This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json) Hash identifier: NXE02P/nslAdGLICc+ABAXj3Bktb4VKLDrdUz50uCIQ= Subject key identifier: DC:37:9A:06:83:05:8C:58:E6:AA:49:65:48:34:90:6E:B4:14:DD:4B Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24 Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424 Certificate serial: 019BFD9CCD422BA23B206BDA825DA75E3AF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft Manifest number: 0898 Signing time: Tue 27 Jan 2026 04:01:10 +0000 Manifest this update: Tue 27 Jan 2026 04:01:10 +0000 Manifest next update: Wed 28 Jan 2026 04:01:10 +0000 Files and hashes: 1: H1VE2ZkBqR8y9rnIA-ZTuzeFoCk.roa (hash: 3CEpvrN229vRpcqITP4Y01YD4936c1DOC0Lixuq0wEM=) 2: qRXAdJp0xbYo0FT6eucc0rsG8Yw.roa (hash: fUKa/Z+tq+35Z3GUfMU3rii79affOtxwZwlAfn3uJ6U=) 3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: 6LyktnxNuWKtsx3KJawAvq4Fz6wwfzIMIMADqydyJyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:9c:cd:42:2b:a2:3b:20:6b:da:82:5d:a7:5e:3a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424 Validity Not Before: Jan 27 04:01:10 2026 GMT Not After : Jan 28 04:01:10 2026 GMT Subject: CN=dc379a0683058c58e6aa49654834906eb414dd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:66:09:53:59:e3:8e:5a:15:1f:3e:12:96:b9: 7d:65:df:63:47:5d:4a:83:b8:20:b8:0a:f4:bf:51: 0c:37:5c:f7:6f:9b:28:21:c8:92:5b:7a:75:13:3a: 3f:c7:c2:7a:e6:f2:9f:54:74:9d:e8:39:59:80:4b: c3:8b:89:5e:27:30:14:ee:ef:0b:ef:fa:a8:ac:cf: c5:d1:7f:0c:aa:da:6a:ff:5d:b8:1d:16:7d:eb:a7: 37:9f:cb:1e:8e:08:a2:d8:a9:ed:e4:01:7d:f9:a5: 47:0b:46:90:70:4d:58:6e:ca:76:7a:e8:dd:e0:9c: e4:33:81:de:73:44:93:eb:94:14:84:72:62:6e:e9: 55:1e:e6:da:31:88:24:da:0a:39:4c:5e:b9:1f:43: fd:e6:26:fa:83:c8:8a:04:dd:c6:67:02:b8:aa:f6: 10:cc:4e:47:d5:a3:9f:55:92:63:b5:10:d1:15:6e: 4c:62:c7:16:e5:83:84:46:79:7d:81:07:d2:d2:6e: 3e:e2:68:18:24:c3:5d:7a:07:e1:44:50:dd:61:69: ff:ed:77:d5:56:6e:07:d3:b5:bb:37:93:73:4a:0c: 85:64:63:7d:d1:5e:ef:c7:c1:7c:aa:37:ea:8a:0d: 9f:d7:da:95:e5:72:c6:ee:34:36:b2:22:44:d8:f7: 78:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:37:9A:06:83:05:8C:58:E6:AA:49:65:48:34:90:6E:B4:14:DD:4B X509v3 Authority Key Identifier: keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:fb:86:04:74:f8:5e:a7:81:1a:a8:0e:ab:29:4b:af:a6:16: 3f:63:db:70:47:86:fd:11:60:b2:2d:a8:43:b0:08:99:16:28: 