This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft File: YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft (raw, json) Hash identifier: JySICyXRxVmOkcqU8eanzkCUHk2ovnceMjV2gPg98HQ= Subject key identifier: 7A:6E:1E:CC:55:37:A1:0C:44:67:C7:0B:E5:D5:BA:8F:FE:C0:7C:D7 Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B Certificate issuer: /CN=60bff94704e4a475374e170cbe17365fa89fe07b Certificate serial: 019BF80818743BE423C0368F4AD567A6DE04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft Manifest number: 13F0 Signing time: Mon 26 Jan 2026 02:00:38 +0000 Manifest this update: Mon 26 Jan 2026 02:00:38 +0000 Manifest next update: Tue 27 Jan 2026 02:00:38 +0000 Files and hashes: 1: 4xLNM1gfFHioLqXsNxKtGlvCRlw.roa (hash: uhrmuI7oCSVyONxL+SSY9ejEzbrz6KWmcurexFcyOu4=) 2: YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl (hash: bozAAvLIKXp32egh5/QmKeZw/Pan3OaMOiDY0Luajmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:18:74:3b:e4:23:c0:36:8f:4a:d5:67:a6:de:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b Validity Not Before: Jan 26 02:00:38 2026 GMT Not After : Jan 27 02:00:38 2026 GMT Subject: CN=7a6e1ecc5537a10c4467c70be5d5ba8ffec07cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:72:9b:07:c6:21:38:6f:a5:3a:2a:80:01:d8: 17:ae:dd:c6:54:aa:ff:5f:82:86:0b:7c:68:b6:c5: 88:13:31:47:d1:1b:2b:66:14:20:27:69:53:2e:cd: 80:7e:b1:2a:29:fc:9c:42:c3:08:a0:fd:b5:66:fd: d0:08:ef:0a:81:e1:44:ef:a2:41:03:a2:58:19:05: d0:b4:f9:21:5a:eb:62:b6:84:a1:9b:84:f2:8a:6b: 04:72:db:72:0d:42:74:9c:78:ea:63:83:ce:19:29: e4:a9:84:e5:aa:c9:20:13:59:c8:a5:3e:72:da:2c: 84:d1:b8:43:b1:9b:da:df:b5:e8:ec:ba:3f:4c:51: 5a:f3:4a:92:6e:07:3d:c0:86:ff:fe:38:98:90:2e: 44:9a:d8:27:e9:4b:5a:fd:a2:b0:e8:b8:f1:16:e6: 78:0f:88:1e:3d:bb:89:7e:7b:af:67:4f:69:c4:7d: 47:73:28:ff:d0:b7:a0:16:f8:d3:fa:07:14:d8:5f: 94:16:6a:31:f4:25:92:6d:43:93:9d:95:c6:a2:99: 6b:98:12:1b:2f:04:11:1d:18:9b:53:b4:3b:89:53: 97:9c:7a:f2:70:8d:c9:f9:5d:f0:17:27:5f:e4:3d: ef:ce:df:7a:24:2e:29:df:d1:8c:23:30:44:25:4c: 0f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6E:1E:CC:55:37:A1:0C:44:67:C7:0B:E5:D5:BA:8F:FE:C0:7C:D7 X509v3 Authority Key Identifier: keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:4e:ad:dc:e1:8b:62:f7:91:b0:60:8e:f1:11:7c:da:8e:90: 64:e6:af:04:b2:36:97:09:05:62:4d:03:8d:56:f9:e0:c4:19: 