This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft File: 1YghK_XazhCA3EXixVuS_4XGwZI.mft (raw, json) Hash identifier: Hp7b8CjWygDPrKaoWCITQ5A80eQicvW0C3cC8FdRcJ0= Subject key identifier: D2:FB:CD:9C:FC:32:27:57:53:05:5D:28:D0:7B:8E:59:93:34:5C:52 Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92 Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192 Certificate serial: 019BF6515EA4B8C3C53954772BBDD0B4F64F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft Manifest number: 03F3 Signing time: Sun 25 Jan 2026 18:01:26 +0000 Manifest this update: Sun 25 Jan 2026 18:01:26 +0000 Manifest next update: Mon 26 Jan 2026 18:01:26 +0000 Files and hashes: 1: 1YghK_XazhCA3EXixVuS_4XGwZI.crl (hash: 0wXTjhV+IC6YqhJ2YA9KCpdDMbd+7f0IjNyDB3+j1Ho=) 2: 22x8PN_1LTHR6l66GpUqyti_zA0.roa (hash: CSv7c1XejVckeMl+4KVZ0R5JwTwo6hy/rgUnKWrc8iE=) 3: JsDV0JgNIJsN-ibYdgtSHoMxIvw.roa (hash: cHo9xyUEk2HyEiBCUp1r4usf+4Crk42MuHgQ//gFieE=) 4: MN6U3VW42sb0OVdqBMcLBJ2g2zU.roa (hash: PPnAC3azWQhKiDxnnjOYt4M14J8iF87kO3d2yUA8Kfw=) 5: YbKvoesrYXHEmFEjcVByq5eynzo.roa (hash: +DYa+fe9egpPIsRsJIXZUMAsEnq8jTNkWLMhIYMd4Q8=) 6: byQ1yszhOcZFFPh_Y5AKBXMFwMw.roa (hash: b7qP0sl3+othoRFTec+oydZ8N3Jq1XUmt+VOT3v3hnY=) 7: gC5ojAbS6z97a05sXClJSkkJk3w.roa (hash: laV5VTUScUMrKJ3a9qdAMd2Oli3d8tpx9cRZCqQwMls=) 8: kHP0M6fVan_dV2bdSXbsBdJ27pU.roa (hash: z5ajzgWdArm34wD+Vi31zXSHcWy5YvyidurL0SZHcbU=) 9: snHZlA_rMzA-GJtkANTKKKsjJms.roa (hash: wWUHeupDm38JL23SWCuEwKVQP7+CZz4/f+h6ttaySF4=) 10: tIWBDaq4vNzJLG3YFrMngR6UjEI.roa (hash: 4zzhkvUoZZB4cgAYHJR/34Gu96Vut755O0lj9l2/tWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:5e:a4:b8:c3:c5:39:54:77:2b:bd:d0:b4:f6:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192 Validity Not Before: Jan 25 18:01:26 2026 GMT Not After : Jan 26 18:01:26 2026 GMT Subject: CN=d2fbcd9cfc32275753055d28d07b8e5993345c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6e:73:46:60:5b:6b:4f:4d:38:3a:b1:6b:46: 4b:40:87:f9:81:83:d6:37:cc:d9:a0:0d:55:db:45: f1:ba:66:cf:69:92:0d:c7:bc:c1:58:82:81:e4:69: f8:a7:09:05:cd:ba:3f:cd:61:2a:23:fe:48:54:e0: 2e:84:f6:24:c8:8d:d5:d9:91:b0:b4:42:fb:11:ae: 49:5b:44:b6:aa:47:63:88:6f:d3:c0:f4:cb:a2:25: 35:dc:da:05:4f:37:22:37:2a:61:d9:83:5a:e1:e5: 1e:02:b7:4e:31:61:7f:fc:9e:10:23:de:76:27:ba: ed:b7:6b:5d:f2:44:7a:11:1d:94:58:a2:94:9e:56: 36:2a:e6:d5:7d:cc:b6:47:90:43:c6:76:df:48:e3: 96:01:a4:66:5d:cf:48:db:b8:f9:80:56:ad:82:e0: 64:92:04:68:30:13:b0:70:33:52:15:16:45:33:20: d2:09:d5:72:f5:12:50:76:fc:e0:33:dc:45:19:23: 5a:d3:83:6b:11:a2:01:dc:dc:e8:83:b2:a1:92:f4: 