This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft File: Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json) Hash identifier: gQ+ud8LScsEjiOSgeZhQDpSRi5NqXKKEqeChcWJc2rE= Subject key identifier: 55:E5:36:50:6A:75:D0:29:5C:A2:D9:2B:71:29:51:7E:B1:DA:6B:73 Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee Certificate serial: 019BF91BB96BBC92F0775F83E7096A4C497E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft Manifest number: 0DEB Signing time: Mon 26 Jan 2026 07:01:42 +0000 Manifest this update: Mon 26 Jan 2026 07:01:42 +0000 Manifest next update: Tue 27 Jan 2026 07:01:42 +0000 Files and hashes: 1: LDt7gaxmt08mgFC-M4WkB6Rh2M4.roa (hash: GmZKtwbYE0ZQZpsBSkP4BAk8kkV/eLe4GNjMQ2lsJKY=) 2: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: 6oXWQcIr1Km25ryRrvb2vQ2leXjo2nxlqVc2sMZbCV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:b9:6b:bc:92:f0:77:5f:83:e7:09:6a:4c:49:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee Validity Not Before: Jan 26 07:01:42 2026 GMT Not After : Jan 27 07:01:42 2026 GMT Subject: CN=55e536506a75d0295ca2d92b7129517eb1da6b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:58:e7:90:26:24:04:dc:12:fc:3b:36:a1:a9: d8:4d:19:7c:3d:40:b9:cf:1a:b7:2f:c2:24:bb:ab: 82:11:e3:7d:03:4f:ea:ee:05:b4:86:79:9e:58:c1: ad:24:12:1d:fc:59:83:87:52:c4:78:fa:1d:66:5a: d3:d2:9e:0f:19:53:de:63:f3:2c:4a:22:aa:f4:1c: 34:8a:9b:10:a4:b4:cb:d7:09:e5:6b:ec:8b:0b:65: 79:9a:1f:c9:af:56:1a:89:28:1b:79:15:00:de:e5: 20:0a:d7:ff:e3:32:1e:7c:e0:2f:51:66:56:29:3f: f7:fe:22:fa:14:94:f9:26:45:49:d8:81:89:1a:18: d2:0e:67:e2:7f:1b:91:ec:99:b5:64:0c:3c:1b:e5: ec:7d:c7:5e:52:dc:7c:4b:7b:07:68:7d:15:c2:13: 9b:8c:cb:a8:a8:60:22:87:bc:47:72:fe:fd:26:13: 12:2a:26:29:8d:a1:e9:49:04:d6:bd:17:80:c7:6f: 74:95:4c:07:38:47:1d:2b:3f:84:6d:24:0c:4e:68: d1:90:d7:e7:04:d5:d4:d6:76:f0:7e:e0:b3:80:2a: 9a:e7:19:34:66:fb:6f:c6:7c:64:75:d1:b4:26:6d: 8c:2e:b8:90:fd:3c:37:5e:2e:0b:2a:b5:ac:f0:41: a2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E5:36:50:6A:75:D0:29:5C:A2:D9:2B:71:29:51:7E:B1:DA:6B:73 X509v3 Authority Key Identifier: keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:60:d0:4d:9b:31:af:38:1d:07:be:90:8c:32:ed:63:ce:d4: ce:39:a7:5e:33:88:f7:b7:91:79:e1:c4:97:55:a5:8e:3d:42: 8c:76:16:b0:ea:26:1d:62:1f:d6:f7:35:f4:3b:f0:b5:3d:b6: 27:2a:66:f6:d1:a2:00:d3:66:4f:5c:87:aa:22:14:c6:ce:c2: c6:0b:e9:f0:a0:b9:d2:2a:e3:ce:c3:be:7a:e7:89:87:d4:2c: 9b:b4:40:22:0e:78:3e:a8:58:2d:32:60:fa:d5:e4:2b:c8:cd: 38:39:ee:7b:7d:38:cc:dc:be:41:e0:10:5d:96:db:cf:b5:99: ec:f1:59:26:1e:e9:11:a1:17:60:09:89:d3:98:a5:9c:6a:42: 2d:6a:9c:3f:b2:ba:14:15:a1:04:36:95:88:9b:56:58:e1:50: 88:df:52:9a:13:29:09:2b:f6:60:b8:20:48:f0:13:9c:19:ea: 91:77:a3:97:db:3e:e5:cd:35:a7:ad:3e:c8:3d:39:0f:22:0b: 78:cb:2d:ab:41:b1:ae:35:72:01:56:15:e2:a8:4b:2a:24:e5: 7e:83:d7:4d:a0:f0:21:25:8e:51:89:12:87:f2:71:bd:5e:a8: 89:5e:97:2a:4e:6b:93:8e:a8:c6:9d:b5:e6:55:a2:61:62:db: 8c:16:46:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G7lrvJLwd1+D5wlqTEl+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZmFhYzI5YjkwNTM0ZjkxYTlmYjBlYjYzMThmMDAxOTQ1 MWM2ZWUwHhcNMjYwMTI2MDcwMTQyWhcNMjYwMTI3MDcwMTQyWjAzMTEwLwYDVQQD Eyg1NWU1MzY1MDZhNzVkMDI5NWNhMmQ5MmI3MTI5NTE3ZWIxZGE2YjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51jnkCYkBNwS/Ds2oanYTRl8PUC5 zxq3L8Iku6uCEeN9A0/q7gW0hnmeWMGtJBId/FmDh1LEePodZlrT0p4PGVPeY/Ms SiKq9Bw0ipsQpLTL1wnla+yLC2V5mh/Jr1YaiSgbeRUA3uUgCtf/4zIefOAvUWZW KT/3/iL6FJT5JkVJ2IGJGhjSDmfifxuR7Jm1ZAw8G+XsfcdeUtx8S3sHaH0VwhOb jMuoqGAih7xHcv79JhMSKiYpjaHpSQTWvReAx290lUwHOEcdKz+EbSQMTmjRkNfn BNXU1nbwfuCzgCqa5xk0ZvtvxnxkddG0Jm2MLriQ/Tw3Xi4LKrWs8EGifwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXlNlBqddApXKLZK3EpUX6x2mtzMB8GA1UdIwQY MBaAFGP6rCm5BTT5Gp+w62MY8AGUUcbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82NjEyODUtNzk2NS00ZmE0LWJhYWIt NzRjMTQwNWMzNDc1LzEvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82NjEyODUtNzk2NS00ZmE0LWJhYWItNzRjMTQwNWMzNDc1 LzEvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWDQTZsx rzgdB76QjDLtY87UzjmnXjOI97eReeHEl1Wljj1CjHYWsOomHWIf1vc19DvwtT22 Jypm9tGiANNmT1yHqiIUxs7Cxgvp8KC50irjzsO+eueJh9Qsm7RAIg54PqhYLTJg +tXkK8jNODnue304zNy+QeAQXZbbz7WZ7PFZJh7pEaEXYAmJ05ilnGpCLWqcP7K6 FBWhBDaViJtWWOFQiN9SmhMpCSv2YLggSPATnBnqkXejl9s+5c01p60+yD05DyIL eMstq0GxrjVyAVYV4qhLKiTlfoPXTaDwISWOUYkSh/JxvV6oiV6XKk5rk46oxp21 5lWiYWLbjBZGgA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:41 2026 by rpki-client