60:57:bf:36:da:6e:0d:4c:6b:e9:7d:9b:51:f5:b1:e5:dc:e6: 6d:a4:6c:38:25:bc:d2:9b:a8:17:32:ad:82:d5:4c:bc:7f:40: 67:b0:7c:f0:4e:c9:9e:8b:13:07:43:c0:f2:22:33:26:a0:38: e9:da:88:b3:d7:df:7b:3c:62:92:af:a7:49:61:c2:aa:10:5d: e9:9d:e4:f1:2d:cc:a1:ad:9f:9e:a9:0e:a2:08:b5:83:73:dd: 1f:61:56:bf:de:bc:a3:8d:b6:f0:70:67:b8:d2:53:70:4c:67: 07:00:2f:a1:ee:fb:dc:ce:e8:4b:e0:cf:4a:2d:6e:d0:e7:81: f3:4b:c2:dd:85:a3:24:16:1b:e1:45:81:16:c3:3c:71:33:86: f6:03:8f:f9:95:54:6d:04:8f:61:6f:84:2e:45:c5:f3:e4:8f: 26:93:b5:f7:d4:0b:7c:16:a4:68:f9:3f:ba:5e:c3:75:69:56: 4f:9b:e4:65:09:d3:c7:5a:28:70:4e:e7:e7:e4:73:34:03:b2: 1b:f2:74:50:3e:aa:53:64:f5:37:29:02:3e:c0:e1:94:fc:3c: b3:86:3d:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9nM1CK6I7IGvagl2nXjrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NTQ0Yzc3ODE1MmYwZmQ4NWU1ZGNiNDQ5MDRmMDAxZTU5 ODc0MjQwHhcNMjYwMTI3MDQwMTEwWhcNMjYwMTI4MDQwMTEwWjAzMTEwLwYDVQQD EyhkYzM3OWEwNjgzMDU4YzU4ZTZhYTQ5NjU0ODM0OTA2ZWI0MTRkZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmYJU1njjloVHz4Slrl9Zd9jR11K g7gguAr0v1EMN1z3b5soIciSW3p1Ezo/x8J65vKfVHSd6DlZgEvDi4leJzAU7u8L 7/qorM/F0X8Mqtpq/124HRZ966c3n8sejgii2Knt5AF9+aVHC0aQcE1Ybsp2eujd 4JzkM4Hec0ST65QUhHJibulVHubaMYgk2go5TF65H0P95ib6g8iKBN3GZwK4qvYQ zE5H1aOfVZJjtRDRFW5MYscW5YOERnl9gQfS0m4+4mgYJMNdegfhRFDdYWn/7XfV Vm4H07W7N5NzSgyFZGN90V7vx8F8qjfqig2f19qV5XLG7jQ2siJE2Pd4WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNw3mgaDBYxY5qpJZUg0kG60FN1LMB8GA1UdIwQY MBaAFMhUTHeBUvD9heXctEkE8AHlmHQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUZSTWQ0RlM4UDJGNWR5MFNRVHdBZVdZZENRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hMWYzNTEtNDJmZC00ZDQ0LWE5YjMt ZDk0MDA1MGU1NmNhLzEveUZSTWQ0RlM4UDJGNWR5MFNRVHdBZVdZZENRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9hMWYzNTEtNDJmZC00ZDQ0LWE5YjMtZDk0MDA1MGU1NmNh LzEveUZSTWQ0RlM4UDJGNWR5MFNRVHdBZVdZZENRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvuGBHT4 XqeBGqgOqylLr6YWP2PbcEeG/RFgsi2oQ7AImRYoYFe/NtpuDUxr6X2bUfWx5dzm baRsOCW80puoFzKtgtVMvH9AZ7B88E7JnosTB0PA8iIzJqA46dqIs9ffezxikq+n SWHCqhBd6Z3k8S3Moa2fnqkOogi1g3PdH2FWv968o4228HBnuNJTcExnBwAvoe77 3M7oS+DPSi1u0OeB80vC3YWjJBYb4UWBFsM8cTOG9gOP+ZVUbQSPYW+ELkXF8+SP JpO199QLfBakaPk/ul7DdWlWT5vkZQnTx1oocE7n5+RzNAOyG/J0UD6qU2T1NykC PsDhlPw8s4Y9Gw== -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:27 2026 by rpki-client