This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft File: yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json) Hash identifier: U35TiqCh4hmHDnTGZCiPF31rNqGsQ+QNM6tUNA1+IFw= Subject key identifier: 4E:82:EF:19:2E:0F:D3:39:FA:21:C8:CB:F9:C3:9D:A1:B5:3F:23:4F Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9 Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9 Certificate serial: 019B9FD7A474226BCE9EA71B1A8B498ED4A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft Manifest number: 02C4 Signing time: Thu 08 Jan 2026 23:01:08 +0000 Manifest this update: Thu 08 Jan 2026 23:01:08 +0000 Manifest next update: Fri 09 Jan 2026 23:01:08 +0000 Files and hashes: 1: f-xwTa_yCR7Ss17S1EwzgQBKMGA.roa (hash: TF+ZxPW7XkGmzPufg/x4SjKszDqu5zsH5itje4zw6/M=) 2: gnLcldm5nEk7VUfZ3ZCZ9CuTP_s.roa (hash: 9M0Ppv6WalIMgDZY/MAuUrb6XlVw4bEOTKI1qKmwlD4=) 3: n-RcDYfPEHRG-eX6d__Iei5yzPM.roa (hash: K8QxMOk9uQIJxh1nzrIqq5LMo/ZGuRbN59GoRIA2470=) 4: tjZ8THIYRXbgLz196DSicii0iXo.roa (hash: qdVcRzwdZVy+DLw1SJkjSiPfhs6PqNIrsHH3olzJwQA=) 5: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: 1OJfJkx+8odj6406MKAR+Yjk7o6DpLx1XGu5mqOloX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9f:d7:a4:74:22:6b:ce:9e:a7:1b:1a:8b:49:8e:d4:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9 Validity Not Before: Jan 8 23:01:08 2026 GMT Not After : Jan 9 23:01:08 2026 GMT Subject: CN=4e82ef192e0fd339fa21c8cbf9c39da1b53f234f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:26:3e:f4:9c:c6:a5:4f:22:55:56:07:30:4c: 50:28:f7:be:ce:73:d1:35:1f:dd:a8:b8:ca:b0:b0: 17:4c:94:cf:26:7c:09:a0:70:64:1d:d9:f3:f1:2b: 29:45:6d:ac:f9:5e:ba:0a:28:5b:3a:1c:21:97:88: dd:cb:a5:60:d7:40:9b:ed:27:af:c9:91:36:5f:01: c9:e2:75:96:f3:51:f4:2b:81:4d:61:be:d1:7e:14: 36:ec:68:8b:09:b7:f8:fa:26:f4:b8:47:0b:83:89: af:ba:ef:44:63:e3:df:69:24:17:26:17:03:2c:a7: 7f:73:05:46:a9:7b:20:ed:c1:ac:92:c6:6d:fc:bd: bb:01:fc:24:27:d1:1b:02:b9:4c:62:bf:fc:6d:54: f2:36:73:9c:42:ec:e0:01:eb:88:a7:c3:31:76:d0: 70:f9:fc:3e:9b:4c:01:fb:50:83:4b:49:a0:91:28: 89:68:f1:73:c1:d6:95:ee:70:6f:00:12:1e:7c:2b: 86:63:ac:c1:b1:25:ce:7b:fe:4a:39:5f:4e:e8:dc: 26:95:ac:3a:67:9e:9e:c1:07:c8:e3:d0:7f:20:67: 32:00:61:a3:7b:c2:0c:28:da:39:02:04:b2:50:13: 31:d3:a3:b1:06:27:b5:31:0b:8c:c5:5e:b5:a5:d9: 65:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:82:EF:19:2E:0F:D3:39:FA:21:C8:CB:F9:C3:9D:A1:B5:3F:23:4F