This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft File: yh79jmMWnY_b-YtxOfzd7a8BbLI.mft (raw, json) Hash identifier: A+a9pLG96V7AgsTJ9P/nqMxfwzO4DpTRAEH0sA67xts= Subject key identifier: CE:93:CA:1F:D3:06:64:32:5C:5E:2D:0C:91:30:E0:41:3E:1A:7D:70 Authority key identifier: CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2 Certificate issuer: /CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2 Certificate serial: 019BFD2EE2753AABF0A16AC39D6A4FF93C2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft Manifest number: 17EE Signing time: Tue 27 Jan 2026 02:01:06 +0000 Manifest this update: Tue 27 Jan 2026 02:01:06 +0000 Manifest next update: Wed 28 Jan 2026 02:01:06 +0000 Files and hashes: 1: am-H2T7Ww6jJ95ZGxjcLz-wLU1Q.roa (hash: 2kQQ9mXqE14fd45u6l3SdSU3Gho7WxKdsdIPxleaIU8=) 2: yh79jmMWnY_b-YtxOfzd7a8BbLI.crl (hash: G8hadPgXFlF086ZsvRAJAMi19eB3rrmPgxPuY0l6OrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:e2:75:3a:ab:f0:a1:6a:c3:9d:6a:4f:f9:3c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2 Validity Not Before: Jan 27 02:01:06 2026 GMT Not After : Jan 28 02:01:06 2026 GMT Subject: CN=ce93ca1fd30664325c5e2d0c9130e0413e1a7d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:df:3a:2f:04:e6:a5:89:07:c9:88:ab:79:5b: ce:15:e6:29:9c:27:cc:8d:b8:42:4e:89:e1:39:f5: a6:20:8a:4f:76:89:c9:55:ab:25:b0:b4:62:06:c8: d0:89:6a:40:f9:2f:9e:4f:78:14:7b:7b:42:a1:cc: f7:55:42:ac:60:55:82:f5:41:ac:c7:29:32:27:4b: d4:b6:55:91:65:0c:14:3f:aa:80:e2:56:60:5d:3d: d0:6d:60:5c:7c:72:d2:6a:4e:63:23:57:b2:4e:53: c3:16:63:f5:fb:c2:2c:07:22:44:e7:73:75:5b:65: 00:ad:16:00:92:4c:3b:ed:3a:c1:f1:f8:3f:20:dc: 02:1c:80:06:1e:e7:8a:96:53:53:2f:37:8c:66:b1: f2:e2:66:6a:25:59:7f:67:7b:a6:c0:3a:d2:a3:cd: 17:83:52:50:65:09:e0:13:0c:0c:4d:2e:40:cb:1c: 2e:b2:3a:24:39:87:ec:a3:02:9a:f0:21:a9:b7:1c: 0c:b2:3a:02:44:62:a7:95:c2:64:35:15:93:99:0a: 48:c0:9c:3f:71:f3:b3:02:18:73:e1:1c:11:7b:38: 7a:e8:f1:9f:0d:c2:bb:87:37:91:86:b2:b6:5a:fd: fd:4e:a6:3b:89:28:54:d2:14:a3:2f:fa:af:61:7f: c4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:93:CA:1F:D3:06:64:32:5C:5E:2D:0C:91:30:E0:41:3E:1A:7D:70 X509v3 Authority Key Identifier: keyid:CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:99:cb:6f:0d:e4:0b:40:4e:54:7b:54:09:11:f2:78:5f:71: 7e:a2:55:27:c0:06:8c:38:9d:44:58:f4:e0:f4:2e:31:be:c2: 