95:60:77:8d:5e:fe:30:41:f2:4e:f3:e1:fd:a8:64: 8f:fe:10:47:79:e8:b0:5c:d5:47:d0:ba:7f:b7:c7: 60:32:74:e8:04:96:c4:90:c0:fb:a6:94:ae:69:9c: 5b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FB:CD:9C:FC:32:27:57:53:05:5D:28:D0:7B:8E:59:93:34:5C:52 X509v3 Authority Key Identifier: keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:5b:78:d9:01:b0:bb:55:4c:a7:ed:9b:3a:71:ca:d9:ea:06: 41:db:13:d6:32:63:2a:eb:cf:e9:63:9b:8d:80:5f:74:c7:56: 9d:e5:55:2b:ea:73:c2:56:b9:7d:c0:34:df:e7:8c:d5:cd:82: d0:9d:99:39:e5:02:37:e8:05:95:45:28:75:38:c2:a3:5a:c5: cb:62:44:73:98:52:6b:d5:eb:2e:5d:88:b4:98:e8:dc:30:36: 85:9f:b6:8d:eb:8b:25:b0:79:96:ea:0f:7c:56:47:2e:87:dc: 3d:bc:26:6f:9b:1b:6b:31:dd:fe:30:4e:90:34:58:08:67:8a: 52:d2:b6:de:b5:34:0e:2e:cd:fc:93:07:45:36:d4:09:20:c8: b0:5c:3d:6d:7b:04:82:b1:41:5f:be:6b:14:6b:31:b3:6e:30: ec:11:1d:d0:52:1d:8c:55:cf:c7:da:15:7c:62:55:16:95:5b: ed:a1:46:b6:bd:e2:c3:95:4c:a9:72:6e:c9:b8:b0:23:17:e8: 90:df:4c:5a:e5:2b:11:c1:52:e0:25:09:05:7e:a9:97:83:c0: 7f:b4:09:2d:a3:97:ca:7f:9c:fd:87:d3:44:d3:2b:df:eb:b9: 9b:b3:fc:57:ea:8d:10:9a:c2:0e:49:1c:a3:34:8b:97:c9:25: fa:f3:fd:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UV6kuMPFOVR3K73QtPZPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ODgyMTJiZjVkYWNlMTA4MGRjNDVlMmM1NWI5MmZmODVj NmMxOTIwHhcNMjYwMTI1MTgwMTI2WhcNMjYwMTI2MTgwMTI2WjAzMTEwLwYDVQQD EyhkMmZiY2Q5Y2ZjMzIyNzU3NTMwNTVkMjhkMDdiOGU1OTkzMzQ1YzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo25zRmBba09NODqxa0ZLQIf5gYPW N8zZoA1V20XxumbPaZINx7zBWIKB5Gn4pwkFzbo/zWEqI/5IVOAuhPYkyI3V2ZGw tEL7Ea5JW0S2qkdjiG/TwPTLoiU13NoFTzciNyph2YNa4eUeArdOMWF//J4QI952 J7rtt2td8kR6ER2UWKKUnlY2KubVfcy2R5BDxnbfSOOWAaRmXc9I27j5gFatguBk kgRoMBOwcDNSFRZFMyDSCdVy9RJQdvzgM9xFGSNa04NrEaIB3Nzog7KhkvSVYHeN Xv4wQfJO8+H9qGSP/hBHeeiwXNVH0Lp/t8dgMnToBJbEkMD7ppSuaZxbWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNL7zZz8MidXUwVdKNB7jlmTNFxSMB8GA1UdIwQY MBaAFNWIISv12s4QgNxF4sVbkv+FxsGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMt MWIyYWMzNWMwOWFhLzEvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMtMWIyYWMzNWMwOWFh LzEvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1t42QGw u1VMp+2bOnHK2eoGQdsT1jJjKuvP6WObjYBfdMdWneVVK+pzwla5fcA03+eM1c2C 0J2ZOeUCN+gFlUUodTjCo1rFy2JEc5hSa9XrLl2ItJjo3DA2hZ+2jeuLJbB5luoP fFZHLofcPbwmb5sbazHd/jBOkDRYCGeKUtK23rU0Di7N/JMHRTbUCSDIsFw9bXsE grFBX75rFGsxs24w7BEd0FIdjFXPx9oVfGJVFpVb7aFGtr3iw5VMqXJuybiwIxfo kN9MWuUrEcFS4CUJBX6pl4PAf7QJLaOXyn+c/YfTRNMr3+u5m7P8V+qNEJrCDkkc ozSLl8kl+vP9Aw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:39 2026 by rpki-client