This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft File: YepnO-KLST26RBhw-1Dlmg0cF8U.mft (raw, json) Hash identifier: EvwbXOwEoWFGi2E24j23zlhn9MBFDYJabZ6EiyLC6lo= Subject key identifier: BD:D5:6C:9D:27:14:13:10:AA:2D:D7:70:CB:7A:B0:C1:95:7E:9F:E7 Authority key identifier: 61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5 Certificate issuer: /CN=61ea673be28b493dba441870fb50e59a0d1c17c5 Certificate serial: 019BFD9D3D6D39E5AA93DEF0E126AADBC813 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft Manifest number: 17EC Signing time: Tue 27 Jan 2026 04:01:39 +0000 Manifest this update: Tue 27 Jan 2026 04:01:39 +0000 Manifest next update: Wed 28 Jan 2026 04:01:39 +0000 Files and hashes: 1: YepnO-KLST26RBhw-1Dlmg0cF8U.crl (hash: KeCARpTAmmS3z3rJ2ZhgNs1reBk1GWu/CfbjK8jw4oQ=) 2: gIm5Ttt-kadA-HHnl7K2QS3zq4w.roa (hash: k0VLghPFfRvkCor9JH91D2V2IGF1FkPmkcYrg5K87ZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 04:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:9d:3d:6d:39:e5:aa:93:de:f0:e1:26:aa:db:c8:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61ea673be28b493dba441870fb50e59a0d1c17c5 Validity Not Before: Jan 27 04:01:39 2026 GMT Not After : Jan 28 04:01:39 2026 GMT Subject: CN=bdd56c9d27141310aa2dd770cb7ab0c1957e9fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4c:b7:e7:bb:7e:07:74:15:b2:2c:ae:9d:54: a9:f1:b3:37:c6:a5:55:c0:ff:73:74:b3:8d:a4:47: 2f:02:ee:10:dd:f7:65:f0:7c:27:d3:21:43:38:79: cf:e6:c9:ed:cb:19:dd:59:7a:78:24:bb:53:95:16: f6:75:5e:61:d7:bf:6d:ac:f2:b2:7c:9d:22:b0:74: 2b:30:03:f2:34:52:e3:eb:d2:ca:33:74:57:13:4f: 56:e3:c8:3a:38:bd:a2:9f:65:11:77:94:b9:a1:7a: 36:57:f5:22:83:4a:cf:58:b8:d2:83:30:9b:8a:d9: ae:2d:68:b0:4c:e2:ca:a0:10:b1:8d:b7:23:2b:ac: e5:36:b0:da:47:64:7a:88:5c:97:dc:0b:e3:1f:8b: 59:f7:6f:61:c1:61:5d:e6:ea:be:94:74:ef:f1:27: 73:76:7c:fc:24:e5:d8:60:2a:fc:88:98:a9:a4:56: 62:0d:3f:43:4b:70:c9:f7:60:d7:f3:92:fe:05:ac: 75:2e:23:30:64:1d:dd:a9:10:c1:bb:d3:0a:46:d4: 43:6c:5b:2a:54:da:66:b3:16:7e:7f:80:61:d8:67: b8:27:7b:64:81:3a:60:9c:a2:6c:e9:15:f1:2a:a2: 2b:0f:ac:fd:ca:31:ac:98:92:17:6c:f4:c9:cf:9d: 49:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D5:6C:9D:27:14:13:10:AA:2D:D7:70:CB:7A:B0:C1:95:7E:9F:E7 X509v3 Authority Key Identifier: keyid:61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:8a:89:62:4c:1c:d0:ba:77:02:49:bf:f7:23:ab:6b:12:b4: 