This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json) Hash identifier: 4G3HNM7y1bLJ3CGbyqxDuYEskbLlLxGoE9Afvfi5wro= Subject key identifier: C5:71:E9:1D:A9:9B:23:B8:5D:7B:44:68:79:CA:07:65:E5:9C:6A:DC Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6 Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6 Certificate serial: 019C2A74A9176838E720AA088467C94EE7EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft Manifest number: 130D Signing time: Wed 04 Feb 2026 21:00:14 +0000 Manifest this update: Wed 04 Feb 2026 21:00:14 +0000 Manifest next update: Thu 05 Feb 2026 21:00:14 +0000 Files and hashes: 1: DuGvljbMKyTFuZTU-M_3hPbhqok.roa (hash: sKJFRZv1IEZsL8m5scNIJsDoTMmnevnLdEjn73O4WKs=) 2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: ssDZB84j84TvcLYt7FiQfjUFD0oC9aBCjjduT/SyM/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2a:74:a9:17:68:38:e7:20:aa:08:84:67:c9:4e:e7:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6 Validity Not Before: Feb 4 21:00:14 2026 GMT Not After : Feb 5 21:00:14 2026 GMT Subject: CN=c571e91da99b23b85d7b446879ca0765e59c6adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:44:52:ef:37:b0:3e:43:4c:8e:b5:cf:3a:a2: 8b:fa:99:31:ce:8b:df:87:05:cf:db:5f:d5:b2:1e: 55:82:57:e6:97:00:fb:dc:76:a1:c5:f0:b0:d3:90: 8a:b3:1e:76:8a:87:5a:1a:a5:2e:b8:a6:bc:1c:4a: 05:3d:95:82:24:85:87:20:6b:ca:d7:bb:b9:d6:eb: 39:b0:f7:bf:dd:45:37:08:73:79:06:54:e1:0f:95: 42:37:ad:8c:2e:55:a8:44:cc:0b:5d:27:c5:b6:98: 04:05:b5:bf:69:cb:cf:c9:bb:74:cc:da:3b:c4:3b: c8:25:d1:11:0e:4e:d2:48:dc:94:98:ea:ea:38:20: 1b:d9:4a:9c:72:af:ae:5e:41:ed:31:88:9f:70:e6: ce:bc:ed:83:46:45:95:3f:ee:ba:bd:97:96:14:eb: b5:38:33:78:0a:98:64:81:cc:f8:a3:fd:8f:85:5c: d5:c3:cd:90:af:a7:6c:04:26:fc:09:49:19:1b:6e: 96:1f:e0:62:18:40:c1:5d:84:92:c2:b7:8b:f4:55: fb:d7:fd:3e:4b:6e:ec:81:57:e9:2b:d3:ee:b8:91: 2f:2a:97:7c:67:4f:89:c2:54:d5:bd:8b:c4:18:40: 1d:06:c5:e5:15:b7:bb:4e:97:18:5e:da:45:de:b0: 6f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:71:E9:1D:A9:9B:23:B8:5D:7B:44:68:79:CA:07:65:E5:9C:6A:DC X509v3 Authority Key Identifier: keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:de:f5:e8:4e:96:5f:6a:50:f2:cb:8c:88:7b:dd:96:9f:f0: 41:a8:dc:67:01:98:bb:96:dd:8a:63:d3:a5:cc:70:da:8a:c5: 88:9d:81:81:f5:73:2e:0f:01:84:fa:88:2b:63:3d:d1:62:68: ee:0e:ea:98:cb:9a:0b:51:2a:c8:b4:ab:00:a3:22:09:d7:46: 10:ac:d5:84:e9:50:aa:1e:0a:53:02:f9:31:95:c8:bb:6d:df: 9d:d4:69:24:17:04:c9:a2:3d:15:f6:37:60:07:5a:2d:07:31: ba:62:3f:79:05:c7:7c:aa:00:6f:f7:ee:bb:f5:93:d9:75:b5: 84:06:b3:ce:87:00:8f:2a:d4:29:e3:80:88:9d:27:7b:0a:f7: 8c:1c:b4:3b:48:9b:92:78:23:e6:cb:3d:93:d4:b9:d3:3b:3f: 6c:27:2f:99:08:fe:da:3c:0e:f0:71:35:30:c8:d0:de:05:ca: 86:5d:66:fe:eb:b6:cf:67:bc:ab:c2:78:f6:f4:b4:ef:0f:54: 95:2a:24:44:22:84:27:dd:3c:3a:f3:d3:67:c2:a8:0f:37:05: d8:ad:21:98:df:49:18:cd:3d:00:f9:74:08:b2:d6:e2:6a:ae: b2:c0:4d:3e:9c:44:37:3e:ec:8e:23:eb:12:8a:12:93:23:a4: be:d1:d6:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwqdKkXaDjnIKoIhGfJTufuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YTdmZjAxMmNiNzJlYTg0ZDFiODNjMDAyYzMyMDNjYzAy NGU2YTYwHhcNMjYwMjA0MjEwMDE0WhcNMjYwMjA1MjEwMDE0WjAzMTEwLwYDVQQD EyhjNTcxZTkxZGE5OWIyM2I4NWQ3YjQ0Njg3OWNhMDc2NWU1OWM2YWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskRS7zewPkNMjrXPOqKL+pkxzovf hwXP21/Vsh5VglfmlwD73HahxfCw05CKsx52iodaGqUuuKa8HEoFPZWCJIWHIGvK 17u51us5sPe/3UU3CHN5BlThD5VCN62MLlWoRMwLXSfFtpgEBbW/acvPybt0zNo7 xDvIJdERDk7SSNyUmOrqOCAb2Uqccq+uXkHtMYifcObOvO2DRkWVP+66vZeWFOu1 ODN4Cphkgcz4o/2PhVzVw82Qr6dsBCb8CUkZG26WH+BiGEDBXYSSwreL9FX71/0+ S27sgVfpK9PuuJEvKpd8Z0+JwlTVvYvEGEAdBsXlFbe7TpcYXtpF3rBv1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVx6R2pmyO4XXtEaHnKB2XlnGrcMB8GA1UdIwQY MBaAFMmn/wEsty6oTRuDwALDIDzAJOamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MmZiM2MtNjFhNi00NWNhLWE0N2Ut ZDJkMTIwOWM0ODI1LzEveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MmZiM2MtNjFhNi00NWNhLWE0N2UtZDJkMTIwOWM0ODI1 LzEveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACd716E6W X2pQ8suMiHvdlp/wQajcZwGYu5bdimPTpcxw2orFiJ2BgfVzLg8BhPqIK2M90WJo 7g7qmMuaC1EqyLSrAKMiCddGEKzVhOlQqh4KUwL5MZXIu23fndRpJBcEyaI9FfY3 YAdaLQcxumI/eQXHfKoAb/fuu/WT2XW1hAazzocAjyrUKeOAiJ0newr3jBy0O0ib kngj5ss9k9S50zs/bCcvmQj+2jwO8HE1MMjQ3gXKhl1m/uu2z2e8q8J49vS07w9U lSokRCKEJ908OvPTZ8KoDzcF2K0hmN9JGM09APl0CLLW4mqussBNPpxENz7sjiPr EooSkyOkvtHWzA== -----END CERTIFICATE-----Generated at Thu Feb 5 03:04:54 2026 by rpki-client