This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft File: yudPzOQZM_QnxTfTZdXnYdJlXrY.mft (raw, json) Hash identifier: puRgjNixjFAHDfunFB1/TyRmviBn0RXnSKXsNISmNdY= Subject key identifier: 8C:55:6E:51:9D:C6:57:53:00:EA:DD:F1:FE:96:2F:95:D8:8B:62:1D Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6 Certificate issuer: /CN=cae74fcce41933f427c537d365d5e761d2655eb6 Certificate serial: 019BF8E405968DD1D7AC205BF7E8215ACE2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft Manifest number: 0F23 Signing time: Mon 26 Jan 2026 06:00:51 +0000 Manifest this update: Mon 26 Jan 2026 06:00:51 +0000 Manifest next update: Tue 27 Jan 2026 06:00:51 +0000 Files and hashes: 1: QSn62LM0lzdVFTae3oXlcnSJBrM.roa (hash: 1Kyh630uZcpfXJcHCHBYOXiuPYvcumJJUvLTjPHNEfg=) 2: yudPzOQZM_QnxTfTZdXnYdJlXrY.crl (hash: RtpfkWtG8SC+bGz5TGKKd6MvVJ1V9m2BuuxefMM5rQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:05:96:8d:d1:d7:ac:20:5b:f7:e8:21:5a:ce:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6 Validity Not Before: Jan 26 06:00:51 2026 GMT Not After : Jan 27 06:00:51 2026 GMT Subject: CN=8c556e519dc6575300eaddf1fe962f95d88b621d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bf:89:2c:09:68:c2:cb:a4:d2:cf:6e:b6:d2: 63:5f:a4:4d:20:12:ba:5d:8c:15:77:4c:5e:c5:e1: 68:ee:5a:8e:64:54:29:17:eb:2b:ef:bf:89:ba:a3: 79:91:7b:fe:ff:a7:0c:9d:ca:fe:2a:a3:a9:cb:7a: 10:43:82:05:2f:f8:21:40:53:8f:55:6d:f9:57:47: 8f:ba:55:64:9a:d5:62:53:45:75:e6:f0:ff:75:41: 99:73:62:ba:e9:d0:be:a3:d9:e9:ea:ec:40:ec:09: 74:1e:7d:a3:a6:d4:73:ca:ed:db:e4:ba:bc:b5:06: 29:e8:a7:ed:69:19:4e:8a:d0:34:ce:50:6c:ba:5b: 78:e9:65:e3:9c:25:86:2a:8f:ab:ff:51:1d:73:f4: 89:2f:76:90:03:78:55:58:13:da:5c:65:4f:aa:b1: a9:47:9b:7c:39:b8:25:81:24:54:83:ff:5e:e2:f0: 33:c1:49:fc:96:64:e4:9a:f9:90:d7:09:97:a6:93: e6:7a:5f:aa:38:5d:09:3c:23:d6:9b:75:39:16:09: e7:bf:fa:78:45:1f:8e:76:6b:7c:4b:a4:95:af:f7: 69:33:f3:88:43:2f:f2:32:af:2c:83:c4:b4:65:12: f0:d8:e7:c0:69:fd:a7:aa:8d:29:43:f0:83:e4:68: 9c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:55:6E:51:9D:C6:57:53:00:EA:DD:F1:FE:96:2F:95:D8:8B:62:1D X509v3 Authority Key Identifier: keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:8f:f0:6d:fd:6c:cd:51:0e:f2:03:d1:6b:e0:89:3e:e4:df: a6:d3:a6:ed:46:09:24:37:a3:ea:30:35:5c:69:1a:8a:df:ba: 31:93:b1:d6:30:c7:59:b7:f8:45:0e:69:42:ef:f6:16:80:f8: 2f:e2:a8:43:53:13:42:c0:d9:df:b0:f0:c5:3f:10:b7:9b:57: ec:da:21:34:1f:92:32:19:9b:36:48:89:9f:b7:e9:34:d6:4d: 68:43:c3:09:93:a5:32:05:1e:19:f0:57:7b:7b:f1:65:5f:f1: a6:cc:e4:7a:9e:4c:39:df:93:5a:bc:14:6f:49:e7:ba:5f:11: 98:28:75:41:e2:6e:62:d7:9b:d5:93:88:a4:3e:26:61:bf:2c: fc:00:1c:0b:5b:9e:23:55:75:07:ae:dd:4d:ec:dc:68:a6:e3: 82:d8:18:fc:b2:84:18:44:8e:e4:fd:ee:ec:ad:d9:0f:fa:4d: 86:aa:d0:bf:ff:03:0e:25:65:d9:86:03:78:c4:9d:25:57:74: 8e:93:8c:6a:8e:19:ed:39:6d:d8:8e:a3:9c:d5:88:8e:c8:71: 7c:80:70:c6:fc:4a:b6:1c:d6:b4:c3:2a:de:1a:be:14:eb:11: 92:9f:f7:2e:90:b0:f4:ff:0f:3b:73:47:6b:6d:11:66:86:b0: ce:4e:44:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45AWWjdHXrCBb9+ghWs4sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZTc0ZmNjZTQxOTMzZjQyN2M1MzdkMzY1ZDVlNzYxZDI2 NTVlYjYwHhcNMjYwMTI2MDYwMDUxWhcNMjYwMTI3MDYwMDUxWjAzMTEwLwYDVQQD Eyg4YzU1NmU1MTlkYzY1NzUzMDBlYWRkZjFmZTk2MmY5NWQ4OGI2MjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr+JLAlowsuk0s9uttJjX6RNIBK6 XYwVd0xexeFo7lqOZFQpF+sr77+JuqN5kXv+/6cMncr+KqOpy3oQQ4IFL/ghQFOP VW35V0ePulVkmtViU0V15vD/dUGZc2K66dC+o9np6uxA7Al0Hn2jptRzyu3b5Lq8 tQYp6KftaRlOitA0zlBsult46WXjnCWGKo+r/1Edc/SJL3aQA3hVWBPaXGVPqrGp R5t8ObglgSRUg/9e4vAzwUn8lmTkmvmQ1wmXppPmel+qOF0JPCPWm3U5Fgnnv/p4 RR+Odmt8S6SVr/dpM/OIQy/yMq8sg8S0ZRLw2OfAaf2nqo0pQ/CD5GiccwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxVblGdxldTAOrd8f6WL5XYi2IdMB8GA1UdIwQY MBaAFMrnT8zkGTP0J8U302XV52HSZV62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83ZDBiYTItOTdmNS00MjBiLThkYzAt YzM1NDEwYjViNjkxLzEveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC83ZDBiYTItOTdmNS00MjBiLThkYzAtYzM1NDEwYjViNjkx LzEveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4/wbf1s zVEO8gPRa+CJPuTfptOm7UYJJDej6jA1XGkait+6MZOx1jDHWbf4RQ5pQu/2FoD4 L+KoQ1MTQsDZ37DwxT8Qt5tX7NohNB+SMhmbNkiJn7fpNNZNaEPDCZOlMgUeGfBX e3vxZV/xpszkep5MOd+TWrwUb0nnul8RmCh1QeJuYteb1ZOIpD4mYb8s/AAcC1ue I1V1B67dTezcaKbjgtgY/LKEGESO5P3u7K3ZD/pNhqrQv/8DDiVl2YYDeMSdJVd0 jpOMao4Z7Tlt2I6jnNWIjshxfIBwxvxKthzWtMMq3hq+FOsRkp/3LpCw9P8PO3NH a20RZoawzk5Eqw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:50:04 2026 by rpki-client