This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft File: yJgrANxgA9zFz9fSe1WV0MrKXaE.mft (raw, json) Hash identifier: FkNVS2Lf9sPSYWYcVH5OEbb8jQ/hPgwhB4jA/QnZMMg= Subject key identifier: 78:71:D0:72:CC:1C:40:9A:0F:68:9B:2B:EC:41:35:91:23:C8:B0:F4 Authority key identifier: C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1 Certificate issuer: /CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1 Certificate serial: 019BB0CBA694B326E25CC071C95F41AD3385 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft Manifest number: 17C6 Signing time: Mon 12 Jan 2026 06:01:35 +0000 Manifest this update: Mon 12 Jan 2026 06:01:35 +0000 Manifest next update: Tue 13 Jan 2026 06:01:35 +0000 Files and hashes: 1: 1-DbHlApWvHSbpBcMnUYSNB33bx0.roa (hash: OBuf9H667a+ueEzKXN1f4R7v9DKwH4hbK0fjD7m4gDM=) 2: yJgrANxgA9zFz9fSe1WV0MrKXaE.crl (hash: wCuyt26a8DDDpAoCM98Lrna/WPm6izvCfzzmMpQQ6Qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:cb:a6:94:b3:26:e2:5c:c0:71:c9:5f:41:ad:33:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1 Validity Not Before: Jan 12 06:01:35 2026 GMT Not After : Jan 13 06:01:35 2026 GMT Subject: CN=7871d072cc1c409a0f689b2bec41359123c8b0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e0:34:f6:9a:07:d3:fd:90:aa:e0:08:cb:7b: 81:5a:3b:c2:d0:9e:a2:c3:2c:62:50:48:a1:02:1d: d4:67:e3:d2:21:7b:23:87:46:e0:a7:5a:07:41:8a: f7:65:19:8a:87:8f:53:8c:fa:83:12:86:bb:de:b4: 02:8e:ef:b5:1f:d4:a0:dd:6e:68:17:16:05:a7:20: 2d:4e:57:69:5b:23:67:7c:d1:df:0f:9a:90:0e:7f: 1c:dc:01:e7:15:ae:6b:4b:ad:f8:a5:d1:80:01:df: 61:2d:36:ff:23:1d:5d:3a:2a:67:3d:42:bd:d1:7f: c0:a6:d0:78:6e:73:0f:47:3a:13:ee:71:14:5b:33: 20:38:7a:35:b8:2d:79:54:a3:06:ab:d4:d0:f4:7e: db:12:67:d4:68:fd:e8:c0:97:5c:b2:89:b9:ae:28: b8:f5:4b:b2:85:12:0d:fd:65:65:5a:f4:b5:3f:fd: 0a:29:92:40:f5:2c:ee:e4:64:ad:86:86:d7:73:0a: 9a:1f:2c:6c:48:55:a2:be:4b:85:14:de:8d:c9:22: b4:f2:a9:10:c2:7d:e4:ac:c6:30:e0:a6:6c:d9:02: fe:f1:2a:83:a6:05:cd:11:39:ed:d2:ee:ce:31:99: 10:70:6e:79:1f:82:aa:9e:cb:90:e9:0c:d3:eb:7c: 03:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:71:D0:72:CC:1C:40:9A:0F:68:9B:2B:EC:41:35:91:23:C8:B0:F4 X509v3 Authority Key Identifier: keyid:C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:fd:8a:db:1b:9a:18:60:20:e0:c5:75:4c:e5:66:1c:20:fa: 6b:47:c7:af:a8:1e:46:b1:ac:d4:07:b2:38:80:c0:20:37:aa: 