This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json) Hash identifier: 6k6XR3wMxF3Qx27yo9ZaGCI/8qihIksnkyJOxA0vlWg= Subject key identifier: 07:F6:8F:28:8C:53:5F:E0:F5:DC:80:B5:BB:A4:42:26:7E:C7:4A:17 Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57 Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157 Certificate serial: 019BFC530D08F91D875B2FFBD9C25D86B9BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft Manifest number: 0BA8 Signing time: Mon 26 Jan 2026 22:00:59 +0000 Manifest this update: Mon 26 Jan 2026 22:00:59 +0000 Manifest next update: Tue 27 Jan 2026 22:00:59 +0000 Files and hashes: 1: 6PWOGz_KqRkb1zSJBPSYqwA3Obk.roa (hash: 2QNX7SpmW+cQkXWOHdllDN5APRnT1YGjOBVoLe9iX0U=) 2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: UNcouohgFSd2ugM6hdKQj9wFTCexNI1OOb5Ar/D7Kok=) 3: prAX8QK9sJ83-_8sb5b9uyxyLB0.roa (hash: MGpYm8TiAMHtR6UX1RiE9OEkX3HH/xl2rU9chl3K2sQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:0d:08:f9:1d:87:5b:2f:fb:d9:c2:5d:86:b9:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157 Validity Not Before: Jan 26 22:00:59 2026 GMT Not After : Jan 27 22:00:59 2026 GMT Subject: CN=07f68f288c535fe0f5dc80b5bba442267ec74a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:14:ed:69:1f:5a:eb:7d:7e:41:26:23:d5:d8: 18:f2:a3:83:53:78:8a:52:12:13:88:bc:15:06:00: 5c:3f:f8:f2:45:83:bb:5f:76:d1:06:de:93:41:b0: c5:88:a5:c3:74:cc:d3:12:41:27:1b:c1:92:53:a0: d4:b6:8f:1e:7f:85:41:6a:b3:b5:a4:09:6f:72:93: c9:d6:13:3b:8b:a0:db:36:f7:8a:e8:b9:28:45:d2: ac:e2:a7:51:15:d7:07:f3:93:bd:61:86:18:06:f4: de:5b:8c:a1:22:b4:0c:28:47:f9:44:fe:13:e4:01: ed:69:a0:9a:24:34:b9:dd:d7:dd:78:69:20:0e:5a: 12:06:96:8e:34:7e:84:73:be:ea:3e:37:85:93:81: 9a:75:00:67:4a:75:b2:c7:5d:dc:10:18:43:a1:05: 4d:20:74:c0:38:20:d1:63:14:b1:e0:93:c2:d7:69: b8:f4:ee:13:7c:75:23:11:f3:99:05:d6:9b:ce:ee: b6:95:4d:a4:3b:24:73:15:de:95:6b:a8:52:86:30: 7d:a2:5b:a8:cb:40:1f:e0:5c:69:9a:d0:cb:3a:94: 18:52:36:c8:35:ca:7c:5e:f1:e3:82:eb:de:40:d9: 94:35:db:98:68:44:ad:71:a2:94:04:bc:66:b9:b4: 4d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F6:8F:28:8C:53:5F:E0:F5:DC:80:B5:BB:A4:42:26:7E:C7:4A:17 X509v3 Authority Key Identifier: keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4f:d7:76:d9:fb:2f:47:f3:a0:a8:2e:f1:87:00:37:fa:66: d3:40:b4:b9:52:11:00:7e:71:ab:dc:98:b7:d5:80:47:e3:e9: 00:30:d7:32:93:42:5e:76:c3:d4:19:88:5c:40:17:47:2c:e8: 20:78:8b:25:f0:ce:d5:41:82:78:b7:b0:23:0e:35:ec:b4:22: 65:57:e6:0e:9d:4a:ae:ef:0a:fe:ec:02:52:70:9b:c1:3c:d5: 12:ec:a9:b1:da:99:15:29:c9:ec:db:bc:85:60:43:da:72:e4: 8e:ef:71:ab:c3:12:cf:00:9d:a9:e1:0e:ff:b3:32:1e:ad:39: ba:a1:c2:53:19:57:2a:73:a0:ce:49:c0:0d:25:61:ab:01:9f: 4f:38:fc:9d:73:94:2d:bd:09:94:ac:d2:4c:86:e5:4d:dc:38: bb:84:86:ee:ee:a4:71:57:a6:2b:bc:87:24:e3:0a:8d:6f:13: f2:5d:f9:42:10:65:c2:fa:d8:47:2d:e1:3c:f8:b4:f7:3d:8a: c4:e2:00:01:df:2a:e5:72:4b:48:4b:18:82:85:e6:a7:81:fe: 02:6c:09:33:d1:4d:1a:dd:a4:07:29:9e:ec:f3:9d:9e:2f:ff: 56:51:c0:20:1d:ac:15:b1:a5:2e:19:c8:96:fc:a9:e4:28:58: 3e:b9:c5:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8Uw0I+R2HWy/72cJdhrm8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzM2U3NTJjYTBkYzQyM2M3NGY1MDg0MDViYTUyMjhhOGMy ZTUxNTcwHhcNMjYwMTI2MjIwMDU5WhcNMjYwMTI3MjIwMDU5WjAzMTEwLwYDVQQD EygwN2Y2OGYyODhjNTM1ZmUwZjVkYzgwYjViYmE0NDIyNjdlYzc0YTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxTtaR9a631+QSYj1dgY8qODU3iK UhITiLwVBgBcP/jyRYO7X3bRBt6TQbDFiKXDdMzTEkEnG8GSU6DUto8ef4VBarO1 pAlvcpPJ1hM7i6DbNveK6LkoRdKs4qdRFdcH85O9YYYYBvTeW4yhIrQMKEf5RP4T 5AHtaaCaJDS53dfdeGkgDloSBpaONH6Ec77qPjeFk4GadQBnSnWyx13cEBhDoQVN IHTAOCDRYxSx4JPC12m49O4TfHUjEfOZBdabzu62lU2kOyRzFd6Va6hShjB9oluo y0Af4FxpmtDLOpQYUjbINcp8XvHjguveQNmUNduYaEStcaKUBLxmubRNOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAf2jyiMU1/g9dyAtbukQiZ+x0oXMB8GA1UdIwQY MBaAFGM+dSyg3EI8dPUIQFulIoqMLlFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jOGUyMTQtOGU0NS00Yzk2LThhNzkt ZGU2MTg3YjcyOThhLzEvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9jOGUyMTQtOGU0NS00Yzk2LThhNzktZGU2MTg3YjcyOThh LzEvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0/Xdtn7 L0fzoKgu8YcAN/pm00C0uVIRAH5xq9yYt9WAR+PpADDXMpNCXnbD1BmIXEAXRyzo IHiLJfDO1UGCeLewIw417LQiZVfmDp1Kru8K/uwCUnCbwTzVEuypsdqZFSnJ7Nu8 hWBD2nLkju9xq8MSzwCdqeEO/7MyHq05uqHCUxlXKnOgzknADSVhqwGfTzj8nXOU Lb0JlKzSTIblTdw4u4SG7u6kcVemK7yHJOMKjW8T8l35QhBlwvrYRy3hPPi09z2K xOIAAd8q5XJLSEsYgoXmp4H+AmwJM9FNGt2kByme7POdni//VlHAIB2sFbGlLhnI lvyp5ChYPrnFfg== -----END CERTIFICATE-----Generated at Tue Jan 27 06:08:10 2026 by rpki-client