This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft File: yZdYjBhO3XIdCQotqVwm4aKMBRE.mft (raw, json) Hash identifier: LwJvP4eWwuGc8wnsJ4fOMDdFVLzD9cqQfsZ2QYRNY2I= Subject key identifier: D5:9B:34:24:48:A7:28:6F:B7:96:D4:DE:09:B8:66:84:E0:22:18:E9 Authority key identifier: C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11 Certificate issuer: /CN=c997588c184edd721d090a2da95c26e1a28c0511 Certificate serial: 019B7F39C10CCBDBDB94E6C3507847F0CCFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft Manifest number: 02BA Signing time: Fri 02 Jan 2026 15:00:49 +0000 Manifest this update: Fri 02 Jan 2026 15:00:49 +0000 Manifest next update: Sat 03 Jan 2026 15:00:49 +0000 Files and hashes: 1: yZdYjBhO3XIdCQotqVwm4aKMBRE.crl (hash: RG+W9RhA7bBqf0uVeITEEf2FJUPU2+udBdfYxxDs8Hc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:39:c1:0c:cb:db:db:94:e6:c3:50:78:47:f0:cc:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c997588c184edd721d090a2da95c26e1a28c0511 Validity Not Before: Jan 2 15:00:49 2026 GMT Not After : Jan 3 15:00:49 2026 GMT Subject: CN=d59b342448a7286fb796d4de09b86684e02218e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b9:03:dd:f8:a4:0c:78:c9:1e:fd:f3:a0:d3: 56:6b:34:af:79:1d:d1:f3:27:a4:81:42:02:31:6f: 41:d2:a4:54:a8:1f:89:88:2c:4f:61:49:97:90:a6: 98:cb:d7:cc:1f:d1:68:0a:65:4b:f3:ed:8c:4f:eb: 43:4f:f2:ac:d2:03:b2:d6:c3:7c:5d:d2:4a:6b:70: 8f:1f:7a:0d:8c:a6:d4:4b:b0:e3:e5:8b:ad:bb:16: f6:fb:8f:e0:68:a3:89:b9:2b:f1:af:b3:d8:51:df: 5f:33:eb:74:7a:58:13:ad:17:57:50:ca:3d:b3:6c: 6f:f6:cd:15:eb:50:60:19:a0:f4:f3:41:72:2a:dc: fb:23:04:dc:95:eb:39:1c:c2:4c:c9:8b:c7:95:8d: 7e:73:ca:9c:c6:69:eb:21:9c:5b:a8:20:a0:81:cc: e3:52:20:3d:d4:73:c5:66:71:8f:70:72:e4:43:07: 56:bd:d8:25:b7:a0:31:7c:08:c3:01:d5:5d:ac:45: 2d:54:4f:bd:ad:99:60:df:5d:38:3a:66:67:cb:78: e0:9e:88:76:90:bf:5e:ae:f2:f5:7d:f9:97:ed:5e: fc:92:c3:f4:35:04:1a:55:93:65:e6:48:21:24:03: 54:af:20:ff:5e:a0:c0:d4:94:10:71:0f:63:f0:c0: 92:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9B:34:24:48:A7:28:6F:B7:96:D4:DE:09:B8:66:84:E0:22:18:E9 X509v3 Authority Key Identifier: keyid:C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:d1:93:7a:dd:74:39:24:74:01:9a:81:38:5c:10:45:e9:da: a6:de:42:98:6b:52:17:13:fa:01:c4:7d:ea:56:ee:0d:28:7a: 8b:c4:b4:d8:98:0a:ba:9b:6e:73:a2:69:60:f8:42:d1:e5:23: d9:2a:e2:8d:4d:9c:22:35:8e:59:2e:ca:f5:f9:b9:37:9f:e9: e1:55:79:79:b0:fb:68:c0:b4:71:0a:5e:0b:51:ad:b1:ee:dd: 1d:c8:c4:0f:d1:de:54:cf:48:7d:10:5d:aa:33:b2:2f:fc:47: ce:be:aa:c2:9f:4a:fc:44:bb:e9:36:00:0c:48:d4:d6:6c:0e: 54:ed:1a:ac:c6:df:7f:47:56:24:f9:20:72:48:2a:c2:bd:f4: 06:79:dc:27:e1:f9:ce:d5:2b:6f:e7:8e:2d:21:c2:69:ad:16: 2f:1d:3d:3c:6b:c6:b8:37:89:08:06:1a:0b:7f:50:c2:94:2a: 07:66:35:e4:57:75:32:fb:fc:ac:6c:14:fc:3f:be:73:4f:09: c9:f2:f7:1c:ac:e3:67:fa:27:3f:c9:46:3b:81:0a:2a:2d:bb: ce:e0:2a:d1:11:67:2a:ec:09:15:80:63:af:9a:f4:8e:0a:60: 1e:b4:c3:58:d3:90:54:d4:ed:61:89:43:24:f4:2b:ec:66:d5: 7e:53:7f:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/OcEMy9vblObDUHhH8Mz7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OTc1ODhjMTg0ZWRkNzIxZDA5MGEyZGE5NWMyNmUxYTI4 YzA1MTEwHhcNMjYwMTAyMTUwMDQ5WhcNMjYwMTAzMTUwMDQ5WjAzMTEwLwYDVQQD EyhkNTliMzQyNDQ4YTcyODZmYjc5NmQ0ZGUwOWI4NjY4NGUwMjIxOGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rkD3fikDHjJHv3zoNNWazSveR3R 8yekgUICMW9B0qRUqB+JiCxPYUmXkKaYy9fMH9FoCmVL8+2MT+tDT/Ks0gOy1sN8 XdJKa3CPH3oNjKbUS7Dj5Yutuxb2+4/gaKOJuSvxr7PYUd9fM+t0elgTrRdXUMo9 s2xv9s0V61BgGaD080FyKtz7IwTcles5HMJMyYvHlY1+c8qcxmnrIZxbqCCggczj UiA91HPFZnGPcHLkQwdWvdglt6AxfAjDAdVdrEUtVE+9rZlg3104OmZny3jgnoh2 kL9ervL1ffmX7V78ksP0NQQaVZNl5kghJANUryD/XqDA1JQQcQ9j8MCS9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWbNCRIpyhvt5bU3gm4ZoTgIhjpMB8GA1UdIwQY MBaAFMmXWIwYTt1yHQkKLalcJuGijAURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVpkWWpCaE8zWElkQ1FvdHFWd200YUtNQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82MWNjNzgtMGQ0MC00MDRhLTlkMWQt YTBlOTQwZDI5OTFmLzEveVpkWWpCaE8zWElkQ1FvdHFWd200YUtNQlJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82MWNjNzgtMGQ0MC00MDRhLTlkMWQtYTBlOTQwZDI5OTFm LzEveVpkWWpCaE8zWElkQ1FvdHFWd200YUtNQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsdGTet10 OSR0AZqBOFwQRenapt5CmGtSFxP6AcR96lbuDSh6i8S02JgKuptuc6JpYPhC0eUj 2SrijU2cIjWOWS7K9fm5N5/p4VV5ebD7aMC0cQpeC1Gtse7dHcjED9HeVM9IfRBd qjOyL/xHzr6qwp9K/ES76TYADEjU1mwOVO0arMbff0dWJPkgckgqwr30BnncJ+H5 ztUrb+eOLSHCaa0WLx09PGvGuDeJCAYaC39QwpQqB2Y15Fd1Mvv8rGwU/D++c08J yfL3HKzjZ/onP8lGO4EKKi27zuAq0RFnKuwJFYBjr5r0jgpgHrTDWNOQVNTtYYlD JPQr7GbVflN/PQ== -----END CERTIFICATE-----Generated at Sat Jan 3 00:57:58 2026 by rpki-client