This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json) Hash identifier: bn9Q7Ub1bslCRk112ZEiTOl7WxPlsksi54beDU0JQCw= Subject key identifier: C6:E7:70:5F:5A:79:8E:34:82:29:6D:BF:96:6D:25:1D:BB:1F:90:06 Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b Certificate serial: 019BF79ABBB28B604BF3BB8ED15D77E01B47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 00:01:11 +0000 Manifest this update: Mon 26 Jan 2026 00:01:11 +0000 Manifest next update: Tue 27 Jan 2026 00:01:11 +0000 Files and hashes: 1: Xz1YPhwlgcFJn9H6zKCHQE9OZMs.roa (hash: E23r1ViDJSDDunuaw4r4shrNSmLJDRKbQsrvll9ROpQ=) 2: Y6uXwuSAMDltrgK47G1JT4Ly1MU.roa (hash: kINCl8tG1shq70mte4iuRzZgEl60hKLBpRpKxfDa3dE=) 3: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: EhCsjh3dKt3MlFMGYvNtm+yHzlp2Dh0pmKFIGlw0qRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:bb:b2:8b:60:4b:f3:bb:8e:d1:5d:77:e0:1b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b Validity Not Before: Jan 26 00:01:11 2026 GMT Not After : Jan 27 00:01:11 2026 GMT Subject: CN=c6e7705f5a798e3482296dbf966d251dbb1f9006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:94:37:74:ca:5c:b2:2a:23:f9:77:2d:a8:a0: 59:6c:b0:88:55:ea:ff:9e:bc:1a:31:79:cb:c4:60: fa:39:d7:d2:69:57:c3:c1:87:7e:c1:eb:fe:c9:c5: e9:e4:69:f8:c4:49:13:01:f2:6a:62:4a:d1:03:5d: e1:1f:55:c2:eb:c4:ec:cd:0e:85:9d:ff:dd:5e:a1: 35:29:e7:69:f2:87:78:b5:79:d0:f4:ee:5d:7e:00: a1:d9:a1:40:87:79:78:de:15:b5:09:64:47:e8:09: ba:55:b6:47:37:18:9f:e5:d7:62:21:49:97:e8:5d: 57:ed:3e:70:c7:d6:ae:1a:f6:b9:67:09:7e:aa:93: 67:9e:58:13:70:a8:37:a5:d0:99:c1:36:fa:a3:2c: 17:a8:02:3e:63:4f:39:ab:82:84:85:c9:bb:3c:2d: b3:e2:41:af:d6:4b:67:06:b4:33:ba:71:d3:44:3e: 2d:78:33:fb:2b:bf:90:a7:27:37:36:e5:9b:04:8f: 0b:fa:2b:5d:d1:de:cf:c4:ad:1f:f8:d9:11:b3:1a: c5:07:d6:75:64:69:c7:da:2d:20:55:7f:a6:c4:99: eb:90:ce:b0:68:1f:29:58:3a:e0:8d:57:a4:3f:cc: e7:5f:28:4f:df:45:ee:33:b1:1e:3e:35:e1:e5:63: cb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E7:70:5F:5A:79:8E:34:82:29:6D:BF:96:6D:25:1D:BB:1F:90:06 X509v3 Authority Key Identifier: keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:c1:68:16:ee:2e:c5:73:b8:e9:43:ac:41:eb:ca:9d:55:68: 17:84:b2:4f:d3:c4:f3:f6:0d:b7:e7:cf:2e:e9:d1:28:fa:89: ea:33:2d:98:cf:cd:89:14:41:0d:65:40:a3:b0:4f:f9:7a:74: 8c:9f:04:04:65:cb:10:42:6d:d7:48:c1:66:bf:9a:de:38:c2: 45:66:1a:bc:49:fa:a9:07:a4:11:82:c6:08:37:18:9e:73:30: 2a:ba:b5:03:63:19:8a:da:88:49:52:aa:73:b3:5e:5e:27:85: 1d:24:f2:ac:5f:52:68:f9:4c:7b:17:4d:d7:35:7f:a1:ec:dd: 7f:31:1c:39:12:5e:c0:87:56:52:d7:e5:0f:19:3a:93:e6:60: f7:14:e6:65:97:0a:e3:d7:b3:0a:4f:10:1e:eb:84:f8:73:48: 54:6c:91:e6:f6:61:81:f8:5e:90:44:9a:b6:1d:0a:82:7c:e6: cc:75:2e:47:47:8d:a9:83:e5:28:b3:33:60:aa:30:aa:1b:48: a7:eb:eb:f4:e8:6a:c6:e1:9c:4a:b9:25:cb:3d:4c:e2:04:b3: 70:88:9d:c0:f6:6f:95:ea:2a:f3:de:ce:d2:db:79:4c:42:08: 2c:93:84:54:84:bb:cf:66:b6:31:82:0e:94:bf:e9:ca:f3:5e: 23:0e:8c:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mruyi2BL87uO0V134BtHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNjc5OTk2NDVlMTViNjUyNjhhMGQ5M2JiMTRjNGY1MTcy NDQ1MWIwHhcNMjYwMTI2MDAwMTExWhcNMjYwMTI3MDAwMTExWjAzMTEwLwYDVQQD EyhjNmU3NzA1ZjVhNzk4ZTM0ODIyOTZkYmY5NjZkMjUxZGJiMWY5MDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZQ3dMpcsioj+XctqKBZbLCIVer/ nrwaMXnLxGD6OdfSaVfDwYd+wev+ycXp5Gn4xEkTAfJqYkrRA13hH1XC68TszQ6F nf/dXqE1Kedp8od4tXnQ9O5dfgCh2aFAh3l43hW1CWRH6Am6VbZHNxif5ddiIUmX 6F1X7T5wx9auGva5Zwl+qpNnnlgTcKg3pdCZwTb6oywXqAI+Y085q4KEhcm7PC2z 4kGv1ktnBrQzunHTRD4teDP7K7+Qpyc3NuWbBI8L+itd0d7PxK0f+NkRsxrFB9Z1 ZGnH2i0gVX+mxJnrkM6waB8pWDrgjVekP8znXyhP30XuM7EePjXh5WPLjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbncF9aeY40giltv5ZtJR27H5AGMB8GA1UdIwQY MBaAFGFnmZZF4VtlJooNk7sUxPUXJEUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVdlWmxrWGhXMlVtaWcyVHV4VEU5UmNrUlJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kMzFhMjUtMjUwNy00NzFkLWFkYzct ODgwN2Y5NWFlNzVkLzEvWVdlWmxrWGhXMlVtaWcyVHV4VEU5UmNrUlJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9kMzFhMjUtMjUwNy00NzFkLWFkYzctODgwN2Y5NWFlNzVk LzEvWVdlWmxrWGhXMlVtaWcyVHV4VEU5UmNrUlJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcFoFu4u xXO46UOsQevKnVVoF4SyT9PE8/YNt+fPLunRKPqJ6jMtmM/NiRRBDWVAo7BP+Xp0 jJ8EBGXLEEJt10jBZr+a3jjCRWYavEn6qQekEYLGCDcYnnMwKrq1A2MZitqISVKq c7NeXieFHSTyrF9SaPlMexdN1zV/oezdfzEcORJewIdWUtflDxk6k+Zg9xTmZZcK 49ezCk8QHuuE+HNIVGyR5vZhgfhekESath0KgnzmzHUuR0eNqYPlKLMzYKowqhtI p+vr9OhqxuGcSrklyz1M4gSzcIidwPZvleoq897O0tt5TEIILJOEVIS7z2a2MYIO lL/pyvNeIw6MDQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:19 2026 by rpki-client