This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json) Hash identifier: /lSewfYJ1WXv/DEgs4OqzRjX1+OG/8bU8xQ5ohGHPcQ= Subject key identifier: EA:9D:37:9C:70:3E:9A:4E:25:69:E8:A2:89:25:23:12:A4:B9:CE:FB Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1 Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1 Certificate serial: 019BB395836A6B22C5A6504B975B22526E53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft Manifest number: 17C8 Signing time: Mon 12 Jan 2026 19:01:18 +0000 Manifest this update: Mon 12 Jan 2026 19:01:18 +0000 Manifest next update: Tue 13 Jan 2026 19:01:18 +0000 Files and hashes: 1: 1-Npj9uH2lNWYpla7MTqgqwt83iQ.roa (hash: JQmankrBVBlqdCQ8Vwvu+tFNWtJX5/kU02hONf99fCo=) 2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: bdLmpXbTckcCUztdcmZU7Rz4reCrt0TbcxdPmuAJHuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:95:83:6a:6b:22:c5:a6:50:4b:97:5b:22:52:6e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1 Validity Not Before: Jan 12 19:01:18 2026 GMT Not After : Jan 13 19:01:18 2026 GMT Subject: CN=ea9d379c703e9a4e2569e8a289252312a4b9cefb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1c:15:11:dc:0f:a0:42:80:a1:d9:93:fa:db: e2:0c:52:de:c1:dd:75:4a:a4:23:b9:59:03:ac:1e: 14:31:c9:82:07:0f:36:6c:b1:3e:4c:8d:22:46:1e: 1f:d1:25:40:fc:de:dc:fc:c2:11:fb:31:b4:dc:b9: a9:4b:40:a6:89:ec:47:f9:11:2b:ab:f7:b4:6f:8c: 13:12:5c:ce:c8:0c:89:0a:11:48:82:71:ea:cc:dc: 2b:f3:82:65:68:d5:dc:33:ec:f0:c9:94:c4:54:e9: 24:00:d7:c5:08:85:38:63:1f:ee:dd:d0:ac:0e:62: d5:83:6f:b8:04:8b:10:b1:10:85:9f:78:33:5e:11: 4e:48:f8:9d:fe:d8:c7:80:37:8b:f7:80:67:b1:45: 66:d0:52:91:86:f0:b3:e5:f7:06:b5:62:8c:11:c3: 4d:24:0a:2e:49:d8:18:85:d4:8c:e2:51:05:58:3c: e6:dd:f7:89:ff:ca:6e:f0:21:a3:ea:c8:e6:69:32: df:4f:89:b6:a0:b9:67:cb:2f:fd:2f:29:8f:d1:b4: 48:4b:55:d9:96:2d:c5:50:6d:6f:1a:99:62:83:85: d6:e4:de:31:ad:17:09:42:bf:0c:40:dc:3b:e2:23: 05:4e:65:df:0c:94:e9:cb:01:48:76:63:aa:1d:63: 93:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9D:37:9C:70:3E:9A:4E:25:69:E8:A2:89:25:23:12:A4:B9:CE:FB X509v3 Authority Key Identifier: keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:6c:15:bd:19:b0:e1:74:b2:55:e0:64:68:13:95:a8:08:01: 33:5a:e6:60:d0:bc:20:b0:85:95:76:11:9a:53:b5:f5:23:a9: c1:36:b4:73:ff:41:b7:39:d5:17:8e:6a:34:86:ca:87:31:63: 68:44:ac:51:42:7e:3a:b5:c7:7a:5b:60:d0:62:46:38:fc:32: 9a:20:e0:89:b4:d2:04:ea:d2:97:d1:90:e7:5b:d0:3b:b4:25: fa:0a:e1:5a:e2:96:2f:a3:9c:13:28:d7:00:1b:f6:19:3f:ee: ec:cd:5f:e2:c8:2a:e8:fe:a7:eb:9e:92:dc:7d:49:80:93:ec: 11:30:0f:27:81:19:d5:ef:92:1e:27:b2:48:ca:9c:c9:ba:a6: af:1a:9a:b9:4b:f7:a6:3d:0b:30:59:28:07:d4:fb:24:e0:d7: 93:d2:1f:c8:58:90:cc:9e:a1:5d:91:5c:76:78:25:fe:e0:a5: 6a:68:40:7d:51:83:2e:51:1e:81:70:31:8e:11:31:97:7d:b8: 9c:64:eb:37:a0:d3:b1:55:0c:89:a1:79:42:44:7b:63:7e:8c: 58:e9:0f:1a:95:7a:ea:93:f5:29:17:f6:09:73:be:6d:0b:99: d4:14:fd:d9:24:10:1b:94:44:6e:2c:18:58:1a:d3:60:a7:88: ff:9f:bc:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzlYNqayLFplBLl1siUm5TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDI3YzUzNTg3M2U0YzRlYWQ4MDQyZDY3YmJmM2YxZjQ3 YjI2YjEwHhcNMjYwMTEyMTkwMTE4WhcNMjYwMTEzMTkwMTE4WjAzMTEwLwYDVQQD EyhlYTlkMzc5YzcwM2U5YTRlMjU2OWU4YTI4OTI1MjMxMmE0YjljZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BwVEdwPoEKAodmT+tviDFLewd11 SqQjuVkDrB4UMcmCBw82bLE+TI0iRh4f0SVA/N7c/MIR+zG03LmpS0CmiexH+REr q/e0b4wTElzOyAyJChFIgnHqzNwr84JlaNXcM+zwyZTEVOkkANfFCIU4Yx/u3dCs DmLVg2+4BIsQsRCFn3gzXhFOSPid/tjHgDeL94BnsUVm0FKRhvCz5fcGtWKMEcNN JAouSdgYhdSM4lEFWDzm3feJ/8pu8CGj6sjmaTLfT4m2oLlnyy/9LymP0bRIS1XZ li3FUG1vGplig4XW5N4xrRcJQr8MQNw74iMFTmXfDJTpywFIdmOqHWOTlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqdN5xwPppOJWnoooklIxKkuc77MB8GA1UdIwQY MBaAFGNCfFNYc+TE6tgELWe78/H0eyaxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBKOFUxaHo1TVRxMkFRdFo3dno4ZlI3SnJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MTA4M2MtNGIzZC00NmQ4LTgyYWEt YjI5OTdiYzYxNDc0LzEvWTBKOFUxaHo1TVRxMkFRdFo3dno4ZlI3SnJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82MTA4M2MtNGIzZC00NmQ4LTgyYWEtYjI5OTdiYzYxNDc0 LzEvWTBKOFUxaHo1TVRxMkFRdFo3dno4ZlI3SnJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWwVvRmw 4XSyVeBkaBOVqAgBM1rmYNC8ILCFlXYRmlO19SOpwTa0c/9BtznVF45qNIbKhzFj aESsUUJ+OrXHeltg0GJGOPwymiDgibTSBOrSl9GQ51vQO7Ql+grhWuKWL6OcEyjX ABv2GT/u7M1f4sgq6P6n656S3H1JgJPsETAPJ4EZ1e+SHieySMqcybqmrxqauUv3 pj0LMFkoB9T7JODXk9IfyFiQzJ6hXZFcdngl/uClamhAfVGDLlEegXAxjhExl324 nGTrN6DTsVUMiaF5QkR7Y36MWOkPGpV66pP1KRf2CXO+bQuZ1BT92SQQG5REbiwY WBrTYKeI/5+8GQ== -----END CERTIFICATE-----Generated at Mon Jan 12 23:50:04 2026 by rpki-client