This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft File: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json) Hash identifier: ZhA75mfzfBh7ZG71Hpd+N/322wW5ncydy4TOl+j5Qps= Subject key identifier: 2A:D6:8C:9A:5E:A1:B5:8F:61:6C:F5:F5:7A:E6:49:F4:EC:7B:25:A1 Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e Certificate serial: 019BF4D09571CAC6FA8477B4719D2D464F9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft Manifest number: 1853 Signing time: Sun 25 Jan 2026 11:01:08 +0000 Manifest this update: Sun 25 Jan 2026 11:01:08 +0000 Manifest next update: Mon 26 Jan 2026 11:01:08 +0000 Files and hashes: 1: 1ZMsVQGAWg2it-JAEuC_i_hCIyc.roa (hash: ZLAKov/0hadhlGoY/KwpJKZ7o/B0xm108yvYfzR8PiE=) 2: I2xmBFd3fJduSyv2aTrXMOwMqYE.roa (hash: sd1O4Xb3glEpbiY/ZlepWAzhJWblfKmiK+EgSX/OOlI=) 3: O1ItMRw9wxb8OLoBzUvjVAYIXgU.roa (hash: pI8kdZ3zSA/cDhrjWlp18FOm4vIH2mSaLg1YgI5IsGA=) 4: ThpyK7T3T5Urd0gQp4EkSzgmEB0.roa (hash: drk6qrOhljg5/CDI9FQXdFU1YNYaPplLqtldYNHdpKY=) 5: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: n9IGaun9pUPZzW0kUmvI2deEvrdhR6sRXzSAbXJtpi8=) 6: k3oQWjEIeVPI2gHJtzVM1tK_J8E.roa (hash: hQugRIiAuKlyNTVoA/13HHrGoEN0gYUQuC+Bw05YFP8=) 7: lFA8TCmOsUwcRT-IH5-xMnLIn9g.roa (hash: rLmZAKicjwEflAKkEb3bhMZ1sp7aW6UtUzE6SYNtwFo=) 8: y3D_6T7LItZVGNAAIM2oiQLXK4k.roa (hash: wbaR1iGKJRGc1NnOpfqCm7AMxI+gqPXjh0axv9TvfKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:95:71:ca:c6:fa:84:77:b4:71:9d:2d:46:4f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e Validity Not Before: Jan 25 11:01:08 2026 GMT Not After : Jan 26 11:01:08 2026 GMT Subject: CN=2ad68c9a5ea1b58f616cf5f57ae649f4ec7b25a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3a:b8:68:75:ff:c5:62:7d:8e:4d:01:50:cc: 9e:fb:b7:19:c3:1a:82:7d:7b:91:51:7e:05:fe:1c: ee:2a:b3:39:64:c1:96:9f:33:1b:a8:6b:c5:0c:6b: 68:c3:11:31:71:82:5c:7e:92:fa:65:e6:cb:4c:cf: d6:7d:b0:6b:b8:eb:40:37:81:91:a2:ec:ce:d1:29: 27:c7:84:3f:7e:b5:97:04:b6:e5:0b:2b:06:de:cb: c3:cf:dc:73:ca:48:9e:43:ee:e2:37:3f:ac:d5:93: 5e:b5:31:fb:5d:25:59:cf:72:be:45:fc:e7:ac:da: 49:cd:0b:39:b2:d3:3f:32:3b:7c:a6:2b:4d:af:e7: 11:05:04:2d:23:f5:7e:25:72:50:75:dc:8e:57:c9: 0e:92:59:3f:d5:f1:30:b5:14:3b:23:f3:7a:70:75: 70:59:a2:19:32:ba:2d:64:05:75:76:9c:62:f9:63: 77:62:99:1a:9a:39:37:e7:aa:39:ab:76:bd:95:b0: 35:5c:5b:b1:b2:e9:80:d3:90:35:fd:c7:99:2c:93: 87:c3:99:da:6f:4d:47:3e:ac:c1:af:8a:05:fa:53: 