31:99:4e:18:da:dd:0c:aa:79:1d:d4:b8:80:2b:f8:f4:6b:68: d1:71:07:1f:eb:1b:46:17:78:89:91:52:b4:cf:7e:6f:66:4c: 85:25:36:9b:ff:78:72:9b:8b:57:12:8f:69:ca:a7:44:80:a0: d0:79:67:bc:e4:09:b9:9f:32:18:94:e3:f4:c9:35:d9:0c:ff: 5a:8c:72:8f:5d:f5:0e:c6:38:31:73:79:83:94:dc:11:91:e2: 89:1b:e6:4a:69:28:5f:25:e4:82:85:72:88:88:8d:1c:e6:90: ce:3a:a4:5b:92:0b:55:47:22:d5:c1:37:3e:04:02:e8:6a:00: d7:69:51:b7:b4:90:d0:f9:38:5f:80:55:cc:77:c4:a2:16:57: 33:6b:1d:76:cb:ba:ab:2a:b8:75:88:67:3b:1a:b7:4a:13:16: 92:e6:f6:e7:85:11:95:55:61:a3:f3:d9:8e:f0:0e:fa:1a:85: d9:1a:79:57:da:3d:96:e9:34:a9:2c:4e:4a:07:ac:f4:61:05: 00:4f:94:be:1c:e2:e9:06:d2:0f:72:77:d6:cf:d1:ca:13:5a: ba:19:a5:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LuJ1OqvwoWrDnWpP+TwqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMWVmZDhlNjMxNjlkOGZkYmY5OGI3MTM5ZmNkZGVkYWYw MTZjYjIwHhcNMjYwMTI3MDIwMTA2WhcNMjYwMTI4MDIwMTA2WjAzMTEwLwYDVQQD EyhjZTkzY2ExZmQzMDY2NDMyNWM1ZTJkMGM5MTMwZTA0MTNlMWE3ZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd86LwTmpYkHyYireVvOFeYpnCfM jbhCTonhOfWmIIpPdonJVaslsLRiBsjQiWpA+S+eT3gUe3tCocz3VUKsYFWC9UGs xykyJ0vUtlWRZQwUP6qA4lZgXT3QbWBcfHLSak5jI1eyTlPDFmP1+8IsByJE53N1 W2UArRYAkkw77TrB8fg/INwCHIAGHueKllNTLzeMZrHy4mZqJVl/Z3umwDrSo80X g1JQZQngEwwMTS5AyxwusjokOYfsowKa8CGptxwMsjoCRGKnlcJkNRWTmQpIwJw/ cfOzAhhz4RwRezh66PGfDcK7hzeRhrK2Wv39TqY7iShU0hSjL/qvYX/E2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6Tyh/TBmQyXF4tDJEw4EE+Gn1wMB8GA1UdIwQY MBaAFMoe/Y5jFp2P2/mLcTn83e2vAWyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWg3OWptTVduWV9iLVl0eE9memQ3YThCYkxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kOTYxZmUtZDhhYS00OGU1LTk2ZmQt ZjA3ZjA2Y2JlYTJkLzEveWg3OWptTVduWV9iLVl0eE9memQ3YThCYkxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9kOTYxZmUtZDhhYS00OGU1LTk2ZmQtZjA3ZjA2Y2JlYTJk LzEveWg3OWptTVduWV9iLVl0eE9memQ3YThCYkxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpnLbw3k C0BOVHtUCRHyeF9xfqJVJ8AGjDidRFj04PQuMb7CMZlOGNrdDKp5HdS4gCv49Gto 0XEHH+sbRhd4iZFStM9+b2ZMhSU2m/94cpuLVxKPacqnRICg0HlnvOQJuZ8yGJTj 9Mk12Qz/Woxyj131DsY4MXN5g5TcEZHiiRvmSmkoXyXkgoVyiIiNHOaQzjqkW5IL VUci1cE3PgQC6GoA12lRt7SQ0Pk4X4BVzHfEohZXM2sddsu6qyq4dYhnOxq3ShMW kub254URlVVho/PZjvAO+hqF2Rp5V9o9luk0qSxOSges9GEFAE+Uvhzi6QbSD3J3 1s/RyhNauhmldg== -----END CERTIFICATE-----Generated at Tue Jan 27 09:59:19 2026 by rpki-client