This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft File: YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft (raw, json) Hash identifier: MYbLK4nBovk/a/bDIQBV6V/0aoJ55COh1GvUZO71+lA= Subject key identifier: A0:77:BE:DC:C0:3B:EE:3C:B7:2B:8E:5F:84:1C:71:94:EB:C6:41:5D Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF Certificate issuer: /CN=60077f22c6428bc889b365b006cb5248d4bf61cf Certificate serial: 019BF7638FC4B8016E94A5C89D179A57EB3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 23:00:55 +0000 Manifest this update: Sun 25 Jan 2026 23:00:55 +0000 Manifest next update: Mon 26 Jan 2026 23:00:55 +0000 Files and hashes: 1: YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl (hash: yU5MwawK9HCqyxln6y2Bt7wuPPp5NycZtI+LEXrMWc4=) 2: gGpmcsWE1eZyNMee1NRlA1nhhvY.roa (hash: /R+1mDGIJPwiUjgMqzEayU7QgZR187J1ACp6m3yLtqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:8f:c4:b8:01:6e:94:a5:c8:9d:17:9a:57:eb:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf Validity Not Before: Jan 25 23:00:55 2026 GMT Not After : Jan 26 23:00:55 2026 GMT Subject: CN=a077bedcc03bee3cb72b8e5f841c7194ebc6415d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:35:55:b5:84:40:e4:88:fb:2f:cc:58:98:01: 64:33:f0:c8:d6:3d:2c:1a:6c:e4:ba:df:e8:2a:51: 62:5e:c3:87:3a:2b:79:23:2f:34:6b:e4:a2:5f:ec: 04:66:f1:f3:f9:08:bc:41:a9:7f:fc:3e:8d:3d:81: 13:78:95:28:a9:7a:ea:e6:04:6c:ce:cb:86:7e:e7: 2e:f6:7f:1b:46:e1:23:06:61:f6:1b:c8:ae:cc:60: 9b:24:41:43:28:2b:d3:77:c7:98:df:6d:81:d6:6d: 11:f1:d5:2a:29:5e:45:0c:c3:c6:e2:5a:9e:19:f9: 0a:cb:37:56:94:8e:08:ed:27:45:84:5a:3d:e1:15: 47:59:59:82:60:e8:48:6c:7e:88:73:cd:d1:ce:e5: 1a:cf:fc:07:25:92:1f:c5:63:4e:60:0a:ae:3c:5d: e1:4b:2a:6e:31:7b:3c:41:09:9c:26:72:28:d1:61: fc:9c:3b:1e:48:00:97:68:2b:1c:a2:6e:44:d9:9c: 86:1d:50:f1:20:cb:db:35:66:38:36:d9:05:b5:b8: a9:fd:f6:79:85:5f:ab:76:7e:2c:d6:0f:b7:de:39: a6:4a:24:ea:44:ef:fb:9c:f3:b1:e4:3c:bc:3b:71: 92:ad:ed:1a:db:a3:0a:90:f0:20:60:37:36:29:0a: af:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:77:BE:DC:C0:3B:EE:3C:B7:2B:8E:5F:84:1C:71:94:EB:C6:41:5D X509v3 Authority Key Identifier: keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:1c:bd:f7:d0:e7:d8:6b:e7:35:14:d6:21:98:d5:de:a6:f9: 21:d1:7c:3b:68:4e:71:bc:ce:62:ad:2a:8e:f6:87:d6:3f:2f: 8f:2c:79:79:96:9a:b8:bc:79:31:7c:81:33:ed:bb:80:ff:1b: 93:ed:27:a3:a1:5a:18:d9:9b:84:d4:c4:89:20:1b:fd:c3:a6: 07:87:30:5c:fe:1a:0d:0f:3a:89:4b:60:84:7e:9b:a9:53:ed: 1c:a6:7a:67:f6:f8:8f:b4:41:e8:2c:52:80:ee:ce:b6:b9:b9: 3b:69:34:bc:2c:b4:70:b6:79:1a:b8:a8:44:59:ba:6a:74:31: 93:d9:2c:0f:1e:64:ea:2e:2f:27:56:6d:c4:79:01:ee:de:51: 11:65:c1:21:b6:dd:d3:d8:57:78:2e:b3:68:17:00:05:dc:56: 08:e4:69:fa:c0:16:7d:3a:a1:26:98:d5:72:08:d2:6d:fb:8e: d6:f0:2f:42:be:25:54:c0:ad:87:75:2c:a1:39:3a:31:b9:ab: 6f:0c:c5:98:ab:fb:48:ff:b5:1d:ed:cb:9b:34:95:bb:cf:21: ed:01:fe:63:fa:71:a0:d0:f1:a0:90:94:69:68:3e:f3:ac:8a: 30:f9:58:51:a7:2e:8b:64:73:f5:e5:c4:60:65:ce:2f:15:02: c5:86:c7:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y4/EuAFulKXInReaV+s7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMDc3ZjIyYzY0MjhiYzg4OWIzNjViMDA2Y2I1MjQ4ZDRi ZjYxY2YwHhcNMjYwMTI1MjMwMDU1WhcNMjYwMTI2MjMwMDU1WjAzMTEwLwYDVQQD EyhhMDc3YmVkY2MwM2JlZTNjYjcyYjhlNWY4NDFjNzE5NGViYzY0MTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzVVtYRA5Ij7L8xYmAFkM/DI1j0s Gmzkut/oKlFiXsOHOit5Iy80a+SiX+wEZvHz+Qi8Qal//D6NPYETeJUoqXrq5gRs zsuGfucu9n8bRuEjBmH2G8iuzGCbJEFDKCvTd8eY322B1m0R8dUqKV5FDMPG4lqe GfkKyzdWlI4I7SdFhFo94RVHWVmCYOhIbH6Ic83RzuUaz/wHJZIfxWNOYAquPF3h SypuMXs8QQmcJnIo0WH8nDseSACXaCscom5E2ZyGHVDxIMvbNWY4NtkFtbip/fZ5 hV+rdn4s1g+33jmmSiTqRO/7nPOx5Dy8O3GSre0a26MKkPAgYDc2KQqv8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKB3vtzAO+48tyuOX4QccZTrxkFdMB8GA1UdIwQY MBaAFGAHfyLGQovIibNlsAbLUkjUv2HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC84NDdlZTAtYmEyYS00ZmQyLTg5ZDct ODdmZTJlNTRiYTc5LzEvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC84NDdlZTAtYmEyYS00ZmQyLTg5ZDctODdmZTJlNTRiYTc5 LzEvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhy999Dn 2GvnNRTWIZjV3qb5IdF8O2hOcbzOYq0qjvaH1j8vjyx5eZaauLx5MXyBM+27gP8b k+0no6FaGNmbhNTEiSAb/cOmB4cwXP4aDQ86iUtghH6bqVPtHKZ6Z/b4j7RB6CxS gO7Otrm5O2k0vCy0cLZ5GrioRFm6anQxk9ksDx5k6i4vJ1ZtxHkB7t5REWXBIbbd 09hXeC6zaBcABdxWCORp+sAWfTqhJpjVcgjSbfuO1vAvQr4lVMCth3UsoTk6Mbmr bwzFmKv7SP+1He3LmzSVu88h7QH+Y/pxoNDxoJCUaWg+86yKMPlYUacui2Rz9eXE YGXOLxUCxYbH1w== -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:10 2026 by rpki-client