This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json) Hash identifier: DGMlIpFDQ+vQOZWpStjpK3rUQ2M/maUNJA8w0j+RO7E= Subject key identifier: A4:7A:84:D1:28:BE:5E:D7:4D:1F:29:60:40:1E:BA:92:5C:61:FA:52 Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a Certificate serial: 019BF6F5979DFD54B321522C6B5F375EF758 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 21:00:48 +0000 Manifest this update: Sun 25 Jan 2026 21:00:48 +0000 Manifest next update: Mon 26 Jan 2026 21:00:48 +0000 Files and hashes: 1: J3trJnMvDZJ0BcVGu5fGaJyrupg.roa (hash: e8osDQcIENsCGM6JtSYddOPk22ajtK1guuuZINYdCT0=) 2: WiHVRTKANQPSLlslZgPEwLo61sU.roa (hash: NTrkcyBW/Rrku+dfbekK8M7MWrvABIKgt6ihPMKiaiM=) 3: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: qjp/1oFDiEjz2suO3OlmMRT+7DyYznZlV941gxsycgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:97:9d:fd:54:b3:21:52:2c:6b:5f:37:5e:f7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a Validity Not Before: Jan 25 21:00:48 2026 GMT Not After : Jan 26 21:00:48 2026 GMT Subject: CN=a47a84d128be5ed74d1f2960401eba925c61fa52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:83:d1:00:59:73:4c:f3:4c:99:12:10:6e:6b: 94:e0:39:1a:bb:72:6c:5b:fe:78:3b:b1:12:df:09: 8e:a0:35:2e:24:2a:85:ab:66:b6:f1:3d:af:fd:2d: 20:ae:df:aa:6b:f8:87:e2:a7:8c:b1:b9:f7:43:7d: 88:3c:a1:ad:42:0e:75:b8:a4:ca:e3:63:23:d0:d0: bf:37:d1:ec:5b:47:41:6d:d5:c1:0d:b2:1d:cf:56: c7:78:c2:fa:0f:50:5e:3e:3d:ba:39:2e:df:54:80: 5b:82:e2:79:56:6d:84:40:81:76:75:d2:61:a6:db: 96:c6:09:3e:7e:1b:1f:65:0b:53:cb:25:6c:c9:3b: 94:75:c2:51:1c:ce:78:7a:32:78:02:be:18:e5:d1: 4c:ed:44:7f:8d:dc:4c:ab:5b:25:e3:d3:60:54:7a: 4b:37:53:83:94:25:8d:d9:88:15:69:85:07:be:04: d3:62:da:83:7b:c1:fb:29:bd:0f:25:34:8d:03:dc: 91:0a:ff:86:55:1b:dd:63:20:95:88:af:53:1f:40: 53:cb:50:37:d1:6a:fe:6e:1d:9f:51:a4:df:b8:12: 12:f8:b0:a2:83:41:e2:f6:10:18:07:e5:ea:fa:7e: 5a:d6:cc:a5:ce:0e:0c:a2:6a:b9:64:f1:78:b0:07: 32:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7A:84:D1:28:BE:5E:D7:4D:1F:29:60:40:1E:BA:92:5C:61:FA:52 X509v3 Authority Key Identifier: keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:61:fd:86:a5:eb:90:bb:90:18:56:a3:e5:f3:16:fd:3b:c1: 4e:a2:64:82:f8:b4:44:78:4b:dc:b3:9c:e5:b7:e8:92:e2:a7: 65:c5:96:78:ff:b8:39:dc:8f:20:dc:b8:bb:80:b1:4b:5a:6c: 