This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft File: yzgoFbJRYTZakWEMva1x9mKG94E.mft (raw, json) Hash identifier: XRzlOzcDCARdEAtV6mRhuKcCePg/eAG7RmK/o9U09AY= Subject key identifier: B2:36:EC:61:BC:EF:89:1F:6E:B5:E1:02:8E:CB:A2:03:AC:C1:84:FA Authority key identifier: CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81 Certificate issuer: /CN=cb382815b25161365a91610cbdad71f66286f781 Certificate serial: 019B7D82248B50DCA8DF93CA01BD57A01832 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft Manifest number: 0B97 Signing time: Fri 02 Jan 2026 07:00:39 +0000 Manifest this update: Fri 02 Jan 2026 07:00:39 +0000 Manifest next update: Sat 03 Jan 2026 07:00:39 +0000 Files and hashes: 1: Mo_PTp1RnKkJnXxtlC7OWx0YSxQ.roa (hash: YFv4cH8jBfWT6Q+LN0D+DWnRT7DQ1QH3WQI1NP0LJho=) 2: yzgoFbJRYTZakWEMva1x9mKG94E.crl (hash: TRhxHNS8ywN8VvvLLIrrERWH24aw53G1H9TCv6c8muU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:82:24:8b:50:dc:a8:df:93:ca:01:bd:57:a0:18:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb382815b25161365a91610cbdad71f66286f781 Validity Not Before: Jan 2 07:00:39 2026 GMT Not After : Jan 3 07:00:39 2026 GMT Subject: CN=b236ec61bcef891f6eb5e1028ecba203acc184fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3d:ae:0f:5a:77:b9:7f:a5:44:00:a5:6a:09: fa:7a:e3:d9:7a:34:83:62:5d:4a:ed:af:d9:d6:f3: 88:16:1d:12:94:2b:83:13:59:6f:16:97:d6:f7:0c: e5:02:93:c8:bd:d3:02:40:09:11:bc:cd:37:37:ef: a8:d8:db:d7:59:97:a4:da:8c:16:98:52:92:5f:0e: 89:43:42:8e:c0:73:ba:3b:80:89:ab:47:4f:ae:61: fe:ea:1b:7d:ef:1a:b0:ca:3d:c0:bf:17:36:10:18: 6d:98:09:94:7d:4c:f0:1b:7f:43:05:7c:46:d6:8c: 71:ae:85:af:26:ed:a4:68:c5:4a:99:98:ea:ec:8b: 02:56:b8:fd:f0:9a:0b:3d:db:8a:07:b7:a7:fd:42: 35:85:4f:20:43:b9:46:c9:8d:38:c4:ed:ac:92:94: fa:0b:a5:42:af:b8:11:8e:f6:9b:5a:db:52:65:c0: 6e:ff:90:50:d2:19:4e:b2:d2:21:77:40:e5:8d:17: b6:64:f6:30:09:90:7b:79:d5:0c:32:c7:b1:8c:87: c0:2d:0f:05:59:34:0e:f2:95:f4:c2:09:50:00:2e: 6c:d7:d4:ab:83:ea:da:9e:82:81:9b:4e:97:c4:c8: b5:7f:3b:cb:fa:17:52:94:95:73:af:e9:97:c2:b1: d6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:36:EC:61:BC:EF:89:1F:6E:B5:E1:02:8E:CB:A2:03:AC:C1:84:FA X509v3 Authority Key Identifier: keyid:CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c6:42:f7:0c:2a:43:77:4b:54:55:d1:9c:e8:9e:42:7f:d6: a7:a1:a6:16:e0:3e:69:3a:0a:44:1c:0e:04:11:7f:8e:6f:3f: 