This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft File: YsD62Il-olgvlTB3ng5o6gjM5kM.mft (raw, json) Hash identifier: Mn/z0w8mUpsLmRfPm+yh3xlL4rWHRg9mMmffbAa0Nfs= Subject key identifier: 13:59:AD:D3:52:9B:62:32:EA:02:00:1C:33:DE:EF:B4:71:E6:E1:78 Authority key identifier: 62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43 Certificate issuer: /CN=62c0fad8897ea2582f9530779e0e68ea08cce643 Certificate serial: 019B7A4B349FA0EDE876C3064F5129AE42B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft Manifest number: 088C Signing time: Thu 01 Jan 2026 16:01:47 +0000 Manifest this update: Thu 01 Jan 2026 16:01:47 +0000 Manifest next update: Fri 02 Jan 2026 16:01:47 +0000 Files and hashes: 1: YsD62Il-olgvlTB3ng5o6gjM5kM.crl (hash: lU4GUbtrcpM463nYVGgjxnEAViuLUjmf8JHFgl4aCFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 16:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:4b:34:9f:a0:ed:e8:76:c3:06:4f:51:29:ae:42:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62c0fad8897ea2582f9530779e0e68ea08cce643 Validity Not Before: Jan 1 16:01:47 2026 GMT Not After : Jan 2 16:01:47 2026 GMT Subject: CN=1359add3529b6232ea02001c33deefb471e6e178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a9:04:a0:f5:79:e2:a9:da:97:ac:ec:84:01: 0d:96:46:e0:de:df:d1:03:98:95:ca:04:ba:a6:39: 7d:77:1c:47:a1:7a:b7:48:7f:29:ff:5d:4f:1a:f6: e8:2b:f8:df:b1:6a:3f:d4:85:5a:37:35:f6:57:e1: 82:26:f7:e0:e3:c8:2f:75:14:5b:99:a3:d7:a7:8d: 92:29:f6:0a:29:c4:2c:9f:00:09:2f:8f:9c:75:8e: 5c:b7:60:d6:2d:37:ed:c1:93:87:e1:0b:53:de:a0: 91:2d:e2:86:cb:7c:30:c5:5c:75:0d:42:d7:33:25: bf:fd:b9:60:49:55:58:e6:a5:71:95:6f:eb:7d:c9: d7:76:bb:b3:aa:f6:64:a1:45:99:a2:00:36:89:bb: 09:43:83:d1:78:ad:4e:f8:30:6e:b2:a1:73:c4:70: f3:27:6c:9a:37:43:44:85:f6:6b:bb:84:0a:16:6a: 04:71:e9:9a:54:38:df:dc:2e:2f:11:1d:77:6d:ca: 86:fd:ce:4b:47:74:22:14:62:6c:6f:2b:41:f6:ed: c9:df:b6:cf:9e:fe:06:6b:d7:46:4f:c0:42:83:ed: 10:8c:76:51:65:5c:c6:ff:e2:e6:91:df:ed:73:52: 58:0f:a3:f6:06:64:15:71:cf:0f:3a:76:d5:c7:f2: f6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:59:AD:D3:52:9B:62:32:EA:02:00:1C:33:DE:EF:B4:71:E6:E1:78 X509v3 Authority Key Identifier: keyid:62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b8:c2:28:15:51:0b:fa:bc:aa:c8:f2:35:3d:ac:c1:e5:9d: 6b:d9:4a:f0:e7:e4:69:97:ae:79:de:63:b2:16:ad:0d:2f:14: b6:c9:de:e7:1a:f6:9e:4b:ea:4f:a6:89:ff:d1:16:56:2b:49: c1:7d:aa:3e:67:aa:ed:64:81:d0:d4:2a:9b:f8:55:db:dc:bc: 6d:08:e6:b6:f5:ab:06:a2:ce:84:18:ef:da:a7:53:1f:9b:87: 2d:2a:52:8c:1f:96:8a:26:98:a9:39:aa:4e:34:d7:06:14:19: dd:34:31:86:4b:f1:80:56:8c:fb:dc:c4:dd:d6:59:30:5b:7d: 38:ad:1d:09:e4:67:06:0d:0a:2d:30:51:b7:06:52:fa:fc:6d: 63:2f:cd:eb:ac:8b:2b:5b:ae:fc:77:04:e4:fd:fa:c5:6b:98: 5c:e5:70:b7:ee:9d:4f:27:82:06:64:de:b8:0e:f5:de:8d:f2: 0c:16:12:c8:f1:d7:b0:e8:75:e4:83:56:ad:42:7f:b5:0d:b1: 14:16:cb:7a:7d:cb:62:e7:20:60:03:06:21:ed:d8:b7:ac:0c: 79:00:98:09:2c:0b:39:40:18:48:0a:f3:08:fc:47:1e:3b:4b: bf:ca:76:3a:a9:74:46:e3:0a:ad:f0:cb:36:c9:9f:9e:f8:dd: df:a5:0c:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6SzSfoO3odsMGT1EprkK3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYzBmYWQ4ODk3ZWEyNTgyZjk1MzA3NzllMGU2OGVhMDhj Y2U2NDMwHhcNMjYwMTAxMTYwMTQ3WhcNMjYwMTAyMTYwMTQ3WjAzMTEwLwYDVQQD EygxMzU5YWRkMzUyOWI2MjMyZWEwMjAwMWMzM2RlZWZiNDcxZTZlMTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86kEoPV54qnal6zshAENlkbg3t/R A5iVygS6pjl9dxxHoXq3SH8p/11PGvboK/jfsWo/1IVaNzX2V+GCJvfg48gvdRRb maPXp42SKfYKKcQsnwAJL4+cdY5ct2DWLTftwZOH4QtT3qCRLeKGy3wwxVx1DULX MyW//blgSVVY5qVxlW/rfcnXdruzqvZkoUWZogA2ibsJQ4PReK1O+DBusqFzxHDz J2yaN0NEhfZru4QKFmoEcemaVDjf3C4vER13bcqG/c5LR3QiFGJsbytB9u3J37bP nv4Ga9dGT8BCg+0QjHZRZVzG/+Lmkd/tc1JYD6P2BmQVcc8POnbVx/L2twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNZrdNSm2Iy6gIAHDPe77Rx5uF4MB8GA1UdIwQY MBaAFGLA+tiJfqJYL5Uwd54OaOoIzOZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXNENjJJbC1vbGd2bFRCM25nNW82Z2pNNWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81MWQwNGYtMjQ2ZS00MWYxLTk0MTIt Y2VlMWIxZDFlYzA2LzEvWXNENjJJbC1vbGd2bFRCM25nNW82Z2pNNWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy81MWQwNGYtMjQ2ZS00MWYxLTk0MTItY2VlMWIxZDFlYzA2 LzEvWXNENjJJbC1vbGd2bFRCM25nNW82Z2pNNWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbjCKBVR C/q8qsjyNT2sweWda9lK8OfkaZeued5jshatDS8Utsne5xr2nkvqT6aJ/9EWVitJ wX2qPmeq7WSB0NQqm/hV29y8bQjmtvWrBqLOhBjv2qdTH5uHLSpSjB+WiiaYqTmq TjTXBhQZ3TQxhkvxgFaM+9zE3dZZMFt9OK0dCeRnBg0KLTBRtwZS+vxtYy/N66yL K1uu/HcE5P36xWuYXOVwt+6dTyeCBmTeuA713o3yDBYSyPHXsOh15INWrUJ/tQ2x FBbLen3LYucgYAMGIe3Yt6wMeQCYCSwLOUAYSArzCPxHHjtLv8p2Oql0RuMKrfDL Nsmfnvjd36UMlA== -----END CERTIFICATE-----Generated at Thu Jan 1 19:46:46 2026 by rpki-client