This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json) Hash identifier: spyIpiMaQcvN1Ml/AAO98EIyebn6MaWKalj/jFWLqEw= Subject key identifier: 98:2B:E2:D6:FE:23:46:9F:09:F9:9B:44:1E:1D:F0:4A:FD:8F:F5:F7 Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5 Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5 Certificate serial: 019BF4D11F1A1D1CA32D25E89A111134996A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft Manifest number: 1042 Signing time: Sun 25 Jan 2026 11:01:44 +0000 Manifest this update: Sun 25 Jan 2026 11:01:44 +0000 Manifest next update: Mon 26 Jan 2026 11:01:44 +0000 Files and hashes: 1: 66guKTDTss6EYTkw4zccY7WRZk8.roa (hash: KdTmBbtAcuQvls4uo/l+c91NBEA+S2/Wj6SH3gT/NAo=) 2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: TkjherPeD8ljU9PUAkvDlTE3yqYccpIkXIMHk6frgpc=) 3: t-JixdgR2KW6mLeZ2M5qWg6yCfQ.roa (hash: qx2Rz+KR5H2gFTlz4zjvnr2rqQPHC17WGAVsmy+ZNSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d1:1f:1a:1d:1c:a3:2d:25:e8:9a:11:11:34:99:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5 Validity Not Before: Jan 25 11:01:44 2026 GMT Not After : Jan 26 11:01:44 2026 GMT Subject: CN=982be2d6fe23469f09f99b441e1df04afd8ff5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6c:b4:02:16:8d:ec:48:12:a6:9a:64:f9:b3: d9:80:31:d0:c4:29:69:6f:e9:1b:0f:47:c9:6d:3c: 2e:92:93:ac:85:2d:05:bd:8b:86:10:c8:ad:de:29: 10:cd:f0:3f:c1:0d:c4:2d:60:a9:f9:7b:74:70:75: 55:1b:ef:40:24:7a:09:5e:86:c0:8b:a9:cd:ad:5b: 7d:32:24:30:72:cd:b9:1a:24:fd:de:14:31:0b:7c: 94:6a:0f:ef:92:b6:5c:2e:26:cd:6e:c2:a2:6c:67: 1f:b5:6a:6d:e4:19:4a:e6:55:fb:e5:8a:91:de:53: 6b:86:8e:91:31:c6:17:bd:5d:0c:75:6b:c6:7b:9a: 1a:7d:d0:cb:60:b2:a0:53:ec:03:25:c2:02:2e:2e: 68:dd:3d:e9:e3:9c:05:c1:c5:0e:cc:1d:74:60:35: c1:7d:75:1c:02:4d:50:1d:66:57:05:3d:d1:6d:c6: aa:45:26:a7:e6:71:60:1f:d5:76:15:7f:85:0c:74: 9a:f7:82:10:73:d8:39:e4:d5:d5:30:56:19:f5:8a: 6a:f5:f2:08:5c:7c:5e:a3:fc:d3:03:19:01:40:0b: b0:5d:d8:0b:07:76:56:f4:35:66:5d:05:f2:9d:ec: b8:27:ac:68:32:4d:55:f1:db:b3:66:68:a8:bd:67: 63:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2B:E2:D6:FE:23:46:9F:09:F9:9B:44:1E:1D:F0:4A:FD:8F:F5:F7 X509v3 Authority Key Identifier: keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fc:ac:d4:8c:71:44:65:88:c4:6c:4b:ea:76:be:87:8c:f0: 93:8e:3d:8d:d8:6e:ad:55:0d:82:18:7a:c3:e1:b5:93:99:fc: 91:71:5d:a8:99:fd:1d:50:ff:d0:a3:e7:59:97:20:b6:be:73: 2e:96:3a:c8:7b:31:fb:ba:24:c2:b4:12:33:6a:ca:51:da:b1: 13:25:d1:c5:83:b5:dd:1f:4c:17:d4:c7:bf:4a:8a:03:90:d9: b0:9f:5b:6b:1e:58:1a:d4:ee:3a:71:d9:0f:13:eb:71:29:19: f7:c8:54:31:19:11:26:72:e3:eb:92:d7:08:55:d7:86:2f:56: 4c:66:6c:35:01:f7:54:58:ae:08:f5:f3:a9:37:e2:bf:89:af: 92:38:88:ec:ae:cb:a3:88:43:ec:f4:25:86:9c:88:79:c5:2e: 6d:d0:0f:4e:1f:31:9d:c7:c6:4f:00:c5:3a:3a:b0:77:eb:48: c1:2d:14:6a:cc:93:c6:68:3e:7e:54:0f:15:90:92:49:4b:27: ba:9f:62:3b:22:2e:7f:38:a4:97:b0:b1:29:ba:5a:2f:10:c1: e2:eb:22:62:e0:bc:de:ea:6d:88:23:af:8d:4b:09:18:86:f7: b4:34:a5:26:69:56:9e:34:bb:ab:9d:4f:f8:bd:a5:78:4e:5e: 78:c7:60:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00R8aHRyjLSXomhERNJlqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNDEwNzJlZTFhMWIxYzA2ODQxMmRmYjAzNTVkMjc1OTkz MmM1ZjUwHhcNMjYwMTI1MTEwMTQ0WhcNMjYwMTI2MTEwMTQ0WjAzMTEwLwYDVQQD Eyg5ODJiZTJkNmZlMjM0NjlmMDlmOTliNDQxZTFkZjA0YWZkOGZmNWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWy0AhaN7EgSpppk+bPZgDHQxClp b+kbD0fJbTwukpOshS0FvYuGEMit3ikQzfA/wQ3ELWCp+Xt0cHVVG+9AJHoJXobA i6nNrVt9MiQwcs25GiT93hQxC3yUag/vkrZcLibNbsKibGcftWpt5BlK5lX75YqR 3lNrho6RMcYXvV0MdWvGe5oafdDLYLKgU+wDJcICLi5o3T3p45wFwcUOzB10YDXB fXUcAk1QHWZXBT3RbcaqRSan5nFgH9V2FX+FDHSa94IQc9g55NXVMFYZ9Ypq9fII XHxeo/zTAxkBQAuwXdgLB3ZW9DVmXQXyney4J6xoMk1V8duzZmiovWdjbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgr4tb+I0afCfmbRB4d8Er9j/X3MB8GA1UdIwQY MBaAFGBBBy7hobHAaEEt+wNV0nWZMsX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84ZGZhMzAtMmE4NS00YjQ2LTk1MzMt NGQ1Zjc2MzdlZmNlLzEvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84ZGZhMzAtMmE4NS00YjQ2LTk1MzMtNGQ1Zjc2MzdlZmNl LzEvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPys1Ixx RGWIxGxL6na+h4zwk449jdhurVUNghh6w+G1k5n8kXFdqJn9HVD/0KPnWZcgtr5z LpY6yHsx+7okwrQSM2rKUdqxEyXRxYO13R9MF9THv0qKA5DZsJ9bax5YGtTuOnHZ DxPrcSkZ98hUMRkRJnLj65LXCFXXhi9WTGZsNQH3VFiuCPXzqTfiv4mvkjiI7K7L o4hD7PQlhpyIecUubdAPTh8xncfGTwDFOjqwd+tIwS0UasyTxmg+flQPFZCSSUsn up9iOyIufzikl7CxKbpaLxDB4usiYuC83uptiCOvjUsJGIb3tDSlJmlWnjS7q51P +L2leE5eeMdgnQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:00 2026 by rpki-client