This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
File: YDJcIdL6_nQzmNweVXRDMoARBGk.mft (raw, json)
Hash identifier: +smiJj/TAQCovxaq01VUp7yTdN457Y3Fvu/lG3SIQmM=
Subject key identifier: 91:B5:F4:4C:9C:03:18:87:71:35:A8:98:0D:15:3F:FE:72:9F:91:67
Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
Certificate issuer: /CN=60325c21d2fafe743398dc1e5574433280110469
Certificate serial: 019BF2071F7532A6F75A44412960D61E3DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
Manifest number: 1698
Signing time: Sat 24 Jan 2026 22:01:51 +0000
Manifest this update: Sat 24 Jan 2026 22:01:51 +0000
Manifest next update: Sun 25 Jan 2026 22:01:51 +0000
Files and hashes: 1: YDJcIdL6_nQzmNweVXRDMoARBGk.crl (hash: MEgkvYtvThnMwwuuzqkP3/r9Ydfkrm1WQ0Qi+J2bJGA=)
2: ZGMDMaaeutNnkXyJL58734MtHlg.roa (hash: Zs6W0mlBy5j5neBEaMNbSPEex6wUKIOiG0C8/ZE4ktw=)
3: b5JaXMr4GIBvT4KCIP7BI-wUSZI.roa (hash: vRg65JmrVs2QhtYFXLwraN6iw4o7UcfzdNjLDeVLhok=)
4: jKshf8wnc15011tXTFSj3TTXJFA.roa (hash: K6mzJUE9dYVEi81Gnv2fYao7OX/tyLrwWkjFdI+z8Z0=)
5: qPyrPHOcj4AsJ76uDNoQbJBu-3A.roa (hash: icQiWI2POs5a9KmLU/wFkbzLvsrXEhv8Owk5IzrA7+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:07:1f:75:32:a6:f7:5a:44:41:29:60:d6:1e:3d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60325c21d2fafe743398dc1e5574433280110469
Validity
Not Before: Jan 24 22:01:51 2026 GMT
Not After : Jan 25 22:01:51 2026 GMT
Subject: CN=91b5f44c9c0318877135a8980d153ffe729f9167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c2:0a:fe:2b:7b:18:f7:01:3f:b8:4b:3d:19:
cd:01:48:e1:44:6d:2b:ba:f5:e1:4b:6f:e4:26:e7:
28:25:2f:f1:78:ae:dc:49:06:3b:f8:43:82:f4:88:
7a:1b:15:34:38:84:4f:7f:90:93:cf:6e:8b:87:9e:
bf:1c:fa:07:50:ab:1d:5f:7f:7f:60:55:3c:af:cd:
35:40:14:7a:8b:ad:ed:33:00:96:24:d4:fa:60:78:
48:8b:2e:a9:80:11:f4:12:1e:08:c3:9a:d1:11:7b:
73:41:52:9f:ea:5d:ee:81:11:a1:d7:42:02:d4:3e:
f5:24:f2:2e:b1:90:60:76:3d:44:e1:39:5d:0f:17:
9d:fc:64:2d:a7:04:d2:0d:e3:43:1e:0f:de:d0:fb:
27:00:5f:96:ee:a9:17:a6:9d:03:f2:03:db:68:3c:
ab:e9:67:95:65:9a:3b:62:87:eb:df:66:5f:dd:70:
e4:c8:4b:0b:e7:da:4f:ac:25:53:5c:cf:e9:db:8d:
67:c5:9a:98:d8:1b:07:77:90:d4:8b:0d:63:26:34:
08:ba:c8:1d:a1:d5:ab:dd:bf:d3:68:2c:54:43:37:
9b:98:5c:b3:44:c8:fa:d5:17:5b:34:7e:91:49:15:
63:d6:fb:ff:15:74:4c:dd:ad:a5:72:af:bb:66:47:
61:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B5:F4:4C:9C:03:18:87:71:35:A8:98:0D:15:3F:FE:72:9F:91:67
X509v3 Authority Key Identifier:
keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6c:6c:dc:f3:02:f0:e4:a7:3a:9a:d4:f6:aa:0f:91:6c:85:
2a:23:25:a2:41:5e:3f:9b:73:b6:db:b2:23:30:03:1a:59:08:
91:f4:96:2f:69:62:15:46:7d:a3:4d:80:3a:8b:52:15:84:d9:
ab:1d:84:26:d9:f8:70:8d:2d:72:f0:88:6d:b8:93:3c:5b:fe:
b7:b3:5e:48:6c:2f:47:7a:d5:d7:8a:2f:95:c1:21:39:f1:60:
97:3f:74:a6:92:c8:03:00:f5:5b:88:8d:e6:79:7b:be:8f:b8:
a0:40:d0:76:81:11:e4:4c:c3:ec:4c:7f:7b:64:86:18:84:09:
37:54:97:f4:09:69:67:d7:1f:bc:fa:1b:e8:b8:e7:cf:aa:79:
1b:76:4a:6b:7a:d2:f6:31:13:2a:b2:fc:f8:cc:8e:6c:7d:c2:
1e:ce:23:e5:67:40:b4:52:bb:f7:de:5c:f1:ad:e1:84:46:0d:
15:73:f7:83:c8:ea:e9:59:3d:0b:64:d2:cf:c6:73:de:a5:70:
15:58:81:6a:58:3a:16:bb:60:6c:6b:4a:0c:9f:83:56:69:db:
cd:6c:33:4f:84:c6:c8:2f:c1:0d:ce:42:1f:5c:82:0e:42:db:
a5:d8:30:99:e6:5d:84:81:13:8b:64:f5:d7:68:0e:25:3d:fd:
c7:0b:d5:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvyBx91Mqb3WkRBKWDWHj3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMzI1YzIxZDJmYWZlNzQzMzk4ZGMxZTU1NzQ0MzMyODAx
MTA0NjkwHhcNMjYwMTI0MjIwMTUxWhcNMjYwMTI1MjIwMTUxWjAzMTEwLwYDVQQD
Eyg5MWI1ZjQ0YzljMDMxODg3NzEzNWE4OTgwZDE1M2ZmZTcyOWY5MTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8IK/it7GPcBP7hLPRnNAUjhRG0r
uvXhS2/kJucoJS/xeK7cSQY7+EOC9Ih6GxU0OIRPf5CTz26Lh56/HPoHUKsdX39/
YFU8r801QBR6i63tMwCWJNT6YHhIiy6pgBH0Eh4Iw5rREXtzQVKf6l3ugRGh10IC
1D71JPIusZBgdj1E4TldDxed/GQtpwTSDeNDHg/e0PsnAF+W7qkXpp0D8gPbaDyr
6WeVZZo7Yofr32Zf3XDkyEsL59pPrCVTXM/p241nxZqY2BsHd5DUiw1jJjQIusgd
odWr3b/TaCxUQzebmFyzRMj61RdbNH6RSRVj1vv/FXRM3a2lcq+7ZkdhwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJG19EycAxiHcTWomA0VP/5yn5FnMB8GA1UdIwQY
MBaAFGAyXCHS+v50M5jcHlV0QzKAEQRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWURKY0lkTDZfblF6bU53ZVZYUkRNb0FSQkdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mMjc3MGItZGExOS00NzkwLWE0OTQt
YzU4ZTk1Y2Q0Mjc3LzEvWURKY0lkTDZfblF6bU53ZVZYUkRNb0FSQkdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mMjc3MGItZGExOS00NzkwLWE0OTQtYzU4ZTk1Y2Q0Mjc3
LzEvWURKY0lkTDZfblF6bU53ZVZYUkRNb0FSQkdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGxs3PMC
8OSnOprU9qoPkWyFKiMlokFeP5tzttuyIzADGlkIkfSWL2liFUZ9o02AOotSFYTZ
qx2EJtn4cI0tcvCIbbiTPFv+t7NeSGwvR3rV14ovlcEhOfFglz90ppLIAwD1W4iN
5nl7vo+4oEDQdoER5EzD7Ex/e2SGGIQJN1SX9AlpZ9cfvPob6Ljnz6p5G3ZKa3rS
9jETKrL8+MyObH3CHs4j5WdAtFK7995c8a3hhEYNFXP3g8jq6Vk9C2TSz8Zz3qVw
FViBalg6FrtgbGtKDJ+DVmnbzWwzT4TGyC/BDc5CH1yCDkLbpdgwmeZdhIETi2T1
12gOJT39xwvV7g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:49 2026 by rpki-client