This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft File: YdOddLF-aR3RsFIhxgmMr17pOjY.mft (raw, json) Hash identifier: oCv9swBoj07bFkWA5wj58+EOyvtIB3yOdXNIILC7s8s= Subject key identifier: E4:2D:75:5A:44:51:62:92:9C:3C:42:57:04:EF:8C:71:63:99:A4:78 Authority key identifier: 61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36 Certificate issuer: /CN=61d39d74b17e691dd1b05221c6098caf5ee93a36 Certificate serial: 019B790059FFB1CEF5E77925E2CDD85AF4DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft Manifest number: 126F Signing time: Thu 01 Jan 2026 10:00:24 +0000 Manifest this update: Thu 01 Jan 2026 10:00:24 +0000 Manifest next update: Fri 02 Jan 2026 10:00:24 +0000 Files and hashes: 1: YdOddLF-aR3RsFIhxgmMr17pOjY.crl (hash: 0Isg2eZ46laC7T77rd0F8zQy29WCuwto6fk0Zqeym60=) 2: rs5a3rW2E-ThNoq2t8O4hGc6590.roa (hash: YMDJkD8/KCkGFvxJ1si+V/dSXJflYLlhdawvNihd//w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:00:59:ff:b1:ce:f5:e7:79:25:e2:cd:d8:5a:f4:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61d39d74b17e691dd1b05221c6098caf5ee93a36 Validity Not Before: Jan 1 10:00:24 2026 GMT Not After : Jan 2 10:00:24 2026 GMT Subject: CN=e42d755a445162929c3c425704ef8c716399a478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a8:f2:0c:f6:62:b5:4b:33:ea:ae:02:16:0e: e4:39:30:98:cf:44:2e:07:12:7d:1a:d6:9e:94:da: 90:9b:c4:12:39:7d:fb:ca:c7:90:ee:da:14:b3:bd: e4:e7:05:57:f7:ab:a6:d5:9c:7f:de:e5:b6:76:01: da:1d:2b:4f:f7:e6:3f:3c:01:72:b8:40:5a:80:24: 34:92:e8:02:f2:d2:63:bf:75:96:f3:0f:ce:73:31: a8:3d:4a:ea:94:47:3b:df:9f:bd:e8:f8:14:00:e2: f5:6a:12:16:a9:9b:6d:10:04:58:1d:52:4f:60:b8: 3f:cc:96:8b:26:cc:d3:ef:87:6d:0d:db:69:52:da: 60:11:9e:54:1b:1b:54:75:35:42:a4:5c:15:e4:5e: 50:09:5a:15:b3:be:74:7a:2d:9d:a3:2b:04:80:7e: b6:d0:75:cb:7f:28:94:8f:17:c8:07:10:32:68:34: 3b:05:eb:1b:2c:37:ec:2b:d7:3b:02:6e:03:65:f5: 4e:6b:d0:ee:5f:bc:63:74:38:b7:19:5d:c1:cb:1d: 5b:46:9a:d6:2b:6d:fc:19:82:c0:ef:eb:cf:3e:83: 4a:85:d8:a0:64:65:ad:68:72:00:04:a7:d7:20:5f: 44:bc:f6:e2:2b:31:06:10:dd:0b:79:82:b0:7f:3c: 50:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2D:75:5A:44:51:62:92:9C:3C:42:57:04:EF:8C:71:63:99:A4:78 X509v3 Authority Key Identifier: keyid:61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:50:8f:b8:d1:45:71:46:9f:1f:52:cd:32:9c:a2:38:54:63: 28:5a:18:d5:a3:b1:47:10:2f:71:ee:10:7f:a4:a9:b0:a1:d2: