This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft File: YsTHQ9XCr88n8QTrbgMWEWyFx94.mft (raw, json) Hash identifier: kwoq2SxViRU2ou59RhyK2vrd7YVlOFCJIGkSUaISHtU= Subject key identifier: A2:15:EB:50:EF:3C:BA:2C:4C:36:1C:19:C6:33:B4:65:3E:0D:9D:6D Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de Certificate serial: 019BF7632CD9A1B216D8293AFDDFB7E8A823 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft Manifest number: 0DB5 Signing time: Sun 25 Jan 2026 23:00:30 +0000 Manifest this update: Sun 25 Jan 2026 23:00:30 +0000 Manifest next update: Mon 26 Jan 2026 23:00:30 +0000 Files and hashes: 1: DT8ZHpsnu95pA077Bij5e4AaTEY.roa (hash: QTft8cX4BupKj8g0B2lC6ytondXy0rFBo523NlqKQRE=) 2: YsTHQ9XCr88n8QTrbgMWEWyFx94.crl (hash: GLSNmLtDD5pKN4sVtgAuLjz3Kcrstd5B1pQRipwK5EQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:2c:d9:a1:b2:16:d8:29:3a:fd:df:b7:e8:a8:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de Validity Not Before: Jan 25 23:00:30 2026 GMT Not After : Jan 26 23:00:30 2026 GMT Subject: CN=a215eb50ef3cba2c4c361c19c633b4653e0d9d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8e:21:3d:85:8f:51:7e:29:36:2f:7e:1f:34: 5d:f8:90:f8:8e:de:1d:fa:68:6c:6f:23:c4:0c:17: e0:f3:f9:5b:d8:0d:b2:b4:62:ae:8f:a9:04:99:9c: 55:78:69:be:52:f6:d7:f0:68:4a:d4:bd:c4:67:aa: 0f:c7:d4:83:46:b1:cd:b8:a2:79:0d:10:4f:06:33: 09:b5:50:65:4c:a7:ed:1d:3e:a7:4b:e2:2c:4e:fb: 90:9d:80:11:35:5e:00:e2:9e:50:a4:31:df:31:cb: ea:0e:60:7a:48:a7:e5:e7:c1:81:2e:8e:75:a5:4f: 59:1a:44:65:eb:ce:16:eb:c7:a0:c0:c0:f4:d0:7f: 86:25:1a:a7:68:c2:01:f6:b0:49:70:94:fe:68:d2: a8:bb:1b:0d:c5:85:d7:0e:de:c2:f7:17:d4:dd:e5: 43:0a:1c:db:3c:95:c9:15:ce:8e:0a:f2:20:69:1a: f9:b5:c8:e6:62:07:c9:2f:ad:3e:3f:d8:68:78:50: 2a:45:ec:be:a0:3e:0a:b1:85:a9:04:2c:1b:79:92: cb:1a:51:01:ab:4a:08:f6:83:e6:b0:9a:62:35:9f: de:58:1f:5d:7e:ef:55:14:fa:23:04:df:0e:fe:69: f8:93:15:ca:7a:0f:a4:10:48:ee:48:f7:e0:84:e8: 70:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:15:EB:50:EF:3C:BA:2C:4C:36:1C:19:C6:33:B4:65:3E:0D:9D:6D X509v3 Authority Key Identifier: keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:7a:3a:41:6d:b7:3c:2a:6b:18:52:f3:6d:b3:bc:8a:d9:eb: 86:f9:40:3c:ba:5d:0b:b1:01:f4:98:83:04:8b:cf:8a:e5:81: d5:3a:ca:76:ac:a1:dc:7e:ef:12:6e:4b:6d:d2:36:23:68:79: fb:bc:f6:47:fc:a5:ac:9a:f4:59:3b:90:35:b8:31:83:95:70: 84:60:8b:9a:7b:be:88:17:dc:2c:61:6f:9b:5e:ca:2e:f4:0f: c1:aa:1b:33:29:59:c0:64:c6:a3:ec:f8:2b:0a:21:45:3f:96: f8:02:82:b6:97:b0:00:11:2d:93:3c:a1:95:66:ea:10:94:91: 2a:03:57:b7:0c:26:ef:31:d9:a4:86:8f:c8:e7:75:c2:ec:4f: e4:0a:cf:8b:e0:ff:99:60:67:fd:90:9d:ed:83:a9:bd:32:c6: 4f:03:3e:b6:0a:a8:be:1d:24:bb:f9:02:55:bf:e4:c6:c3:7a: 47:2e:cd:05:11:79:6a:64:8d:b7:e5:7c:b8:40:13:80:cf:05: 66:2a:de:25:fe:70:50:9e:de:3b:aa:4b:38:61:2e:bd:d5:97: c1:15:1f:92:9a:59:0d:a9:ba:96:bf:84:58:de:7a:dc:42:15: af:a6:bd:1a:4b:cd:c7:18:b0:ab:3e:d1:fd:cf:9d:31:11:9a: 18:c9:cb:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3YyzZobIW2Ck6/d+36KgjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYzRjNzQzZDVjMmFmY2YyN2YxMDRlYjZlMDMxNjExNmM4 NWM3ZGUwHhcNMjYwMTI1MjMwMDMwWhcNMjYwMTI2MjMwMDMwWjAzMTEwLwYDVQQD EyhhMjE1ZWI1MGVmM2NiYTJjNGMzNjFjMTljNjMzYjQ2NTNlMGQ5ZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y4hPYWPUX4pNi9+HzRd+JD4jt4d +mhsbyPEDBfg8/lb2A2ytGKuj6kEmZxVeGm+UvbX8GhK1L3EZ6oPx9SDRrHNuKJ5 DRBPBjMJtVBlTKftHT6nS+IsTvuQnYARNV4A4p5QpDHfMcvqDmB6SKfl58GBLo51 pU9ZGkRl684W68egwMD00H+GJRqnaMIB9rBJcJT+aNKouxsNxYXXDt7C9xfU3eVD ChzbPJXJFc6OCvIgaRr5tcjmYgfJL60+P9hoeFAqRey+oD4KsYWpBCwbeZLLGlEB q0oI9oPmsJpiNZ/eWB9dfu9VFPojBN8O/mn4kxXKeg+kEEjuSPfghOhwyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIV61DvPLosTDYcGcYztGU+DZ1tMB8GA1UdIwQY MBaAFGLEx0PVwq/PJ/EE624DFhFshcfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83MjhjNDAtZjcxMi00ZmVmLTg5NDUt ZGUzNTJhOTJmNmJhLzEvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My83MjhjNDAtZjcxMi00ZmVmLTg5NDUtZGUzNTJhOTJmNmJh LzEvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXo6QW23 PCprGFLzbbO8itnrhvlAPLpdC7EB9JiDBIvPiuWB1TrKdqyh3H7vEm5LbdI2I2h5 +7z2R/ylrJr0WTuQNbgxg5VwhGCLmnu+iBfcLGFvm17KLvQPwaobMylZwGTGo+z4 KwohRT+W+AKCtpewABEtkzyhlWbqEJSRKgNXtwwm7zHZpIaPyOd1wuxP5ArPi+D/ mWBn/ZCd7YOpvTLGTwM+tgqovh0ku/kCVb/kxsN6Ry7NBRF5amSNt+V8uEATgM8F ZireJf5wUJ7eO6pLOGEuvdWXwRUfkppZDam6lr+EWN563EIVr6a9GkvNxxiwqz7R /c+dMRGaGMnL5A== -----END CERTIFICATE-----Generated at Mon Jan 26 06:24:08 2026 by rpki-client