This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft File: yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json) Hash identifier: wFdc6ewWcYSNjW4h83eRd6ZEkNNgo1bV+mRM0H7b4co= Subject key identifier: 5D:39:69:1F:74:00:18:42:AF:D3:7E:3A:15:32:E5:AC:39:92:76:31 Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5 Certificate issuer: /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5 Certificate serial: 019BF9520A681EB7362F5BBEED67DC9B6817 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft Manifest number: 0C0D Signing time: Mon 26 Jan 2026 08:01:01 +0000 Manifest this update: Mon 26 Jan 2026 08:01:01 +0000 Manifest next update: Tue 27 Jan 2026 08:01:01 +0000 Files and hashes: 1: kmHpE0nIsqnNjXBHZzn8ghlLUAY.roa (hash: vHtrQdMnfFyM3Hed/jGaAR/NyxOc2xl8ZPzUXZL4Gvc=) 2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: nb1HTllw0xXm7jAm54l9sRW45GS9h6IbB6pGSdNZdIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:52:0a:68:1e:b7:36:2f:5b:be:ed:67:dc:9b:68:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5 Validity Not Before: Jan 26 08:01:01 2026 GMT Not After : Jan 27 08:01:01 2026 GMT Subject: CN=5d39691f74001842afd37e3a1532e5ac39927631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8e:08:12:8c:bf:ee:76:4f:fd:c1:7e:50:c2: 11:15:bd:38:91:b8:5d:c7:8d:eb:ee:df:2f:16:c1: d5:8c:6b:30:aa:10:fe:e7:cf:fb:e8:d6:6a:c2:05: ee:a8:13:4c:88:0f:9d:e2:83:09:20:82:c4:ed:74: b1:7d:52:e1:3d:36:fa:20:5c:81:ff:2d:a2:be:f2: 51:17:c1:2e:68:9e:e5:28:f1:2c:39:09:dc:65:c5: ad:f0:c3:c9:84:ca:55:32:7b:1e:3f:06:15:0b:45: 92:ec:e6:15:e2:76:d6:cc:73:5d:94:d6:0c:64:6d: 0d:ff:17:5e:e9:b2:98:22:5e:3d:70:08:54:8e:f6: 45:d8:6a:bc:1d:ba:a6:9f:74:18:25:e2:50:9a:46: 86:98:f6:99:2e:09:8b:7b:8d:4a:79:7e:84:4a:39: 87:04:6a:c1:a1:a2:11:7b:95:b5:23:d2:ff:9f:d6: a1:0d:c4:34:ec:9b:01:b0:ec:ed:2f:0e:7e:5d:8c: 37:f1:73:eb:d8:9f:86:f8:7b:2c:70:c0:65:dd:b4: 32:90:a5:a1:8f:be:02:01:a8:b0:9d:f1:c9:a2:ba: 35:30:92:c9:a5:9d:4e:dd:0f:ec:67:29:79:46:25: b5:c1:15:9d:7e:e1:e1:fa:04:51:33:c0:bd:c6:da: 8c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:39:69:1F:74:00:18:42:AF:D3:7E:3A:15:32:E5:AC:39:92:76:31 X509v3 Authority Key Identifier: keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c6:f0:cd:ff:40:9d:66:a5:c7:d7:35:da:8e:a7:11:1b:39: 59:2f:4a:f3:a5:b5:3b:15:dc:74:99:51:58:63:8f:0e:77:cf: 1d:dd:7d:86:f0:5c:33:bf:fc:80:1f:e4:80:e0:a2:a0:20:91: 72:25:b1:84:78:0f:e6:04:95:cd:19:0d:ca:73:1f:50:ff:08: 0c:dd:71:57:72:45:ee:74:7a:bd:32:15:3c:86:c9:c4:95:86: fa:58:45:1c:c4:11:63:b2:44:76:d6:b1:fc:fb:11:bf:0b:a6: 69:85:b0:a6:81:32:3c:5d:2d:91:63:b3:10:d7:6d:2b:b8:b1: 23:9e:ee:f9:9c:ae:31:de:01:b6:ae:ab:17:0a:2b:24:82:a2: b2:be:13:48:3e:43:c0:9b:29:7d:26:3b:50:63:64:42:b9:b4: ec:e7:43:3f:15:71:20:f6:dd:4a:d6:63:57:5f:d7:a9:46:d6: b8:1c:73:32:d5:61:4d:15:15:82:09:6f:da:79:2e:2a:be:7b: bc:9e:40:7c:0d:7a:8c:78:82:80:2d:0b:91:6e:1c:48:60:74: c9:f4:d2:93:fb:25:af:18:ae:b4:f6:64:1f:ed:16:40:3a:d9: c5:13:0a:c5:0a:5c:fb:cc:2f:6c:e8:96:c1:77:d1:9b:bd:9a: 4a:13:c5:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UgpoHrc2L1u+7Wfcm2gXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZjliYWFiMWExM2RmMzBlZmYwZmNkNzgwYzRiYmM1NGJj M2U2ZDUwHhcNMjYwMTI2MDgwMTAxWhcNMjYwMTI3MDgwMTAxWjAzMTEwLwYDVQQD Eyg1ZDM5NjkxZjc0MDAxODQyYWZkMzdlM2ExNTMyZTVhYzM5OTI3NjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y4IEoy/7nZP/cF+UMIRFb04kbhd x43r7t8vFsHVjGswqhD+58/76NZqwgXuqBNMiA+d4oMJIILE7XSxfVLhPTb6IFyB /y2ivvJRF8EuaJ7lKPEsOQncZcWt8MPJhMpVMnsePwYVC0WS7OYV4nbWzHNdlNYM ZG0N/xde6bKYIl49cAhUjvZF2Gq8Hbqmn3QYJeJQmkaGmPaZLgmLe41KeX6ESjmH BGrBoaIRe5W1I9L/n9ahDcQ07JsBsOztLw5+XYw38XPr2J+G+HsscMBl3bQykKWh j74CAaiwnfHJoro1MJLJpZ1O3Q/sZyl5RiW1wRWdfuHh+gRRM8C9xtqMSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF05aR90ABhCr9N+OhUy5aw5knYxMB8GA1UdIwQY MBaAFMj5uqsaE98w7/D814DEu8VLw+bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZTY3NjItMDk4OS00OGVmLWE4ZDIt ZGI0ODRjY2U3MjkzLzEveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zZTY3NjItMDk4OS00OGVmLWE4ZDItZGI0ODRjY2U3Mjkz LzEveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMbwzf9A nWalx9c12o6nERs5WS9K86W1OxXcdJlRWGOPDnfPHd19hvBcM7/8gB/kgOCioCCR ciWxhHgP5gSVzRkNynMfUP8IDN1xV3JF7nR6vTIVPIbJxJWG+lhFHMQRY7JEdtax /PsRvwumaYWwpoEyPF0tkWOzENdtK7ixI57u+ZyuMd4Btq6rFworJIKisr4TSD5D wJspfSY7UGNkQrm07OdDPxVxIPbdStZjV1/XqUbWuBxzMtVhTRUVgglv2nkuKr57 vJ5AfA16jHiCgC0LkW4cSGB0yfTSk/slrxiutPZkH+0WQDrZxRMKxQpc+8wvbOiW wXfRm72aShPFbQ== -----END CERTIFICATE-----Generated at Mon Jan 26 15:04:54 2026 by rpki-client