This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json) Hash identifier: wegRliC9XvAnCoRCL6KNzjFSEBVpsyjNP/QkrLpaJGo= Subject key identifier: 39:53:FD:B5:42:7C:6A:63:FE:4C:8B:FC:F8:90:FE:39:C8:74:AC:3A Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 019BF4D0D3BC2F2C111F7BAADF6DAF2E8CA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft Manifest number: 0F6A Signing time: Sun 25 Jan 2026 11:01:24 +0000 Manifest this update: Sun 25 Jan 2026 11:01:24 +0000 Manifest next update: Mon 26 Jan 2026 11:01:24 +0000 Files and hashes: 1: 0sTykt04zhafsgKWmG0fpAc6Xi4.roa (hash: s3D/zF9I60gRgjWMCWnW5l2vwcfUO0zatEx48bleBv8=) 2: 13bSAbvbvGDWUO5yvtSsKXnlK94.roa (hash: DXldFZAd6AGXUWvxh5LvcSzCrQoe+CYXwhAGhk24KDA=) 3: De_n5gWs77mFUbESDcEhMP4Zgu4.roa (hash: 6EezXySVgGXz55sVzTpFqjj+QzByDEb/wr63m1U01ek=) 4: T5zUGgRal9JKPPCQ5ILhLwlQlHM.roa (hash: YHDYE65RL2KgOZOOjjz6vjoQjHzxsBWW9qIdkVOIzBk=) 5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: Qk2Qo2VeV9gxyHtPYAhaTIxdE8IyH1lamjuH8DdxNS8=) 6: Z943jXHlAqEjC8HhkAmn0vuwcbY.roa (hash: zwEb4pXvmmR3brxpaMTgJgnaLu7vluGbc09IMA9MXt4=) 7: aZEJdlE8rryKdFsxcXIyoyt-SOg.roa (hash: BG6zGbPXxvvnXkdjQ9fWCyghzw5YTxYUyEjcqpnK0GU=) 8: d9cqCh7w_HREeS5tpm1EQv7bdkc.roa (hash: DnP+rNEbo3897fPDs3e26jS0WYx/AYH67Gkmxad3fpM=) 9: gxtTMluPb7DYJgy3wd0DpvfzwWM.roa (hash: fBS9RrpCcxHbEWQUD3mBXd03agLj4TXtQErbhFsWylM=) 10: kCoYCOa0aSPUd5aTKPlExBlfEhw.roa (hash: zI+RjbSOrq8P/7v/EkD36oGJO3KdfzSf7MtA8j+FrxI=) 11: rCdVkvlt_G1LGQUde5JSbjVQWY4.roa (hash: cVPKC03A+0G/4nVl6AX0govpW+3dUmuY6t25DXrvz8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:d3:bc:2f:2c:11:1f:7b:aa:df:6d:af:2e:8c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Jan 25 11:01:24 2026 GMT Not After : Jan 26 11:01:24 2026 GMT Subject: CN=3953fdb5427c6a63fe4c8bfcf890fe39c874ac3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8f:67:00:fe:26:71:50:75:3b:fc:f9:62:ff: 22:5a:86:4b:2a:8a:67:6b:36:d4:54:f0:ba:1e:42: 2e:82:cf:51:3b:51:44:17:f6:54:e5:09:c9:06:c8: 22:97:8d:9d:d1:e6:5b:cd:28:c7:0c:cb:97:65:a3: 35:fc:bb:cf:b5:e3:82:73:9d:0e:ff:a8:1b:0f:d7: eb:70:7b:33:de:b6:e9:6b:2e:52:d7:26:f6:88:a4: b1:9e:5a:70:fe:99:cd:f4:a5:99:89:f5:87:49:1c: 57:0e:dd:49:45:cc:97:2d:60:19:92:4d:61:8c:3d: e2:e8:88:cc:2b:34:57:86:51:2b:b1:0e:88:c6:af: a5:7d:bf:31:ef:2a:12:1a:4a:dd:d9:2b:1a:54:51: 39:6f:ab:71:1e:61:87:3e:f7:52:2c:ae:a5:bf:d8: f3:b6:f3:5d:fd:43:6c:30:8c:8d:9a:a0:b8:90:a9: 