This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json) Hash identifier: Pv/DAfEPv4Ng6gG8LDQXFjx74dVsyKyy1wXjsPu+n0k= Subject key identifier: 49:08:F1:B6:3B:D0:A0:1F:2F:53:D4:A4:A9:34:C6:42:AA:42:DC:20 Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24 Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424 Certificate serial: 019BF9BFAFA3A18F729EB760B7C5BD1BDCDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft Manifest number: 0896 Signing time: Mon 26 Jan 2026 10:00:47 +0000 Manifest this update: Mon 26 Jan 2026 10:00:47 +0000 Manifest next update: Tue 27 Jan 2026 10:00:47 +0000 Files and hashes: 1: H1VE2ZkBqR8y9rnIA-ZTuzeFoCk.roa (hash: 3CEpvrN229vRpcqITP4Y01YD4936c1DOC0Lixuq0wEM=) 2: qRXAdJp0xbYo0FT6eucc0rsG8Yw.roa (hash: fUKa/Z+tq+35Z3GUfMU3rii79affOtxwZwlAfn3uJ6U=) 3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: CYd4ZRZtqQig8ja50UfkR4VP2NGHFrEkIOJA/sakajQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:bf:af:a3:a1:8f:72:9e:b7:60:b7:c5:bd:1b:dc:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424 Validity Not Before: Jan 26 10:00:47 2026 GMT Not After : Jan 27 10:00:47 2026 GMT Subject: CN=4908f1b63bd0a01f2f53d4a4a934c642aa42dc20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:39:b4:27:18:4f:1c:35:95:7e:59:f3:45:f0: e4:f7:a4:44:84:5d:22:49:82:be:d0:99:c7:28:5f: 5d:41:99:0b:4a:a3:67:80:37:b2:9c:ad:18:7a:c6: 00:3f:4e:a2:97:ea:da:50:34:9c:9f:b9:f8:86:00: 51:a2:2b:b8:b3:cf:be:60:b6:29:2b:7a:4c:67:01: 82:28:c6:db:e5:ea:3d:91:89:22:e3:8e:7b:d3:eb: 2d:e3:09:f2:92:20:9e:de:eb:0f:e6:44:e5:d4:4b: 03:56:52:f1:4f:76:4f:ed:6f:f7:55:3a:94:d0:b7: fe:5a:64:3f:31:0e:3e:d2:55:02:23:52:01:c8:df: 9f:92:e3:53:3c:a2:bc:70:49:e3:29:13:16:d1:53: 37:01:aa:55:b9:70:6a:30:91:9f:93:a7:85:27:fc: 89:9b:32:3d:a2:19:59:9b:78:ea:ba:5e:b6:3c:75: fd:b5:92:68:2c:b6:b4:52:10:39:3c:22:20:99:46: 58:e9:2e:65:80:07:ae:a4:e1:b8:81:e5:79:2d:37: 0a:0d:3c:a8:a9:11:9f:fd:17:f9:e3:0c:fb:59:0c: 91:26:36:f7:10:a0:b4:4b:45:93:a9:01:d5:44:04: ab:8f:1e:24:7a:6a:05:1b:e9:ca:34:c8:0d:34:e7: b5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:08:F1:B6:3B:D0:A0:1F:2F:53:D4:A4:A9:34:C6:42:AA:42:DC:20 X509v3 Authority Key Identifier: keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:51:0c:ca:c2:89:e6:57:24:4d:c3:05:4a:3d:cc:33:c1:a8: 7f:63:bb:79:2a:52:c4:c3:0a:ba:f9:aa:df:63:63:17:e3:21: