This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json) Hash identifier: iDSeFihK466SUSs4eaCEnBlQ4Off44GkjS81HbJ5G+s= Subject key identifier: 70:B6:A5:C4:A9:F7:07:7B:3D:5C:BD:3C:0F:98:1E:6C:F8:12:F5:F9 Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Certificate serial: 019BFA9B9E62000C7983D47158E163C1B373 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft Manifest number: 17F6 Signing time: Mon 26 Jan 2026 14:01:01 +0000 Manifest this update: Mon 26 Jan 2026 14:01:01 +0000 Manifest next update: Tue 27 Jan 2026 14:01:01 +0000 Files and hashes: 1: 5L2g6nDW06irIUq83phIZ53C1IA.roa (hash: JbdTWcKtL0GeFigj6GMvD4sLu582tKI8ZbvVxkhlvCI=) 2: AeVrZINs9Mwgw--CeQuhBL48V9o.roa (hash: tOULrw1qQEUkRt4Egsmhx0JNl0n1ptX0coLHQFBvARg=) 3: AzSbSNEJjHOAmPD-lEIirqfh5dg.roa (hash: ZHEBSxcyGtvAyqmQJ49m4K5zjUBmt85+2wE9Fs3EpwQ=) 4: UcKG60X0bY06GvhRzuyCZXPPpEs.roa (hash: CiNS7tumSY9kA1IK1COc42ZCVYSO1Vjftuq3lKqZ0Tg=) 5: VB7XO0ymTrFmXwqFwsQgqVfLeRw.roa (hash: 7CJ7QikKkqwN0XgN8t0cIqxMckNcSYUmDfhH8CM9bnM=) 6: c0IiT_bhf4sAeq2ZJ69mDEiSeKE.roa (hash: WC6msRGLImOXKWuJcuzV4dtFJSxBDOZv82faENvIVf0=) 7: f-sruYLmLAQF45fvBkTZ4sUoHrs.roa (hash: 8P04B1C9VS8sjuPoAqAxmLe2sS/eh9nL22FO4SV0ZsQ=) 8: rGoiQCmdvS4XmAkVedOPWx6pvfc.roa (hash: NENGKfJhaegTvTeAkQES6pzY2mWvrE4Gty5ShbLzPEM=) 9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: LEVM9aCL2pwQN3+HSOTnvduYvrwv1e4thqUez6FF6Mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:9e:62:00:0c:79:83:d4:71:58:e1:63:c1:b3:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Validity Not Before: Jan 26 14:01:01 2026 GMT Not After : Jan 27 14:01:01 2026 GMT Subject: CN=70b6a5c4a9f7077b3d5cbd3c0f981e6cf812f5f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:23:a7:14:0f:d0:3f:23:b6:36:cd:b1:31:43: e3:67:42:cb:34:ca:0d:05:d5:82:d0:bf:cd:4a:f0: 88:47:fb:ae:b8:f6:be:e7:27:f7:c8:36:fe:29:15: 65:4b:7b:fe:fa:82:e3:7c:8c:c9:d7:f7:90:58:00: f4:4c:7e:e0:cb:6b:05:4e:d1:90:ea:8e:92:e0:b6: e2:4a:c4:7a:22:33:60:b0:56:84:5b:4f:ac:0d:fc: 61:e2:c5:25:0a:bc:c5:08:cc:ae:86:d8:98:a6:ff: d3:83:f9:b1:b8:4d:f3:1c:c9:56:7d:14:ee:4f:e1: 60:0b:5b:c1:71:f2:e7:35:fe:0b:e8:72:92:c7:c7: 96:13:44:36:e6:92:d1:6f:fe:df:51:b7:81:4a:20: ec:55:c2:33:95:89:04:d3:0c:f3:7c:58:e2:99:73: 8c:7c:29:3b:7b:56:b2:00:d7:37:b4:9c:b4:18:27: 0c:5d:f6:3d:75:c1:20:ac:a2:38:55:6d:0c:3e:9a: b5:38:a9:d3:b3:a4:90:f1:06:19:55:ee:2e:1e:17: 69:96:2e:1a:fb:20:a1:d5:b5:58:20:56:6c:4b:bc: 