69:a3:1c:b4:3f:2e:5f:28:41:70:d9:20:70:16:96:68:03:ca: 81:93:b4:2c:41:7d:76:25:d7:7b:61:75:be:2d:fe:c5:a9:d3: 31:0d:f5:8a:53:a7:3b:cd:0a:d5:ea:28:25:c1:bb:29:be:d1: 4e:d6:10:89:cb:e2:8d:59:2c:b1:db:20:0b:2a:7b:fc:9f:eb: 18:ac:f3:72:a4:b9:23:53:a9:e0:82:ae:4e:86:09:c9:ca:a6: 45:1a:05:30:47:4d:ca:3d:35:fc:53:da:4b:1c:94:4f:97:79: 9f:e7:37:79:44:23:9e:8c:06:7b:33:d1:24:8d:97:73:c6:01: 1c:35:54:b3:44:80:89:93:84:2e:7b:ef:dc:30:f9:3b:4a:eb: 3f:43:f2:b2:2b:68:c8:c3:0e:13:4c:e9:d5:98:e8:26:94:de: 0c:09:ac:df:73:7b:c5:fb:cd:b2:f3:22:e6:80:cb:ce:85:1b: a1:d3:f3:84:ae:03:9a:43:cf:31:80:a5:2d:84:1f:49:04:15: 01:bf:27:ff:ae:d1:06:92:f7:27:28:2b:20:ed:3d:c3:55:a4: df:ea:7e:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CBh0O+QjwDaPStVnpt4EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYmZmOTQ3MDRlNGE0NzUzNzRlMTcwY2JlMTczNjVmYTg5 ZmUwN2IwHhcNMjYwMTI2MDIwMDM4WhcNMjYwMTI3MDIwMDM4WjAzMTEwLwYDVQQD Eyg3YTZlMWVjYzU1MzdhMTBjNDQ2N2M3MGJlNWQ1YmE4ZmZlYzA3Y2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnKbB8YhOG+lOiqAAdgXrt3GVKr/ X4KGC3xotsWIEzFH0RsrZhQgJ2lTLs2AfrEqKfycQsMIoP21Zv3QCO8KgeFE76JB A6JYGQXQtPkhWutitoShm4TyimsEcttyDUJ0nHjqY4POGSnkqYTlqskgE1nIpT5y 2iyE0bhDsZva37Xo7Lo/TFFa80qSbgc9wIb//jiYkC5Emtgn6Uta/aKw6LjxFuZ4 D4gePbuJfnuvZ09pxH1Hcyj/0LegFvjT+gcU2F+UFmox9CWSbUOTnZXGoplrmBIb LwQRHRibU7Q7iVOXnHrycI3J+V3wFydf5D3vzt96JC4p39GMIzBEJUwPwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpuHsxVN6EMRGfHC+XVuo/+wHzXMB8GA1UdIwQY MBaAFGC/+UcE5KR1N04XDL4XNl+on+B7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUxfNVJ3VGtwSFUzVGhjTXZoYzJYNmlmNEhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NzJmZGQtY2M3Yy00NDQ5LTlmNTUt MDIzOTk1OTA2YzQ2LzEvWUxfNVJ3VGtwSFUzVGhjTXZoYzJYNmlmNEhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82NzJmZGQtY2M3Yy00NDQ5LTlmNTUtMDIzOTk1OTA2YzQ2 LzEvWUxfNVJ3VGtwSFUzVGhjTXZoYzJYNmlmNEhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWE6t3OGL YveRsGCO8RF82o6QZOavBLI2lwkFYk0DjVb54MQZaaMctD8uXyhBcNkgcBaWaAPK gZO0LEF9diXXe2F1vi3+xanTMQ31ilOnO80K1eooJcG7Kb7RTtYQicvijVkssdsg Cyp7/J/rGKzzcqS5I1Op4IKuToYJycqmRRoFMEdNyj01/FPaSxyUT5d5n+c3eUQj nowGezPRJI2Xc8YBHDVUs0SAiZOELnvv3DD5O0rrP0PysitoyMMOE0zp1ZjoJpTe DAms33N7xfvNsvMi5oDLzoUbodPzhK4DmkPPMYClLYQfSQQVAb8n/67RBpL3Jygr IO09w1Wk3+p+Sg== -----END CERTIFICATE-----Generated at Mon Jan 26 06:06:57 2026 by rpki-client