0f:02:68:f3:4e:55:83:01:27:82:a0:ff:14:37:9e: dd:a7:90:b0:6c:c6:ae:3c:9e:de:47:43:db:14:ef: 13:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D6:8C:9A:5E:A1:B5:8F:61:6C:F5:F5:7A:E6:49:F4:EC:7B:25:A1 X509v3 Authority Key Identifier: keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:df:0a:22:6a:3f:04:1e:f5:4c:8c:b8:89:d8:24:20:fb:51: cf:52:46:59:8d:e9:16:c8:17:4a:85:93:fe:bb:c6:36:63:17: 99:d5:d4:50:30:cf:51:15:e4:36:7c:a2:c8:cd:aa:5c:1f:df: 14:ec:f1:66:e3:7e:bb:98:34:e7:6b:a6:1a:33:47:7e:40:73: b1:36:42:39:ee:4a:80:2a:e0:5d:5b:40:5e:e3:1d:2a:42:1f: 2f:7a:fb:da:fa:6e:77:94:99:ee:81:e7:d3:10:e2:5b:e5:7c: ee:3f:bd:a9:19:7b:67:9a:aa:18:49:69:d9:ca:5d:5d:0c:15: 17:83:24:fd:fd:b8:2f:b8:f9:56:cb:7d:76:27:ed:c1:86:3a: e5:62:55:8a:86:a6:c0:a6:50:d4:ac:89:b4:bb:ac:fe:7e:62: 43:af:68:65:e6:ea:fd:95:03:8d:66:a5:79:56:fd:bf:a0:c8: 24:7e:c6:0f:a9:7c:be:44:ae:60:f5:7a:3f:98:9c:11:77:26: ad:4e:bc:fa:7c:9b:59:9a:84:d6:06:d1:01:59:96:c2:33:69: 30:d6:35:52:6c:7e:66:8f:0c:5f:dd:6f:27:d1:d4:18:6e:f7: e4:01:d7:d5:d8:f7:9c:39:91:0a:40:77:50:14:63:9d:87:a2: 9a:c3:81:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00JVxysb6hHe0cZ0tRk+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh ZmU0NGUwHhcNMjYwMTI1MTEwMTA4WhcNMjYwMTI2MTEwMTA4WjAzMTEwLwYDVQQD EygyYWQ2OGM5YTVlYTFiNThmNjE2Y2Y1ZjU3YWU2NDlmNGVjN2IyNWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzq4aHX/xWJ9jk0BUMye+7cZwxqC fXuRUX4F/hzuKrM5ZMGWnzMbqGvFDGtowxExcYJcfpL6ZebLTM/WfbBruOtAN4GR ouzO0Sknx4Q/frWXBLblCysG3svDz9xzykieQ+7iNz+s1ZNetTH7XSVZz3K+Rfzn rNpJzQs5stM/Mjt8pitNr+cRBQQtI/V+JXJQddyOV8kOklk/1fEwtRQ7I/N6cHVw WaIZMrotZAV1dpxi+WN3Ypkamjk356o5q3a9lbA1XFuxsumA05A1/ceZLJOHw5na b01HPqzBr4oF+lMPAmjzTlWDASeCoP8UN57dp5CwbMauPJ7eR0PbFO8TLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrWjJpeobWPYWz19XrmSfTseyWhMB8GA1UdIwQY MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct ZmI1OTQ5ODA4ZGRjLzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAid8KImo/ BB71TIy4idgkIPtRz1JGWY3pFsgXSoWT/rvGNmMXmdXUUDDPURXkNnyiyM2qXB/f FOzxZuN+u5g052umGjNHfkBzsTZCOe5KgCrgXVtAXuMdKkIfL3r72vpud5SZ7oHn 0xDiW+V87j+9qRl7Z5qqGElp2cpdXQwVF4Mk/f24L7j5Vst9diftwYY65WJVioam wKZQ1KyJtLus/n5iQ69oZebq/ZUDjWaleVb9v6DIJH7GD6l8vkSuYPV6P5icEXcm rU68+nybWZqE1gbRAVmWwjNpMNY1Umx+Zo8MX91vJ9HUGG735AHX1dj3nDmRCkB3 UBRjnYeimsOBbA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:46:36 2026 by rpki-client