This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft File: YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json) Hash identifier: vSge2TKdZHYN49KWE/GE+xvvNKsh8svK2FteAjzKiwc= Subject key identifier: 33:A6:BC:4D:6E:35:94:51:C1:D1:76:96:63:6F:44:8D:A5:21:06:61 Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77 Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877 Certificate serial: 019BF61A3EB093D88D10E05E0D29CFC02624 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft Manifest number: 17FD Signing time: Sun 25 Jan 2026 17:01:13 +0000 Manifest this update: Sun 25 Jan 2026 17:01:13 +0000 Manifest next update: Mon 26 Jan 2026 17:01:13 +0000 Files and hashes: 1: 2v3v91RFQjN6l9mWptJO680RMkc.roa (hash: JpKAIgf5dUOG27b3V6ypmirRGf/czS7D9Bc0AguM208=) 2: 7eIzHvINnFqHZBOWvru0J6FjDb8.roa (hash: Dv2FZyAGPdsQN62gOmL7jMpfdjwxeMKFTL1oAf/BKfc=) 3: 8l0-rbUJJ5yl_F5t1WGOySUsQOI.roa (hash: 065Qj+kRYJW5mj1KN/1Un/hhPcBtSTaJS6BwFg5mPWw=) 4: QTFye-32ZtubZYZVN0cCrwUzz_s.roa (hash: Ou06XDdFUhQ2dykgxmyAA0EVBWVZBiN7PQ/FvfPl2a0=) 5: UsJrUy2UuzGGDnQa-en_vet84IU.roa (hash: anygphX/NHAj2pg72RtTsBDk/dlZBM2mWyxRgOxxXzo=) 6: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: qAGVsDt++EsZBW+KEpWw1piUBclQemorMovfM28pUDg=) 7: o2wMPqpUwKK3k92hqD5HvK3oiiI.roa (hash: 0YGmH3GBpSNDcIwjVr7t8Bv7qy4ZPt0Vk2HKaZcbgtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:3e:b0:93:d8:8d:10:e0:5e:0d:29:cf:c0:26:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877 Validity Not Before: Jan 25 17:01:13 2026 GMT Not After : Jan 26 17:01:13 2026 GMT Subject: CN=33a6bc4d6e359451c1d17696636f448da5210661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1e:92:28:cf:2f:0a:d0:79:ce:a9:36:bd:0e: 7d:f5:b9:7b:42:76:e9:b5:52:70:72:de:9f:59:f5: e7:39:a9:bd:ab:ee:de:e1:ab:4e:b6:2d:2a:13:e1: c7:c9:a3:cf:61:05:9e:c3:0b:ba:ef:ec:79:9c:49: 35:09:ef:9d:c6:9d:b9:3e:c0:4b:ba:9c:ca:8b:e9: de:f1:61:01:fa:19:2b:b2:24:1c:20:eb:81:b1:7a: 0f:bc:f3:c6:e3:76:a4:79:13:49:a1:9c:61:40:f3: 90:73:c4:14:3c:a4:ce:d1:c9:24:ef:77:39:66:38: 40:e1:c4:08:f3:3a:5b:ae:8d:2e:c1:5c:05:56:f9: 69:3a:c8:02:08:01:0d:c3:6d:35:dd:e6:87:e2:b7: af:88:13:9f:e9:35:b6:34:ec:f1:40:45:30:69:28: 90:ee:a2:3b:fd:4d:75:98:ad:36:33:e5:bc:3f:ae: 0a:0e:dd:36:ac:a3:86:c2:4c:0b:06:ee:19:ce:23: 46:07:73:9f:26:0f:38:b4:58:33:7c:74:30:b9:09: 33:f5:e2:29:07:e2:8d:a9:ea:06:ac:9c:5d:5b:0c: 59:7d:1c:53:5e:ae:ac:7e:ed:13:83:ae:36:a0:58: 42:dc:bb:da:c4:75:83:29:0e:1d:f4:f2:11:a5:9d: e5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A6:BC:4D:6E:35:94:51:C1:D1:76:96:63:6F:44:8D:A5:21:06:61 X509v3 Authority Key Identifier: keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:30:85:94:ce:25:2f:5c:44:c6:d1:98:95:c4:4b:c1:cd:c9: b5:70:da:ee:d6:55:38:b7:3f:79:29:21:ef:ad:cd:08:05:2e: fb:56:35:12:3c:56:0c:3f:c8:aa:f9:b1:44:a3:95:56:2a:b9: 60:97:b7:66:d8:98:b5:23:8d:4c:5b:41:18:81:30:e4:ec:de: 1c:f9:f3:70:33:f3:21:a4:91:3d:a5:2f:89:4a:58:e9:b1:76: e1:c8:c0:9d:fb:c1:e8:79:82:a0:1d:51:9c:2b:80:65:75:b4: 69:21:0c:e2:72:27:61:5d:40:f8:a4:c5:bf:12:a4:85:a5:6a: 71:9b:6f:12:5c:98:dc:8a:bc:b9:e0:b4:6b:b7:36:0e:f0:7e: f1:00:64:13:56:b0:20:97:cd:cf:98:fa:bc:2a:52:bc:04:35: ce:34:5b:a2:14:47:77:11:4e:68:8c:bf:4d:93:c3:3a:f3:95: 28:19:f6:25:92:7a:0d:fa:f0:8c:bf:fb:21:6a:bb:e9:5f:14: 84:0b:54:0b:cb:68:24:05:38:59:05:e1:46:8d:35:05:3a:37: d9:a2:44:2b:45:ae:d8:8d:7e:9f:b6:54:85:28:fb:06:70:ff: c0:a7:e4:5a:0f:0e:82:03:e5:a3:5e:c9:0e:b7:84:81:ee:68: a6:0f:58:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gj6wk9iNEOBeDSnPwCYkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjUzNDQzNzUwMzY2ODgxNWFkZDkzY2QxN2QwYWQzZTFi MWE4NzcwHhcNMjYwMTI1MTcwMTEzWhcNMjYwMTI2MTcwMTEzWjAzMTEwLwYDVQQD EygzM2E2YmM0ZDZlMzU5NDUxYzFkMTc2OTY2MzZmNDQ4ZGE1MjEwNjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh6SKM8vCtB5zqk2vQ599bl7Qnbp tVJwct6fWfXnOam9q+7e4atOti0qE+HHyaPPYQWewwu67+x5nEk1Ce+dxp25PsBL upzKi+ne8WEB+hkrsiQcIOuBsXoPvPPG43akeRNJoZxhQPOQc8QUPKTO0ckk73c5 ZjhA4cQI8zpbro0uwVwFVvlpOsgCCAENw2013eaH4reviBOf6TW2NOzxQEUwaSiQ 7qI7/U11mK02M+W8P64KDt02rKOGwkwLBu4ZziNGB3OfJg84tFgzfHQwuQkz9eIp B+KNqeoGrJxdWwxZfRxTXq6sfu0Tg642oFhC3LvaxHWDKQ4d9PIRpZ3lYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOmvE1uNZRRwdF2lmNvRI2lIQZhMB8GA1UdIwQY MBaAFGG1NEN1A2aIFa3ZPNF9CtPhsah3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYt ZjU1NWUyZTY4YTEwLzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYtZjU1NWUyZTY4YTEw LzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzCFlM4l L1xExtGYlcRLwc3JtXDa7tZVOLc/eSkh763NCAUu+1Y1EjxWDD/IqvmxRKOVViq5 YJe3ZtiYtSONTFtBGIEw5OzeHPnzcDPzIaSRPaUviUpY6bF24cjAnfvB6HmCoB1R nCuAZXW0aSEM4nInYV1A+KTFvxKkhaVqcZtvElyY3Iq8ueC0a7c2DvB+8QBkE1aw IJfNz5j6vCpSvAQ1zjRbohRHdxFOaIy/TZPDOvOVKBn2JZJ6DfrwjL/7IWq76V8U hAtUC8toJAU4WQXhRo01BTo32aJEK0Wu2I1+n7ZUhSj7BnD/wKfkWg8OggPlo17J DreEge5opg9Y2Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:43 2026 by rpki-client