This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft File: YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft (raw, json) Hash identifier: TuOMUtlBp47pMKrTGdzaLFhtcaIaN3Tqa5B9iA26mbU= Subject key identifier: 70:FB:10:7F:5C:EC:37:DC:F5:CF:05:3D:26:B0:41:0F:A5:E8:F1:C8 Authority key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98 Certificate issuer: /CN=6149cbba3e6629beaebfb69668678ada51744898 Certificate serial: 019BF651276CDEA6412CC7D178629CDE40DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft Manifest number: 1511 Signing time: Sun 25 Jan 2026 18:01:12 +0000 Manifest this update: Sun 25 Jan 2026 18:01:12 +0000 Manifest next update: Mon 26 Jan 2026 18:01:12 +0000 Files and hashes: 1: YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl (hash: Ukcfy+qhxe3e5Wy1yEBrr7WpNcvz82gqId3CN5llUuI=) 2: v872mIxxwSGV2ha6Yd9jq9CMUao.roa (hash: 1G9sBjvfPqj7U0dttH4sUsWBNP9ecKYoKzenyr22mAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:27:6c:de:a6:41:2c:c7:d1:78:62:9c:de:40:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6149cbba3e6629beaebfb69668678ada51744898 Validity Not Before: Jan 25 18:01:12 2026 GMT Not After : Jan 26 18:01:12 2026 GMT Subject: CN=70fb107f5cec37dcf5cf053d26b0410fa5e8f1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:af:b4:44:0d:bb:46:cc:58:21:54:0a:d0:6c: 06:cd:96:c0:93:13:28:ab:ad:c6:4c:f2:77:62:81: 8d:e9:2b:68:f8:e1:7d:9a:3b:c4:18:1a:1d:d8:a3: 7a:7a:52:b2:45:d2:00:db:50:8a:12:7a:1f:1a:af: 97:6a:68:6d:bc:d8:c3:4a:64:1c:52:9e:d1:08:d9: 88:7a:10:34:d9:ef:d6:1b:b1:bf:0d:8e:16:c0:5e: cc:9f:f6:c4:74:2a:59:ca:f3:ab:e0:be:ed:74:47: 2b:17:32:6a:9c:18:b2:19:a4:d8:23:a7:bc:a6:16: d2:2f:7f:5b:1e:c2:e7:54:fc:48:4b:63:49:fa:5a: 07:80:bd:7b:96:58:78:30:03:1e:eb:29:3b:35:0a: e7:85:b0:0d:fc:9d:d4:73:54:0f:d1:75:70:33:ee: da:47:90:cf:e1:44:63:c1:9a:fa:9c:b0:7e:24:6f: bb:14:26:31:ab:6b:bb:4e:7c:80:4f:6c:51:00:3b: f4:fc:11:6a:d3:4f:95:00:9d:25:41:b3:8e:a1:43: 2c:f1:3a:cf:71:05:d9:ac:87:d8:ec:a0:fb:49:0f: b2:13:cb:f5:6c:b6:69:00:a5:d3:38:68:be:97:19: 5f:95:78:b8:45:e4:6c:28:56:d3:8a:05:53:d0:b1: 3e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FB:10:7F:5C:EC:37:DC:F5:CF:05:3D:26:B0:41:0F:A5:E8:F1:C8 X509v3 Authority Key Identifier: keyid:61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:98:81:f0:7b:f7:8e:81:13:1f:27:82:0c:a3:51:0d:ca:a6: dd:73:db:88:0f:ac:3c:d3:7e:ad:5d:bb:1b:40:ae:84:85:cf: 0f:cf:8f:f9:da:87:bc:5b:c5:22:78:cc:bf:db:c6:6b:1b:48: f0:a9:ed:7c:b6:f0:22:9b:bb:b9:92:77:61:22:da:21:71:87: ca:1d:fe:51:af:22:eb:10:76:13:7f:22:72:55:10:63:d7:34: cd:ed:86:bb:4c:12:85:f6:70:49:39:6e:53:dd:f5:3d:3e:9a: b0:55:53:b1:38:f4:f8:af:d0:cf:d9:c1:04:71:dc:df:e4:c2: 86:9c:0a:c3:68:ce:e2:5b:65:aa:22:3f:99:7a:13:ef:20:fd: 0b:b9:1e:72:7c:98:e3:97:d1:18:f2:bf:cf:74:08:7c:7a:6a: aa:d7:f0:e1:9d:7f:82:63:c7:49:46:ac:7e:4f:ae:69:2b:7a: 7b:94:9c:22:c0:c7:f4:e8:8c:2e:99:8e:e2:96:7c:bd:44:18: 54:61:31:4d:d2:bf:4a:c3:c4:e9:b7:0f:8c:d6:76:e6:a4:94: 0b:98:6f:ae:4a:da:eb:5b:b8:df:f8:a6:83:1b:c9:6d:23:3f: f1:a3:a9:59:3b:e8:13:5e:ab:59:7e:8f:86:88:9d:65:7a:58: 7d:fc:91:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2USds3qZBLMfReGKc3kDcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNDljYmJhM2U2NjI5YmVhZWJmYjY5NjY4Njc4YWRhNTE3 NDQ4OTgwHhcNMjYwMTI1MTgwMTEyWhcNMjYwMTI2MTgwMTEyWjAzMTEwLwYDVQQD Eyg3MGZiMTA3ZjVjZWMzN2RjZjVjZjA1M2QyNmIwNDEwZmE1ZThmMWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK+0RA27RsxYIVQK0GwGzZbAkxMo q63GTPJ3YoGN6Sto+OF9mjvEGBod2KN6elKyRdIA21CKEnofGq+XamhtvNjDSmQc Up7RCNmIehA02e/WG7G/DY4WwF7Mn/bEdCpZyvOr4L7tdEcrFzJqnBiyGaTYI6e8 phbSL39bHsLnVPxIS2NJ+loHgL17llh4MAMe6yk7NQrnhbAN/J3Uc1QP0XVwM+7a R5DP4URjwZr6nLB+JG+7FCYxq2u7TnyAT2xRADv0/BFq00+VAJ0lQbOOoUMs8TrP cQXZrIfY7KD7SQ+yE8v1bLZpAKXTOGi+lxlflXi4ReRsKFbTigVT0LE+ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHD7EH9c7Dfc9c8FPSawQQ+l6PHIMB8GA1UdIwQY MBaAFGFJy7o+Zim+rr+2lmhnitpRdEiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yM2Y1MzItZmU4Ni00MTk4LThjM2It NGQ0M2Y2NmFiNzMxLzEvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yM2Y1MzItZmU4Ni00MTk4LThjM2ItNGQ0M2Y2NmFiNzMx LzEvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZiB8Hv3 joETHyeCDKNRDcqm3XPbiA+sPNN+rV27G0CuhIXPD8+P+dqHvFvFInjMv9vGaxtI 8KntfLbwIpu7uZJ3YSLaIXGHyh3+Ua8i6xB2E38iclUQY9c0ze2Gu0wShfZwSTlu U931PT6asFVTsTj0+K/Qz9nBBHHc3+TChpwKw2jO4ltlqiI/mXoT7yD9C7kecnyY 45fRGPK/z3QIfHpqqtfw4Z1/gmPHSUasfk+uaSt6e5ScIsDH9OiMLpmO4pZ8vUQY VGExTdK/SsPE6bcPjNZ25qSUC5hvrkra61u43/imgxvJbSM/8aOpWTvoE16rWX6P hoidZXpYffyRbg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:26 2026 by rpki-client