This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json) Hash identifier: O5p012sEO8wEt3jF4+K8o67N24581GJtZqVzY/hD1s4= Subject key identifier: 76:02:F3:71:DC:58:18:0E:C8:AD:41:00:68:5F:8D:90:0C:3D:9B:C3 Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c Certificate serial: 019BD80FD03758EE292FC9FE28B35AA08782 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft Manifest number: 10C3 Signing time: Mon 19 Jan 2026 21:01:13 +0000 Manifest this update: Mon 19 Jan 2026 21:01:13 +0000 Manifest next update: Tue 20 Jan 2026 21:01:13 +0000 Files and hashes: 1: BWIxZ78uKyw4vY-xhhwszjKA1Gg.roa (hash: DJhZH5ULKuTFx2qZjif4i5VCgjFcTYiLUvWNXLkT1QQ=) 2: GILkzrnW-WLXBiCMka03WJecbH4.roa (hash: V4r8aFoZHB6LWJUUFH9l/6/JEctMKZK9VcW+Qg7PzwI=) 3: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: F1VyFKqPgipePzE8DMMtIotIqYkrUVgIP1mV/anExVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:0f:d0:37:58:ee:29:2f:c9:fe:28:b3:5a:a0:87:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c Validity Not Before: Jan 19 21:01:13 2026 GMT Not After : Jan 20 21:01:13 2026 GMT Subject: CN=7602f371dc58180ec8ad4100685f8d900c3d9bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f0:d5:69:2e:1b:84:ed:40:1a:b7:4b:63:d0: 09:97:09:cf:95:65:2b:62:37:e1:a4:73:3a:66:99: aa:3d:31:8c:67:03:28:d2:09:16:85:63:7a:36:56: bf:4c:2b:51:35:8b:7f:bd:de:67:dc:7b:15:2a:52: 37:67:3d:b7:eb:f9:01:a5:b1:96:fe:a9:c0:dc:62: f7:fc:5b:0f:02:47:44:5c:97:f1:ed:70:18:58:11: 69:e7:2c:bc:8a:b4:47:00:37:71:c3:80:bd:d6:47: 1d:3c:28:a5:c6:e4:15:db:c5:80:41:11:4c:d8:e1: 6e:80:82:59:49:c1:3e:2f:ae:04:23:1d:21:65:38: 01:85:b9:91:cc:b7:26:c9:85:a9:d7:a9:5d:bf:96: 89:87:a5:37:39:f0:b1:3e:ba:22:89:66:ea:c7:00: ba:9a:a7:2e:3c:85:0b:e1:b0:fd:89:55:d6:52:82: d8:f8:01:36:91:9c:bc:70:1a:96:cf:c3:c8:f6:bf: 31:9e:78:d6:ee:d0:64:c5:5f:71:19:63:d2:7c:5d: 1b:fd:67:b8:95:34:8e:95:a4:f3:30:78:5f:ad:13: 2d:19:17:a6:32:82:27:d8:21:11:89:1b:3a:c9:7e: a8:17:ef:56:1c:d2:0f:f6:b9:b1:29:c7:1a:12:44: 24:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:02:F3:71:DC:58:18:0E:C8:AD:41:00:68:5F:8D:90:0C:3D:9B:C3 X509v3 Authority Key Identifier: keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:07:3d:f0:6f:5e:15:bd:33:ac:2d:42:b3:d5:b4:97:05:5c: 0d:72:66:0f:aa:b7:1e:86:21:63:49:94:a6:87:f8:ac:dd:63: df:d7:99:ea:66:db:a1:50:92:02:cb:3d:9c:ac:60:13:97:c9: 08:31:6c:41:26:7d:4d:ef:3f:1c:90:34:15:e6:82:6f:3e:3e: 59:b0:d0:34:ff:60:59:bd:c3:67:90:cf:01:4a:b0:ca:64:16: e1:67:88:2c:12:76:88:81:11:a6:18:eb:a2:d2:14:91:3c:31: 36:ba:8f:49:7a:cf:56:b4:bb:c9:74:d1:08:64:8c:70:c4:95: 61:cf:45:3f:a2:31:ec:01:86:64:0a:05:19:60:a3:bb:ed:e8: e6:a6:93:54:de:65:6d:ce:67:17:97:f7:65:46:47:02:11:f8: c8:49:f9:af:aa:e6:86:c0:22:5d:27:9a:42:09:bf:07:88:d5: 44:25:d9:3d:9f:8f:c7:2e:7e:5c:59:0d:d6:6b:43:2a:b1:65: d7:03:c4:04:d0:d1:9c:42:42:67:13:5c:a3:b4:ec:4e:b1:96: d8:ac:a0:7f:32:22:96:97:14:c3:1c:a6:40:9b:c6:fb:d4:7d: 1d:58:c6:e5:82:a2:ab:1c:f4:95:b7:3d:2e:ec:83:cf:d0:dc: 1f:7a:10:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYD9A3WO4pL8n+KLNaoIeCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNGNhMGQwOWJiZDA1ZjRiOGE4YWMzMGEzMjlmNjcxNTEx MDc1OGMwHhcNMjYwMTE5MjEwMTEzWhcNMjYwMTIwMjEwMTEzWjAzMTEwLwYDVQQD Eyg3NjAyZjM3MWRjNTgxODBlYzhhZDQxMDA2ODVmOGQ5MDBjM2Q5YmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/DVaS4bhO1AGrdLY9AJlwnPlWUr YjfhpHM6ZpmqPTGMZwMo0gkWhWN6Nla/TCtRNYt/vd5n3HsVKlI3Zz236/kBpbGW /qnA3GL3/FsPAkdEXJfx7XAYWBFp5yy8irRHADdxw4C91kcdPCilxuQV28WAQRFM 2OFugIJZScE+L64EIx0hZTgBhbmRzLcmyYWp16ldv5aJh6U3OfCxProiiWbqxwC6 mqcuPIUL4bD9iVXWUoLY+AE2kZy8cBqWz8PI9r8xnnjW7tBkxV9xGWPSfF0b/We4 lTSOlaTzMHhfrRMtGRemMoIn2CERiRs6yX6oF+9WHNIP9rmxKccaEkQk5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYC83HcWBgOyK1BAGhfjZAMPZvDMB8GA1UdIwQY MBaAFGFMoNCbvQX0uKisMKMp9nFREHWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAt Nzk0NDk3NjU5OWQ4LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAtNzk0NDk3NjU5OWQ4 LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAc98G9e Fb0zrC1Cs9W0lwVcDXJmD6q3HoYhY0mUpof4rN1j39eZ6mbboVCSAss9nKxgE5fJ CDFsQSZ9Te8/HJA0FeaCbz4+WbDQNP9gWb3DZ5DPAUqwymQW4WeILBJ2iIERphjr otIUkTwxNrqPSXrPVrS7yXTRCGSMcMSVYc9FP6Ix7AGGZAoFGWCju+3o5qaTVN5l bc5nF5f3ZUZHAhH4yEn5r6rmhsAiXSeaQgm/B4jVRCXZPZ+Pxy5+XFkN1mtDKrFl 1wPEBNDRnEJCZxNco7TsTrGW2KygfzIilpcUwxymQJvG+9R9HVjG5YKiqxz0lbc9 LuyDz9DcH3oQaQ== -----END CERTIFICATE-----Generated at Tue Jan 20 03:01:55 2026 by rpki-client