This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft File: ydy2lccNtLljcGAHUJGKSzqKIak.mft (raw, json) Hash identifier: 2dIqbJbmizN4oBOvyFYkjUEZc2hJjWmw2C9cZEWSK1I= Subject key identifier: E4:22:3F:6E:EF:09:40:20:37:02:F1:42:8F:6E:4E:20:66:08:8F:20 Authority key identifier: C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9 Certificate issuer: /CN=c9dcb695c70db4b96370600750918a4b3a8a21a9 Certificate serial: 019B7AB8F242859406C92969DEC63F52A8B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft Manifest number: 17AF Signing time: Thu 01 Jan 2026 18:01:39 +0000 Manifest this update: Thu 01 Jan 2026 18:01:39 +0000 Manifest next update: Fri 02 Jan 2026 18:01:39 +0000 Files and hashes: 1: 08KPrzvK2WRWpD6p5CJ-Ul7cl9I.roa (hash: sfh9qqw8GmrlQX4Jo45lPqyd4sncTsU6nFud/SZKyQU=) 2: Mq4KEjTO5-3eXlg2Z24LUeQDfPk.roa (hash: iw4ECgSPXnY1fZL4AMAR4ZlIFQjssIsKBQeuJNCApWM=) 3: ydy2lccNtLljcGAHUJGKSzqKIak.crl (hash: zKFv6bkoWzqN7SIhNIkCEPcvkzRaGGFQ4G2+jKKQ0Bw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 17:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:b8:f2:42:85:94:06:c9:29:69:de:c6:3f:52:a8:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9dcb695c70db4b96370600750918a4b3a8a21a9 Validity Not Before: Jan 1 18:01:39 2026 GMT Not After : Jan 2 18:01:39 2026 GMT Subject: CN=e4223f6eef0940203702f1428f6e4e2066088f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c2:b0:4b:d3:9f:ec:7c:b5:d5:01:12:5f:ed: 88:4b:24:69:81:44:b6:b1:36:68:ee:4e:c2:53:6c: ed:37:39:c6:3b:31:4c:98:2e:91:ff:e6:1d:8a:63: 73:4b:88:0e:ce:aa:47:32:12:9d:5f:c3:c9:86:08: e4:06:15:8f:14:c1:4b:42:b7:c5:5e:20:5d:a5:46: 32:c8:63:14:9b:4d:c9:f6:a1:68:f2:ce:fd:66:f5: f6:5d:2a:0f:29:f2:37:14:c4:e5:3b:cd:61:3f:2a: d2:34:82:7b:b8:5a:c2:50:3e:b2:03:3f:fe:9c:19: 86:9c:fc:14:17:8f:1f:7a:cf:8a:e3:8a:ca:32:a6: 93:5a:77:9e:d8:9a:f1:80:11:df:61:32:9b:11:f6: 7b:57:82:aa:d0:b2:86:51:00:53:c4:b5:48:5d:a5: d1:ae:10:78:1e:24:1c:91:82:eb:31:7e:99:49:f6: 68:e0:6d:d1:ed:5b:d2:c7:b8:47:69:b8:95:14:5b: 87:eb:89:7e:76:75:69:46:13:0f:55:e8:74:8c:46: 7c:00:73:9f:00:08:bf:bc:b9:06:53:6f:06:81:f4: f0:9a:f1:eb:28:99:c2:c1:42:97:9c:28:06:5b:56: c9:c4:e9:a0:3e:b7:92:b8:47:43:7a:a8:53:93:53: 79:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:22:3F:6E:EF:09:40:20:37:02:F1:42:8F:6E:4E:20:66:08:8F:20 X509v3 Authority Key Identifier: keyid:C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a9:68:18:2a:18:81:fb:89:6f:2c:8f:7b:50:dd:06:2e:02: 1a:3d:5f:25:f7:81:ad:ca:a2:30:48:88:a2:2d:4e:16:81:b5: 7b:f6:c5:92:52:12:8e:38:7b:0d:9b:4a:ee:18:31:f9:8f:ce: f2:93:f8:ad:46:33:8c:b3:42:e3:8e:11:7d:a2:67:03:b8:4b: b5:38:06:6e:69:80:da:91:9f:45:6a:23:78:d4:38:6d:4e:49: 93:3e:10:26:9c:ff:33:1e:a0:a5:e6:b5:07:c9:c6:f8:f2:bb: ca:71:e4:b7:0a:4a:ee:44:3e:7b:49:03:ee:6c:7d:66:3f:52: bc:bf:35:19:66:ca:5f:7a:33:bb:a3:48:ba:c7:84:5b:18:36: 41:85:50:cf:7c:0c:90:7e:81:6a:52:50:6d:2f:cb:2d:f4:c2: 62:78:ac:98:bf:e4:b9:70:a5:f4:87:25:57:7e:d9:9f:54:b0: 49:97:da:8d:c4:5e:11:2b:e0:88:82:96:df:f5:5f:5a:a6:f4: e1:5b:26:d7:da:a0:79:ef:be:f7:3c:83:32:08:cf:50:24:2f: 7a:5a:39:5c:46:67:9f:a8:80:cd:55:c0:73:ef:33:24:98:22: 12:76:1b:fb:c1:24:6b:f5:4f:06:77:90:ca:a3:5e:13:15:c0: 9f:10:67:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6uPJChZQGySlp3sY/Uqi2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZGNiNjk1YzcwZGI0Yjk2MzcwNjAwNzUwOTE4YTRiM2E4 YTIxYTkwHhcNMjYwMTAxMTgwMTM5WhcNMjYwMTAyMTgwMTM5WjAzMTEwLwYDVQQD EyhlNDIyM2Y2ZWVmMDk0MDIwMzcwMmYxNDI4ZjZlNGUyMDY2MDg4ZjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsKwS9Of7Hy11QESX+2ISyRpgUS2 sTZo7k7CU2ztNznGOzFMmC6R/+YdimNzS4gOzqpHMhKdX8PJhgjkBhWPFMFLQrfF XiBdpUYyyGMUm03J9qFo8s79ZvX2XSoPKfI3FMTlO81hPyrSNIJ7uFrCUD6yAz/+ nBmGnPwUF48fes+K44rKMqaTWnee2JrxgBHfYTKbEfZ7V4Kq0LKGUQBTxLVIXaXR rhB4HiQckYLrMX6ZSfZo4G3R7VvSx7hHabiVFFuH64l+dnVpRhMPVeh0jEZ8AHOf AAi/vLkGU28GgfTwmvHrKJnCwUKXnCgGW1bJxOmgPreSuEdDeqhTk1N5TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQiP27vCUAgNwLxQo9uTiBmCI8gMB8GA1UdIwQY MBaAFMnctpXHDbS5Y3BgB1CRiks6iiGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wMjIyZmUtZGNjOC00YTdkLWJmYTIt ZWNhOTc4YzNjYjg1LzEveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wMjIyZmUtZGNjOC00YTdkLWJmYTItZWNhOTc4YzNjYjg1 LzEveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6loGCoY gfuJbyyPe1DdBi4CGj1fJfeBrcqiMEiIoi1OFoG1e/bFklISjjh7DZtK7hgx+Y/O 8pP4rUYzjLNC444RfaJnA7hLtTgGbmmA2pGfRWojeNQ4bU5Jkz4QJpz/Mx6gpea1 B8nG+PK7ynHktwpK7kQ+e0kD7mx9Zj9SvL81GWbKX3ozu6NIuseEWxg2QYVQz3wM kH6BalJQbS/LLfTCYnismL/kuXCl9IclV37Zn1SwSZfajcReESvgiIKW3/VfWqb0 4Vsm19qgee++9zyDMgjPUCQvelo5XEZnn6iAzVXAc+8zJJgiEnYb+8Eka/VPBneQ yqNeExXAnxBnSw== -----END CERTIFICATE-----Generated at Thu Jan 1 19:51:49 2026 by rpki-client