This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft File: YDJcIdL6_nQzmNweVXRDMoARBGk.mft (raw, json) Hash identifier: +smiJj/TAQCovxaq01VUp7yTdN457Y3Fvu/lG3SIQmM= Subject key identifier: 91:B5:F4:4C:9C:03:18:87:71:35:A8:98:0D:15:3F:FE:72:9F:91:67 Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69 Certificate issuer: /CN=60325c21d2fafe743398dc1e5574433280110469 Certificate serial: 019BF2071F7532A6F75A44412960D61E3DF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft Manifest number: 1698 Signing time: Sat 24 Jan 2026 22:01:51 +0000 Manifest this update: Sat 24 Jan 2026 22:01:51 +0000 Manifest next update: Sun 25 Jan 2026 22:01:51 +0000 Files and hashes: 1: YDJcIdL6_nQzmNweVXRDMoARBGk.crl (hash: MEgkvYtvThnMwwuuzqkP3/r9Ydfkrm1WQ0Qi+J2bJGA=) 2: ZGMDMaaeutNnkXyJL58734MtHlg.roa (hash: Zs6W0mlBy5j5neBEaMNbSPEex6wUKIOiG0C8/ZE4ktw=) 3: b5JaXMr4GIBvT4KCIP7BI-wUSZI.roa (hash: vRg65JmrVs2QhtYFXLwraN6iw4o7UcfzdNjLDeVLhok=) 4: jKshf8wnc15011tXTFSj3TTXJFA.roa (hash: K6mzJUE9dYVEi81Gnv2fYao7OX/tyLrwWkjFdI+z8Z0=) 5: qPyrPHOcj4AsJ76uDNoQbJBu-3A.roa (hash: icQiWI2POs5a9KmLU/wFkbzLvsrXEhv8Owk5IzrA7+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:07:1f:75:32:a6:f7:5a:44:41:29:60:d6:1e:3d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60325c21d2fafe743398dc1e5574433280110469 Validity Not Before: Jan 24 22:01:51 2026 GMT Not After : Jan 25 22:01:51 2026 GMT Subject: CN=91b5f44c9c0318877135a8980d153ffe729f9167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:0a:fe:2b:7b:18:f7:01:3f:b8:4b:3d:19: cd:01:48:e1:44:6d:2b:ba:f5:e1:4b:6f:e4:26:e7: 28:25:2f:f1:78:ae:dc:49:06:3b:f8:43:82:f4:88: 7a:1b:15:34:38:84:4f:7f:90:93:cf:6e:8b:87:9e: bf:1c:fa:07:50:ab:1d:5f:7f:7f:60:55:3c:af:cd: 35:40:14:7a:8b:ad:ed:33:00:96:24:d4:fa:60:78: 48:8b:2e:a9:80:11:f4:12:1e:08:c3:9a:d1:11:7b: 73:41:52:9f:ea:5d:ee:81:11:a1:d7:42:02:d4:3e: f5:24:f2:2e:b1:90:60:76:3d:44:e1:39:5d:0f:17: 9d:fc:64:2d:a7:04:d2:0d:e3:43:1e:0f:de:d0:fb: 27:00:5f:96:ee:a9:17:a6:9d:03:f2:03:db:68:3c: ab:e9:67:95:65:9a:3b:62:87:eb:df:66:5f:dd:70: e4:c8:4b:0b:e7:da:4f:ac:25:53:5c:cf:e9:db:8d: 67:c5:9a:98:d8:1b:07:77:90:d4:8b:0d:63:26:34: 08:ba:c8:1d:a1:d5:ab:dd:bf:d3:68:2c:54:43:37: 9b:98:5c:b3:44:c8:fa:d5:17:5b:34:7e:91:49:15: 63:d6:fb:ff:15:74:4c:dd:ad:a5:72:af:bb:66:47: 61:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B5:F4:4C:9C:03:18:87:71:35:A8:98:0D:15:3F:FE:72:9F:91:67 X509v3 Authority Key Identifier: keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:6c:6c:dc:f3:02:f0:e4:a7:3a:9a:d4:f6:aa:0f:91:6c:85: 2a:23:25:a2:41:5e:3f:9b:73:b6:db:b2:23:30:03:1a:59:08: 91:f4:96:2f:69:62:15:46:7d:a3:4d:80:3a:8b:52:15:84:d9: ab:1d:84:26:d9:f8:70:8d:2d:72:f0:88:6d:b8:93:3c:5b:fe: b7:b3:5e:48:6c:2f:47:7a:d5:d7:8a:2f:95:c1:21:39:f1:60: 97:3f:74:a6:92:c8:03:00:f5:5b:88:8d:e6:79:7b:be:8f:b8: a0:40:d0:76:81:11:e4:4c:c3:ec:4c:7f:7b:64:86:18:84:09: 37:54:97:f4:09:69:67:d7:1f:bc:fa:1b:e8:b8:e7:cf:aa:79: 1b:76:4a:6b:7a:d2:f6:31:13:2a:b2:fc:f8:cc:8e:6c:7d:c2: 1e:ce:23:e5:67:40:b4:52:bb:f7:de:5c:f1:ad:e1:84:46:0d: 15:73:f7:83:c8:ea:e9:59:3d:0b:64:d2:cf:c6:73:de:a5:70: 15:58:81:6a:58:3a:16:bb:60:6c:6b:4a:0c:9f:83:56:69:db: cd:6c:33:4f:84:c6:c8:2f:c1:0d:ce:42:1f:5c:82:0e:42:db: a5:d8:30:99:e6:5d:84:81:13:8b:64:f5:d7:68:0e:25:3d:fd: c7:0b:d5:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyBx91Mqb3WkRBKWDWHj3xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMzI1YzIxZDJmYWZlNzQzMzk4ZGMxZTU1NzQ0MzMyODAx MTA0NjkwHhcNMjYwMTI0MjIwMTUxWhcNMjYwMTI1MjIwMTUxWjAzMTEwLwYDVQQD Eyg5MWI1ZjQ0YzljMDMxODg3NzEzNWE4OTgwZDE1M2ZmZTcyOWY5MTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8IK/it7GPcBP7hLPRnNAUjhRG0r uvXhS2/kJucoJS/xeK7cSQY7+EOC9Ih6GxU0OIRPf5CTz26Lh56/HPoHUKsdX39/ YFU8r801QBR6i63tMwCWJNT6YHhIiy6pgBH0Eh4Iw5rREXtzQVKf6l3ugRGh10IC 1D71JPIusZBgdj1E4TldDxed/GQtpwTSDeNDHg/e0PsnAF+W7qkXpp0D8gPbaDyr 6WeVZZo7Yofr32Zf3XDkyEsL59pPrCVTXM/p241nxZqY2BsHd5DUiw1jJjQIusgd odWr3b/TaCxUQzebmFyzRMj61RdbNH6RSRVj1vv/FXRM3a2lcq+7ZkdhwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJG19EycAxiHcTWomA0VP/5yn5FnMB8GA1UdIwQY MBaAFGAyXCHS+v50M5jcHlV0QzKAEQRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWURKY0lkTDZfblF6bU53ZVZYUkRNb0FSQkdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mMjc3MGItZGExOS00NzkwLWE0OTQt YzU4ZTk1Y2Q0Mjc3LzEvWURKY0lkTDZfblF6bU53ZVZYUkRNb0FSQkdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mMjc3MGItZGExOS00NzkwLWE0OTQtYzU4ZTk1Y2Q0Mjc3 LzEvWURKY0lkTDZfblF6bU53ZVZYUkRNb0FSQkdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGxs3PMC 8OSnOprU9qoPkWyFKiMlokFeP5tzttuyIzADGlkIkfSWL2liFUZ9o02AOotSFYTZ qx2EJtn4cI0tcvCIbbiTPFv+t7NeSGwvR3rV14ovlcEhOfFglz90ppLIAwD1W4iN 5nl7vo+4oEDQdoER5EzD7Ex/e2SGGIQJN1SX9AlpZ9cfvPob6Ljnz6p5G3ZKa3rS 9jETKrL8+MyObH3CHs4j5WdAtFK7995c8a3hhEYNFXP3g8jq6Vk9C2TSz8Zz3qVw FViBalg6FrtgbGtKDJ+DVmnbzWwzT4TGyC/BDc5CH1yCDkLbpdgwmeZdhIETi2T1 12gOJT39xwvV7g== -----END CERTIFICATE-----Generated at Sun Jan 25 06:14:49 2026 by rpki-client