This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft File: yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json) Hash identifier: bQ2mNfQ/pfCNJ2f6Qz/O9HqOyIeb9EunMe90eXkh98c= Subject key identifier: 7B:BD:89:8A:59:3B:44:9F:80:1F:FC:9D:F0:7F:E5:E9:72:11:5E:46 Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Certificate serial: 019BFCF8423F31C38BD5A693BB933FFC6E0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft Manifest number: 17F8 Signing time: Tue 27 Jan 2026 01:01:26 +0000 Manifest this update: Tue 27 Jan 2026 01:01:26 +0000 Manifest next update: Wed 28 Jan 2026 01:01:26 +0000 Files and hashes: 1: C0mI0v3AUYRPG8yTqF1QgFx7xU0.roa (hash: NZkJ/jcOZzqhSAxEfG1FbsPeSS23tdRhxk92nPlXNFM=) 2: JTcKp_-HzhWS07Rh-pfbwQal9BE.roa (hash: K+FwMVfzlkVxN/6tFJRIps6Jd4mzYW6vjm8IFKOQH8g=) 3: U-ONT3QFPmL6bgDFPQrkc4UkItw.roa (hash: jHrm5ubltObAwz/kEr5+twdpGR7UoJHw+XLZONVGw4I=) 4: fIbLyWDcpEVajMwX0IRFmbRboBM.roa (hash: qO1PWw5QDsqq+kEFxL2W+jiNK15/wTUl2EHHtmkWM64=) 5: nbAQ4BPt9n4nKfMqMproTXSCv8M.roa (hash: XXF2LQVa1HbRIXhKxBQckeiuDt9Ut4eLmMQeCOw1aKI=) 6: qcBd1Q5bVW4seHpjXwWwpkJfYnQ.roa (hash: dRY1xnWd/ZI7zspxffS1quMRwGNyT+a2Sy2Dp6pe8Ys=) 7: rZHZ_k5hgir55AATjETSpEWsH80.roa (hash: 8tYYoFYaWJCj2Pb7rbLdOHuTB+Gfcdd0okrBmCgEOAE=) 8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: XtvzNURIn0dAmI1ywFwXjFKcyhJvIt1+Yb+WRNfPQmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:42:3f:31:c3:8b:d5:a6:93:bb:93:3f:fc:6e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Validity Not Before: Jan 27 01:01:26 2026 GMT Not After : Jan 28 01:01:26 2026 GMT Subject: CN=7bbd898a593b449f801ffc9df07fe5e972115e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:29:a1:93:d6:79:56:d4:75:9c:ff:52:59:80: c9:40:30:ee:f5:e5:e5:2f:af:d4:71:b5:16:b7:12: c1:ee:d5:97:87:eb:f9:06:c0:44:76:ea:06:0d:43: c1:d0:b5:02:39:e9:0d:8c:d3:bc:06:a2:87:e5:5b: 1b:1a:a9:28:df:a2:2c:05:ce:46:fc:f5:fe:04:00: da:8c:7b:cd:60:39:fa:b7:a5:8f:1f:fa:69:04:d6: fe:41:a9:9f:c3:2d:70:ee:9c:b0:be:2a:df:88:0b: 63:f0:64:c1:e6:cb:c4:92:8e:4c:74:8f:56:88:8e: 8e:e7:80:32:a7:4f:3c:18:22:2a:19:af:8a:7e:25: 79:b1:9d:32:1d:26:4c:39:d0:a7:87:9f:5b:8f:2f: f7:de:5f:4e:4d:c2:af:4d:9c:01:bc:0a:09:74:d1: 5f:7e:22:55:34:b6:8c:7f:70:b6:a2:a5:e8:49:59: 00:11:74:54:59:d7:63:29:40:86:8c:57:b5:54:cf: 1a:4a:5f:0f:e3:34:23:e9:d4:15:6e:2d:c2:92:b4: 7d:89:01:da:e6:90:9a:b2:80:f5:c6:53:6d:e2:22: 6a:89:e6:1a:3a:a5:63:55:c0:b4:22:eb:15:6c:6c: 47:6b:25:7c:0e:81:90:50:42:06:a1:83:46:c1:4e: a3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BD:89:8A:59:3B:44:9F:80:1F:FC:9D:F0:7F:E5:E9:72:11:5E:46 X509v3 Authority Key Identifier: keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:aa:7a:ca:63:c3:1c:38:05:af:54:f7:7b:ad:42:f0:27:d8: 40:85:ce:92:44:f6:6c:f3:3a:d4:a4:63:21:02:16:43:55:ea: a7:99:51:f0:f7:9d:4d:11:2c:ab:d2:5b:77:70:0c:1b:a1:08: ec:13:87:f8:c8:79:e6:ac:7d:6e:b4:3d:95:cb:28:66:dd:01: ee:1b:41:c6:c8:21:20:22:19:50:8d:27:49:bd:89:a5:85:b4: 64:56:a8:27:73:c0:85:b1:2d:6a:be:b4:f7:40:e5:f6:fb:dc: fc:7b:6d:77:99:24:9a:e9:84:b3:87:40:72:17:2b:fe:04:80: 3a:77:0e:f1:b1:d4:2f:61:0c:23:61:9d:74:65:83:bb:a5:b5: 27:1f:ef:ec:b9:1b:a7:27:b0:34:eb:db:ce:21:e3:d5:64:cc: 45:2b:64:9f:98:d7:fc:bd:61:02:51:50:79:8b:23:a0:40:7e: 59:f6:fd:df:83:56:9f:82:b8:57:f5:2b:f1:61:08:39:a2:15: bd:37:ae:a9:65:84:5e:2a:ae:a0:a7:70:61:25:7f:ae:82:e8: 06:8b:ab:4e:a0:76:fb:86:6d:7a:a8:ff:e7:2c:7e:1e:62:14: 56:35:26:5b:55:39:48:d7:10:e7:cc:b4:09:7d:10:8c:43:1b: 23:f3:49:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+EI/McOL1aaTu5M//G4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZWNlNDFjYmMyYzMwNjI2ZWYyYTI4ZDE4MzlmMmQ2YzQ3 NTdmM2YwHhcNMjYwMTI3MDEwMTI2WhcNMjYwMTI4MDEwMTI2WjAzMTEwLwYDVQQD Eyg3YmJkODk4YTU5M2I0NDlmODAxZmZjOWRmMDdmZTVlOTcyMTE1ZTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlimhk9Z5VtR1nP9SWYDJQDDu9eXl L6/UcbUWtxLB7tWXh+v5BsBEduoGDUPB0LUCOekNjNO8BqKH5VsbGqko36IsBc5G /PX+BADajHvNYDn6t6WPH/ppBNb+Qamfwy1w7pywvirfiAtj8GTB5svEko5MdI9W iI6O54Ayp088GCIqGa+KfiV5sZ0yHSZMOdCnh59bjy/33l9OTcKvTZwBvAoJdNFf fiJVNLaMf3C2oqXoSVkAEXRUWddjKUCGjFe1VM8aSl8P4zQj6dQVbi3CkrR9iQHa 5pCasoD1xlNt4iJqieYaOqVjVcC0IusVbGxHayV8DoGQUEIGoYNGwU6jjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHu9iYpZO0SfgB/8nfB/5elyEV5GMB8GA1UdIwQY MBaAFMrs5By8LDBibvKijRg58tbEdX8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWIt ZDg1MWU0MGQ1N2JmLzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWItZDg1MWU0MGQ1N2Jm LzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbap6ymPD HDgFr1T3e61C8CfYQIXOkkT2bPM61KRjIQIWQ1Xqp5lR8PedTREsq9Jbd3AMG6EI 7BOH+Mh55qx9brQ9lcsoZt0B7htBxsghICIZUI0nSb2JpYW0ZFaoJ3PAhbEtar60 90Dl9vvc/Httd5kkmumEs4dAchcr/gSAOncO8bHUL2EMI2GddGWDu6W1Jx/v7Lkb pyewNOvbziHj1WTMRStkn5jX/L1hAlFQeYsjoEB+Wfb934NWn4K4V/Ur8WEIOaIV vTeuqWWEXiquoKdwYSV/roLoBourTqB2+4Zteqj/5yx+HmIUVjUmW1U5SNcQ58y0 CX0QjEMbI/NJ+Q== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:25 2026 by rpki-client