This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json) Hash identifier: lwZdZ/1p+GCakbRbegf6WGyFLj+8ufwUc/qaAgZ2Ud4= Subject key identifier: 49:94:1B:78:BB:86:75:A2:04:50:C2:2D:4B:35:7B:75:18:E5:0D:C4 Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb Certificate serial: 019BE2259087B283FF6E5810FD3290CC92C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft Manifest number: 11AB Signing time: Wed 21 Jan 2026 20:01:11 +0000 Manifest this update: Wed 21 Jan 2026 20:01:11 +0000 Manifest next update: Thu 22 Jan 2026 20:01:11 +0000 Files and hashes: 1: 4PgRN8q3KxwBVv6bOvv3dd2iCwk.roa (hash: mt8E3NEU/1Vk7ULPjkSFkCldNVP6CbG4KHut2KXn3G4=) 2: Rq5nOiw5psjk7oMzxkhJXHmOL40.roa (hash: uy/nSqdxZL/aCIl9V3PJOJGD3vdqQ0NwbqCFSo3UCG4=) 3: bZWk4AhB-ix13SfItg99WGR-iHE.roa (hash: /vtIcpptaY2u+l35mug1F/OipcmBaaaq9NSFgSW4I9A=) 4: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: qRrNiy2hzNLFBzL8aU5IaQIknj76MArfPK0wNw/2N/U=) 5: rBfN5hySaU80pvKscbKLqXudBew.roa (hash: +ftjLdDbJ5p8switUZfvGRrNauB6kY6yhwTaJeXxA/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e2:25:90:87:b2:83:ff:6e:58:10:fd:32:90:cc:92:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb Validity Not Before: Jan 21 20:01:11 2026 GMT Not After : Jan 22 20:01:11 2026 GMT Subject: CN=49941b78bb8675a20450c22d4b357b7518e50dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6f:3b:bf:bd:6e:ea:2e:9e:a7:fa:01:d1:f6: 93:e6:33:9f:71:ff:6a:59:ea:5f:85:e2:05:74:5b: 4c:be:b2:e8:d6:4b:38:9d:5d:2b:3e:55:7a:2a:46: 5f:b3:0a:66:ae:db:ca:97:77:4a:00:51:f4:5a:76: 2f:07:11:9d:b3:e4:4c:63:17:59:93:8c:d5:ba:f1: 91:ca:41:88:bb:8a:a2:c7:fb:e2:e9:40:0a:17:e9: 69:5d:d8:81:c1:7f:78:9e:66:73:c9:7d:8d:08:12: b9:c8:95:23:ae:d5:16:88:cd:f6:98:df:9b:bb:c8: 1c:b4:32:4b:6c:e3:18:55:5b:e9:e6:16:ae:bc:49: b5:bb:77:a8:3e:9d:94:37:9a:0e:42:59:d3:2f:98: 93:4b:f0:2f:93:57:c6:e6:bb:25:dc:24:c5:f9:60: 75:86:ca:af:c9:bf:85:69:36:8b:60:03:54:b4:70: b8:de:28:db:7f:2e:29:a0:2f:e4:df:38:e9:9f:a1: 2f:18:9f:ca:e1:a0:31:16:30:19:de:6f:69:12:e9: 27:67:e0:7c:0c:e5:c9:db:52:27:8e:74:65:82:06: e2:63:be:e0:15:b3:c2:e6:ec:0d:38:f4:1e:3a:4e: 16:14:2e:23:d4:3a:9b:0d:aa:99:da:54:84:2e:a4: 0c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:94:1B:78:BB:86:75:A2:04:50:C2:2D:4B:35:7B:75:18:E5:0D:C4 X509v3 Authority Key Identifier: keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:fd:71:70:50:53:06:e4:f1:e7:d5:b3:a8:da:5c:f9:ce:39: 57:4e:70:9b:13:37:7f:ba:1f:43:27:30:08:d3:19:91:14:4e: f3:4b:2d:6e:0c:91:14:6d:dd:14:d3:b5:20:e4:94:0f:66:43: 22:ad:03:5f:50:07:f1:c3:de:0d:8b:85:9b:19:a4:ef:17:40: f1:8d:70:4f:49:03:bf:ee:97:9f:ae:15:7e:72:8f:7b:a5:0b: 88:24:30:dd:ca:6f:24:e9:3f:65:48:21:3a:77:8a:c9:ef:e0: d0:8c:7d:a3:7b:9b:3d:6a:0e:25:98:e8:9d:2c:37:70:88:a0: 94:d4:7f:fc:67:63:b0:8c:46:99:60:8b:c0:7b:57:29:39:e3: 55:51:10:6a:83:0e:d6:28:ff:f6:58:46:12:3c:50:cd:10:33: b4:61:2d:e9:c7:82:8a:dd:0e:73:ab:b5:b1:cf:8c:4f:dd:e0: ea:19:25:5e:79:0f:0b:85:dd:34:88:5d:2e:25:77:ef:2c:76: 41:36:fa:ce:60:c3:0a:fe:5c:39:88:86:8c:80:02:06:73:32: 6f:05:fe:55:54:25:57:af:2d:22:6e:77:45:3d:6a:6e:bc:e6: c2:d4:e9:b9:56:23:a8:78:ce:c0:8b:58:b6:0d:f8:b3:bc:33: d8:41:1a:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZviJZCHsoP/blgQ/TKQzJLGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODkyMjNjMWYzMzVjMGNjNTY5MzU5ZmEyZGRhMzQ5YTIy MzZjY2IwHhcNMjYwMTIxMjAwMTExWhcNMjYwMTIyMjAwMTExWjAzMTEwLwYDVQQD Eyg0OTk0MWI3OGJiODY3NWEyMDQ1MGMyMmQ0YjM1N2I3NTE4ZTUwZGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG87v71u6i6ep/oB0faT5jOfcf9q WepfheIFdFtMvrLo1ks4nV0rPlV6KkZfswpmrtvKl3dKAFH0WnYvBxGds+RMYxdZ k4zVuvGRykGIu4qix/vi6UAKF+lpXdiBwX94nmZzyX2NCBK5yJUjrtUWiM32mN+b u8gctDJLbOMYVVvp5hauvEm1u3eoPp2UN5oOQlnTL5iTS/Avk1fG5rsl3CTF+WB1 hsqvyb+FaTaLYANUtHC43ijbfy4poC/k3zjpn6EvGJ/K4aAxFjAZ3m9pEuknZ+B8 DOXJ21InjnRlggbiY77gFbPC5uwNOPQeOk4WFC4j1DqbDaqZ2lSELqQMeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmUG3i7hnWiBFDCLUs1e3UY5Q3EMB8GA1UdIwQY MBaAFI2JIjwfM1wMxWk1n6Ldo0miI2zLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAt YTEwMjhlZGE2MzgzLzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAtYTEwMjhlZGE2Mzgz LzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACv1xcFBT BuTx59WzqNpc+c45V05wmxM3f7ofQycwCNMZkRRO80stbgyRFG3dFNO1IOSUD2ZD Iq0DX1AH8cPeDYuFmxmk7xdA8Y1wT0kDv+6Xn64VfnKPe6ULiCQw3cpvJOk/ZUgh OneKye/g0Ix9o3ubPWoOJZjonSw3cIiglNR//GdjsIxGmWCLwHtXKTnjVVEQaoMO 1ij/9lhGEjxQzRAztGEt6ceCit0Oc6u1sc+MT93g6hklXnkPC4XdNIhdLiV37yx2 QTb6zmDDCv5cOYiGjIACBnMybwX+VVQlV68tIm53RT1qbrzmwtTpuVYjqHjOwItY tg34s7wz2EEaBw== -----END CERTIFICATE-----Generated at Wed Jan 21 23:51:53 2026 by rpki-client