This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json) Hash identifier: xNkP/vq6JTg+A7kj2WG8Ov1p95sHVEunGEBYEkz0n+E= Subject key identifier: E9:88:6B:18:E9:21:5C:6B:D7:81:D4:07:7D:F0:CE:04:E7:3B:A4:F5 Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f Certificate serial: 019BFA9B88A12F350D8913C3AFF1094A9B6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft Manifest number: 12CB Signing time: Mon 26 Jan 2026 14:00:55 +0000 Manifest this update: Mon 26 Jan 2026 14:00:55 +0000 Manifest next update: Tue 27 Jan 2026 14:00:55 +0000 Files and hashes: 1: 1k7VTB7SeldaLWRNqkcJf8z7HHw.roa (hash: 3oiTUkjmYdO5UbIwN8Ds5tNRJC/IkTwk80H4gmRZk9M=) 2: RrLny5U_ijBVCGnLCvuUJJ18m5s.roa (hash: bpv8Zff7lwgvln+/BYJURzEncDhJwqT1vkhDlSV1O1g=) 3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: liQF6Ok1BUV65o9vhcy42f0mZgq8uX7tQ8mKPWn/aZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:88:a1:2f:35:0d:89:13:c3:af:f1:09:4a:9b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f Validity Not Before: Jan 26 14:00:55 2026 GMT Not After : Jan 27 14:00:55 2026 GMT Subject: CN=e9886b18e9215c6bd781d4077df0ce04e73ba4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fe:d3:53:32:fb:25:1c:61:6f:95:d8:88:05: 25:c0:5d:3a:c3:4b:cf:48:40:f6:60:b5:ee:98:62: 8f:a8:4d:86:dd:6b:aa:7e:43:f9:7f:95:d7:2e:ce: b2:6c:3c:45:75:74:97:d0:81:31:da:49:19:1b:7c: a4:89:e7:9f:4b:4c:4a:2b:0e:7e:4c:4a:99:00:4a: 11:d7:a3:2e:f0:d1:5d:92:75:8e:67:95:f3:39:74: c0:1c:8f:b5:1e:c8:5c:f2:16:63:ce:9c:f6:1c:b0: bd:0b:25:ff:4d:af:27:ce:3e:b0:f3:e9:cf:bd:a6: 3d:50:7d:5e:5a:31:45:8e:55:3a:5c:6f:64:19:5a: cf:b4:3c:b5:d6:24:0a:49:d7:cb:13:fe:36:cb:5a: 57:c4:b7:89:f5:1b:1e:af:f4:97:7d:8b:35:39:28: 7f:2c:d1:9d:93:10:3d:16:0a:ba:15:1f:bb:5f:9d: 9a:46:74:91:46:53:5c:6e:4e:64:04:f8:a5:19:41: af:f7:00:8a:95:f3:8a:f1:03:98:32:05:10:6c:6a: d1:b5:8b:85:1c:ad:7d:5b:a9:94:33:6a:8e:bd:94: 8d:85:3e:af:db:2f:aa:92:75:52:b4:46:81:b9:2c: 76:6d:ac:c6:af:45:83:0f:d0:88:5b:78:3f:e8:08: 69:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:88:6B:18:E9:21:5C:6B:D7:81:D4:07:7D:F0:CE:04:E7:3B:A4:F5 X509v3 Authority Key Identifier: keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:38:ef:45:f1:39:d3:ed:cb:56:da:b1:ad:05:3c:f3:73:1b: 4a:78:52:78:1c:4e:10:ff:5c:ec:52:69:b0:2b:68:04:ce:2a: ef:56:15:4b:9f:61:1b:9e:b3:f2:2e:4e:46:d3:81:a0:b4:c9: bf:e8:d0:f9:83:cf:22:2f:4a:71:e3:87:73:b3:ec:dd:16:db: c4:72:b5:44:0d:64:3d:79:6e:c0:54:f6:8d:e3:f6:86:99:99: 28:39:0d:f1:37:4b:9d:74:24:da:9d:4d:b4:56:9a:1e:7b:09: 04:5c:cc:39:38:3a:44:1d:2e:4f:18:fd:75:7e:73:11:da:38: 80:59:d8:89:fe:22:61:89:81:e1:50:ec:31:51:65:4a:a3:d4: b3:91:27:27:d9:81:dd:ad:04:2c:55:3d:39:f1:f3:c4:ff:39: 9d:28:9e:3e:d1:2e:40:7e:c5:2f:25:4d:b9:36:42:b9:87:a6: 19:82:30:95:4c:d7:c6:23:57:57:1d:18:9a:d1:c5:16:2f:ae: 6d:45:03:ab:94:53:f3:f6:d1:5d:91:12:76:fe:04:a6:c2:38: d1:3b:ac:fd:26:5e:5a:58:23:67:af:6a:40:b0:68:ab:a1:b9: 30:0a:cd:23:ca:a2:82:55:9b:a4:23:a2:cb:7f:7a:6e:26:d4: 0b:ba:a2:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m4ihLzUNiRPDr/EJSptuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDVhYTcwMzQyNTBhYjFhODc4OWFjODZjYzBlZWYzYmZj OWRiNWYwHhcNMjYwMTI2MTQwMDU1WhcNMjYwMTI3MTQwMDU1WjAzMTEwLwYDVQQD EyhlOTg4NmIxOGU5MjE1YzZiZDc4MWQ0MDc3ZGYwY2UwNGU3M2JhNGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv7TUzL7JRxhb5XYiAUlwF06w0vP SED2YLXumGKPqE2G3WuqfkP5f5XXLs6ybDxFdXSX0IEx2kkZG3ykieefS0xKKw5+ TEqZAEoR16Mu8NFdknWOZ5XzOXTAHI+1Hshc8hZjzpz2HLC9CyX/Ta8nzj6w8+nP vaY9UH1eWjFFjlU6XG9kGVrPtDy11iQKSdfLE/42y1pXxLeJ9Rser/SXfYs1OSh/ LNGdkxA9Fgq6FR+7X52aRnSRRlNcbk5kBPilGUGv9wCKlfOK8QOYMgUQbGrRtYuF HK19W6mUM2qOvZSNhT6v2y+qknVStEaBuSx2bazGr0WDD9CIW3g/6Ahp/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmIaxjpIVxr14HUB33wzgTnO6T1MB8GA1UdIwQY MBaAFMjVqnA0JQqxqHiayGzA7vO/ydtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDIt MmQ3MmYyMzE5M2RiLzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDItMmQ3MmYyMzE5M2Ri LzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqDjvRfE5 0+3LVtqxrQU883MbSnhSeBxOEP9c7FJpsCtoBM4q71YVS59hG56z8i5ORtOBoLTJ v+jQ+YPPIi9KceOHc7Ps3RbbxHK1RA1kPXluwFT2jeP2hpmZKDkN8TdLnXQk2p1N tFaaHnsJBFzMOTg6RB0uTxj9dX5zEdo4gFnYif4iYYmB4VDsMVFlSqPUs5EnJ9mB 3a0ELFU9OfHzxP85nSiePtEuQH7FLyVNuTZCuYemGYIwlUzXxiNXVx0YmtHFFi+u bUUDq5RT8/bRXZESdv4EpsI40Tus/SZeWlgjZ69qQLBoq6G5MArNI8qiglWbpCOi y396bibUC7qikA== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:25 2026 by rpki-client