be:3b:92:1a:f7:c2:c7:4d:80:56:0a:1b:33:0b:3d:df:f1:2b: 0c:be:e6:57:d1:0f:91:d6:c6:95:77:6d:94:bc:9a:12:21:4a: e3:bd:89:e8:8d:cd:cc:fc:c1:cc:41:b8:d2:01:4a:82:fc:5d: 32:fe:25:bb:02:3a:38:3a:d3:00:1a:0b:14:e0:b5:48:78:7e: 17:8a:c9:fa:8c:24:66:65:91:b3:21:50:eb:47:86:aa:40:6e: ab:d7:ea:c1:2c:96:11:c8:c6:16:0b:7c:8c:1c:2b:d4:f4:54: 09:b0:54:e3:2e:61:7c:2e:b7:68:cf:df:ee:db:80:11:d9:ef: 1b:b3:1a:29:3c:54:0b:e6:ea:db:b7:8a:a2:cc:be:a6:1e:34: 6e:a2:03:6f:a7:a1:46:2c:c3:8b:32:96:5d:42:a7:0d:48:ac: aa:5f:79:cc:88:2c:13:6e:13:e6:27:be:88:cd:3d:62:22:d2: 43:35:be:92:2f:e3:6d:59:15:15:22:34:33:f2:25:45:ea:22: 59:0c:b2:5e:1c:e1:cf:e0:c6:57:47:81:84:9b:8f:cf:95:4a: bd:cf:f6:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5v6+joY9ynrdgt8W9G9zcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NTQ0Yzc3ODE1MmYwZmQ4NWU1ZGNiNDQ5MDRmMDAxZTU5 ODc0MjQwHhcNMjYwMTI2MTAwMDQ3WhcNMjYwMTI3MTAwMDQ3WjAzMTEwLwYDVQQD Eyg0OTA4ZjFiNjNiZDBhMDFmMmY1M2Q0YTRhOTM0YzY0MmFhNDJkYzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjm0JxhPHDWVflnzRfDk96REhF0i SYK+0JnHKF9dQZkLSqNngDeynK0YesYAP06il+raUDScn7n4hgBRoiu4s8++YLYp K3pMZwGCKMbb5eo9kYki44570+st4wnykiCe3usP5kTl1EsDVlLxT3ZP7W/3VTqU 0Lf+WmQ/MQ4+0lUCI1IByN+fkuNTPKK8cEnjKRMW0VM3AapVuXBqMJGfk6eFJ/yJ mzI9ohlZm3jqul62PHX9tZJoLLa0UhA5PCIgmUZY6S5lgAeupOG4geV5LTcKDTyo qRGf/Rf54wz7WQyRJjb3EKC0S0WTqQHVRASrjx4kemoFG+nKNMgNNOe1YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkI8bY70KAfL1PUpKk0xkKqQtwgMB8GA1UdIwQY MBaAFMhUTHeBUvD9heXctEkE8AHlmHQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUZSTWQ0RlM4UDJGNWR5MFNRVHdBZVdZZENRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hMWYzNTEtNDJmZC00ZDQ0LWE5YjMt ZDk0MDA1MGU1NmNhLzEveUZSTWQ0RlM4UDJGNWR5MFNRVHdBZVdZZENRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9hMWYzNTEtNDJmZC00ZDQ0LWE5YjMtZDk0MDA1MGU1NmNh LzEveUZSTWQ0RlM4UDJGNWR5MFNRVHdBZVdZZENRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVEMysKJ 5lckTcMFSj3MM8Gof2O7eSpSxMMKuvmq32NjF+MhvjuSGvfCx02AVgobMws93/Er DL7mV9EPkdbGlXdtlLyaEiFK472J6I3NzPzBzEG40gFKgvxdMv4luwI6ODrTABoL FOC1SHh+F4rJ+owkZmWRsyFQ60eGqkBuq9fqwSyWEcjGFgt8jBwr1PRUCbBU4y5h fC63aM/f7tuAEdnvG7MaKTxUC+bq27eKosy+ph40bqIDb6ehRizDizKWXUKnDUis ql95zIgsE24T5ie+iM09YiLSQzW+ki/jbVkVFSI0M/IlReoiWQyyXhzhz+DGV0eB hJuPz5VKvc/2hA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:35:53 2026 by rpki-client