79:ae:6c:54:cc:4d:16:b2:2a:9a:fe:39:fb:0d:4e:4f:3d:d7: 91:20:43:23:b2:01:cb:a9:a5:2b:51:30:a4:56:4c:4f:35:84: b6:f8:24:74:9f:5d:bd:62:14:93:45:a3:ea:02:24:a4:80:bf: 11:0a:d6:c3:c0:8d:ed:3d:78:8d:d6:9c:1d:4d:5a:85:1a:52: 67:c8:7d:82:67:a6:f2:a6:c7:e2:d1:1b:9e:05:79:94:85:46: bd:78:59:c1:1d:d5:a0:16:9d:cf:6f:12:11:36:ed:20:c1:da: 20:07:4e:9a:27:f4:3d:90:30:40:0e:f0:c6:4d:19:21:da:b2: 26:13:a9:8a:15:27:4e:cb:78:d3:d9:ca:81:6d:03:1c:d2:32: 4e:cb:8b:60:54:3b:bc:50:23:d1:da:ab:32:19:0d:6b:b8:b2: ca:c1:55:e2:27:ed:3d:c7:48:b5:11:ce:00:d9:7d:a1:26:8f: 31:86:19:4d:f0:e0:7b:75:17:cb:7f:76:0c:9c:d9:54:66:42: bd:07:00:55:9f:6f:82:d3:b3:19:0d:a8:a9:1a:5b:a4:23:04: 38:c8:46:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwy6aUsybiXMBxyV9BrTOFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4OTgyYjAwZGM2MDAzZGNjNWNmZDdkMjdiNTU5NWQwY2Fj YTVkYTEwHhcNMjYwMTEyMDYwMTM1WhcNMjYwMTEzMDYwMTM1WjAzMTEwLwYDVQQD Eyg3ODcxZDA3MmNjMWM0MDlhMGY2ODliMmJlYzQxMzU5MTIzYzhiMGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eA09poH0/2QquAIy3uBWjvC0J6i wyxiUEihAh3UZ+PSIXsjh0bgp1oHQYr3ZRmKh49TjPqDEoa73rQCju+1H9Sg3W5o FxYFpyAtTldpWyNnfNHfD5qQDn8c3AHnFa5rS634pdGAAd9hLTb/Ix1dOipnPUK9 0X/AptB4bnMPRzoT7nEUWzMgOHo1uC15VKMGq9TQ9H7bEmfUaP3owJdcsom5rii4 9UuyhRIN/WVlWvS1P/0KKZJA9Szu5GSthobXcwqaHyxsSFWivkuFFN6NySK08qkQ wn3krMYw4KZs2QL+8SqDpgXNETnt0u7OMZkQcG55H4KqnsuQ6QzT63wDZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhx0HLMHECaD2ibK+xBNZEjyLD0MB8GA1UdIwQY MBaAFMiYKwDcYAPcxc/X0ntVldDKyl2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUpnckFOeGdBOXpGejlmU2UxV1YwTXJLWGFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yMTY4YmEtMWM0Yy00MjA2LTkyOTkt MTY1M2UwZGU0MDUwLzEveUpnckFOeGdBOXpGejlmU2UxV1YwTXJLWGFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8yMTY4YmEtMWM0Yy00MjA2LTkyOTktMTY1M2UwZGU0MDUw LzEveUpnckFOeGdBOXpGejlmU2UxV1YwTXJLWGFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmv2K2xua GGAg4MV1TOVmHCD6a0fHr6geRrGs1AeyOIDAIDeqea5sVMxNFrIqmv45+w1OTz3X kSBDI7IBy6mlK1EwpFZMTzWEtvgkdJ9dvWIUk0Wj6gIkpIC/EQrWw8CN7T14jdac HU1ahRpSZ8h9gmem8qbH4tEbngV5lIVGvXhZwR3VoBadz28SETbtIMHaIAdOmif0 PZAwQA7wxk0ZIdqyJhOpihUnTst409nKgW0DHNIyTsuLYFQ7vFAj0dqrMhkNa7iy ysFV4iftPcdItRHOANl9oSaPMYYZTfDge3UXy392DJzZVGZCvQcAVZ9vgtOzGQ2o qRpbpCMEOMhGkQ== -----END CERTIFICATE-----Generated at Mon Jan 12 09:08:51 2026 by rpki-client