This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft File: jYhinjx4EKzCKOF6GNtnlOvtgZM.mft (raw, json) Hash identifier: VdI211dciiy6CY9an279exiLkLPw26rcx+/rXdz/p34= Subject key identifier: 3C:A2:0A:65:B7:DC:AD:D1:6D:55:CE:95:8A:9A:BB:68:C8:CC:52:7D Authority key identifier: 8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93 Certificate issuer: /CN=8d88629e3c7810acc228e17a18db6794ebed8193 Certificate serial: 019B79DC0293EAB625BC423231BB86902C21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft Manifest number: 146B Signing time: Thu 01 Jan 2026 14:00:20 +0000 Manifest this update: Thu 01 Jan 2026 14:00:20 +0000 Manifest next update: Fri 02 Jan 2026 14:00:20 +0000 Files and hashes: 1: ZBTvhiqTow3aNMb2aKed7aOmeLE.roa (hash: Hs63HPHm64omZRW3Iw+4oLNTtYpDyEs3J5diEPbkms4=) 2: jYhinjx4EKzCKOF6GNtnlOvtgZM.crl (hash: ERbG9kEuIL9gPLtY9TlqZmUwQA2yhehqE99rpDDscVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:dc:02:93:ea:b6:25:bc:42:32:31:bb:86:90:2c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d88629e3c7810acc228e17a18db6794ebed8193 Validity Not Before: Jan 1 14:00:20 2026 GMT Not After : Jan 2 14:00:20 2026 GMT Subject: CN=3ca20a65b7dcadd16d55ce958a9abb68c8cc527d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:04:d0:50:b3:f4:37:2b:54:f3:37:82:6c:4c: 4c:d4:d5:49:71:d7:9a:cd:bc:a1:5a:34:94:16:b4: bb:34:5d:87:79:d7:e3:fc:0c:ca:48:8b:0c:c9:3a: 3c:bf:c4:91:b3:eb:a5:a4:2e:a0:84:87:a8:9e:00: 05:8b:39:85:8d:b7:86:ba:23:ce:90:69:58:3b:e8: 15:43:83:2c:13:3f:30:03:e9:ab:61:c8:67:8f:0b: 68:57:14:f4:e7:c2:c3:70:d3:3a:29:62:e4:39:e7: f7:dd:f2:03:f7:0a:fb:9b:b9:2f:3f:e3:51:f8:0c: 3c:ed:07:82:25:67:82:68:cb:ae:a2:40:3b:29:be: 1c:26:f4:1d:f5:86:a7:16:19:b6:8a:3e:4e:1e:f8: 34:b0:f2:6a:52:91:a9:ee:e4:de:17:52:8c:99:47: 6e:24:ad:94:c8:eb:96:7b:b1:a9:da:c0:d2:fb:dc: 75:64:ad:70:bf:42:3a:f8:37:6d:86:81:d8:1c:a7: 0c:e7:f2:b2:2f:9f:7e:3a:9b:ae:8a:b0:2f:b8:7f: a9:67:a3:7b:10:ca:98:d3:9d:e4:e9:60:a4:af:86: cf:af:0b:ba:28:a4:01:2d:bb:0c:15:4e:5b:cc:94: bb:ef:15:fb:03:f7:d0:ea:c9:ef:2a:c4:ce:df:d0: d0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A2:0A:65:B7:DC:AD:D1:6D:55:CE:95:8A:9A:BB:68:C8:CC:52:7D X509v3 Authority Key Identifier: keyid:8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4f:f0:9d:56:f8:d7:3d:82:33:45:57:fc:87:c0:19:52:b5: 7a:4a:b0:8a:b6:02:92:16:26:f0:c0:6d:a4:35:ac:b3:a1:13: 