This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json) Hash identifier: Zrxpyv0rDzEFt8zZZDa6IDz9la9QBsGaXZ5Ebjn2oDA= Subject key identifier: 78:17:C8:85:74:05:AA:8D:CE:69:18:4C:3E:CF:81:09:D4:48:E5:8A Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f Certificate serial: 019BFC89EBE5BF9CAD0667DA00EAD51ED78E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft Manifest number: 12CC Signing time: Mon 26 Jan 2026 23:00:55 +0000 Manifest this update: Mon 26 Jan 2026 23:00:55 +0000 Manifest next update: Tue 27 Jan 2026 23:00:55 +0000 Files and hashes: 1: 1k7VTB7SeldaLWRNqkcJf8z7HHw.roa (hash: 3oiTUkjmYdO5UbIwN8Ds5tNRJC/IkTwk80H4gmRZk9M=) 2: RrLny5U_ijBVCGnLCvuUJJ18m5s.roa (hash: bpv8Zff7lwgvln+/BYJURzEncDhJwqT1vkhDlSV1O1g=) 3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: Ml+8aFAN/WGaLxWY3FcuZ+iE6gPechaROObQrioIB6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:89:eb:e5:bf:9c:ad:06:67:da:00:ea:d5:1e:d7:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f Validity Not Before: Jan 26 23:00:55 2026 GMT Not After : Jan 27 23:00:55 2026 GMT Subject: CN=7817c8857405aa8dce69184c3ecf8109d448e58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:7b:5c:ce:38:c1:2f:2b:c6:a4:2a:51:54: 7c:9e:ca:b7:dd:85:7c:30:fd:b8:22:a1:6a:bf:c0: 81:0c:aa:d4:ae:56:79:f5:c3:36:9b:ea:df:68:d6: 3b:53:34:a0:cd:fe:5e:3c:e0:0f:ac:c1:cb:0a:1a: 52:22:11:ae:66:19:2c:9e:af:fa:72:c1:ad:c2:45: 9d:4f:85:a4:4e:b6:05:74:59:af:12:b7:ed:4c:6c: f9:cd:32:28:51:74:73:41:17:7f:16:83:f2:6d:e6: 61:d3:f2:f7:a2:0e:4b:f0:27:15:33:e6:40:01:06: 72:6f:d5:d7:e5:42:2f:cb:df:8f:77:67:18:64:a0: 4e:5a:ba:e3:b3:03:b9:5a:37:c2:f1:04:54:0b:40: ed:dd:96:4a:c9:88:b4:90:e0:16:44:c6:9a:7f:47: 1b:ce:64:51:63:64:c7:3a:fa:81:ab:34:c9:e1:c0: de:74:3b:5d:1c:0f:a5:27:69:d1:25:8f:56:48:69: 79:22:5e:af:f6:b4:7e:de:3b:e6:83:1f:97:2e:64: 01:83:89:c5:ae:1b:b2:c6:a0:36:ab:cf:0c:e6:bb: 40:eb:d4:b9:52:30:e3:e0:12:66:ee:18:0e:a6:db: 77:24:a9:f2:ae:58:16:88:d2:de:c4:c6:ec:ef:d6: 37:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:17:C8:85:74:05:AA:8D:CE:69:18:4C:3E:CF:81:09:D4:48:E5:8A X509v3 Authority Key Identifier: keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:c5:42:58:7f:9c:47:37:ec:00:ab:cb:1b:61:c1:fd:d4:64: af:2f:fc:11:75:ca:40:b9:9f:82:c1:43:15:cb:3f:a8:88:a7: 3c:07:98:b1:a0:20:17:f0:53:28:c3:81:ac:f1:52:70:80:bf: bb:25:17:a4:a8:41:69:3d:a9:0f:78:4b:8e:96:56:9a:46:b3: 1a:e6:a3:b1:48:50:51:9e:a4:f0:e6:e5:46:86:74:9d:a5:da: b6:70:b9:f0:97:32:5f:68:dc:3f:3e:e6:06:83:b5:da:05:d0: 0d:b1:6c:48:2f:2e:a1:f6:d5:c2:95:c9:cb:c4:6f:3e:fe:c9: ea:77:9b:75:a9:2d:77:b6:68:93:c5:33:ae:4e:36:6a:18:eb: 15:59:2b:47:3d:25:1b:61:50:4b:b8:a2:25:6f:9d:87:39:8c: 43:c0:34:16:b2:00:fa:21:e5:01:ef:6f:34:75:83:6b:e5:01: 8d:b0:c7:b7:ce:85:37:77:21:c4:82:cc:0d:7c:49:d2:25:00: 95:da:2e:5f:b3:31:6b:cb:b6:97:80:c3:67:17:f8:16:ef:2e: 98:c8:d8:e9:d1:6a:c3:1c:3f:27:4c:0a:13:26:c9:d7:b4:3c: 6b:40:7c:5f:0e:50:99:99:8e:4f:d6:4d:ef:65:4d:b6:56:0e: d1:3d:31:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ievlv5ytBmfaAOrVHteOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDVhYTcwMzQyNTBhYjFhODc4OWFjODZjYzBlZWYzYmZj OWRiNWYwHhcNMjYwMTI2MjMwMDU1WhcNMjYwMTI3MjMwMDU1WjAzMTEwLwYDVQQD Eyg3ODE3Yzg4NTc0MDVhYThkY2U2OTE4NGMzZWNmODEwOWQ0NDhlNThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn57XM44wS8rxqQqUVR8nsq33YV8 MP24IqFqv8CBDKrUrlZ59cM2m+rfaNY7UzSgzf5ePOAPrMHLChpSIhGuZhksnq/6 csGtwkWdT4WkTrYFdFmvErftTGz5zTIoUXRzQRd/FoPybeZh0/L3og5L8CcVM+ZA AQZyb9XX5UIvy9+Pd2cYZKBOWrrjswO5WjfC8QRUC0Dt3ZZKyYi0kOAWRMaaf0cb zmRRY2THOvqBqzTJ4cDedDtdHA+lJ2nRJY9WSGl5Il6v9rR+3jvmgx+XLmQBg4nF rhuyxqA2q88M5rtA69S5UjDj4BJm7hgOptt3JKnyrlgWiNLexMbs79Y39wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgXyIV0BaqNzmkYTD7PgQnUSOWKMB8GA1UdIwQY MBaAFMjVqnA0JQqxqHiayGzA7vO/ydtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDIt MmQ3MmYyMzE5M2RiLzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDItMmQ3MmYyMzE5M2Ri LzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzcVCWH+c RzfsAKvLG2HB/dRkry/8EXXKQLmfgsFDFcs/qIinPAeYsaAgF/BTKMOBrPFScIC/ uyUXpKhBaT2pD3hLjpZWmkazGuajsUhQUZ6k8OblRoZ0naXatnC58JcyX2jcPz7m BoO12gXQDbFsSC8uofbVwpXJy8RvPv7J6nebdaktd7Zok8Uzrk42ahjrFVkrRz0l G2FQS7iiJW+dhzmMQ8A0FrIA+iHlAe9vNHWDa+UBjbDHt86FN3chxILMDXxJ0iUA ldouX7Mxa8u2l4DDZxf4Fu8umMjY6dFqwxw/J0wKEybJ17Q8a0B8Xw5QmZmOT9ZN 72VNtlYO0T0xLA== -----END CERTIFICATE-----Generated at Tue Jan 27 00:36:48 2026 by rpki-client