This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft File: YuJWVsULslT1gHfRuWbkdLFjR68.mft (raw, json) Hash identifier: 8gt1LLvRIqTa7q4BGU3s0QoAIYP4kI9hbhXX2sI4SGQ= Subject key identifier: 88:EB:F4:73:75:AC:F8:53:58:10:E7:4D:48:A9:F0:DE:9F:30:14:8D Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF Certificate issuer: /CN=62e25656c50bb254f58077d1b966e474b16347af Certificate serial: 019BDF24C38E97C99C5F2B74A28CCC647E6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft Manifest number: 17DC Signing time: Wed 21 Jan 2026 06:01:26 +0000 Manifest this update: Wed 21 Jan 2026 06:01:26 +0000 Manifest next update: Thu 22 Jan 2026 06:01:26 +0000 Files and hashes: 1: WDz5bqq9s7Sot6DZTyns7ujP_G0.roa (hash: jp6a/AgGzZ0JdGjudIFSMOs/t8/efE23HGLQbGbVGxE=) 2: YuJWVsULslT1gHfRuWbkdLFjR68.crl (hash: sQlKl/thtCsZaMA7P1FDOBO1hiOdmccn6PugthUvwoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:24:c3:8e:97:c9:9c:5f:2b:74:a2:8c:cc:64:7e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af Validity Not Before: Jan 21 06:01:26 2026 GMT Not After : Jan 22 06:01:26 2026 GMT Subject: CN=88ebf47375acf8535810e74d48a9f0de9f30148d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4c:99:df:fb:d5:59:8a:e6:5e:1a:2b:c9:c0: 79:38:85:74:4b:2b:cd:bd:d2:89:2f:42:8f:14:0a: 43:15:92:f3:9c:25:3b:e0:21:8d:75:47:f3:69:0f: f7:33:ef:99:70:c9:cf:2e:2b:91:b5:f6:6b:5c:2f: a1:45:95:2d:b4:66:7c:25:ea:18:03:e3:d2:4c:55: c9:2b:df:02:90:d1:c8:fe:5b:86:a3:4c:c4:58:49: c2:23:af:c7:25:3b:d2:ae:c0:d1:16:bd:34:08:ae: 1c:de:15:7d:c0:61:74:0e:53:af:bd:f1:62:08:49: b5:f3:c4:05:23:27:f7:7b:74:3c:d4:17:70:45:f2: 43:3c:f0:36:c5:49:b8:00:28:84:89:d5:eb:96:aa: 20:53:f0:44:db:c1:33:f7:3b:95:65:6a:b5:85:6c: da:1e:7a:ce:4e:07:6e:e5:82:a6:84:f2:07:e4:af: 10:75:29:47:eb:32:1b:71:e3:fd:1c:29:12:bc:47: 7a:3b:5c:db:f7:68:c9:d2:c7:e6:bd:3d:d4:c8:dd: 83:71:60:31:4e:5d:16:42:f5:40:bc:ae:7b:c7:88: 24:3e:a4:2c:dd:61:e8:ef:7b:8e:73:e3:9f:4e:1c: 34:58:c6:ce:80:cf:b2:bc:cd:f2:f5:6d:11:8e:86: d6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EB:F4:73:75:AC:F8:53:58:10:E7:4D:48:A9:F0:DE:9F:30:14:8D X509v3 Authority Key Identifier: keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:7e:76:b0:82:10:2c:ae:42:71:30:00:f2:12:7a:2e:a2:48: 87:64:68:c6:7e:b7:4d:db:c6:2c:2b:fa:11:82:43:48:60:35: eb:9c:61:1c:3e:d5:e5:46:72:f9:52:57:5a:4c:fa:33:07:e5: cc:a8:df:8e:6f:5c:f4:d2:ce:d8:fa:56:35:17:cc:ac:b4:30: c9:9f:a2:02:83:69:e0:65:96:d0:ed:f2:ac:61:1d:b3:e0:78: 9e:92:51:cf:fe:7e:c3:ba:6c:7c:c0:dd:2f:1f:62:ba:e0:9b: cf:07:cb:63:97:f6:56:3d:29:96:e8:11:0b:0b:8b:34:67:e5: e3:6f:73:a6:af:82:d3:85:a9:14:08:af:b9:67:06:23:52:33: 1e:f6:92:fb:bd:72:a0:ae:b2:73:c4:b8:01:77:e4:51:66:db: e9:e0:ed:7e:a0:32:cf:02:0d:a0:7f:8a:fa:5d:3e:34:af:c9: 9e:c3:e5:72:5b:fb:2d:d8:d3:6f:1f:ca:6b:4d:03:c9:2a:d3: 95:06:fd:cf:2b:8b:1a:67:ef:7c:9c:ec:c1:17:bf:6e:c3:bb: 89:00:e8:1b:84:6f:91:a6:dd:39:8c:80:f7:b4:a4:32:90:ed: e1:8e:ee:90:e6:c3:32:31:01:3b:3f:33:7d:6e:0f:0f:0e:86: af:4a:a0:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvfJMOOl8mcXyt0oozMZH5rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZTI1NjU2YzUwYmIyNTRmNTgwNzdkMWI5NjZlNDc0YjE2 MzQ3YWYwHhcNMjYwMTIxMDYwMTI2WhcNMjYwMTIyMDYwMTI2WjAzMTEwLwYDVQQD Eyg4OGViZjQ3Mzc1YWNmODUzNTgxMGU3NGQ0OGE5ZjBkZTlmMzAxNDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UyZ3/vVWYrmXhorycB5OIV0SyvN vdKJL0KPFApDFZLznCU74CGNdUfzaQ/3M++ZcMnPLiuRtfZrXC+hRZUttGZ8JeoY A+PSTFXJK98CkNHI/luGo0zEWEnCI6/HJTvSrsDRFr00CK4c3hV9wGF0DlOvvfFi CEm188QFIyf3e3Q81BdwRfJDPPA2xUm4ACiEidXrlqogU/BE28Ez9zuVZWq1hWza HnrOTgdu5YKmhPIH5K8QdSlH6zIbceP9HCkSvEd6O1zb92jJ0sfmvT3UyN2DcWAx Tl0WQvVAvK57x4gkPqQs3WHo73uOc+OfThw0WMbOgM+yvM3y9W0RjobWcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjr9HN1rPhTWBDnTUip8N6fMBSNMB8GA1UdIwQY MBaAFGLiVlbFC7JU9YB30blm5HSxY0evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXVKV1ZzVUxzbFQxZ0hmUnVXYmtkTEZqUjY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80MjQ2ODUtZDhhOS00MzY4LThkM2Mt YzIwNjRiMGY5YWI5LzEvWXVKV1ZzVUxzbFQxZ0hmUnVXYmtkTEZqUjY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS80MjQ2ODUtZDhhOS00MzY4LThkM2MtYzIwNjRiMGY5YWI5 LzEvWXVKV1ZzVUxzbFQxZ0hmUnVXYmtkTEZqUjY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE352sIIQ LK5CcTAA8hJ6LqJIh2Roxn63TdvGLCv6EYJDSGA165xhHD7V5UZy+VJXWkz6Mwfl zKjfjm9c9NLO2PpWNRfMrLQwyZ+iAoNp4GWW0O3yrGEds+B4npJRz/5+w7psfMDd Lx9iuuCbzwfLY5f2Vj0plugRCwuLNGfl429zpq+C04WpFAivuWcGI1IzHvaS+71y oK6yc8S4AXfkUWbb6eDtfqAyzwINoH+K+l0+NK/JnsPlclv7LdjTbx/Ka00DySrT lQb9zyuLGmfvfJzswRe/bsO7iQDoG4RvkabdOYyA97SkMpDt4Y7ukObDMjEBOz8z fW4PDw6Gr0qgRQ== -----END CERTIFICATE-----Generated at Wed Jan 21 14:44:24 2026 by rpki-client