This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json) Hash identifier: m7Z+FBEtSaQDtpwEhQdIC2hi5d9+/Jz9yH7ScSg8A+E= Subject key identifier: 25:E4:80:EA:13:26:F7:DC:73:0D:74:84:49:FA:68:31:D1:E2:50:72 Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67 Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67 Certificate serial: 019BF72C932D87CF4A3E9C3BF7DDCC9FD0D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft Manifest number: 0B1E Signing time: Sun 25 Jan 2026 22:00:52 +0000 Manifest this update: Sun 25 Jan 2026 22:00:52 +0000 Manifest next update: Mon 26 Jan 2026 22:00:52 +0000 Files and hashes: 1: ORD5CVRl8fHNkrGDCcDgKgiB4nA.roa (hash: SAvELpe3u4u8sy1W4tmIPkF/1bK/o7riGyIeb81WOH8=) 2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: fjh2cApNUqCGf1FLW7E7fJvIUE4fDERfidYEwcJ5W6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:93:2d:87:cf:4a:3e:9c:3b:f7:dd:cc:9f:d0:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67 Validity Not Before: Jan 25 22:00:52 2026 GMT Not After : Jan 26 22:00:52 2026 GMT Subject: CN=25e480ea1326f7dc730d748449fa6831d1e25072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5b:2e:cf:67:c2:f5:6c:48:7e:2e:5b:5d:f3: 52:62:6c:62:8c:f4:fc:fb:a8:7e:6e:1c:63:b6:37: a6:f9:1b:48:f3:f2:56:a7:ea:db:53:19:b2:29:8b: d6:38:8b:e0:29:d6:86:9f:41:89:a9:29:04:67:8f: a1:13:f1:60:aa:95:de:0d:4f:a5:87:44:ad:ba:0f: 02:49:c0:be:b1:a6:8c:e6:34:19:f5:93:ae:da:cf: 06:19:16:ce:bb:42:4c:f7:65:23:b9:ac:ec:00:7d: 2c:4f:5c:41:54:3a:ce:f9:60:21:4b:77:cf:7b:07: b8:92:7b:24:6b:81:ad:e6:10:89:8e:6b:7c:02:28: 0a:33:8d:a7:ec:23:97:fe:52:2a:2b:28:6d:fc:5b: ec:42:32:4a:a3:6e:f5:49:11:19:a1:a3:85:43:48: e0:bd:8b:83:23:3d:c1:68:f4:54:75:2b:1f:1f:7b: 80:15:01:72:7e:68:8a:69:5b:3a:e6:5f:90:4c:8b: 7f:22:5b:69:fb:8f:cb:6f:91:29:3c:4b:30:8b:34: 71:ef:8f:7d:27:de:c6:30:59:a3:b1:57:58:b7:84: f0:3c:2d:10:85:ab:b8:33:62:57:ff:1d:98:ac:cb: 6f:e6:cf:44:25:70:bd:65:cb:37:cb:25:08:b7:e4: 81:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E4:80:EA:13:26:F7:DC:73:0D:74:84:49:FA:68:31:D1:E2:50:72 X509v3 Authority Key Identifier: keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d1:dc:4c:a0:7e:36:5d:16:fc:dd:8c:7b:cf:44:2d:be:7d: 43:df:db:48:02:89:d1:1b:8b:4b:01:15:48:21:95:d7:63:45: 30:bf:08:0b:bb:b8:65:8b:68:9e:ba:ad:c7:f6:e6:48:81:bc: 70:1e:fb:ed:79:0d:f3:ee:b9:93:69:11:20:77:72:78:25:11: 45:92:78:2e:74:1a:35:24:a0:74:8f:e9:c5:95:cb:35:00:4e: 19:87:df:fa:80:cf:10:e6:64:b2:cd:db:27:e3:6e:8e:a5:8a: 10:05:a6:e8:99:cd:a2:f0:63:b4:0b:ea:6e:d8:0d:a9:d5:9c: f3:52:f4:8a:1f:97:9f:7f:88:eb:d4:0b:51:f5:99:88:1f:c3: 4a:5c:45:28:47:f7:2a:d6:34:95:73:53:ea:31:e7:ef:25:b0: 13:e9:9e:19:ac:91:9d:f8:06:7e:c3:82:87:01:71:9a:c0:da: ea:bf:cb:e0:76:0f:77:5d:61:c5:99:7a:56:55:b7:7d:d7:d6: 1e:1f:a6:67:c9:fc:bd:b3:c1:83:81:84:aa:1f:bf:90:89:9b: d6:3b:5e:7c:a1:69:45:d2:9b:06:ea:51:f6:1c:c2:4e:fe:8f: 3f:12:23:ef:35:96:15:60:3c:eb:c4:5b:6a:02:c4:c4:24:80: 7d:85:ac:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LJMth89KPpw7993Mn9DRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZmE3MTVjMmY0YjkwMDhjOGY0YjYwNjU0ZjdmM2M3NjM1 M2FlNjcwHhcNMjYwMTI1MjIwMDUyWhcNMjYwMTI2MjIwMDUyWjAzMTEwLwYDVQQD EygyNWU0ODBlYTEzMjZmN2RjNzMwZDc0ODQ0OWZhNjgzMWQxZTI1MDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVsuz2fC9WxIfi5bXfNSYmxijPT8 +6h+bhxjtjem+RtI8/JWp+rbUxmyKYvWOIvgKdaGn0GJqSkEZ4+hE/FgqpXeDU+l h0Stug8CScC+saaM5jQZ9ZOu2s8GGRbOu0JM92UjuazsAH0sT1xBVDrO+WAhS3fP ewe4knska4Gt5hCJjmt8AigKM42n7COX/lIqKyht/FvsQjJKo271SREZoaOFQ0jg vYuDIz3BaPRUdSsfH3uAFQFyfmiKaVs65l+QTIt/Iltp+4/Lb5EpPEswizRx7499 J97GMFmjsVdYt4TwPC0Qhau4M2JX/x2YrMtv5s9EJXC9Zcs3yyUIt+SB5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXkgOoTJvfccw10hEn6aDHR4lByMB8GA1UdIwQY MBaAFGP6cVwvS5AIyPS2BlT388djU65nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9iZjljZGItNmU4Ny00NzlmLTkzYTEt NjVhNWVmMGFmMGI0LzEvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9iZjljZGItNmU4Ny00NzlmLTkzYTEtNjVhNWVmMGFmMGI0 LzEvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASNHcTKB+ Nl0W/N2Me89ELb59Q9/bSAKJ0RuLSwEVSCGV12NFML8IC7u4ZYtonrqtx/bmSIG8 cB777XkN8+65k2kRIHdyeCURRZJ4LnQaNSSgdI/pxZXLNQBOGYff+oDPEOZkss3b J+NujqWKEAWm6JnNovBjtAvqbtgNqdWc81L0ih+Xn3+I69QLUfWZiB/DSlxFKEf3 KtY0lXNT6jHn7yWwE+meGayRnfgGfsOChwFxmsDa6r/L4HYPd11hxZl6VlW3fdfW Hh+mZ8n8vbPBg4GEqh+/kImb1jtefKFpRdKbBupR9hzCTv6PPxIj7zWWFWA868Rb agLExCSAfYWsbg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:21 2026 by rpki-client