This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft File: Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json) Hash identifier: sSouq4HMIyrzNNClK0k/sbEUB1K6MrmRXr8Gi9zqYfc= Subject key identifier: 3C:47:CB:8F:80:8B:47:96:07:A6:DE:DC:7D:2B:4E:E4:57:BC:C7:6B Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0 Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0 Certificate serial: 019BF50751BDC321B4F87FCF2277D1E2D881 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft Manifest number: 08C0 Signing time: Sun 25 Jan 2026 12:00:56 +0000 Manifest this update: Sun 25 Jan 2026 12:00:56 +0000 Manifest next update: Mon 26 Jan 2026 12:00:56 +0000 Files and hashes: 1: OZwTEhhz89DG-d3VUUmj7RDclB0.roa (hash: VGKfh4SeFwSQNLUtXLKPpcLTHLslj6UGjADg7S741KI=) 2: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: OkY3SGbIvOc19I+JeW7r3NJ+DeUFg1m9ls/I49xhObc=) 3: _cO3dPrIFou0SkBFKvSED_RiaEA.roa (hash: l5NyYi26dL87o5NLg8E85DjdFhJOd6MAl45991rZZ/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:51:bd:c3:21:b4:f8:7f:cf:22:77:d1:e2:d8:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0 Validity Not Before: Jan 25 12:00:56 2026 GMT Not After : Jan 26 12:00:56 2026 GMT Subject: CN=3c47cb8f808b479607a6dedc7d2b4ee457bcc76b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f4:c0:43:a4:1d:06:62:03:57:9e:96:a4:85: 2b:8c:58:b2:02:0a:e2:e6:25:ea:b9:11:a0:d3:e6: 14:7c:7c:98:04:1f:e4:5e:4a:a1:23:f2:fe:8e:37: b5:36:77:e0:7c:a2:07:40:ec:09:ad:f3:91:9f:3b: 51:f8:a3:8b:83:6d:3d:8f:0b:9d:03:19:88:56:87: 7a:17:34:fa:d2:da:de:c9:ab:b3:43:e8:76:c9:ad: 19:89:c2:18:f2:f3:b6:a3:86:c8:9f:3b:4d:d2:f2: 13:13:7a:40:6c:ae:e2:eb:56:81:a6:a5:8b:cf:a2: 9b:79:ee:f8:3f:d4:28:cb:c7:0c:af:69:30:27:90: e9:49:18:13:23:fe:bf:9b:7f:6f:ad:ea:e3:2b:36: ce:f6:f5:3a:07:1c:d8:4e:a7:40:bd:58:38:54:90: 1f:44:bc:ab:8f:dc:61:2c:27:07:d9:bf:48:eb:a1: 7b:f6:3e:a2:14:64:9e:d0:29:ac:9b:4a:0b:a8:fc: d3:44:6b:dc:ed:1f:e9:6e:cd:1d:b2:83:31:21:3d: 3a:cc:b5:21:8f:96:a9:b2:0e:25:9c:fa:4a:d5:c3: 56:0c:ce:f6:48:84:40:cd:91:6d:3e:68:3b:67:45: c3:2a:b8:24:47:e2:42:f3:95:68:97:04:96:45:de: 2a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:47:CB:8F:80:8B:47:96:07:A6:DE:DC:7D:2B:4E:E4:57:BC:C7:6B X509v3 Authority Key Identifier: keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:3b:ed:f3:46:70:be:4c:a6:b8:b9:29:2f:88:d9:d2:0b:3c: a9:30:80:e6:3b:b1:a0:51:58:ed:b8:76:27:cb:02:60:97:7d: 58:ec:94:22:d3:39:65:4d:df:8c:19:3b:f0:03:f4:eb:25:e2: 3b:ed:b6:95:76:22:92:a6:cb:26:06:96:17:d3:b2:7e:19:2c: d3:59:b7:74:07:17:a4:1f:cb:5e:70:27:b6:0b:d8:90:af:bc: 1a:b1:25:c9:12:96:e3:30:83:3c:2e:2b:18:b2:0a:36:71:d5: 24:7a:4e:45:d0:48:33:42:a4:35:39:2d:ec:e2:1f:18:b3:e1: 60:a1:03:a2:f5:62:bc:0b:50:7c:dd:ed:c7:b5:96:bb:e5:ed: 3c:db:63:67:36:8b:9f:dc:56:61:df:41:b0:ba:2e:0b:ff:c3: 52:fe:1d:0e:23:ef:95:d7:a6:60:50:98:7a:6f:f9:b6:29:02: d1:5f:51:f5:f3:15:77:b5:47:e3:e6:3e:23:64:87:6e:03:54: 81:18:bc:0d:e6:ef:4c:da:1e:6f:ef:dd:be:c6:ba:6a:aa:67: ea:6e:4e:85:b2:c1:2c:81:1b:49:66:83:58:46:7e:8d:66:72: 48:d0:2c:67:fe:46:6e:7a:23:1c:79:00:e0:25:02:9f:87:a7: 30:a9:f8:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B1G9wyG0+H/PInfR4tiBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYTc1OWIwNmU2ZmVkMDNiMDkzMDc0OTE1M2ZjMTZhMTJh NTAxZTAwHhcNMjYwMTI1MTIwMDU2WhcNMjYwMTI2MTIwMDU2WjAzMTEwLwYDVQQD EygzYzQ3Y2I4ZjgwOGI0Nzk2MDdhNmRlZGM3ZDJiNGVlNDU3YmNjNzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvTAQ6QdBmIDV56WpIUrjFiyAgri 5iXquRGg0+YUfHyYBB/kXkqhI/L+jje1NnfgfKIHQOwJrfORnztR+KOLg209jwud AxmIVod6FzT60treyauzQ+h2ya0ZicIY8vO2o4bInztN0vITE3pAbK7i61aBpqWL z6Kbee74P9Qoy8cMr2kwJ5DpSRgTI/6/m39vrerjKzbO9vU6BxzYTqdAvVg4VJAf RLyrj9xhLCcH2b9I66F79j6iFGSe0Cmsm0oLqPzTRGvc7R/pbs0dsoMxIT06zLUh j5apsg4lnPpK1cNWDM72SIRAzZFtPmg7Z0XDKrgkR+JC85VolwSWRd4qSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxHy4+Ai0eWB6be3H0rTuRXvMdrMB8GA1UdIwQY MBaAFGOnWbBub+0DsJMHSRU/wWoSpQHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xMzE1MGMtODVkYS00NThkLWJjNmMt OWUyNDk2OGU2NjY0LzEvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8xMzE1MGMtODVkYS00NThkLWJjNmMtOWUyNDk2OGU2NjY0 LzEvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTvt80Zw vkymuLkpL4jZ0gs8qTCA5juxoFFY7bh2J8sCYJd9WOyUItM5ZU3fjBk78AP06yXi O+22lXYikqbLJgaWF9Oyfhks01m3dAcXpB/LXnAntgvYkK+8GrElyRKW4zCDPC4r GLIKNnHVJHpORdBIM0KkNTkt7OIfGLPhYKEDovVivAtQfN3tx7WWu+XtPNtjZzaL n9xWYd9BsLouC//DUv4dDiPvldemYFCYem/5tikC0V9R9fMVd7VH4+Y+I2SHbgNU gRi8DebvTNoeb+/dvsa6aqpn6m5OhbLBLIEbSWaDWEZ+jWZySNAsZ/5GbnojHHkA 4CUCn4enMKn4jw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:16:04 2026 by rpki-client