This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft File: YlDmLARIEp9jWJGKccM0TiWoLZs.mft (raw, json) Hash identifier: r4dUAxMnSb2MJoyR/K0k8z9L0fNdsTBfXmKQzKeudJ0= Subject key identifier: 2D:79:8B:F0:D9:E1:48:1F:F0:EC:46:50:D7:CF:00:A2:95:2A:F1:59 Authority key identifier: 62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B Certificate issuer: /CN=6250e62c0448129f6358918a71c3344e25a82d9b Certificate serial: 019BF91BA072B6B31BA65419B7EE3EC4BE47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft Manifest number: 0197 Signing time: Mon 26 Jan 2026 07:01:35 +0000 Manifest this update: Mon 26 Jan 2026 07:01:35 +0000 Manifest next update: Tue 27 Jan 2026 07:01:35 +0000 Files and hashes: 1: DRO3tCTePWIvKHPgw6pmaXwU0JU.roa (hash: nsXU89cmKGMuchI2BpERlyONOF3QYxV+4FYWi2CIuFY=) 2: YlDmLARIEp9jWJGKccM0TiWoLZs.crl (hash: R0tDdU9YG2Pbi+dnFVNAHUHea8l14jK6DOBerMIDAcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:a0:72:b6:b3:1b:a6:54:19:b7:ee:3e:c4:be:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6250e62c0448129f6358918a71c3344e25a82d9b Validity Not Before: Jan 26 07:01:35 2026 GMT Not After : Jan 27 07:01:35 2026 GMT Subject: CN=2d798bf0d9e1481ff0ec4650d7cf00a2952af159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b2:70:8b:3a:f7:ac:ff:49:96:35:a1:0a:47: 5b:d0:03:2e:3c:33:e3:d3:06:fc:4a:e0:32:cc:77: c3:42:22:f7:6e:00:10:4b:8d:58:ce:ba:59:fb:0b: a0:b8:59:66:15:7c:ba:fc:9e:8f:73:e3:e0:96:90: a2:67:4f:3c:7a:66:6c:99:6e:80:0e:ab:7c:5b:fe: 28:de:e6:5c:da:6d:e2:b0:c0:aa:68:0b:62:df:b8: 06:2a:bd:39:04:a5:af:9c:10:8f:49:3c:ef:56:73: b7:65:02:8d:5b:bd:80:37:42:a5:6d:81:a0:53:07: 31:3c:8f:fd:b4:3d:8d:1e:1e:c4:14:39:45:f4:e9: 04:2f:0f:5c:61:09:ad:df:a8:c9:26:8c:64:4e:44: b2:97:fa:a5:60:07:31:a4:5c:08:60:cc:80:26:c5: 8d:40:e1:1b:64:16:cc:ef:4b:01:69:74:a5:e1:59: 01:40:bf:d8:cb:9d:74:f7:aa:24:dc:d2:15:61:b4: 58:f2:a4:b1:44:22:10:d3:0c:e3:96:05:27:71:1b: bb:db:89:4c:40:a1:05:64:8a:ca:a9:77:ae:64:a1: 34:f9:66:70:99:58:8f:dc:66:d5:58:70:a2:d5:97: 41:eb:d5:34:1f:51:b0:8c:54:24:5d:da:81:64:f9: a0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:79:8B:F0:D9:E1:48:1F:F0:EC:46:50:D7:CF:00:A2:95:2A:F1:59 X509v3 Authority Key Identifier: keyid:62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d8:88:73:5f:c5:4b:a2:21:be:c4:f0:79:a4:68:0e:5a:d9: 9d:80:b5:ca:59:bb:f3:51:6c:9f:c4:cc:89:19:88:a2:94:ff: 