This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft File: Ym0k1r81OWP-WvolsKWWZxUqhtA.mft (raw, json) Hash identifier: n7/O2DwwpmXXVKJY9YY46C6164Pm4YDNfgKB3yWdFG4= Subject key identifier: 33:14:16:5E:BA:1A:30:C3:85:8C:82:6C:49:5F:30:40:AE:90:06:F4 Authority key identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0 Certificate issuer: /CN=626d24d6bf353963fe5afa25b0a59667152a86d0 Certificate serial: 019BF83FCA02D4C79F8A9F2962C2734A7C7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft Manifest number: 0F79 Signing time: Mon 26 Jan 2026 03:01:28 +0000 Manifest this update: Mon 26 Jan 2026 03:01:28 +0000 Manifest next update: Tue 27 Jan 2026 03:01:28 +0000 Files and hashes: 1: BOEi7NrSCNnbOJagz6PacwPyCow.roa (hash: gcJkZ8tsvtRiMSl8JsUfBFpQEizMhx1qFKi60dWgXD0=) 2: Ym0k1r81OWP-WvolsKWWZxUqhtA.crl (hash: UNjA7+RC04NtG4AjSYHwScDJ/8qqWRiieH2C/3HYCD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:ca:02:d4:c7:9f:8a:9f:29:62:c2:73:4a:7c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626d24d6bf353963fe5afa25b0a59667152a86d0 Validity Not Before: Jan 26 03:01:28 2026 GMT Not After : Jan 27 03:01:28 2026 GMT Subject: CN=3314165eba1a30c3858c826c495f3040ae9006f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9e:da:b2:5f:37:ff:ac:d2:47:e2:3c:7a:b2: d1:a1:5f:db:0e:75:c9:8d:63:b1:41:82:9c:45:e9: a5:96:26:23:ec:6b:91:fc:43:ed:8f:c3:f1:b1:62: fe:03:bb:71:9c:b7:44:c4:f4:96:09:28:3b:de:c4: 22:b7:d3:26:00:5f:a0:83:65:a7:be:98:88:cb:1e: 8d:05:51:15:16:e9:71:70:13:d8:41:41:61:e6:54: a2:80:60:91:f3:8b:44:7c:ef:2e:77:ae:0f:85:ba: 6e:b9:2e:2e:ce:60:88:be:c2:d4:9c:ec:3f:e2:8b: ad:e2:d0:30:6f:ed:06:34:ce:09:7f:4d:0f:9a:21: 56:cf:df:b8:fa:dc:7b:1b:90:67:b7:e4:61:d1:5f: 66:d8:67:61:7e:dc:5d:cf:e9:c4:b9:2f:58:08:c4: 7f:f9:2d:77:b9:f4:7f:7c:96:37:69:e0:8d:5c:17: 8d:e3:e9:0d:fe:e5:bc:d1:76:c9:5c:53:0e:cb:8f: 3c:4a:b7:43:54:0f:f0:a9:b7:23:da:ca:45:19:b1: a1:ba:32:5b:ac:4f:6c:ea:78:0c:df:c6:f6:9a:f3: f4:79:a3:52:03:81:12:18:8c:26:45:85:62:78:2e: ed:75:48:df:93:b8:ac:5f:e2:2d:2e:5b:b4:3f:93: 16:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:14:16:5E:BA:1A:30:C3:85:8C:82:6C:49:5F:30:40:AE:90:06:F4 X509v3 Authority Key Identifier: keyid:62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:52:63:db:16:f4:ac:12:1f:9c:d4:3b:c8:0b:8e:0c:0e:4a: 2f:70:3c:bc:6c:55:96:b1:c5:f7:61:c0:41:5f:bb:5f:a8:90: dd:ba:3a:86:27:d6:5b:2d:f4:40:dc:7b:db:8f:25:e2:73:dc: 98:51:8c:55:c2:37:f5:44:26:c6:d3:08:f8:72:5d:61:0d:f0: 61:23:e8:da:00:5a:6c:70:b8:74:3d:11:0e:2d:79:03:b5:75: 9a:d2:88:3a:d5:43:a8:a9:b0:56:62:74:a1:78:a3:49:46:47: ba:d4:1b:60:8f:a2:0d:c3:d3:13:c0:16:f2:d2:20:30:ec:15: 18:ac:ab:45:ef:6d:9e:35:33:fe:a9:b4:1f:79:66:7a:a0:79: bf:80:95:d9:33:23:40:38:06:5c:60:fc:06:a1:8b:85:84:83: 5b:ec:a5:02:77:06:7b:a3:78:f0:28:fd:39:16:72:6b:e1:59: 7c:59:61:94:05:0b:b4:57:df:12:d6:ea:6d:5f:4a:73:0b:fc: 9c:1e:7b:b7:17:6c:81:7c:02:ac:3d:8a:d5:04:62:90:db:c6: ea:1b:da:4e:58:34:bf:d5:34:4e:f0:96:30:80:8d:1a:8b:ae: 92:8e:44:56:e4:2a:e3:79:5c:7a:51:0c:90:05:79:c9:d3:c8: 19:69:06:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P8oC1Mefip8pYsJzSnx+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmQyNGQ2YmYzNTM5NjNmZTVhZmEyNWIwYTU5NjY3MTUy YTg2ZDAwHhcNMjYwMTI2MDMwMTI4WhcNMjYwMTI3MDMwMTI4WjAzMTEwLwYDVQQD EygzMzE0MTY1ZWJhMWEzMGMzODU4YzgyNmM0OTVmMzA0MGFlOTAwNmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm57asl83/6zSR+I8erLRoV/bDnXJ jWOxQYKcRemlliYj7GuR/EPtj8PxsWL+A7txnLdExPSWCSg73sQit9MmAF+gg2Wn vpiIyx6NBVEVFulxcBPYQUFh5lSigGCR84tEfO8ud64PhbpuuS4uzmCIvsLUnOw/ 4out4tAwb+0GNM4Jf00PmiFWz9+4+tx7G5Bnt+Rh0V9m2Gdhftxdz+nEuS9YCMR/ +S13ufR/fJY3aeCNXBeN4+kN/uW80XbJXFMOy488SrdDVA/wqbcj2spFGbGhujJb rE9s6ngM38b2mvP0eaNSA4ESGIwmRYVieC7tdUjfk7isX+ItLlu0P5MWgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMUFl66GjDDhYyCbElfMECukAb0MB8GA1UdIwQY MBaAFGJtJNa/NTlj/lr6JbCllmcVKobQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW0wazFyODFPV1AtV3ZvbHNLV1daeFVxaHRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82MzQzMmEtZTVkOS00NmUyLTljMDEt YWM4MDliYmFlNzM3LzEvWW0wazFyODFPV1AtV3ZvbHNLV1daeFVxaHRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82MzQzMmEtZTVkOS00NmUyLTljMDEtYWM4MDliYmFlNzM3 LzEvWW0wazFyODFPV1AtV3ZvbHNLV1daeFVxaHRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClJj2xb0 rBIfnNQ7yAuODA5KL3A8vGxVlrHF92HAQV+7X6iQ3bo6hifWWy30QNx7248l4nPc mFGMVcI39UQmxtMI+HJdYQ3wYSPo2gBabHC4dD0RDi15A7V1mtKIOtVDqKmwVmJ0 oXijSUZHutQbYI+iDcPTE8AW8tIgMOwVGKyrRe9tnjUz/qm0H3lmeqB5v4CV2TMj QDgGXGD8BqGLhYSDW+ylAncGe6N48Cj9ORZya+FZfFlhlAULtFffEtbqbV9Kcwv8 nB57txdsgXwCrD2K1QRikNvG6hvaTlg0v9U0TvCWMICNGouuko5EVuQq43lcelEM kAV5ydPIGWkGGQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:20 2026 by rpki-client