77:ea:80:80:72:25:34:da:43:72:2c:ae:fa:ee:eb: b0:68:f0:0d:04:24:0e:83:b6:2b:8a:89:d4:a0:96: 12:e4:d6:00:62:c6:10:d6:d1:36:71:0c:fb:cf:76: 18:69:02:d4:c9:eb:21:fb:01:24:2e:68:41:1b:18: af:a5:c5:80:1b:33:a8:82:de:b3:f1:84:d5:0d:c5: 09:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:53:FD:B5:42:7C:6A:63:FE:4C:8B:FC:F8:90:FE:39:C8:74:AC:3A X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5b:16:92:99:db:2b:ee:fd:9b:8c:39:9d:3c:13:97:10:43: 01:eb:aa:a5:e7:8c:9b:6b:6b:74:62:19:21:e9:62:85:ca:74: 85:1f:99:6e:c2:e6:f4:52:0f:3f:ea:1e:6e:a3:66:23:dd:97: 2d:09:3f:d5:fc:37:46:f2:b1:8f:4c:26:64:7c:89:ed:21:e6: ce:20:0f:0e:30:e5:ee:36:0e:7a:56:75:4b:f5:82:37:1f:22: 0f:e4:64:1f:0e:2f:68:8d:d9:3b:b3:1e:8b:47:6e:6a:f4:1f: 7f:a6:41:2a:6c:d7:c5:86:73:ff:c7:b8:e2:37:cd:63:41:eb: 99:43:03:a2:e4:39:fe:0e:9c:db:e7:49:82:c5:90:cd:6d:72: a3:d4:8a:b4:af:a8:0b:95:e6:02:3e:ec:06:d8:3f:94:f7:38: c1:ec:be:52:ce:62:5e:03:4a:5e:d6:07:5e:aa:67:31:96:50: 47:fc:05:3e:af:a2:ea:7d:09:12:af:94:4d:2d:4a:b5:6c:03: 12:51:b2:64:fb:d6:f3:71:88:65:d7:ca:a7:04:8b:04:6f:71: 4f:ad:91:3d:bf:c8:ed:dd:f9:90:8e:50:fe:bd:dc:a0:8c:37: b2:f8:5b:59:9b:3f:3a:4c:13:2a:34:dc:13:ac:b2:b1:4e:a1: 13:f6:93:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00NO8LywRH3uq322vLoynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjYwMTI1MTEwMTI0WhcNMjYwMTI2MTEwMTI0WjAzMTEwLwYDVQQD EygzOTUzZmRiNTQyN2M2YTYzZmU0YzhiZmNmODkwZmUzOWM4NzRhYzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY9nAP4mcVB1O/z5Yv8iWoZLKopn azbUVPC6HkIugs9RO1FEF/ZU5QnJBsgil42d0eZbzSjHDMuXZaM1/LvPteOCc50O /6gbD9frcHsz3rbpay5S1yb2iKSxnlpw/pnN9KWZifWHSRxXDt1JRcyXLWAZkk1h jD3i6IjMKzRXhlErsQ6Ixq+lfb8x7yoSGkrd2SsaVFE5b6txHmGHPvdSLK6lv9jz tvNd/UNsMIyNmqC4kKl36oCAciU02kNyLK767uuwaPANBCQOg7YrionUoJYS5NYA YsYQ1tE2cQz7z3YYaQLUyesh+wEkLmhBGxivpcWAGzOogt6z8YTVDcUJxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlT/bVCfGpj/kyL/PiQ/jnIdKw6MB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVsWkpnb K+79m4w5nTwTlxBDAeuqpeeMm2trdGIZIelihcp0hR+ZbsLm9FIPP+oebqNmI92X LQk/1fw3RvKxj0wmZHyJ7SHmziAPDjDl7jYOelZ1S/WCNx8iD+RkHw4vaI3ZO7Me i0duavQff6ZBKmzXxYZz/8e44jfNY0HrmUMDouQ5/g6c2+dJgsWQzW1yo9SKtK+o C5XmAj7sBtg/lPc4wey+Us5iXgNKXtYHXqpnMZZQR/wFPq+i6n0JEq+UTS1KtWwD ElGyZPvW83GIZdfKpwSLBG9xT62RPb/I7d35kI5Q/r3coIw3svhbWZs/OkwTKjTc E6yysU6hE/aTJA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:56:20 2026 by rpki-client