This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft File: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft (raw, json) Hash identifier: PcnNK2aAOQrS9BfWyMaSBFqJgeSqcHS7Wye4rydqj88= Subject key identifier: 18:F1:23:C7:4E:58:6D:3A:37:92:E1:27:06:DE:AF:58:5D:DA:73:A1 Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68 Certificate issuer: /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68 Certificate serial: 019B7EA7E55D9CFE94D330CDA81536C8E237 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft Manifest number: 0C04 Signing time: Fri 02 Jan 2026 12:21:30 +0000 Manifest this update: Fri 02 Jan 2026 12:21:30 +0000 Manifest next update: Sat 03 Jan 2026 12:21:30 +0000 Files and hashes: 1: E2zzXQ54xG7WLQ4EAWvDS5mcEy4.roa (hash: 1CmVUeU/gi0IzJZ7FqgYWAYmrsykqbvWe2Uux9ESnfc=) 2: G424g57xXENY2DHJSLRepGmj98E.roa (hash: fxFxeeNbC2BzkjzLduHQdCSo3bpyacMg+qlZ3fSgioQ=) 3: M16a-01DtEnUChbTQJhjr1Iefi0.roa (hash: MvFHVj8+o4PtyZlfLnoWLUlGFyHMzdje5B5jzpVV+ao=) 4: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl (hash: Pob1bMWrNvwm1ok4YS7g6W80wrEAophj8IMxvML9A1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:e5:5d:9c:fe:94:d3:30:cd:a8:15:36:c8:e2:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68 Validity Not Before: Jan 2 12:21:30 2026 GMT Not After : Jan 3 12:21:30 2026 GMT Subject: CN=18f123c74e586d3a3792e12706deaf585dda73a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e2:c4:a4:eb:c9:3d:b5:04:6c:7e:45:d6:37: ad:69:3d:6c:50:38:b2:59:1c:49:70:e0:12:d2:7a: 2a:7d:9a:91:2b:fb:94:79:36:61:b7:14:16:ab:36: 06:e9:23:9b:a2:94:4f:f1:6d:bc:d4:22:2f:4d:db: 4a:7d:12:f7:07:5e:cc:89:dc:9a:2d:eb:f1:b5:0a: 4c:60:94:e0:2c:82:ea:46:46:09:d4:a8:0c:a7:9e: 24:fe:43:87:72:f2:e0:d9:3f:f9:4d:25:9b:19:a4: 0c:69:9a:65:2f:82:cb:a6:ef:c2:47:d2:f6:54:28: 55:9c:99:30:93:39:33:6e:d2:e5:b3:d8:2c:f4:eb: 27:4c:71:73:1d:c0:fd:d1:e4:9a:f0:17:e6:81:4f: 31:8e:2b:5a:8b:83:4a:0b:8b:8e:8a:29:95:69:dc: fd:51:7b:a1:30:8e:e9:58:8e:97:6c:c4:2e:a9:04: 3e:95:68:1b:ff:be:a4:08:4c:a7:c4:ac:16:5d:be: b4:cb:ec:80:f2:27:42:42:fc:7c:d0:0f:a6:f5:8d: 47:1c:fc:bd:50:ba:3d:a7:5a:07:24:f0:51:f1:3a: d8:bd:21:36:08:8b:5d:2d:f3:c9:0b:b1:c5:62:de: 8d:48:91:8d:47:b9:f2:be:46:bd:6d:4b:45:13:42: f8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F1:23:C7:4E:58:6D:3A:37:92:E1:27:06:DE:AF:58:5D:DA:73:A1 X509v3 Authority Key Identifier: keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:f7:31:ed:92:26:80:87:33:de:88:00:36:9c:87:19:9c:a3: 6f:02:5f:17:1f:eb:9b:f2:7b:8d:88:5f:aa:ed:a3:8b:5f:97: e3:dc:09:49:a6:64:2e:40:4b:08:51:6f:78:30:16:c9:13:2f: b7:ca:6d:3f:03:3d:a2:ef:15:7b:f5:61:43:3b:3e:b4:05:13: d1:5f:25:d8:49:e2:35:8d:09:43:48:b5:71:07:23:8d:ae:35: bc:d4:c6:4f:59:5f:d5:8c:5d:8b:8b:5c:9d:62:1e:2c:64:e3: a4:6d:86:0b:df:28:6f:ed:c7:14:4d:50:7f:ee:ce:0e:fc:2e: f1:66:1b:c5:95:f6:10:d6:35:81:98:2f:ca:27:c4:73:43:fe: 00:ff:de:7e:ce:6c:b1:7b:2b:f6:62:f1:0f:e4:14:2f:aa:e9: 0b:b4:e1:f1:6c:a9:96:10:26:37:81:a2:54:ea:c7:7b:bc:af: 19:1d:1a:6d:02:c9:41:56:d0:73:13:1b:ce:14:4f:ef:91:9a: ce:ad:a2:65:f4:8d:3b:e8:da:1e:11:11:e6:71:d7:b2:55:45: e0:38:9c:64:9b:60:12:43:3e:7a:2c:df:72:9f:5d:8f:da:16: 86:8c:60:e8:2d:14:08:1d:ce:d2:e8:b4:9e:d2:4e:a0:9d:cd: e7:31:5c:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt+p+VdnP6U0zDNqBU2yOI3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NDZjNGJlZmUwZmJiZTM2MjRiZDc0ODI5NmI1ZmUyZTdl YzJkNjgwHhcNMjYwMTAyMTIyMTMwWhcNMjYwMTAzMTIyMTMwWjAzMTEwLwYDVQQD EygxOGYxMjNjNzRlNTg2ZDNhMzc5MmUxMjcwNmRlYWY1ODVkZGE3M2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuLEpOvJPbUEbH5F1jetaT1sUDiy WRxJcOAS0noqfZqRK/uUeTZhtxQWqzYG6SObopRP8W281CIvTdtKfRL3B17Midya LevxtQpMYJTgLILqRkYJ1KgMp54k/kOHcvLg2T/5TSWbGaQMaZplL4LLpu/CR9L2 VChVnJkwkzkzbtLls9gs9OsnTHFzHcD90eSa8BfmgU8xjitai4NKC4uOiimVadz9 UXuhMI7pWI6XbMQuqQQ+lWgb/76kCEynxKwWXb60y+yA8idCQvx80A+m9Y1HHPy9 ULo9p1oHJPBR8TrYvSE2CItdLfPJC7HFYt6NSJGNR7nyvka9bUtFE0L4hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjxI8dOWG06N5LhJwber1hd2nOhMB8GA1UdIwQY MBaAFMlGxL7+D7vjYkvXSClrX+Ln7C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9mMmQ5ZTktZWVmZi00NjMzLWExODkt NmJiYjI3MDgxZGUyLzEveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9mMmQ5ZTktZWVmZi00NjMzLWExODktNmJiYjI3MDgxZGUy LzEveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/cx7ZIm gIcz3ogANpyHGZyjbwJfFx/rm/J7jYhfqu2ji1+X49wJSaZkLkBLCFFveDAWyRMv t8ptPwM9ou8Ve/VhQzs+tAUT0V8l2EniNY0JQ0i1cQcjja41vNTGT1lf1Yxdi4tc nWIeLGTjpG2GC98ob+3HFE1Qf+7ODvwu8WYbxZX2ENY1gZgvyifEc0P+AP/efs5s sXsr9mLxD+QUL6rpC7Th8WyplhAmN4GiVOrHe7yvGR0abQLJQVbQcxMbzhRP75Ga zq2iZfSNO+jaHhER5nHXslVF4DicZJtgEkM+eizfcp9dj9oWhoxg6C0UCB3O0ui0 ntJOoJ3N5zFceg== -----END CERTIFICATE-----Generated at Fri Jan 2 16:44:43 2026 by rpki-client