This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft File: ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json) Hash identifier: 2dfidVIuybtMPjWg/mlwvHYDsIg/+Jfzs5+dLgDke3M= Subject key identifier: 42:29:61:C8:05:A2:95:8B:8D:11:5C:5A:BE:D0:79:B6:E0:B1:70:F4 Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a Certificate serial: 019BF80809889298E1CFEF99CFCF4C2629D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft Manifest number: 17E7 Signing time: Mon 26 Jan 2026 02:00:34 +0000 Manifest this update: Mon 26 Jan 2026 02:00:34 +0000 Manifest next update: Tue 27 Jan 2026 02:00:34 +0000 Files and hashes: 1: DTnex-UlwV0zKy6UASXDNP6H64M.roa (hash: OS8JKI81uoNsyPVMBJm7f0QmGbnDk6BbHN/7FVmcoHg=) 2: q0Xg32RLpaZ2ftlLqcFE1HiFMHM.roa (hash: veVsiD7OXuZtD0ZpV5SiKVt3Azw07hmLxG5Vpo3m3dM=) 3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: rlb2+Wg+jHA/798FAjjabNcHIUT/ZnVG9Mdu8pVJPYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:09:88:92:98:e1:cf:ef:99:cf:cf:4c:26:29:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a Validity Not Before: Jan 26 02:00:34 2026 GMT Not After : Jan 27 02:00:34 2026 GMT Subject: CN=422961c805a2958b8d115c5abed079b6e0b170f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:98:15:50:79:e1:fb:52:f8:af:d0:e9:a0:11: d5:f1:66:ca:0c:eb:ce:17:f3:e2:b0:94:cf:89:97: cd:a8:ac:64:f1:7b:fb:fe:ae:6b:3e:13:e1:20:a2: d2:7e:f3:bb:64:be:62:db:0a:a3:5d:fe:a0:22:03: 7f:98:f9:2f:01:c2:43:6b:e0:e6:21:9c:4c:74:6d: eb:f6:9f:75:c5:8e:6f:02:03:14:cb:9a:bf:7d:33: 7e:24:11:a1:8a:16:de:eb:9d:03:af:d4:a6:29:0d: 2b:26:56:41:62:c0:ff:92:30:0a:a2:24:02:33:ed: d2:38:65:f0:03:59:3f:e2:48:eb:fa:a0:fe:13:31: 6d:69:cb:d2:8c:81:98:a2:62:5d:a4:2a:9b:4b:57: 5e:ae:9a:51:fe:16:c4:c4:b6:a3:c1:5a:5c:a2:45: f6:6c:84:8c:95:9d:c2:ae:7f:c1:61:47:cf:25:e5: b4:97:1a:34:69:56:f5:bd:7a:33:3b:ac:bc:13:d9: a4:39:4a:fd:87:65:e9:b1:60:10:05:c3:7d:b5:0d: d0:66:77:61:48:bf:b8:f2:3b:0a:f7:dd:61:d1:f6: fe:c9:a1:a1:0d:9b:7f:31:23:9a:f5:9f:9e:4d:54: 1a:65:b5:cf:7a:9a:5f:f4:48:aa:0b:26:b4:03:cb: 74:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:29:61:C8:05:A2:95:8B:8D:11:5C:5A:BE:D0:79:B6:E0:B1:70:F4 X509v3 Authority Key Identifier: keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:af:20:9a:83:81:60:75:9e:0c:e1:1b:03:97:ad:7f:93:2d: b1:f9:97:f3:85:03:13:f5:40:16:33:0d:df:8b:4c:8e:27:06: 07:fa:a8:f7:83:25:d8:03:b4:48:88:55:fb:f4:d1:65:9c:6a: 44:d7:2d:31:e0:fc:5e:4e:42:82:a7:a6:25:68:a9:1d:d8:8f: 00:6e:63:db:63:06:f2:47:6f:32:cf:ad:4f:fc:55:4a:88:00: 22:9c:52:4c:80:d5:57:eb:40:fa:54:d0:84:bd:37:5e:91:9a: f4:07:5e:3a:fa:fc:a1:cc:47:42:36:23:e9:db:c2:59:87:5a: a5:1a:6c:06:14:14:ce:4a:7b:ba:2d:ff:04:19:2a:78:92:22: e5:2c:cd:55:54:fe:85:69:00:12:59:0e:a2:26:80:90:b2:97: 20:1e:7b:bb:18:d8:49:d3:7d:a6:a8:9b:42:18:5a:79:e2:2b: 69:95:e3:b9:70:02:c4:9d:9c:24:de:96:d8:d9:20:96:b9:26: 14:93:84:c6:67:16:bc:95:3c:b5:4f:ba:55:4e:c8:c3:d2:b3: 0b:c7:88:4c:7d:c7:4b:7f:51:1a:e8:f3:3a:21:ad:39:ee:a8: cb:6d:c9:98:07:ad:36:97:f2:40:f8:83:e8:9b:13:79:ce:30: e7:f2:34:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CAmIkpjhz++Zz89MJinYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNTIyMGU1M2U0ZjgxY2EyNThjY2ZlYTE4NzI4MDI4MGY1 ZjYyMWEwHhcNMjYwMTI2MDIwMDM0WhcNMjYwMTI3MDIwMDM0WjAzMTEwLwYDVQQD Eyg0MjI5NjFjODA1YTI5NThiOGQxMTVjNWFiZWQwNzliNmUwYjE3MGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5gVUHnh+1L4r9DpoBHV8WbKDOvO F/PisJTPiZfNqKxk8Xv7/q5rPhPhIKLSfvO7ZL5i2wqjXf6gIgN/mPkvAcJDa+Dm IZxMdG3r9p91xY5vAgMUy5q/fTN+JBGhihbe650Dr9SmKQ0rJlZBYsD/kjAKoiQC M+3SOGXwA1k/4kjr+qD+EzFtacvSjIGYomJdpCqbS1derppR/hbExLajwVpcokX2 bISMlZ3Crn/BYUfPJeW0lxo0aVb1vXozO6y8E9mkOUr9h2XpsWAQBcN9tQ3QZndh SL+48jsK991h0fb+yaGhDZt/MSOa9Z+eTVQaZbXPeppf9EiqCya0A8t09wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIpYcgFopWLjRFcWr7QebbgsXD0MB8GA1UdIwQY MBaAFMpSIOU+T4HKJYzP6hhygCgPX2IaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80MjQ5NDctMWM2YS00OGU5LWIyODkt ZjIzYzVhNTMxODIzLzEveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny80MjQ5NDctMWM2YS00OGU5LWIyODktZjIzYzVhNTMxODIz LzEveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACa8gmoOB YHWeDOEbA5etf5MtsfmX84UDE/VAFjMN34tMjicGB/qo94Ml2AO0SIhV+/TRZZxq RNctMeD8Xk5CgqemJWipHdiPAG5j22MG8kdvMs+tT/xVSogAIpxSTIDVV+tA+lTQ hL03XpGa9AdeOvr8ocxHQjYj6dvCWYdapRpsBhQUzkp7ui3/BBkqeJIi5SzNVVT+ hWkAElkOoiaAkLKXIB57uxjYSdN9pqibQhhaeeIraZXjuXACxJ2cJN6W2Nkglrkm FJOExmcWvJU8tU+6VU7Iw9KzC8eITH3HS39RGujzOiGtOe6oy23JmAetNpfyQPiD 6JsTec4w5/I0Ow== -----END CERTIFICATE-----Generated at Mon Jan 26 04:58:57 2026 by rpki-client