This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json) Hash identifier: FgYv/bAai/3fGHBkVGWcJjDwLJZa/w7hBL7bpAlAEDc= Subject key identifier: 42:19:A8:F8:57:73:15:E3:A1:5E:61:5C:36:79:3F:52:80:02:DA:AA Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18 Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918 Certificate serial: 019BF462470B359CC755A121FB5810F1AA92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft Manifest number: 0ECA Signing time: Sun 25 Jan 2026 09:00:39 +0000 Manifest this update: Sun 25 Jan 2026 09:00:39 +0000 Manifest next update: Mon 26 Jan 2026 09:00:39 +0000 Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: qLVWV6o2VQJUB+IuQI+EbN2u/h0c3kxlMssn9K2Gs9w=) 2: nd54JNe4vIZ_-Gecq7CuS7z9ouE.roa (hash: uDzn2UrQJ/gWE6VmVbdTq4BSTBqexLqsyHgtdAqNXeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:47:0b:35:9c:c7:55:a1:21:fb:58:10:f1:aa:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918 Validity Not Before: Jan 25 09:00:39 2026 GMT Not After : Jan 26 09:00:39 2026 GMT Subject: CN=4219a8f8577315e3a15e615c36793f528002daaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3d:b9:94:fa:27:0b:e6:9f:41:21:83:a7:e1: cd:c5:c9:3e:67:6d:04:e9:46:4d:57:79:e3:df:48: b1:30:35:b3:b3:08:f9:a1:33:ab:18:d1:ae:78:cd: 7c:41:8c:65:85:7c:13:7c:1e:50:ea:40:49:5c:fa: bc:d5:bb:09:35:26:3c:96:a1:1c:1f:25:fe:3e:a7: c7:a0:51:93:85:cb:dd:bf:21:fd:bd:33:2a:04:50: c5:99:5a:a1:c1:10:5a:8f:e8:ff:ee:58:42:fe:b9: a2:22:88:1b:3d:ec:32:e1:33:91:02:f4:6d:a0:87: 37:af:7d:0f:ee:27:91:29:ca:53:0e:38:dd:5d:25: 6c:88:c8:40:df:45:93:50:fb:1c:c7:55:21:f5:90: e8:17:69:ec:9b:16:b7:b9:89:c4:a1:fb:a6:61:ee: 62:7b:b3:36:e2:7c:3b:ce:0d:35:c7:27:64:b4:7c: 7e:56:88:52:6c:ae:d9:31:35:c3:0b:48:2d:65:e8: e5:6b:8c:c8:a5:4e:c3:be:85:e0:3f:b4:bc:07:0b: 93:59:a4:3a:ba:58:33:1b:69:d4:de:cf:9c:13:0f: b9:8e:df:67:f3:b1:8b:40:ba:01:5a:08:ee:ff:cc: ac:ce:ad:53:c3:b6:74:2e:c2:d4:a3:9b:00:6c:8f: 1f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:19:A8:F8:57:73:15:E3:A1:5E:61:5C:36:79:3F:52:80:02:DA:AA X509v3 Authority Key Identifier: keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:43:9d:7d:e6:bb:81:bf:99:63:83:70:a1:16:50:e8:e9:fc: 47:e8:2b:62:d5:a3:21:ac:de:18:3c:d9:91:f4:ad:b8:6e:6a: 36:20:1a:00:57:8c:34:e1:46:1a:b6:fa:93:40:69:61:d2:9c: bb:0c:71:8d:a8:e6:da:2d:fe:83:4c:54:02:8d:b4:9d:94:f3: e1:03:b8:79:59:b9:b4:ac:47:f6:4f:d5:6e:e5:b3:5a:07:60: 67:38:4e:26:a3:50:9d:d3:bd:3b:ce:3d:d3:4d:91:b3:6e:2c: 59:7d:d0:36:1e:a1:2f:8a:24:77:fc:e9:43:b5:65:4b:bd:38: 2a:d8:57:ca:cc:a0:e1:72:be:7c:2e:06:ca:d1:fc:c0:9f:bb: 13:20:df:9a:dc:af:9d:b7:45:81:c6:28:68:c3:cc:70:8f:ad: dd:00:91:b3:c5:d1:18:e4:32:fc:73:ac:9c:de:3d:b0:7b:e2: 93:f5:b0:36:9f:5e:25:64:fc:3b:aa:0e:3f:18:6f:b8:c7:8a: fc:d1:23:44:a3:30:15:ab:3a:2c:86:32:0a:71:28:de:c2:b4: 43:cc:a6:e2:5e:b9:50:ff:28:f2:3f:28:bf:67:e8:e8:bd:ee: 55:01:61:20:95:80:a7:e7:9a:bb:ad:57:11:d6:d7:f0:c4:d4: be:76:bc:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YkcLNZzHVaEh+1gQ8aqSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMzMzY2Q2ZjFiNTljMGI2ODJlMWRhMzg5MjM3ZWRhM2U5 ZGE5MTgwHhcNMjYwMTI1MDkwMDM5WhcNMjYwMTI2MDkwMDM5WjAzMTEwLwYDVQQD Eyg0MjE5YThmODU3NzMxNWUzYTE1ZTYxNWMzNjc5M2Y1MjgwMDJkYWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz25lPonC+afQSGDp+HNxck+Z20E 6UZNV3nj30ixMDWzswj5oTOrGNGueM18QYxlhXwTfB5Q6kBJXPq81bsJNSY8lqEc HyX+PqfHoFGThcvdvyH9vTMqBFDFmVqhwRBaj+j/7lhC/rmiIogbPewy4TORAvRt oIc3r30P7ieRKcpTDjjdXSVsiMhA30WTUPscx1Uh9ZDoF2nsmxa3uYnEofumYe5i e7M24nw7zg01xydktHx+VohSbK7ZMTXDC0gtZejla4zIpU7DvoXgP7S8BwuTWaQ6 ulgzG2nU3s+cEw+5jt9n87GLQLoBWgju/8yszq1Tw7Z0LsLUo5sAbI8fyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIZqPhXcxXjoV5hXDZ5P1KAAtqqMB8GA1UdIwQY MBaAFGAzPNbxtZwLaC4do4kjfto+nakYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80MjIyYjItYzc5Yy00ZDVlLTk5ZDct Y2RiMjgxYTJiM2E4LzEvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC80MjIyYjItYzc5Yy00ZDVlLTk5ZDctY2RiMjgxYTJiM2E4 LzEvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0Odfea7 gb+ZY4NwoRZQ6On8R+grYtWjIazeGDzZkfStuG5qNiAaAFeMNOFGGrb6k0BpYdKc uwxxjajm2i3+g0xUAo20nZTz4QO4eVm5tKxH9k/VbuWzWgdgZzhOJqNQndO9O849 002Rs24sWX3QNh6hL4okd/zpQ7VlS704KthXysyg4XK+fC4GytH8wJ+7EyDfmtyv nbdFgcYoaMPMcI+t3QCRs8XRGOQy/HOsnN49sHvik/WwNp9eJWT8O6oOPxhvuMeK /NEjRKMwFas6LIYyCnEo3sK0Q8ym4l65UP8o8j8ov2fo6L3uVQFhIJWAp+eau61X EdbX8MTUvna8Ow== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:53 2026 by rpki-client