This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json) Hash identifier: aWk2B3Ley89BZGvoNWc3SZ4lRhxsCYKka4Wo0ih8zXM= Subject key identifier: E4:00:2B:65:E5:53:01:40:DF:0E:A7:4D:58:E5:51:40:16:A0:70:AE Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da Certificate serial: 019BF7D1994C8F59DADABFCBFE4519DB5A16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft Manifest number: 14D1 Signing time: Mon 26 Jan 2026 01:01:07 +0000 Manifest this update: Mon 26 Jan 2026 01:01:07 +0000 Manifest next update: Tue 27 Jan 2026 01:01:07 +0000 Files and hashes: 1: _SwAckWBp8isMhZUKjw_8MX2PbQ.roa (hash: DdPCOva+CEkdSFj4rwktdG8ykIu5k66PhfcbhD6raBk=) 2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: Ke7CxwkOLdakCf9T+J+Og6oe4KiNcLdF2zAvecyXtvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:99:4c:8f:59:da:da:bf:cb:fe:45:19:db:5a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da Validity Not Before: Jan 26 01:01:07 2026 GMT Not After : Jan 27 01:01:07 2026 GMT Subject: CN=e4002b65e5530140df0ea74d58e5514016a070ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b7:c1:ac:43:89:fd:a2:65:57:6e:cc:2d:b9: a0:2a:b4:06:0c:5d:3d:60:74:19:07:f6:37:c2:ab: 0a:42:97:6f:88:0f:48:34:0f:91:a7:a9:c4:f9:c4: e4:cc:2d:5a:33:af:50:d9:5e:5b:f3:69:ac:45:76: 89:dd:f1:04:12:06:f1:1f:90:10:4d:9b:2a:e9:c1: ef:dd:23:15:2b:ec:ee:52:08:6b:17:ff:c6:19:f9: 04:ce:5f:f7:13:6a:6c:30:3e:0c:fe:2f:47:53:4f: 85:33:b9:67:01:96:86:0c:d3:be:4a:48:1e:29:e1: b0:e4:df:02:0d:e7:be:a6:9f:db:0e:db:a3:64:75: ff:c1:af:c2:d5:02:07:4d:f1:0e:5e:63:a0:2c:f5: c6:e9:42:a5:b3:17:37:45:6e:b4:eb:6b:c3:ef:f8: 1a:23:d0:2f:11:d7:54:fe:72:a9:a3:67:4a:36:25: be:b3:ea:93:5e:3c:2a:e7:6a:db:e2:7a:b5:67:15: ae:82:21:8d:fd:f3:77:82:49:08:bf:fd:d0:1e:bc: 9c:fb:64:06:34:9e:cc:f1:96:d2:d1:f8:18:af:61: 2d:e5:ea:c9:c1:a5:c1:5c:56:1d:dd:3b:d4:44:c9: c9:6c:2e:7d:6a:d7:2a:3c:bd:63:e5:8d:51:9d:e0: 2d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:00:2B:65:E5:53:01:40:DF:0E:A7:4D:58:E5:51:40:16:A0:70:AE X509v3 Authority Key Identifier: keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:49:5e:dd:ce:3d:03:39:bd:1e:af:4f:1d:50:ce:e8:28:74: d3:b1:82:aa:d6:7b:ac:73:47:c9:58:61:01:85:80:2d:e0:a7: 24:36:3a:ca:ed:a3:e9:2b:e9:10:bc:40:f8:db:7a:17:18:b5: 61:31:b4:fb:60:e9:21:5c:ac:eb:78:f4:45:fa:51:35:89:58: f7:5b:6f:53:7f:c6:14:f1:00:dc:4b:01:31:4a:40:9d:dc:e4: cf:b3:02:fd:54:be:72:5e:e5:ac:82:6e:b1:dc:75:e4:ec:b2: 2b:30:80:b7:1e:49:0f:ca:53:c1:fb:92:e5:51:29:95:8c:bb: 75:15:a2:8b:15:dd:6d:7e:46:d5:fd:2c:29:52:67:66:1c:fe: 55:a6:26:04:26:d3:27:08:1e:1a:b5:fc:cb:b9:0e:4d:f1:be: 42:f8:9d:d2:68:86:70:b2:a2:1a:03:5b:9d:8a:70:d6:d7:e2: 12:26:21:c1:77:8a:a7:b0:58:05:c9:ce:53:06:31:65:06:e0: 0a:b5:8b:b4:9a:d1:d8:4d:18:a8:c8:7b:11:25:5b:96:ab:78: f3:96:a4:77:f3:44:9b:19:19:74:6a:ba:4d:2a:89:2f:8d:1b: 93:f8:1e:a3:4f:9c:35:77:d2:57:ce:bc:4f:0f:86:f2:e5:48: 7f:d1:76:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30ZlMj1na2r/L/kUZ21oWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5Y2RlYjMyOGUzMTg3ZGJmZjIzNzI5YTQ4YjQ3MDU0YzFk NTE5ZGEwHhcNMjYwMTI2MDEwMTA3WhcNMjYwMTI3MDEwMTA3WjAzMTEwLwYDVQQD EyhlNDAwMmI2NWU1NTMwMTQwZGYwZWE3NGQ1OGU1NTE0MDE2YTA3MGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07fBrEOJ/aJlV27MLbmgKrQGDF09 YHQZB/Y3wqsKQpdviA9INA+Rp6nE+cTkzC1aM69Q2V5b82msRXaJ3fEEEgbxH5AQ TZsq6cHv3SMVK+zuUghrF//GGfkEzl/3E2psMD4M/i9HU0+FM7lnAZaGDNO+Skge KeGw5N8CDee+pp/bDtujZHX/wa/C1QIHTfEOXmOgLPXG6UKlsxc3RW6062vD7/ga I9AvEddU/nKpo2dKNiW+s+qTXjwq52rb4nq1ZxWugiGN/fN3gkkIv/3QHryc+2QG NJ7M8ZbS0fgYr2Et5erJwaXBXFYd3TvURMnJbC59atcqPL1j5Y1RneAtzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQAK2XlUwFA3w6nTVjlUUAWoHCuMB8GA1UdIwQY MBaAFMnN6zKOMYfb/yNymki0cFTB1RnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWMzck1vNHhoOXZfSTNLYVNMUndWTUhWR2RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80ZTg2NDItODg4OS00N2FkLTkwYzAt Yjg5YWEwMWVkYzgwLzEveWMzck1vNHhoOXZfSTNLYVNMUndWTUhWR2RvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80ZTg2NDItODg4OS00N2FkLTkwYzAtYjg5YWEwMWVkYzgw LzEveWMzck1vNHhoOXZfSTNLYVNMUndWTUhWR2RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0le3c49 Azm9Hq9PHVDO6Ch007GCqtZ7rHNHyVhhAYWALeCnJDY6yu2j6SvpELxA+Nt6Fxi1 YTG0+2DpIVys63j0RfpRNYlY91tvU3/GFPEA3EsBMUpAndzkz7MC/VS+cl7lrIJu sdx15OyyKzCAtx5JD8pTwfuS5VEplYy7dRWiixXdbX5G1f0sKVJnZhz+VaYmBCbT JwgeGrX8y7kOTfG+Qvid0miGcLKiGgNbnYpw1tfiEiYhwXeKp7BYBcnOUwYxZQbg CrWLtJrR2E0YqMh7ESVblqt485akd/NEmxkZdGq6TSqJL40bk/geo0+cNXfSV868 Tw+G8uVIf9F27A== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:00 2026 by rpki-client