This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json) Hash identifier: e0rBGUhMhOhcLCy0t4wa25j6uxG020RYchLSMP4tE3k= Subject key identifier: E3:D9:C2:82:F9:D7:4B:43:E2:EA:3F:14:EA:9A:FB:BA:70:F5:88:69 Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df Certificate serial: 019BF687D23A1DBEE639C03CDFEE684B5201 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft Manifest number: 070A Signing time: Sun 25 Jan 2026 19:00:54 +0000 Manifest this update: Sun 25 Jan 2026 19:00:54 +0000 Manifest next update: Mon 26 Jan 2026 19:00:54 +0000 Files and hashes: 1: 7ddZ6AuTaKTVHMzwtcM1Koce3jI.roa (hash: xG5K9PIIy6VwRa0eYfMip6RI0P+1GY89uLI9ih9L+Uo=) 2: d3-5CKAZ7Mk-2t_tjSmFOfnjMzk.roa (hash: vwsp8oVhgfqNXWForlLjiHqAE45N0F3rkdkhErDxiHo=) 3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: /xikwcSF7XJcMPA0HVOhjTiKOBrqmnrytGHUqcAIc7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:d2:3a:1d:be:e6:39:c0:3c:df:ee:68:4b:52:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df Validity Not Before: Jan 25 19:00:54 2026 GMT Not After : Jan 26 19:00:54 2026 GMT Subject: CN=e3d9c282f9d74b43e2ea3f14ea9afbba70f58869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:33:23:d9:94:9f:44:b5:ed:0e:f9:6f:c6:30: 27:75:a8:ba:03:b7:f7:aa:be:d3:98:cf:35:88:ee: 5c:55:5f:0c:5d:17:62:c8:a1:8a:20:be:96:17:1e: 8b:48:0a:d7:f5:f7:c3:03:d6:ab:f3:14:cc:56:af: d5:1c:f4:7b:98:5d:d1:4d:4f:d6:c2:7a:b4:c7:49: a6:98:04:b9:2d:fc:c8:f0:3c:fd:62:d4:eb:86:6f: b6:8c:0a:6b:d1:89:9f:55:24:bd:64:20:52:6f:55: 76:da:30:ec:cd:50:28:fb:25:e8:54:54:32:32:f1: e9:cd:52:06:84:2e:d1:45:42:f8:55:3b:82:fb:45: cd:b6:52:1b:ec:35:3e:f6:44:d0:e9:46:1a:88:65: 2a:b3:27:7f:d3:3e:72:33:6e:dc:43:83:76:e1:51: 74:b5:74:32:89:3e:4e:8d:ff:1a:06:37:05:6e:3d: d2:4c:79:23:57:e6:d1:ab:b6:bd:35:7c:c4:15:3a: b4:ff:62:23:01:09:56:ea:c0:37:84:1b:61:2b:dd: fa:0b:2d:07:b8:8b:45:b2:b7:00:c3:a5:99:59:02: 37:41:99:cf:91:e8:ed:e6:4b:1c:b8:10:9c:12:af: 61:96:26:81:c4:3d:09:bb:bb:0c:bc:16:ac:84:f8: a3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D9:C2:82:F9:D7:4B:43:E2:EA:3F:14:EA:9A:FB:BA:70:F5:88:69 X509v3 Authority Key Identifier: keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:4e:f0:ad:e2:ff:00:f6:44:23:cc:fb:c6:39:21:8d:9c:22: 61:6e:08:bf:92:93:d1:31:64:cc:67:e3:64:c6:db:cf:f8:c9: ac:0c:31:18:4a:25:0e:87:ea:12:a1:6f:aa:fa:e5:62:75:4a: 12:21:a5:74:a5:11:16:e8:24:6d:12:b3:90:7a:fd:99:e6:6f: e3:41:b0:dd:42:15:af:4b:df:a4:05:a0:be:9f:f5:e3:7c:92: 9e:7f:c0:a1:e7:e0:74:e2:d9:fe:cd:cb:2d:bb:1b:77:f9:96: c4:67:a8:a7:26:86:7f:1c:55:03:ae:df:4d:9e:1c:1c:e1:76: db:0e:c5:a5:10:9f:d8:93:7a:d5:28:dd:3c:24:cc:03:df:ff: e5:cf:f9:20:43:9c:9f:0d:18:ef:4d:0e:77:0f:81:71:ce:3c: 2a:0e:63:cf:72:f8:8c:aa:78:37:13:b7:92:8e:57:84:d4:c5: 68:90:e9:56:2d:9f:6c:06:6a:6c:fb:8b:2f:96:cf:cb:ef:39: 3f:14:d1:a9:10:45:6b:60:6c:32:a1:87:fc:29:6b:fd:7e:67: f2:16:83:98:ce:37:82:76:4c:c6:93:d1:18:f6:b4:69:fc:c3: 09:9f:9a:0a:2a:13:83:e5:06:f1:0b:bd:b2:1d:b4:f0:3c:25: ff:8f:23:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h9I6Hb7mOcA83+5oS1IBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDQ5ZmVmNmRhZDI2NjE5ZWJlZTA2NWQxZjIzMWMxYTI3 NmQ3ZGYwHhcNMjYwMTI1MTkwMDU0WhcNMjYwMTI2MTkwMDU0WjAzMTEwLwYDVQQD EyhlM2Q5YzI4MmY5ZDc0YjQzZTJlYTNmMTRlYTlhZmJiYTcwZjU4ODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjMj2ZSfRLXtDvlvxjAndai6A7f3 qr7TmM81iO5cVV8MXRdiyKGKIL6WFx6LSArX9ffDA9ar8xTMVq/VHPR7mF3RTU/W wnq0x0mmmAS5LfzI8Dz9YtTrhm+2jApr0YmfVSS9ZCBSb1V22jDszVAo+yXoVFQy MvHpzVIGhC7RRUL4VTuC+0XNtlIb7DU+9kTQ6UYaiGUqsyd/0z5yM27cQ4N24VF0 tXQyiT5Ojf8aBjcFbj3STHkjV+bRq7a9NXzEFTq0/2IjAQlW6sA3hBthK936Cy0H uItFsrcAw6WZWQI3QZnPkejt5kscuBCcEq9hliaBxD0Ju7sMvBashPijnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPZwoL510tD4uo/FOqa+7pw9YhpMB8GA1UdIwQY MBaAFMnUn+9trSZhnr7gZdHyMcGidtffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNzkyNjktZjRmMy00MjE0LTkxMzAt MGQ0ZjQwYmMzZmFhLzEveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8yNzkyNjktZjRmMy00MjE0LTkxMzAtMGQ0ZjQwYmMzZmFh LzEveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANU7wreL/ APZEI8z7xjkhjZwiYW4Iv5KT0TFkzGfjZMbbz/jJrAwxGEolDofqEqFvqvrlYnVK EiGldKURFugkbRKzkHr9meZv40Gw3UIVr0vfpAWgvp/143ySnn/AoefgdOLZ/s3L Lbsbd/mWxGeopyaGfxxVA67fTZ4cHOF22w7FpRCf2JN61SjdPCTMA9//5c/5IEOc nw0Y700Odw+Bcc48Kg5jz3L4jKp4NxO3ko5XhNTFaJDpVi2fbAZqbPuLL5bPy+85 PxTRqRBFa2BsMqGH/Clr/X5n8haDmM43gnZMxpPRGPa0afzDCZ+aCioTg+UG8Qu9 sh208Dwl/48j1Q== -----END CERTIFICATE-----Generated at Sun Jan 25 22:06:36 2026 by rpki-client