This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft File: YxGp1MECUvv3O3Fl81rMHc6fCpM.mft (raw, json) Hash identifier: dfmMS6AhYvb0yI0tAK0U1YGv/mfpWd9hrVU/1LNCg4o= Subject key identifier: D3:7A:EB:86:F0:9A:43:D5:E3:1D:92:1D:2A:CA:07:33:65:E5:CC:A6 Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93 Certificate issuer: /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93 Certificate serial: 019BF5077FD222D30D89DCF055A7CCFAB20C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 12:01:07 +0000 Manifest this update: Sun 25 Jan 2026 12:01:07 +0000 Manifest next update: Mon 26 Jan 2026 12:01:07 +0000 Files and hashes: 1: JNAnR3OpCBmqbjcaQCFbgyf64p8.roa (hash: j0YiHlaOdUim9VJP58wic2ZTEsjQbXoSPaCpDLTojSY=) 2: YxGp1MECUvv3O3Fl81rMHc6fCpM.crl (hash: 6W8isiHQfJ9/Fi6kqH8tVYodu7iGBqmZ4sxt2TpIZeY=) 3: n7pDY_8zMb4XywLOR-Gyk8ZEh6Q.roa (hash: CUzjuBkLmCl6WtXKZbLolmS3oXPaSaat/iqu2Jp6Roo=) 4: x85xaclh_I5fag7LOhEkjo3jhMw.asa (hash: SZArydHLaUzTTdXtg5nAF/HF99OnEgr16Dnn25uMEJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:7f:d2:22:d3:0d:89:dc:f0:55:a7:cc:fa:b2:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93 Validity Not Before: Jan 25 12:01:07 2026 GMT Not After : Jan 26 12:01:07 2026 GMT Subject: CN=d37aeb86f09a43d5e31d921d2aca073365e5cca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:34:af:04:5e:5f:49:0a:85:92:f7:4d:18: 10:e6:40:f7:f5:16:03:ba:da:98:b0:cf:dc:25:41: cf:2f:81:fb:23:c5:c4:e0:47:df:8d:e8:7d:87:3f: 15:8f:49:31:d6:eb:aa:27:ec:0f:31:6c:3c:16:fc: 7d:a0:a7:0a:a6:0a:b4:a1:c7:a2:e1:d8:1b:8a:e8: f1:96:d3:b2:da:a1:fa:bb:b4:d2:f1:f3:d0:60:96: a2:d8:9c:70:da:52:bd:4b:a2:29:2c:ff:93:1b:c0: 70:80:3a:89:d5:45:d8:03:5e:b0:ee:1d:f3:87:6e: d6:9f:e4:63:ed:03:54:65:f3:f2:98:d9:06:0b:b9: 45:15:09:04:1b:05:a0:0b:f9:cf:b6:bf:8d:3b:c9: 5f:94:5f:29:dc:b6:b9:b2:4c:6c:c6:16:56:d1:e9: c7:1b:37:74:ed:d8:71:a2:7e:fe:38:0d:de:9f:21: 85:d9:ac:f3:1d:69:98:32:68:c5:ab:59:81:a4:74: d9:f2:1f:8d:b8:d9:8b:f1:f5:81:ef:42:3d:e3:b7: 48:07:b6:d0:71:2f:4e:35:40:51:38:6f:27:2a:00: 51:d1:64:67:cb:05:98:7a:2a:70:ee:9e:25:af:59: 92:34:d9:f7:92:01:df:2d:eb:75:b0:a7:78:9d:fe: fa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7A:EB:86:F0:9A:43:D5:E3:1D:92:1D:2A:CA:07:33:65:E5:CC:A6 X509v3 Authority Key Identifier: keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f3:a8:7f:c3:b4:0e:b0:76:3a:c2:52:4b:d9:de:85:81:4e: fc:04:7d:64:1d:5f:35:69:49:a7:a8:16:b6:07:ec:49:d2:1f: 08:0f:f3:e6:6d:10:2f:01:10:cc:41:63:dc:d4:a1:be:4b:70: 03:d4:fb:22:4d:7e:a9:37:db:7c:0f:08:78:36:ac:1b:ac:03: 30:af:c5:b7:83:90:74:a4:36:a1:b5:7c:df:9d:75:77:55:65: ef:03:0a:51:12:41:3a:ce:ff:b6:43:ae:ac:86:ba:e5:ad:7d: c5:ce:e3:a2:1b:4c:6a:3e:4e:6a:e3:3c:7a:52:e6:8e:47:1d: bf:ee:f0:ca:d2:43:0b:66:53:36:9a:53:e3:e6:bb:50:e7:7b: cb:9f:36:d4:95:f6:78:c7:52:de:3f:da:1c:03:4e:66:fd:21: 21:8c:49:a8:05:2f:1a:41:80:f5:04:e5:25:c2:2d:de:43:c5: 90:1b:37:e9:f3:b2:5c:7c:38:44:1d:c1:ad:3a:64:b7:e0:32: f9:58:21:fd:a5:e0:16:cf:ec:99:52:d7:64:f5:72:31:0c:56: 96:89:60:d4:20:b4:85:45:60:9b:15:14:25:4d:16:2f:55:71: f1:1e:7e:e0:06:31:fa:40:75:54:e3:d0:dd:12:29:ea:c4:5b: db:b1:cb:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B3/SItMNidzwVafM+rIMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMTFhOWQ0YzEwMjUyZmJmNzNiNzE2NWYzNWFjYzFkY2U5 ZjBhOTMwHhcNMjYwMTI1MTIwMTA3WhcNMjYwMTI2MTIwMTA3WjAzMTEwLwYDVQQD EyhkMzdhZWI4NmYwOWE0M2Q1ZTMxZDkyMWQyYWNhMDczMzY1ZTVjY2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7o0rwReX0kKhZL3TRgQ5kD39RYD utqYsM/cJUHPL4H7I8XE4Effjeh9hz8Vj0kx1uuqJ+wPMWw8Fvx9oKcKpgq0ocei 4dgbiujxltOy2qH6u7TS8fPQYJai2Jxw2lK9S6IpLP+TG8BwgDqJ1UXYA16w7h3z h27Wn+Rj7QNUZfPymNkGC7lFFQkEGwWgC/nPtr+NO8lflF8p3La5skxsxhZW0enH Gzd07dhxon7+OA3enyGF2azzHWmYMmjFq1mBpHTZ8h+NuNmL8fWB70I947dIB7bQ cS9ONUBROG8nKgBR0WRnywWYeipw7p4lr1mSNNn3kgHfLet1sKd4nf76SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNN664bwmkPV4x2SHSrKBzNl5cymMB8GA1UdIwQY MBaAFGMRqdTBAlL79ztxZfNazB3OnwqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMt N2NmZDk1N2YwOGZmLzEvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMtN2NmZDk1N2YwOGZm LzEvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevOof8O0 DrB2OsJSS9nehYFO/AR9ZB1fNWlJp6gWtgfsSdIfCA/z5m0QLwEQzEFj3NShvktw A9T7Ik1+qTfbfA8IeDasG6wDMK/Ft4OQdKQ2obV83511d1Vl7wMKURJBOs7/tkOu rIa65a19xc7johtMaj5OauM8elLmjkcdv+7wytJDC2ZTNppT4+a7UOd7y5821JX2 eMdS3j/aHANOZv0hIYxJqAUvGkGA9QTlJcIt3kPFkBs36fOyXHw4RB3BrTpkt+Ay +Vgh/aXgFs/smVLXZPVyMQxWlolg1CC0hUVgmxUUJU0WL1Vx8R5+4AYx+kB1VOPQ 3RIp6sRb27HLwQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:21:20 2026 by rpki-client