71:fe:5d:bc:0a:77:6c:27:56:1c:86:19:dc:09:6e:a8:d5:5c: ab:a9:da:75:4a:97:d9:e8:5a:92:a2:1a:1b:4b:f9:f0:1e:f6: af:c1:8b:7f:7a:e6:50:d7:d2:5d:2f:84:19:91:fe:67:42:18: 23:49:c4:ed:e7:5f:91:99:20:ab:45:f4:8a:fc:44:5e:37:93: d5:f5:33:bf:94:59:f2:bb:f4:15:ee:f2:28:7f:ed:eb:cc:14: 2c:38:52:7a:26:d2:59:df:26:76:f8:d8:d9:02:e5:00:fb:63: a6:f2:4c:35:ff:00:05:8e:c2:ca:c4:c8:c7:34:9b:2e:bb:97: 80:14:3b:bc:7f:8d:16:39:12:d9:71:06:11:96:3d:1c:4c:1e: 95:b8:c8:74:8b:ab:88:21:fa:07:2f:fb:c8:87:37:ac:74:4d: ee:96:88:85:6a:46:98:47:9e:19:44:2c:59:db:e9:c4:bb:b2: 1d:bb:58:31:a2:46:e7:ed:45:71:0c:4c:43:8c:fe:37:56:18: d9:3a:9d:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29Zed/VSzIVIsa183XvdYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYTg1MWQ1OTM1NmNhOTVkNGFlNzhmYTY5MzZiYTFiOGEy YjFjN2EwHhcNMjYwMTI1MjEwMDQ4WhcNMjYwMTI2MjEwMDQ4WjAzMTEwLwYDVQQD EyhhNDdhODRkMTI4YmU1ZWQ3NGQxZjI5NjA0MDFlYmE5MjVjNjFmYTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54PRAFlzTPNMmRIQbmuU4Dkau3Js W/54O7ES3wmOoDUuJCqFq2a28T2v/S0grt+qa/iH4qeMsbn3Q32IPKGtQg51uKTK 42Mj0NC/N9HsW0dBbdXBDbIdz1bHeML6D1BePj26OS7fVIBbguJ5Vm2EQIF2ddJh ptuWxgk+fhsfZQtTyyVsyTuUdcJRHM54ejJ4Ar4Y5dFM7UR/jdxMq1sl49NgVHpL N1ODlCWN2YgVaYUHvgTTYtqDe8H7Kb0PJTSNA9yRCv+GVRvdYyCViK9TH0BTy1A3 0Wr+bh2fUaTfuBIS+LCig0Hi9hAYB+Xq+n5a1sylzg4Momq5ZPF4sAcyCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKR6hNEovl7XTR8pYEAeupJcYfpSMB8GA1UdIwQY MBaAFGCoUdWTVsqV1K54+mk2uhuKKxx6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUtoUjFaTld5cFhVcm5qNmFUYTZHNG9ySEhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jOTc4OTgtNWU3Mi00NTRhLWJlMmYt NTQ4ZTdiN2ZhNGUxLzEvWUtoUjFaTld5cFhVcm5qNmFUYTZHNG9ySEhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jOTc4OTgtNWU3Mi00NTRhLWJlMmYtNTQ4ZTdiN2ZhNGUx LzEvWUtoUjFaTld5cFhVcm5qNmFUYTZHNG9ySEhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWH9hqXr kLuQGFaj5fMW/TvBTqJkgvi0RHhL3LOc5bfokuKnZcWWeP+4OdyPINy4u4CxS1ps cf5dvAp3bCdWHIYZ3AluqNVcq6nadUqX2ehakqIaG0v58B72r8GLf3rmUNfSXS+E GZH+Z0IYI0nE7edfkZkgq0X0ivxEXjeT1fUzv5RZ8rv0Fe7yKH/t68wULDhSeibS Wd8mdvjY2QLlAPtjpvJMNf8ABY7CysTIxzSbLruXgBQ7vH+NFjkS2XEGEZY9HEwe lbjIdIuriCH6By/7yIc3rHRN7paIhWpGmEeeGUQsWdvpxLuyHbtYMaJG5+1FcQxM Q4z+N1YY2Tqdvg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:09 2026 by rpki-client