This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft File: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json) Hash identifier: /kJu9nfnFpsJyex1xwhL2dYWYLWg5lt5886FqI3ZSEg= Subject key identifier: 8B:FF:6C:B7:B4:17:84:F5:C8:4B:A5:D4:90:1C:45:BD:38:B4:F6:75 Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d Certificate serial: 019BA1C6DD6DBBAB9AC911CE3D37ACC0650D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft Manifest number: 042A Signing time: Fri 09 Jan 2026 08:02:03 +0000 Manifest this update: Fri 09 Jan 2026 08:02:03 +0000 Manifest next update: Sat 10 Jan 2026 08:02:03 +0000 Files and hashes: 1: amLES0luVq3iLHPQKyufyNQwgaI.roa (hash: UsdGqDJsnylUEzlDTC7n05/NMnzeFnVJjS3/bK29FXs=) 2: jIwaLjqt-xdZuLLeeQ6b9JM9ktU.roa (hash: NBpvqEDHRttth2lk+QrdtGdQaHXJVWBfDcwb8ITbXwo=) 3: u_iWvzN4ZsIj-85aLk82H6-rRe4.roa (hash: LwmASP5C8j7zpf+fcC+xGqEebuer0tW8AmUmigdVvI8=) 4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: Ou1gogUZWtv4c54N9V5hGA8pnJJYVwRuQ5prHux3oZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:c6:dd:6d:bb:ab:9a:c9:11:ce:3d:37:ac:c0:65:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d Validity Not Before: Jan 9 08:02:03 2026 GMT Not After : Jan 10 08:02:03 2026 GMT Subject: CN=8bff6cb7b41784f5c84ba5d4901c45bd38b4f675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1a:b9:09:2c:79:d0:2b:af:fe:ad:ef:41:af: 58:04:9f:26:0f:bb:4c:dc:85:c1:17:e9:ef:45:58: d5:99:ea:7c:84:cf:d0:f8:9e:fa:f3:b1:ae:56:09: a0:07:9d:d5:51:6e:22:8a:82:4d:a0:26:64:0b:6c: cf:5b:f0:76:50:14:4f:2f:11:a3:e0:cd:a2:11:96: f1:94:32:58:d6:d3:90:92:b6:f2:23:a1:52:0e:77: 1b:7e:4d:b3:0b:ce:96:d7:26:39:d3:ca:f2:7f:36: bc:b0:67:0c:71:1f:5e:34:9c:77:90:fb:7b:97:18: 94:a8:12:0a:d1:e6:71:df:3e:e9:f9:04:ee:47:ce: 70:43:31:f4:d7:d8:56:a3:f6:79:d6:10:f1:03:51: ce:27:e4:ef:24:4a:e2:c7:07:e0:e4:e1:1f:74:b7: 26:4e:e3:a4:49:08:e5:f2:05:44:1a:d2:24:51:3d: 92:4a:aa:7e:7a:93:58:78:cf:2a:81:30:1e:13:33: 15:b2:fc:2e:c4:81:de:ce:92:c2:f6:86:c7:2f:f2: 93:47:91:8d:69:c2:c1:5a:f2:4d:1b:46:6f:a6:d2: 84:a4:cc:53:ab:13:41:68:bd:10:e8:3e:ee:ff:07: 54:83:cb:bc:26:e0:48:c0:22:ff:90:ff:eb:e1:01: 84:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FF:6C:B7:B4:17:84:F5:C8:4B:A5:D4:90:1C:45:BD:38:B4:F6:75 X509v3 Authority Key Identifier: keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:a0:4d:0c:99:5b:b6:4b:8a:7f:93:69:fa:d1:9d:97:51:8d: 3a:7e:e6:67:03:99:28:46:48:7e:6a:04:c0:aa:2e:59:6a:16: 2b:18:1d:b3:37:9e:bb:97:70:48:9e:ca:7e:1c:e4:74:3e:33: d5:51:1b:c0:c5:01:4a:a3:27:51:57:78:87:6d:82:7a:e0:62: 10:50:2f:fa:2e:85:92:61:7c:86:b7:8e:91:34:62:d3:31:0b: 65:2a:48:b7:96:db:52:54:d3:68:2a:dc:18:91:49:b9:11:53: da:a7:35:73:9f:d0:c3:39:86:cb:5f:c5:d7:f8:b3:6f:40:cf: e1:68:25:a8:d8:0c:21:55:aa:e6:eb:76:7a:4a:fe:9d:fb:ab: 7a:31:a4:06:82:20:bd:93:54:d5:c0:da:f4:ab:25:8f:a9:0c: 17:af:f2:5d:d6:44:f5:f2:76:69:a2:3c:5e:83:07:83:08:38: 3a:59:ee:79:5e:e3:33:99:6b:2c:e9:fa:38:a4:1c:ee:0a:ec: 53:51:a6:18:ce:f2:b1:9c:44:20:c4:a4:ed:71:b2:4d:97:92: dd:e5:ba:2f:12:4b:ab:61:41:5d:d0:e0:d5:6d:5c:3c:85:d9: ca:de:d0:5e:d7:7d:9a:57:64:c1:f2:63:55:a9:12:1f:6a:76: f5:eb:6a:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhxt1tu6uayRHOPTeswGUNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzVmNTRhM2IwZTJlNDhkZDVlZmIzNjI0YzFmZTBlODVm ZTI2MWQwHhcNMjYwMTA5MDgwMjAzWhcNMjYwMTEwMDgwMjAzWjAzMTEwLwYDVQQD Eyg4YmZmNmNiN2I0MTc4NGY1Yzg0YmE1ZDQ5MDFjNDViZDM4YjRmNjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xq5CSx50Cuv/q3vQa9YBJ8mD7tM 3IXBF+nvRVjVmep8hM/Q+J7687GuVgmgB53VUW4iioJNoCZkC2zPW/B2UBRPLxGj 4M2iEZbxlDJY1tOQkrbyI6FSDncbfk2zC86W1yY508ryfza8sGcMcR9eNJx3kPt7 lxiUqBIK0eZx3z7p+QTuR85wQzH019hWo/Z51hDxA1HOJ+TvJErixwfg5OEfdLcm TuOkSQjl8gVEGtIkUT2SSqp+epNYeM8qgTAeEzMVsvwuxIHezpLC9obHL/KTR5GN acLBWvJNG0ZvptKEpMxTqxNBaL0Q6D7u/wdUg8u8JuBIwCL/kP/r4QGEtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIv/bLe0F4T1yEul1JAcRb04tPZ1MB8GA1UdIwQY MBaAFMo19Uo7Di5I3V77NiTB/g6F/iYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUt NTFjOTliYzhlOGQwLzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUtNTFjOTliYzhlOGQw LzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxaBNDJlb tkuKf5Np+tGdl1GNOn7mZwOZKEZIfmoEwKouWWoWKxgdszeeu5dwSJ7KfhzkdD4z 1VEbwMUBSqMnUVd4h22CeuBiEFAv+i6FkmF8hreOkTRi0zELZSpIt5bbUlTTaCrc GJFJuRFT2qc1c5/QwzmGy1/F1/izb0DP4WglqNgMIVWq5ut2ekr+nfurejGkBoIg vZNU1cDa9Kslj6kMF6/yXdZE9fJ2aaI8XoMHgwg4OlnueV7jM5lrLOn6OKQc7grs U1GmGM7ysZxEIMSk7XGyTZeS3eW6LxJLq2FBXdDg1W1cPIXZyt7QXtd9mldkwfJj VakSH2p29etqLQ== -----END CERTIFICATE-----Generated at Fri Jan 9 18:08:10 2026 by rpki-client