X509v3 Authority Key Identifier: keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:6e:28:dd:87:19:85:19:f2:56:5b:8a:d6:70:ce:26:fe:44: e5:0f:f4:c5:f1:98:1e:2a:a0:43:a2:ee:17:ce:5a:db:a8:d8: 81:73:d3:5c:a0:14:88:b8:81:47:3b:b3:46:60:c4:2f:04:d7: e2:da:80:c3:fd:44:28:36:a8:22:8c:27:d4:9a:c7:db:d6:06: 8a:cb:5e:58:19:41:67:76:43:75:9c:92:9c:d9:34:27:84:b4: ad:39:c2:30:8c:0a:17:ce:f6:34:c9:c8:31:ed:8b:8f:e1:e5: ab:66:f0:fb:1f:ec:fd:f1:77:7c:38:49:90:40:68:36:6d:c6: 6b:f5:41:e6:e7:61:b9:78:82:50:cd:e7:09:83:96:38:cf:ca: b2:52:32:19:70:02:ca:55:3a:61:1f:6a:40:94:66:28:41:80: e4:25:ac:1a:06:9c:5a:48:ff:d7:f7:3c:5d:de:0f:b7:e8:ed: 05:56:08:a2:4b:dd:58:33:64:fd:14:15:4f:e7:50:0f:4b:02: 88:ae:63:b7:5c:77:46:0a:7c:ef:ec:81:fe:d2:12:0b:0f:de: 0d:e2:a5:c3:0f:a6:0d:c2:13:12:c2:de:a6:34:5d:20:e3:00: 8e:29:ce:d2:f3:94:d6:42:fb:e2:25:bd:fb:6a:23:32:3b:1c: 21:00:9e:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuf16R0ImvOnqcbGotJjtSjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGFkYWZiMWYzMWY5ODg5YWE0NzM1NzkyYjZlM2RiNDY5 MzFiYjkwHhcNMjYwMTA4MjMwMTA4WhcNMjYwMTA5MjMwMTA4WjAzMTEwLwYDVQQD Eyg0ZTgyZWYxOTJlMGZkMzM5ZmEyMWM4Y2JmOWMzOWRhMWI1M2YyMzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iY+9JzGpU8iVVYHMExQKPe+znPR NR/dqLjKsLAXTJTPJnwJoHBkHdnz8SspRW2s+V66CihbOhwhl4jdy6Vg10Cb7Sev yZE2XwHJ4nWW81H0K4FNYb7RfhQ27GiLCbf4+ib0uEcLg4mvuu9EY+PfaSQXJhcD LKd/cwVGqXsg7cGsksZt/L27AfwkJ9EbArlMYr/8bVTyNnOcQuzgAeuIp8MxdtBw +fw+m0wB+1CDS0mgkSiJaPFzwdaV7nBvABIefCuGY6zBsSXOe/5KOV9O6Nwmlaw6 Z56ewQfI49B/IGcyAGGje8IMKNo5AgSyUBMx06OxBie1MQuMxV61pdlltwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6C7xkuD9M5+iHIy/nDnaG1PyNPMB8GA1UdIwQY MBaAFMmK2vsfMfmImqRzV5K249tGkxu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYt M2IxMDNkNWE2OTBhLzEveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYtM2IxMDNkNWE2OTBh LzEveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFG4o3YcZ hRnyVluK1nDOJv5E5Q/0xfGYHiqgQ6LuF85a26jYgXPTXKAUiLiBRzuzRmDELwTX 4tqAw/1EKDaoIown1JrH29YGisteWBlBZ3ZDdZySnNk0J4S0rTnCMIwKF872NMnI Me2Lj+Hlq2bw+x/s/fF3fDhJkEBoNm3Ga/VB5udhuXiCUM3nCYOWOM/KslIyGXAC ylU6YR9qQJRmKEGA5CWsGgacWkj/1/c8Xd4Pt+jtBVYIokvdWDNk/RQVT+dQD0sC iK5jt1x3Rgp87+yB/tISCw/eDeKlww+mDcITEsLepjRdIOMAjinO0vOU1kL74iW9 +2ojMjscIQCeqA== -----END CERTIFICATE-----Generated at Fri Jan 9 01:11:54 2026 by rpki-client