This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft File: yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json) Hash identifier: yqTYbElFe+OfvmNbJgcSTMnh5DafMckqx7B7jGeI/ac= Subject key identifier: 9E:F5:37:FD:C3:56:6F:FE:2F:B9:88:F3:65:A2:DD:FA:F7:54:CB:81 Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8 Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8 Certificate serial: 019BF72C8A1439EC0545FD0054A91A3A679C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft Manifest number: 1045 Signing time: Sun 25 Jan 2026 22:00:49 +0000 Manifest this update: Sun 25 Jan 2026 22:00:49 +0000 Manifest next update: Mon 26 Jan 2026 22:00:49 +0000 Files and hashes: 1: D3wkpKKSoJovDsiCfvbh1DYTkx8.roa (hash: c0FcHGYTB+tG9IR/+QbyBfjUn2VqFpbtfy3DDserGhM=) 2: KSjHgXPRASqnBW1tjOtvhmkWPHE.roa (hash: h5XvzMTTFxSuHg9vWwCmjacM7SXacJTLfB8wl2n3Cec=) 3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: 2MCeemfS2T8oQHwrGslIHWdacRNCT8QQ1bK1+H4fc9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:8a:14:39:ec:05:45:fd:00:54:a9:1a:3a:67:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8 Validity Not Before: Jan 25 22:00:49 2026 GMT Not After : Jan 26 22:00:49 2026 GMT Subject: CN=9ef537fdc3566ffe2fb988f365a2ddfaf754cb81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1e:65:d3:ec:4b:81:c1:2c:59:6d:82:2a:05: a5:63:c7:7f:ff:44:10:68:69:7f:f1:f4:54:18:7f: ca:f4:d8:55:aa:21:ca:c9:cc:0b:d7:31:b9:82:f6: 92:64:2f:70:80:e9:b5:d9:8a:14:66:26:18:7d:8a: 73:93:36:f8:70:e3:21:0d:8b:cb:6a:84:c2:ce:a5: 67:8e:8b:a1:cc:80:86:76:5e:2e:4a:d4:12:37:1b: c8:1e:9a:59:49:c8:65:49:ea:52:f6:b1:79:33:d7: 71:a2:05:fc:6f:9d:69:bd:69:ef:61:35:49:93:66: 18:30:14:80:04:c6:6e:02:53:30:85:bc:86:db:8c: ee:bb:be:c7:a9:be:23:cf:f9:4e:c0:e0:64:53:1f: fd:03:2f:c2:12:f8:57:62:48:33:bf:b6:07:17:28: 48:fe:11:7f:1f:72:5c:ea:06:58:e4:93:23:5c:14: 47:47:47:aa:29:71:63:ff:be:34:63:58:8c:c9:f3: fb:42:3f:a5:fa:cb:fc:f4:0f:26:8a:c1:8b:2b:62: 23:26:20:97:b1:56:75:90:a6:a5:86:00:af:18:d4: a7:6b:63:3d:da:bd:a3:9d:b9:1e:f9:c0:86:15:61: 8f:16:18:40:32:23:c0:01:7e:3a:57:ca:2e:36:95: 32:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F5:37:FD:C3:56:6F:FE:2F:B9:88:F3:65:A2:DD:FA:F7:54:CB:81 X509v3 Authority Key Identifier: keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:aa:86:bc:fe:6e:92:01:17:0a:7e:48:31:6d:de:41:bb:3f: 59:f2:0b:54:8b:1d:48:d3:bf:18:1b:e5:72:be:21:80:86:25: 52:04:af:35:f5:92:92:6e:3a:42:ee:96:24:06:8f:3e:1e:db: a2:6d:68:f5:c3:8a:b2:d7:94:73:31:b2:d6:92:9f:e5:05:0a: 49:27:a7:d8:9b:3c:04:79:10:b1:4d:d4:79:10:32:fc:06:2b: c1:ba:a8:80:23:ca:d7:8f:de:7d:39:89:6b:92:e0:58:90:ec: b6:66:20:28:4b:2b:3f:c7:a4:12:aa:d0:6a:4f:df:5a:f3:d0: 18:46:e5:86:fc:92:43:d8:67:fe:bc:4f:ee:78:fe:1f:0c:77: 47:2d:84:e6:3a:05:11:42:d2:ab:c6:bf:93:e3:9e:1e:4c:e0: 1f:bc:67:dc:eb:34:6a:e2:fc:65:92:62:1a:5d:3a:db:22:ef: ec:d8:37:56:50:95:a4:70:25:50:eb:34:48:06:22:e7:7a:46: bd:2e:c8:32:96:cd:a6:50:51:90:9d:35:98:07:c3:1f:83:81: 26:9e:32:77:96:36:42:a4:23:3d:e1:ab:64:f0:28:9d:1a:38: 90:9a:98:cf:61:32:f0:2b:67:d6:97:89:cd:1c:9c:fe:d9:88: 96:2b:81:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LIoUOewFRf0AVKkaOmecMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOWUyMGQxMDM0YjQ0ZWY3NWU5NWZkZjdlYjg4ODE1YjZm N2QyZjgwHhcNMjYwMTI1MjIwMDQ5WhcNMjYwMTI2MjIwMDQ5WjAzMTEwLwYDVQQD Eyg5ZWY1MzdmZGMzNTY2ZmZlMmZiOTg4ZjM2NWEyZGRmYWY3NTRjYjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR5l0+xLgcEsWW2CKgWlY8d//0QQ aGl/8fRUGH/K9NhVqiHKycwL1zG5gvaSZC9wgOm12YoUZiYYfYpzkzb4cOMhDYvL aoTCzqVnjouhzICGdl4uStQSNxvIHppZSchlSepS9rF5M9dxogX8b51pvWnvYTVJ k2YYMBSABMZuAlMwhbyG24zuu77Hqb4jz/lOwOBkUx/9Ay/CEvhXYkgzv7YHFyhI /hF/H3Jc6gZY5JMjXBRHR0eqKXFj/740Y1iMyfP7Qj+l+sv89A8misGLK2IjJiCX sVZ1kKalhgCvGNSna2M92r2jnbke+cCGFWGPFhhAMiPAAX46V8ouNpUy2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ71N/3DVm/+L7mI82Wi3fr3VMuBMB8GA1UdIwQY MBaAFMqeINEDS0Tvdelf3364iBW299L4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xM2E2ODAtZjY5OC00Yzk3LTliYjYt MTI3MDFhYjUxYWNmLzEveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8xM2E2ODAtZjY5OC00Yzk3LTliYjYtMTI3MDFhYjUxYWNm LzEveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYaqGvP5u kgEXCn5IMW3eQbs/WfILVIsdSNO/GBvlcr4hgIYlUgSvNfWSkm46Qu6WJAaPPh7b om1o9cOKsteUczGy1pKf5QUKSSen2Js8BHkQsU3UeRAy/AYrwbqogCPK14/efTmJ a5LgWJDstmYgKEsrP8ekEqrQak/fWvPQGEblhvySQ9hn/rxP7nj+Hwx3Ry2E5joF EULSq8a/k+OeHkzgH7xn3Os0auL8ZZJiGl062yLv7Ng3VlCVpHAlUOs0SAYi53pG vS7IMpbNplBRkJ01mAfDH4OBJp4yd5Y2QqQjPeGrZPAonRo4kJqYz2Ey8Ctn1peJ zRyc/tmIliuBDg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:13:45 2026 by rpki-client