6c:23:82:a2:86:2b:64:81:c5:89:0f:eb: 1d:24:00:ec:d4:15:ea:48:f3:7f:13:2e:23:17:9e: e1:29:13:04:b0:17:72:8e:d2:10:b6:20:d7:a3:30: af:11:47:b1:da:22:06:09:64:35:a9:6a:69:40:b2: 86:e4:af:d4:ee:79:61:99:ed:f8:cd:ad:a4:6d:64: 8f:05:03:fa:ae:af:d7:e2:e3:ed:22:79:cb:5d:38: 5a:c5:86:5b:76:35:69:71:2d:0a:b5:04:20:c0:5b: e1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DD:BA:BB:D1:E8:AD:D9:D4:4D:CE:D5:FB:38:E1:71:26:E7:8F:08 X509v3 Authority Key Identifier: keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:55:ff:8c:fe:d6:7c:f9:e6:67:f0:4e:c3:07:fe:5f:4c:90: 3e:39:9c:04:60:30:1f:c4:42:ae:28:75:fc:71:df:ca:d6:76: b5:18:4a:a0:45:00:0c:c8:c5:e1:6f:2f:6b:f7:1e:6b:27:0a: ed:24:77:37:c1:13:bf:e0:ad:47:b5:3e:b4:40:4c:2f:d5:7f: d5:7b:01:e3:87:26:ec:86:8a:3a:34:ce:d6:5a:96:85:7e:60: 4b:3a:89:85:33:a6:98:01:05:8b:d9:5e:01:8d:ba:3f:9f:8c: b5:be:81:cc:da:b5:a9:ef:85:21:2e:f8:a1:47:70:6c:c2:42: 86:cb:01:10:3a:e7:3c:c5:e0:4e:d7:99:e8:fb:a9:5f:67:10: ee:6d:de:fe:6d:af:b9:78:13:11:4b:21:b2:44:59:46:3e:d4: 6c:a4:c5:a0:40:93:c6:8b:fb:a1:cd:cb:3e:80:4d:07:d1:bd: 91:fe:bf:1c:74:16:64:af:c1:ef:41:21:8b:bb:4a:23:fb:3e: d6:a8:c5:4d:b0:b6:bd:f6:dc:91:71:eb:00:1f:00:e3:0b:bc: de:2d:f5:3b:5e:1b:1d:69:04:4a:3a:f1:40:68:fa:54:e9:21: b1:b8:ac:6e:15:f0:e1:df:6c:23:2b:1d:08:20:44:2d:ce:bf: 97:87:61:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y1ruuyG7sXY8+2XuagzeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZTBlNGM5YWNiZjcwMWY5MzAxNDliMzI1Y2UwNDJjZjlm OTJhNTkwHhcNMjYwMTI1MjMwMDQyWhcNMjYwMTI2MjMwMDQyWjAzMTEwLwYDVQQD EygyZWRkYmFiYmQxZThhZGQ5ZDQ0ZGNlZDVmYjM4ZTE3MTI2ZTc4ZjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLiY88ONlyXzY7zkyHINgLH/cr4t GCnN8FcB0GrvvLeZWYim/4M3nso742DDQCYwJw4fB876a1BgDvq3S0dILvV41v9L +7iEyzjnbYQRBb40c/S3XPy178aiameyfj4feAT9q6/W5+PSmWx1uLYWaA50RDY+ i/npK6ud6Y7QigRSAEG0EW9sKyetfYYtyCC1lYFiWDy/SntsI4KihitkgcWJD+sd JADs1BXqSPN/Ey4jF57hKRMEsBdyjtIQtiDXozCvEUex2iIGCWQ1qWppQLKG5K/U 7nlhme34za2kbWSPBQP6rq/X4uPtInnLXThaxYZbdjVpcS0KtQQgwFvhcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7durvR6K3Z1E3O1fs44XEm548IMB8GA1UdIwQY MBaAFMng5Mmsv3AfkwFJsyXOBCz5+SpZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGI2NDEtZDFhMy00ZGRhLWJmOTEt YmU3YzgyOGMzNjkzLzEveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mZGI2NDEtZDFhMy00ZGRhLWJmOTEtYmU3YzgyOGMzNjkz LzEveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAolX/jP7W fPnmZ/BOwwf+X0yQPjmcBGAwH8RCrih1/HHfytZ2tRhKoEUADMjF4W8va/ceaycK 7SR3N8ETv+CtR7U+tEBML9V/1XsB44cm7IaKOjTO1lqWhX5gSzqJhTOmmAEFi9le AY26P5+Mtb6BzNq1qe+FIS74oUdwbMJChssBEDrnPMXgTteZ6PupX2cQ7m3e/m2v uXgTEUshskRZRj7UbKTFoECTxov7oc3LPoBNB9G9kf6/HHQWZK/B70Ehi7tKI/s+ 1qjFTbC2vfbckXHrAB8A4wu83i31O14bHWkESjrxQGj6VOkhsbisbhXw4d9sIysd CCBELc6/l4dhdw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:50 2026 by rpki-client