This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json) Hash identifier: tQrlYMPCjGCdH8PpGQaBcy5cIozrAQ5EZlsJ1pe7nrQ= Subject key identifier: DD:38:6D:1A:F8:C0:24:AC:EC:9A:7C:F1:BB:EF:8C:52:DD:E1:37:44 Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df Certificate serial: 019BAD2577B959F2AE3ADC1B731030E97F79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft Manifest number: 06E4 Signing time: Sun 11 Jan 2026 13:01:12 +0000 Manifest this update: Sun 11 Jan 2026 13:01:12 +0000 Manifest next update: Mon 12 Jan 2026 13:01:12 +0000 Files and hashes: 1: 7ddZ6AuTaKTVHMzwtcM1Koce3jI.roa (hash: xG5K9PIIy6VwRa0eYfMip6RI0P+1GY89uLI9ih9L+Uo=) 2: d3-5CKAZ7Mk-2t_tjSmFOfnjMzk.roa (hash: vwsp8oVhgfqNXWForlLjiHqAE45N0F3rkdkhErDxiHo=) 3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: ONHpH5bBygaKyDl6dPe3vc8iopipb7TQtBPNbxjblzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:25:77:b9:59:f2:ae:3a:dc:1b:73:10:30:e9:7f:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df Validity Not Before: Jan 11 13:01:12 2026 GMT Not After : Jan 12 13:01:12 2026 GMT Subject: CN=dd386d1af8c024acec9a7cf1bbef8c52dde13744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:03:99:6f:81:44:60:30:d1:da:e2:d1:86:00: 4d:3c:40:81:c4:29:50:44:4c:7e:82:50:d9:3a:5f: 77:18:9d:16:a7:da:c8:04:c0:d5:22:f9:fd:32:72: 06:fa:d4:a8:0a:1c:63:fe:3c:ad:10:00:78:f0:20: 47:fe:7a:b2:36:37:9b:f3:29:fa:a1:70:b2:9e:72: 06:57:cc:1d:1c:22:c9:00:be:7a:d1:49:26:12:48: 2d:24:05:57:ae:40:9a:32:8a:b4:a5:96:17:20:d2: f3:fe:95:da:80:69:13:c0:93:00:b2:ca:cf:ff:47: b8:df:7c:e3:16:68:61:ff:14:3e:6a:d7:e7:3e:39: c7:0e:6b:19:f2:10:96:19:33:0c:29:b7:08:fe:01: 38:7a:e6:9d:ce:4d:14:81:6a:c7:ba:ee:b4:37:13: 72:5c:4f:5c:95:04:b5:22:f4:b3:c1:bf:51:c3:84: 91:29:aa:e0:23:f2:45:cb:ca:97:1a:53:ef:84:c3: 19:e4:37:9b:c5:ae:91:06:cd:a1:54:d2:38:01:24: da:69:51:5d:38:6d:6d:3d:91:7f:08:00:64:b7:88: aa:10:3a:b3:62:e2:f5:25:99:e7:79:29:a1:54:33: bf:30:6a:e3:ca:5c:f8:f8:34:e5:1f:1e:9d:08:4f: e3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:38:6D:1A:F8:C0:24:AC:EC:9A:7C:F1:BB:EF:8C:52:DD:E1:37:44 X509v3 Authority Key Identifier: keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:a3:26:52:87:b4:30:0d:2a:d8:0f:95:f7:1f:68:72:37:e8: fd:80:20:5a:60:ce:2e:10:87:b9:a9:20:45:ed:c3:f5:dc:e9: 9c:7f:3b:d5:70:32:61:82:06:7f:af:81:a7:ca:64:bd:b9:5c: c9:b0:d1:23:b0:3d:05:ca:f0:5d:fd:44:18:ce:a9:ec:1b:96: b6:07:d4:a6:6d:87:ac:48:16:42:8b:83:98:ae:ad:cb:2d:94: 49:d6:db:54:c5:e9:cf:f0:b0:c9:15:02:97:3b:39:a4:ab:f4: 50:0b:65:d2:98:f8:23:35:89:12:02:e9:e4:b5:2f:64:25:1f: 7f:0f:c3:a8:dd:fd:ea:2d:07:ee:40:38:2e:94:fa:32:35:8a: 44:50:d2:ba:85:a8:bf:55:d3:14:75:ef:d4:b1:ba:a4:b7:dd: 2e:13:9c:f5:df:80:84:65:99:f6:2e:21:7b:b6:5e:e8:c9:6a: 9e:b9:50:75:55:bc:ef:57:77:c5:ad:dc:be:d8:81:3b:9f:19: 0f:19:9f:35:4e:be:a6:d6:7e:2b:06:6a:1f:08:94:d6:f2:4d: 9f:33:c5:fd:89:87:17:51:36:b8:7f:03:9d:46:5c:d6:b3:4c: 7a:20:dc:d8:81:30:be:5a:7b:6e:e6:ae:fd:f7:81:f4:b1:fb: 7a:69:d8:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutJXe5WfKuOtwbcxAw6X95MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDQ5ZmVmNmRhZDI2NjE5ZWJlZTA2NWQxZjIzMWMxYTI3 NmQ3ZGYwHhcNMjYwMTExMTMwMTEyWhcNMjYwMTEyMTMwMTEyWjAzMTEwLwYDVQQD EyhkZDM4NmQxYWY4YzAyNGFjZWM5YTdjZjFiYmVmOGM1MmRkZTEzNzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAOZb4FEYDDR2uLRhgBNPECBxClQ REx+glDZOl93GJ0Wp9rIBMDVIvn9MnIG+tSoChxj/jytEAB48CBH/nqyNjeb8yn6 oXCynnIGV8wdHCLJAL560UkmEkgtJAVXrkCaMoq0pZYXINLz/pXagGkTwJMAssrP /0e433zjFmhh/xQ+atfnPjnHDmsZ8hCWGTMMKbcI/gE4euadzk0UgWrHuu60NxNy XE9clQS1IvSzwb9Rw4SRKargI/JFy8qXGlPvhMMZ5Debxa6RBs2hVNI4ASTaaVFd OG1tPZF/CABkt4iqEDqzYuL1JZnneSmhVDO/MGrjylz4+DTlHx6dCE/jqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN04bRr4wCSs7Jp88bvvjFLd4TdEMB8GA1UdIwQY MBaAFMnUn+9trSZhnr7gZdHyMcGidtffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNzkyNjktZjRmMy00MjE0LTkxMzAt MGQ0ZjQwYmMzZmFhLzEveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8yNzkyNjktZjRmMy00MjE0LTkxMzAtMGQ0ZjQwYmMzZmFh LzEveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwKMmUoe0 MA0q2A+V9x9ocjfo/YAgWmDOLhCHuakgRe3D9dzpnH871XAyYYIGf6+Bp8pkvblc ybDRI7A9BcrwXf1EGM6p7BuWtgfUpm2HrEgWQouDmK6tyy2USdbbVMXpz/CwyRUC lzs5pKv0UAtl0pj4IzWJEgLp5LUvZCUffw/DqN396i0H7kA4LpT6MjWKRFDSuoWo v1XTFHXv1LG6pLfdLhOc9d+AhGWZ9i4he7Ze6MlqnrlQdVW871d3xa3cvtiBO58Z DxmfNU6+ptZ+KwZqHwiU1vJNnzPF/YmHF1E2uH8DnUZc1rNMeiDc2IEwvlp7buau /feB9LH7emnYDw== -----END CERTIFICATE-----Generated at Sun Jan 11 22:30:17 2026 by rpki-client