e2:b0:0c:45:6c:4c:92:7f:18:c5:b6:48:cf:30:46:61:7b:ee: 2c:ab:d4:b9:00:d2:5c:33:ad:d3:88:d1:df:d5:d3:3c:05:52: b1:7f:4b:fc:ed:ba:be:b8:f8:e6:fb:25:a4:22:4f:fa:8a:d7: bb:33:a4:e7:b7:44:d0:c0:2a:5c:c5:a4:16:7c:fa:f5:94:51: 1f:4c:e0:c1:96:a8:fb:05:48:88:99:2f:63:16:27:92:bf:1c: 7d:6c:78:66:ad:d2:8f:1b:92:d4:f8:d1:bd:bf:c5:42:53:08: ee:19:97:94:a1:f7:2f:ef:26:48:b2:7d:d5:1d:ce:39:c5:55: fe:87:61:33:e6:d1:38:4d:9b:0d:28:19:44:2d:29:e2:97:63: 9c:06:4d:81:7d:be:d9:3d:ed:57:a5:7d:bd:54:10:26:cc:ae: f2:39:3a:4d:f6:52:50:02:16:ad:93:c4:eb:77:1e:fb:3c:a2: 2d:b7:ce:7c:cc:fc:7d:ed:c7:0a:9c:84:eb:e4:16:f5:b5:90: 95:14:a2:69:ab:ae:6e:19:6d:44:9b:a5:f6:6c:d7:60:29:52: 0f:29:f9:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5AFn/sc7153kl4s3YWvTbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZDM5ZDc0YjE3ZTY5MWRkMWIwNTIyMWM2MDk4Y2FmNWVl OTNhMzYwHhcNMjYwMTAxMTAwMDI0WhcNMjYwMTAyMTAwMDI0WjAzMTEwLwYDVQQD EyhlNDJkNzU1YTQ0NTE2MjkyOWMzYzQyNTcwNGVmOGM3MTYzOTlhNDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKjyDPZitUsz6q4CFg7kOTCYz0Qu BxJ9GtaelNqQm8QSOX37yseQ7toUs73k5wVX96um1Zx/3uW2dgHaHStP9+Y/PAFy uEBagCQ0kugC8tJjv3WW8w/OczGoPUrqlEc735+96PgUAOL1ahIWqZttEARYHVJP YLg/zJaLJszT74dtDdtpUtpgEZ5UGxtUdTVCpFwV5F5QCVoVs750ei2doysEgH62 0HXLfyiUjxfIBxAyaDQ7BesbLDfsK9c7Am4DZfVOa9DuX7xjdDi3GV3Byx1bRprW K238GYLA7+vPPoNKhdigZGWtaHIABKfXIF9EvPbiKzEGEN0LeYKwfzxQ5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQtdVpEUWKSnDxCVwTvjHFjmaR4MB8GA1UdIwQY MBaAFGHTnXSxfmkd0bBSIcYJjK9e6To2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWRPZGRMRi1hUjNSc0ZJaHhnbU1yMTdwT2pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83Y2EyZjItYmYxMy00ZDE4LWE4ZGQt OTgwNTExZGMwNWFlLzEvWWRPZGRMRi1hUjNSc0ZJaHhnbU1yMTdwT2pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS83Y2EyZjItYmYxMy00ZDE4LWE4ZGQtOTgwNTExZGMwNWFl LzEvWWRPZGRMRi1hUjNSc0ZJaHhnbU1yMTdwT2pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVCPuNFF cUafH1LNMpyiOFRjKFoY1aOxRxAvce4Qf6SpsKHS4rAMRWxMkn8YxbZIzzBGYXvu LKvUuQDSXDOt04jR39XTPAVSsX9L/O26vrj45vslpCJP+orXuzOk57dE0MAqXMWk Fnz69ZRRH0zgwZao+wVIiJkvYxYnkr8cfWx4Zq3SjxuS1PjRvb/FQlMI7hmXlKH3 L+8mSLJ91R3OOcVV/odhM+bROE2bDSgZRC0p4pdjnAZNgX2+2T3tV6V9vVQQJsyu 8jk6TfZSUAIWrZPE63ce+zyiLbfOfMz8fe3HCpyE6+QW9bWQlRSiaauubhltRJul 9mzXYClSDyn5Gg== -----END CERTIFICATE-----Generated at Thu Jan 1 14:11:06 2026 by rpki-client