This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json) Hash identifier: zW9sbSmcyKu9wdMX5JYDHr56dzePj5yPO10f69qRNac= Subject key identifier: 91:49:03:AC:24:C8:69:15:67:6C:77:03:9C:43:05:3E:1A:D0:B9:61 Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed Certificate serial: 019BF8760C66E1FD86CB5748A2E486F08197 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft Manifest number: 124F Signing time: Mon 26 Jan 2026 04:00:44 +0000 Manifest this update: Mon 26 Jan 2026 04:00:44 +0000 Manifest next update: Tue 27 Jan 2026 04:00:44 +0000 Files and hashes: 1: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: G7Wyd97tGDhoEt9RwRPp9oNLdr4AzsjRuR3U9h7Hyyo=) 2: ZbPx8DmJFKdQIWP-bXHtV-eEAv8.roa (hash: vdIV9Jeh3rKfLujo37xtw3yrmFmf9rID9z/P7vCkaSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:0c:66:e1:fd:86:cb:57:48:a2:e4:86:f0:81:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed Validity Not Before: Jan 26 04:00:44 2026 GMT Not After : Jan 27 04:00:44 2026 GMT Subject: CN=914903ac24c86915676c77039c43053e1ad0b961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ce:d7:3a:70:44:83:16:59:39:0c:81:b3:f3: 22:10:da:b2:5e:e2:5a:5e:d2:41:98:51:d6:9c:62: 0e:1e:f7:69:65:8c:45:2c:c4:f4:b6:53:99:f4:0d: 35:d7:30:3c:ec:3c:5f:29:95:03:db:ee:e2:62:51: 4f:35:a2:0b:d5:4c:c0:b1:ce:ef:82:f9:ac:3b:21: 4a:2f:94:c5:7c:46:ae:07:bf:c7:65:ef:03:9c:35: 66:a1:d9:7f:30:8b:1d:d5:92:08:87:f3:9a:b9:cf: 54:36:75:c3:19:3c:52:5b:80:02:87:53:a9:f3:c1: 24:95:4b:ac:0e:5c:51:5b:fb:11:b7:61:66:b4:ef: 81:66:32:1b:3d:5b:59:94:db:3c:cd:67:4b:aa:08: bc:b3:8f:be:c6:62:e7:9a:6b:8a:7a:10:6a:ca:c0: 21:a2:4e:59:3b:c5:70:52:46:9a:fb:03:80:6c:f5: 5e:4d:09:20:f1:3c:bb:11:65:ca:ba:2c:85:bb:78: 37:e9:c9:16:7d:1e:b6:d7:21:43:6e:a6:ea:6e:55: 3f:63:17:59:35:7b:18:25:d9:6f:69:0f:a0:26:a4: ee:08:a0:6a:ed:92:8a:e3:a3:fd:7b:49:2c:0e:f9: a3:48:51:a9:bf:db:c7:d6:90:ec:30:0a:0c:40:b9: 38:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:49:03:AC:24:C8:69:15:67:6C:77:03:9C:43:05:3E:1A:D0:B9:61 X509v3 Authority Key Identifier: keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:30:ec:87:95:33:ec:b3:60:e2:07:cc:c5:c8:9c:34:82:6f: 87:6b:3f:ae:83:20:4b:4f:cb:32:d5:d8:da:a0:c1:59:2a:bf: 5a:28:d2:16:ad:59:cc:58:84:11:d7:86:fe:bb:39:c6:68:ad: c6:66:81:80:63:f3:04:98:4f:75:18:86:89:01:57:32:81:5f: 78:76:74:0e:75:e3:9a:86:5a:c5:df:4c:6f:5e:dd:35:4f:d6: 5c:a7:9e:c0:96:fd:fc:02:4a:b8:68:46:a2:c3:5a:b2:02:a5: b5:a1:b6:33:3e:f2:90:0a:19:80:5a:46:26:7e:6b:26:6e:d1: 38:3a:1d:91:1f:33:e2:3c:74:29:04:b8:56:96:61:c5:3e:16: 49:f4:90:e4:2f:76:49:1c:f5:09:4e:02:f7:b6:dc:43:2b:53: 92:d0:01:14:b4:37:7c:8e:25:a6:d7:f1:61:bc:44:6f:e2:37: c8:f4:89:d7:f3:3e:83:ee:2a:f0:a8:2f:16:a5:17:94:69:de: e5:ec:66:9c:b8:a2:7d:48:7a:58:03:6c:9a:7e:01:8c:2d:99: cc:d5:89:60:44:c2:22:32:30:58:35:b6:a8:67:b5:f5:b8:b9: ca:3c:da:4e:f9:20:77:1f:91:4c:ff:84:e1:9d:b8:a2:33:ad: 49:2e:f0:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dgxm4f2Gy1dIouSG8IGXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYmUwOGRhMWFiMzFlM2Y5OGY1NTRmYTAxMzczZjk0Y2M5 MDExZWQwHhcNMjYwMTI2MDQwMDQ0WhcNMjYwMTI3MDQwMDQ0WjAzMTEwLwYDVQQD Eyg5MTQ5MDNhYzI0Yzg2OTE1Njc2Yzc3MDM5YzQzMDUzZTFhZDBiOTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM7XOnBEgxZZOQyBs/MiENqyXuJa XtJBmFHWnGIOHvdpZYxFLMT0tlOZ9A011zA87DxfKZUD2+7iYlFPNaIL1UzAsc7v gvmsOyFKL5TFfEauB7/HZe8DnDVmodl/MIsd1ZIIh/Oauc9UNnXDGTxSW4ACh1Op 88EklUusDlxRW/sRt2FmtO+BZjIbPVtZlNs8zWdLqgi8s4++xmLnmmuKehBqysAh ok5ZO8VwUkaa+wOAbPVeTQkg8Ty7EWXKuiyFu3g36ckWfR621yFDbqbqblU/YxdZ NXsYJdlvaQ+gJqTuCKBq7ZKK46P9e0ksDvmjSFGpv9vH1pDsMAoMQLk4nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFJA6wkyGkVZ2x3A5xDBT4a0LlhMB8GA1UdIwQY MBaAFGO+CNoasx4/mPVU+gE3P5TMkBHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85OWNiY2YtN2Q0Zi00YjEyLWE1Nzct Y2M4MDU0YTUxZDY2LzEvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC85OWNiY2YtN2Q0Zi00YjEyLWE1NzctY2M4MDU0YTUxZDY2 LzEvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTDsh5Uz 7LNg4gfMxcicNIJvh2s/roMgS0/LMtXY2qDBWSq/WijSFq1ZzFiEEdeG/rs5xmit xmaBgGPzBJhPdRiGiQFXMoFfeHZ0DnXjmoZaxd9Mb17dNU/WXKeewJb9/AJKuGhG osNasgKltaG2Mz7ykAoZgFpGJn5rJm7RODodkR8z4jx0KQS4VpZhxT4WSfSQ5C92 SRz1CU4C97bcQytTktABFLQ3fI4lptfxYbxEb+I3yPSJ1/M+g+4q8KgvFqUXlGne 5exmnLiifUh6WANsmn4BjC2ZzNWJYETCIjIwWDW2qGe19bi5yjzaTvkgdx+RTP+E 4Z24ojOtSS7wdw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:46:29 2026 by rpki-client