56:9d:89:48:74:ff:be:cc:da:da:f9:3c:9c:2f:47:9b:e0:c9: 1d:fb:33:81:67:89:95:99:a8:4c:d4:fd:98:8c:b1:a2:c2:73: d0:db:3f:2c:ec:9c:f4:8c:96:af:0a:63:b3:20:f1:ff:60:2f: ab:c4:8b:c3:10:85:18:0f:d1:7d:d2:6b:6d:74:70:36:7b:d2: ac:c7:be:c9:b5:f6:6a:4c:e4:94:c6:76:64:bc:6c:af:03:21: cc:da:73:e1:76:7a:bc:45:46:73:90:ae:c0:fe:11:70:da:a4: 75:d3:8b:3a:2b:a1:fa:1d:7c:f6:d2:77:96:7f:b0:d5:38:35: 41:aa:11:fe:b9:61:bd:26:b6:0c:c0:b3:61:81:e5:78:0a:56: 0b:24:bb:29:e7:5b:be:42:a5:d5:a8:06:5c:8e:bc:04:45:8d: 9b:e4:c9:02:4d:b7:13:0c:7f:80:cc:31:db:bb:26:76:7e:9d: 2b:f3:02:4e:fb:c0:9f:03:d3:51:96:a7:eb:d8:8c:4a:83:79: 0c:c6:42:b6:56:33:fb:8f:d3:01:35:2b:73:f5:1f:ab:8a:9e: 37:57:fd:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9giSLUNyo35PKAb1XoBgyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzgyODE1YjI1MTYxMzY1YTkxNjEwY2JkYWQ3MWY2NjI4 NmY3ODEwHhcNMjYwMTAyMDcwMDM5WhcNMjYwMTAzMDcwMDM5WjAzMTEwLwYDVQQD EyhiMjM2ZWM2MWJjZWY4OTFmNmViNWUxMDI4ZWNiYTIwM2FjYzE4NGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz2uD1p3uX+lRAClagn6euPZejSD Yl1K7a/Z1vOIFh0SlCuDE1lvFpfW9wzlApPIvdMCQAkRvM03N++o2NvXWZek2owW mFKSXw6JQ0KOwHO6O4CJq0dPrmH+6ht97xqwyj3Avxc2EBhtmAmUfUzwG39DBXxG 1oxxroWvJu2kaMVKmZjq7IsCVrj98JoLPduKB7en/UI1hU8gQ7lGyY04xO2skpT6 C6VCr7gRjvabWttSZcBu/5BQ0hlOstIhd0DljRe2ZPYwCZB7edUMMsexjIfALQ8F WTQO8pX0wglQAC5s19Srg+ranoKBm06XxMi1fzvL+hdSlJVzr+mXwrHWfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLI27GG874kfbrXhAo7LogOswYT6MB8GA1UdIwQY MBaAFMs4KBWyUWE2WpFhDL2tcfZihveBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpnb0ZiSlJZVFpha1dFTXZhMXg5bUtHOTRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lZjcwZjEtNTJhMS00ZTdhLWIzYzYt NDE0MjM4YzViYmMyLzEveXpnb0ZiSlJZVFpha1dFTXZhMXg5bUtHOTRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9lZjcwZjEtNTJhMS00ZTdhLWIzYzYtNDE0MjM4YzViYmMy LzEveXpnb0ZiSlJZVFpha1dFTXZhMXg5bUtHOTRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8ZC9wwq Q3dLVFXRnOieQn/Wp6GmFuA+aToKRBwOBBF/jm8/Vp2JSHT/vsza2vk8nC9Hm+DJ HfszgWeJlZmoTNT9mIyxosJz0Ns/LOyc9IyWrwpjsyDx/2Avq8SLwxCFGA/RfdJr bXRwNnvSrMe+ybX2akzklMZ2ZLxsrwMhzNpz4XZ6vEVGc5CuwP4RcNqkddOLOiuh +h189tJ3ln+w1Tg1QaoR/rlhvSa2DMCzYYHleApWCyS7KedbvkKl1agGXI68BEWN m+TJAk23Ewx/gMwx27smdn6dK/MCTvvAnwPTUZan69iMSoN5DMZCtlYz+4/TATUr c/Ufq4qeN1f9kA== -----END CERTIFICATE-----Generated at Fri Jan 2 11:30:21 2026 by rpki-client