99:9d:87:1e:b0:a7:62:81:57:bc:b3:53:ea:56:f1: 11:01:a6:ba:33:ff:a7:85:a1:0c:88:6a:6e:e5:2a: fd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B6:A5:C4:A9:F7:07:7B:3D:5C:BD:3C:0F:98:1E:6C:F8:12:F5:F9 X509v3 Authority Key Identifier: keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b4:ad:8f:82:36:2a:0d:b5:33:97:ed:03:78:06:f1:63:bf: 31:b7:6c:64:c8:bf:bb:65:34:c3:53:78:26:f1:4a:87:20:df: 2e:2e:c7:71:fe:13:65:21:b1:9b:55:b7:b1:f7:21:90:47:b2: 9d:9e:78:82:c4:f3:fd:09:a4:43:e4:a8:d0:5f:5e:92:1d:24: 7c:fd:6e:e1:93:db:eb:69:5c:4f:4d:2b:8c:4e:7b:d2:4f:fa: 37:e7:e2:8f:06:44:07:a1:9f:e9:4e:f4:f2:d4:fa:ef:58:53: fe:54:93:c7:0e:b9:57:7f:43:0b:52:f4:33:d9:27:9a:52:4e: b8:78:3c:a1:c6:43:19:64:06:ae:49:6c:cb:ca:c5:3b:cd:f7: be:6c:c7:ae:d0:4f:3e:75:d7:a4:2e:ed:9b:75:62:fd:e6:95: 9e:b1:8c:09:2f:69:a6:1e:a1:c1:9d:db:2b:98:0b:74:ac:a6: 8c:28:ac:94:43:59:93:f6:0c:69:35:f0:ff:38:db:a4:9f:7a: 6f:c9:eb:a7:41:89:3d:63:c8:6d:3c:02:b7:68:36:6e:2b:17: 3c:f8:64:47:c5:07:c1:01:97:e8:6d:3e:a9:4c:a6:c9:63:40: 72:93:24:bf:95:0d:68:3d:08:ef:32:02:52:09:9f:01:58:66: 40:b1:b3:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m55iAAx5g9RxWOFjwbNzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh YzZmMDUwHhcNMjYwMTI2MTQwMTAxWhcNMjYwMTI3MTQwMTAxWjAzMTEwLwYDVQQD Eyg3MGI2YTVjNGE5ZjcwNzdiM2Q1Y2JkM2MwZjk4MWU2Y2Y4MTJmNWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSOnFA/QPyO2Ns2xMUPjZ0LLNMoN BdWC0L/NSvCIR/uuuPa+5yf3yDb+KRVlS3v++oLjfIzJ1/eQWAD0TH7gy2sFTtGQ 6o6S4LbiSsR6IjNgsFaEW0+sDfxh4sUlCrzFCMyuhtiYpv/Tg/mxuE3zHMlWfRTu T+FgC1vBcfLnNf4L6HKSx8eWE0Q25pLRb/7fUbeBSiDsVcIzlYkE0wzzfFjimXOM fCk7e1ayANc3tJy0GCcMXfY9dcEgrKI4VW0MPpq1OKnTs6SQ8QYZVe4uHhdpli4a +yCh1bVYIFZsS7yZnYcesKdigVe8s1PqVvERAaa6M/+nhaEMiGpu5Sr9vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHC2pcSp9wd7PVy9PA+YHmz4EvX5MB8GA1UdIwQY MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt YzI1Nzc5MmRhZGM0LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0 LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLStj4I2 Kg21M5ftA3gG8WO/MbdsZMi/u2U0w1N4JvFKhyDfLi7Hcf4TZSGxm1W3sfchkEey nZ54gsTz/QmkQ+So0F9ekh0kfP1u4ZPb62lcT00rjE570k/6N+fijwZEB6Gf6U70 8tT671hT/lSTxw65V39DC1L0M9knmlJOuHg8ocZDGWQGrklsy8rFO833vmzHrtBP PnXXpC7tm3Vi/eaVnrGMCS9pph6hwZ3bK5gLdKymjCislENZk/YMaTXw/zjbpJ96 b8nrp0GJPWPIbTwCt2g2bisXPPhkR8UHwQGX6G0+qUymyWNAcpMkv5UNaD0I7zIC UgmfAVhmQLGzjw== -----END CERTIFICATE-----Generated at Mon Jan 26 20:29:50 2026 by rpki-client