9c:86:2a:9c:46:29:aa:6c:20:db:06:8d:a2:24:27:95:9d:74: b4:09:df:db:c7:e1:39:41:27:6d:e8:83:66:3d:3a:ec:fa:45: bf:fb:fc:9e:51:8e:e9:20:d4:c8:a3:e0:a6:01:71:76:95:65: 58:27:b1:f4:38:a0:11:9c:1a:3d:18:36:f7:7b:49:b1:d5:24: 2d:f4:c8:46:62:ea:33:1a:a7:19:06:d0:79:53:4d:3b:e8:6f: ad:9d:82:e6:d9:42:ac:62:8f:df:11:3b:2a:e4:f5:c5:25:63: f8:bc:8e:fe:3d:2a:41:71:25:3e:6f:fb:03:81:6c:e3:42:3c: d6:49:5c:df:d7:ec:27:b0:47:df:7c:ee:f4:e6:b0:7f:89:ee: 16:85:76:fd:4f:9c:aa:21:e9:da:b1:c1:13:74:ba:9e:32:5b: c5:41:30:60:39:67:fe:c3:07:d2:c6:e2:f8:6f:42:07:2d:f4: 65:fa:ff:93:50:62:41:3c:05:0b:c2:42:09:29:90:d1:fb:30: 65:49:cf:e1:77:37:c2:10:8f:b4:13:6c:df:9a:af:07:60:00: 47:b2:2f:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G6BytrMbplQZt+4+xL5HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNTBlNjJjMDQ0ODEyOWY2MzU4OTE4YTcxYzMzNDRlMjVh ODJkOWIwHhcNMjYwMTI2MDcwMTM1WhcNMjYwMTI3MDcwMTM1WjAzMTEwLwYDVQQD EygyZDc5OGJmMGQ5ZTE0ODFmZjBlYzQ2NTBkN2NmMDBhMjk1MmFmMTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07Jwizr3rP9JljWhCkdb0AMuPDPj 0wb8SuAyzHfDQiL3bgAQS41YzrpZ+wuguFlmFXy6/J6Pc+PglpCiZ088emZsmW6A Dqt8W/4o3uZc2m3isMCqaAti37gGKr05BKWvnBCPSTzvVnO3ZQKNW72AN0KlbYGg UwcxPI/9tD2NHh7EFDlF9OkELw9cYQmt36jJJoxkTkSyl/qlYAcxpFwIYMyAJsWN QOEbZBbM70sBaXSl4VkBQL/Yy51096ok3NIVYbRY8qSxRCIQ0wzjlgUncRu724lM QKEFZIrKqXeuZKE0+WZwmViP3GbVWHCi1ZdB69U0H1GwjFQkXdqBZPmgVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC15i/DZ4Ugf8OxGUNfPAKKVKvFZMB8GA1UdIwQY MBaAFGJQ5iwESBKfY1iRinHDNE4lqC2bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWxEbUxBUklFcDlqV0pHS2NjTTBUaVdvTFpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wMTg2YTItZjhhYS00MWQ4LTlhNGUt ODcyNmRkODhmNTI5LzEvWWxEbUxBUklFcDlqV0pHS2NjTTBUaVdvTFpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8wMTg2YTItZjhhYS00MWQ4LTlhNGUtODcyNmRkODhmNTI5 LzEvWWxEbUxBUklFcDlqV0pHS2NjTTBUaVdvTFpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9iIc1/F S6IhvsTweaRoDlrZnYC1ylm781Fsn8TMiRmIopT/nIYqnEYpqmwg2waNoiQnlZ10 tAnf28fhOUEnbeiDZj067PpFv/v8nlGO6SDUyKPgpgFxdpVlWCex9DigEZwaPRg2 93tJsdUkLfTIRmLqMxqnGQbQeVNNO+hvrZ2C5tlCrGKP3xE7KuT1xSVj+LyO/j0q QXElPm/7A4Fs40I81klc39fsJ7BH33zu9Oawf4nuFoV2/U+cqiHp2rHBE3S6njJb xUEwYDln/sMH0sbi+G9CBy30Zfr/k1BiQTwFC8JCCSmQ0fswZUnP4Xc3whCPtBNs 35qvB2AAR7IvIg== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:26 2026 by rpki-client