82:95:26:6e:78:60:07:00:09:30:3e:fd:5c:ed:a7:e8:40:b9: 3b:a2:de:3c:30:3c:2a:6b:a8:de:d0:53:51:40:ba:8d:ea:74: 2a:e2:dd:c0:bc:05:e1:97:d5:f6:cf:40:97:b9:fb:6d:71:27: 0c:ce:00:78:16:b0:c2:c8:7a:83:93:ce:13:de:d2:eb:6d:ec: d4:df:d9:ba:98:0a:c9:12:19:b5:32:c6:62:e8:ef:32:43:02: c8:61:c6:89:53:be:13:13:b4:4e:50:97:45:3c:5d:fa:9c:97: a1:e2:df:c3:ea:9d:4d:51:11:89:1f:2e:95:a3:24:11:1c:cf: 31:fd:4f:71:9e:ac:fe:e8:d0:71:2b:60:b3:69:ea:5f:62:28: af:b5:5f:6f:d8:b2:c3:63:77:dc:d1:bc:49:6d:d1:63:ea:5d: 8d:d6:de:dd:b5:2d:0f:7e:d4:d2:8f:3b:34:3e:ba:f2:3c:0a: 46:21:dd:4e:ca:aa:a1:56:a7:bc:67:a9:bf:fd:74:5e:28:37: 15:e7:3b:21:0d:ee:6a:47:bc:10:9a:2d:86:46:e3:1e:ad:18: 53:95:c6:c3:f1:fa:f7:34:ce:16:97:d8:2f:fe:3a:9f:63:0c: cb:8f:ef:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9nT1tOeWqk97w4Saq28gTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZWE2NzNiZTI4YjQ5M2RiYTQ0MTg3MGZiNTBlNTlhMGQx YzE3YzUwHhcNMjYwMTI3MDQwMTM5WhcNMjYwMTI4MDQwMTM5WjAzMTEwLwYDVQQD EyhiZGQ1NmM5ZDI3MTQxMzEwYWEyZGQ3NzBjYjdhYjBjMTk1N2U5ZmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEy357t+B3QVsiyunVSp8bM3xqVV wP9zdLONpEcvAu4Q3fdl8Hwn0yFDOHnP5sntyxndWXp4JLtTlRb2dV5h179trPKy fJ0isHQrMAPyNFLj69LKM3RXE09W48g6OL2in2URd5S5oXo2V/Uig0rPWLjSgzCb itmuLWiwTOLKoBCxjbcjK6zlNrDaR2R6iFyX3AvjH4tZ929hwWFd5uq+lHTv8Sdz dnz8JOXYYCr8iJippFZiDT9DS3DJ92DX85L+Bax1LiMwZB3dqRDBu9MKRtRDbFsq VNpmsxZ+f4Bh2Ge4J3tkgTpgnKJs6RXxKqIrD6z9yjGsmJIXbPTJz51JnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3VbJ0nFBMQqi3XcMt6sMGVfp/nMB8GA1UdIwQY MBaAFGHqZzvii0k9ukQYcPtQ5ZoNHBfFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWVwbk8tS0xTVDI2UkJody0xRGxtZzBjRjhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80MmMxYmYtODlmZi00ODJmLTlmMTQt NDk4ZGQxZDMwN2QwLzEvWWVwbk8tS0xTVDI2UkJody0xRGxtZzBjRjhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80MmMxYmYtODlmZi00ODJmLTlmMTQtNDk4ZGQxZDMwN2Qw LzEvWWVwbk8tS0xTVDI2UkJody0xRGxtZzBjRjhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKoqJYkwc 0Lp3Akm/9yOraxK0gpUmbnhgBwAJMD79XO2n6EC5O6LePDA8Kmuo3tBTUUC6jep0 KuLdwLwF4ZfV9s9Al7n7bXEnDM4AeBawwsh6g5POE97S623s1N/ZupgKyRIZtTLG YujvMkMCyGHGiVO+ExO0TlCXRTxd+pyXoeLfw+qdTVERiR8ulaMkERzPMf1PcZ6s /ujQcStgs2nqX2Ior7Vfb9iyw2N33NG8SW3RY+pdjdbe3bUtD37U0o87ND668jwK RiHdTsqqoVanvGepv/10Xig3Fec7IQ3uake8EJothkbjHq0YU5XGw/H69zTOFpfY L/46n2MMy4/vXQ== -----END CERTIFICATE-----Generated at Tue Jan 27 14:28:16 2026 by rpki-client