87:36:61:26:b3:c6:35:f1:4d:48:bb:28:42:f9:6c:01:59:7f: 86:49:6c:86:c3:77:c0:1f:73:57:ef:7a:f0:66:98:c1:5c:66: 70:a9:2a:71:7f:a6:1b:b4:c2:4c:2e:43:e0:75:00:ff:98:60: a4:43:fa:38:12:28:b5:e4:71:aa:53:dd:52:5e:f7:67:29:3d: a9:f5:85:db:b2:81:31:d0:45:49:34:a2:5c:19:91:73:f5:b9: cc:be:b8:87:8f:39:f8:2f:46:7b:ff:fc:7e:79:eb:6b:38:d6: f4:19:8c:4a:d8:82:37:1f:f8:c2:2f:3d:e4:42:12:68:2d:6c: 61:9b:7f:c5:a7:c7:2c:87:18:a7:b2:9a:eb:30:9a:8d:be:d7: db:aa:cf:db:c2:ae:0f:2d:63:16:fc:f3:0b:08:65:7e:a9:3b: 48:de:7e:78:3e:c2:bd:1e:12:8c:b6:76:cf:cd:60:58:3f:a5: fb:23:ec:35:1e:a3:11:37:9d:c2:70:20:ef:eb:bf:74:3a:e9: 04:04:b2:b2:56:47:a7:f5:c7:c4:4e:a5:1c:18:13:cf:0b:38: 3d:68:ce:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt53AKT6rYlvEIyMbuGkCwhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODg2MjllM2M3ODEwYWNjMjI4ZTE3YTE4ZGI2Nzk0ZWJl ZDgxOTMwHhcNMjYwMTAxMTQwMDIwWhcNMjYwMTAyMTQwMDIwWjAzMTEwLwYDVQQD EygzY2EyMGE2NWI3ZGNhZGQxNmQ1NWNlOTU4YTlhYmI2OGM4Y2M1MjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgTQULP0NytU8zeCbExM1NVJcdea zbyhWjSUFrS7NF2Hedfj/AzKSIsMyTo8v8SRs+ulpC6ghIeongAFizmFjbeGuiPO kGlYO+gVQ4MsEz8wA+mrYchnjwtoVxT058LDcNM6KWLkOef33fID9wr7m7kvP+NR +Aw87QeCJWeCaMuuokA7Kb4cJvQd9YanFhm2ij5OHvg0sPJqUpGp7uTeF1KMmUdu JK2UyOuWe7Gp2sDS+9x1ZK1wv0I6+DdthoHYHKcM5/KyL59+OpuuirAvuH+pZ6N7 EMqY053k6WCkr4bPrwu6KKQBLbsMFU5bzJS77xX7A/fQ6snvKsTO39DQyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyiCmW33K3RbVXOlYqau2jIzFJ9MB8GA1UdIwQY MBaAFI2IYp48eBCswijhehjbZ5Tr7YGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalloaW5qeDRFS3pDS09GNkdOdG5sT3Z0Z1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84NzNiMmQtZTIwYy00MWNmLTkwZDIt NGJlMTA1M2QxZmM0LzEvalloaW5qeDRFS3pDS09GNkdOdG5sT3Z0Z1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84NzNiMmQtZTIwYy00MWNmLTkwZDItNGJlMTA1M2QxZmM0 LzEvalloaW5qeDRFS3pDS09GNkdOdG5sT3Z0Z1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACk/wnVb4 1z2CM0VX/IfAGVK1ekqwirYCkhYm8MBtpDWss6EThzZhJrPGNfFNSLsoQvlsAVl/ hklshsN3wB9zV+968GaYwVxmcKkqcX+mG7TCTC5D4HUA/5hgpEP6OBIoteRxqlPd Ul73Zyk9qfWF27KBMdBFSTSiXBmRc/W5zL64h485+C9Ge//8fnnrazjW9BmMStiC Nx/4wi895EISaC1sYZt/xafHLIcYp7Ka6zCajb7X26rP28KuDy1jFvzzCwhlfqk7 SN5+eD7CvR4SjLZ2z81gWD+l+yPsNR6jETedwnAg7+u/dDrpBASyslZHp/XHxE6l HBgTzws4PWjOeg== -----END CERTIFICATE-----Generated at Thu Jan 1 17:31:36 2026 by rpki-client