This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft File: 18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json) Hash identifier: /L0YxEqp+I0mGMwQPYvJiP40sEQeH0j/buEfmOLwF3U= Subject key identifier: 71:1D:EB:2F:9E:FE:F7:F1:CD:18:DB:E2:D7:4E:5F:D7:05:95:BE:C5 Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16 Certificate issuer: /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16 Certificate serial: 019BE036AD329696E335EA64F7533CFFE433 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft Manifest number: 0F02 Signing time: Wed 21 Jan 2026 11:00:38 +0000 Manifest this update: Wed 21 Jan 2026 11:00:38 +0000 Manifest next update: Thu 22 Jan 2026 11:00:38 +0000 Files and hashes: 1: 1-xQpxgbsAccfNR_RPwpELLBga3Q.roa (hash: O9JFLbnCzJwjSJV7ChA49hvf5EARsdHIdJti0Ql7a20=) 2: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: 91xv8IsxTvmUsaSe/8Y6VdI0m7Nhmw7eMQQaFTriuZE=) 3: 7C0RXVU3AgsBgO3I-5tJ7yJP6WM.roa (hash: zGb9a33Qnpr4WzIXt8XY3dXadxDHjRQNTlqjB3b8R/g=) 4: InpXhnM9MS1muu9R3XQVBIkVVN8.roa (hash: yU7SB2RYwoKjc2l3Eev4frxkOGpJzWi5EJ1oAWnsaXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:36:ad:32:96:96:e3:35:ea:64:f7:53:3c:ff:e4:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16 Validity Not Before: Jan 21 11:00:38 2026 GMT Not After : Jan 22 11:00:38 2026 GMT Subject: CN=711deb2f9efef7f1cd18dbe2d74e5fd70595bec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:77:02:f3:a6:cd:6c:d3:67:c6:5c:41:41: 4f:ad:1e:fb:d8:a9:a6:fb:56:dd:48:32:69:97:47: 42:0e:cf:0e:04:f8:f4:13:d1:e5:0b:c6:54:70:25: 35:d2:9c:c2:62:23:3b:5f:f7:bc:a3:20:d5:6b:3e: 12:50:37:32:9c:25:2b:17:66:c2:d2:80:eb:22:dd: 3b:d7:69:07:b0:eb:16:45:32:25:14:1a:d0:c8:bb: e2:2c:bd:19:04:a8:84:ad:e3:90:05:f9:08:2a:c5: c3:ac:fc:70:19:97:6e:90:0d:b4:a3:61:40:57:2f: c9:dc:ae:23:26:92:e7:e1:1a:34:46:6f:ba:54:eb: bf:20:4d:37:d6:ae:9a:3d:2b:72:11:59:54:ab:74: 1b:8b:39:b8:39:30:32:d4:76:96:13:cf:21:6a:fc: 6d:75:76:a5:b5:0c:1e:6f:14:99:bb:ec:85:7d:ef: 17:55:71:94:ac:8a:97:b1:a0:1c:59:9a:32:83:28: 5c:38:42:06:ea:6f:05:a3:c1:15:54:6c:12:c9:d9: e8:70:fc:7a:67:8b:04:b5:41:29:1a:ca:94:41:7a: 32:48:e9:38:1b:76:6a:a5:38:2d:1f:14:09:4a:8a: e9:79:a5:5a:8d:d6:98:d3:98:f8:05:b2:6f:da:ef: 74:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1D:EB:2F:9E:FE:F7:F1:CD:18:DB:E2:D7:4E:5F:D7:05:95:BE:C5 X509v3 Authority Key Identifier: keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:81:4f:32:de:13:69:95:cc:e7:3e:37:ff:b9:17:7d:a7:89: d1:dc:14:65:9f:d7:24:0e:05:25:39:d0:f8:bf:0d:07:b5:ed: 22:08:68:52:ab:47:96:22:96:e7:20:52:8a:f7:eb:0c:7e:2b: 23:41:88:f6:c8:5b:ff:99:14:f3:ce:20:c6:fc:84:f7:32:f1: c9:f4:6b:9e:ba:0e:2a:5a:66:2b:bc:cb:44:08:b3:a0:4f:b4: 09:02:22:04:36:54:c2:10:8d:ec:57:85:52:3d:34:15:b3:da: 3c:1b:31:42:29:6b:0a:fa:a2:13:12:d6:92:bc:39:06:62:97: 08:45:81:9d:45:26:cf:eb:f9:ff:68:e5:c2:0e:8b:d4:97:31: 89:17:7b:f7:9d:a6:fe:2f:ab:29:ad:03:69:9b:ac:1b:96:ff: 02:01:5d:07:2d:a9:99:db:b9:56:7e:92:1c:93:6c:71:11:b3: 60:40:d6:77:4a:35:e3:d8:eb:04:66:75:6d:57:0a:ae:f9:16: 5d:bb:a5:f1:4f:6a:a2:0f:7f:d3:37:a0:c0:02:a9:76:d6:6f: f4:71:86:29:c9:58:47:29:8d:a3:1f:1c:42:e6:20:37:0b:c6: 97:23:32:19:08:03:ad:1f:f4:b5:a9:c9:6b:44:91:05:95:ec: d4:42:34:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgNq0ylpbjNepk91M8/+QzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YzYwYTU0ZTAzYzlmODE1Y2MzM2FmZDQ1ZDNjNGRiOWFm NzZmMTYwHhcNMjYwMTIxMTEwMDM4WhcNMjYwMTIyMTEwMDM4WjAzMTEwLwYDVQQD Eyg3MTFkZWIyZjllZmVmN2YxY2QxOGRiZTJkNzRlNWZkNzA1OTViZWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP53AvOmzWzTZ8ZcQUFPrR772Kmm +1bdSDJpl0dCDs8OBPj0E9HlC8ZUcCU10pzCYiM7X/e8oyDVaz4SUDcynCUrF2bC 0oDrIt0712kHsOsWRTIlFBrQyLviLL0ZBKiEreOQBfkIKsXDrPxwGZdukA20o2FA Vy/J3K4jJpLn4Ro0Rm+6VOu/IE031q6aPStyEVlUq3Qbizm4OTAy1HaWE88havxt dXaltQwebxSZu+yFfe8XVXGUrIqXsaAcWZoygyhcOEIG6m8Fo8EVVGwSydnocPx6 Z4sEtUEpGsqUQXoySOk4G3ZqpTgtHxQJSorpeaVajdaY05j4BbJv2u90GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEd6y+e/vfxzRjb4tdOX9cFlb7FMB8GA1UdIwQY MBaAFNfGClTgPJ+BXMM6/UXTxNua928WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMThZS1ZPQThuNEZjd3pyOVJkUEUyNXIzYnhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84OTA5MGMtNTNiMS00MWJlLWEzMzgt MzgzMWYzZWQxY2E4LzEvMThZS1ZPQThuNEZjd3pyOVJkUEUyNXIzYnhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84OTA5MGMtNTNiMS00MWJlLWEzMzgtMzgzMWYzZWQxY2E4 LzEvMThZS1ZPQThuNEZjd3pyOVJkUEUyNXIzYnhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABoFPMt4T aZXM5z43/7kXfaeJ0dwUZZ/XJA4FJTnQ+L8NB7XtIghoUqtHliKW5yBSivfrDH4r I0GI9shb/5kU884gxvyE9zLxyfRrnroOKlpmK7zLRAizoE+0CQIiBDZUwhCN7FeF Uj00FbPaPBsxQilrCvqiExLWkrw5BmKXCEWBnUUmz+v5/2jlwg6L1JcxiRd7952m /i+rKa0DaZusG5b/AgFdBy2pmdu5Vn6SHJNscRGzYEDWd0o149jrBGZ1bVcKrvkW Xbul8U9qog9/0zegwAKpdtZv9HGGKclYRymNox8cQuYgNwvGlyMyGQgDrR/0tanJ a0SRBZXs1EI04g== -----END CERTIFICATE-----Generated at Wed Jan 21 14:34:21 2026 by rpki-client