This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft File: yGjKghR-0id7S8xppShbrnNfLkQ.mft (raw, json) Hash identifier: nYQKAP26w4/BoOdWEqZYX5cYHguIZ7mBg6Q12tGGlt0= Subject key identifier: 3D:A1:DA:96:4D:0B:33:50:52:9C:EC:90:02:36:EB:44:C7:10:86:99 Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44 Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44 Certificate serial: 019BF4D0EE70A5BE5A7BBD15305B1EB6FD34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft Manifest number: 1808 Signing time: Sun 25 Jan 2026 11:01:31 +0000 Manifest this update: Sun 25 Jan 2026 11:01:31 +0000 Manifest next update: Mon 26 Jan 2026 11:01:31 +0000 Files and hashes: 1: CpcMl2eeE4kivr7Y_KcbhMBQkho.roa (hash: 3J5pbfw99fV9VldJRwXaEGP1Raiiwe48ExCYD8L4uko=) 2: gECFr_lCurPKmYUZbnBME6fDRJI.roa (hash: zPv5BFtY7ZttrJvpLgH3TkAwwjvJ39/Ya/LcQ77bi7A=) 3: yGjKghR-0id7S8xppShbrnNfLkQ.crl (hash: whf+zMR5zhPhAQTSotDpVyFqLVvd2OhLG+mJD8Xg1aU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:ee:70:a5:be:5a:7b:bd:15:30:5b:1e:b6:fd:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44 Validity Not Before: Jan 25 11:01:31 2026 GMT Not After : Jan 26 11:01:31 2026 GMT Subject: CN=3da1da964d0b3350529cec900236eb44c7108699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:21:81:d1:42:c1:9f:b9:48:6a:a3:c2:33:28: 37:33:cf:d3:ca:73:7c:a8:2b:1a:2a:1a:da:91:ec: 56:a8:05:d0:63:10:2f:bc:18:26:b2:38:48:bc:61: 76:16:d1:af:9b:c0:79:e2:87:ad:21:7b:e8:58:93: fb:f6:c4:29:24:cd:1c:a3:d8:fd:6a:06:c5:2a:ad: 68:10:e1:76:c4:3e:c9:c7:09:39:8e:35:0f:9e:55: 90:a4:d2:78:77:8d:65:43:da:75:53:84:17:e7:30: de:ec:96:99:51:03:9b:94:0f:f1:c1:1b:eb:61:03: 37:ba:d6:8e:d2:a3:90:27:e3:73:d7:15:f4:04:ea: ba:15:96:6e:72:7f:a3:29:95:5e:74:c6:5d:72:f0: ed:80:2f:88:52:88:35:2c:e8:ff:13:1a:49:81:ac: e6:d0:9a:45:fd:61:96:82:a7:4c:e3:06:37:6a:b2: 71:53:f7:fe:af:2c:fd:f8:bf:4b:ec:84:43:2e:d1: b4:e3:d2:01:63:1e:70:95:8d:db:84:0d:5a:09:61: 47:19:e6:8c:9f:bc:44:71:d3:69:9d:c2:2e:c6:bc: f2:3d:d4:5f:90:43:a6:23:56:49:16:0d:4b:5e:b5: 32:6a:bb:17:12:e0:af:6e:a6:1a:a5:1b:96:4a:a9: 57:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A1:DA:96:4D:0B:33:50:52:9C:EC:90:02:36:EB:44:C7:10:86:99 X509v3 Authority Key Identifier: keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f7:ef:17:24:8b:ba:06:82:ae:a7:95:8e:96:22:49:54:d8: 37:72:2b:d4:06:a1:81:98:ba:12:52:bc:34:d0:f0:8b:29:67: ae:df:f4:52:81:28:ce:85:d1:d5:2b:2f:5d:0a:8a:32:e5:fd: 4c:20:a3:59:54:1c:36:72:d0:55:65:84:38:ad:0b:27:40:c4: 19:95:8a:be:2e:d5:73:c6:2b:15:93:e7:d3:ba:b6:ec:ad:04: 3f:b2:69:d9:2e:82:17:ef:af:ec:5b:41:61:eb:86:45:8f:d7: 74:c2:a7:2c:84:df:44:31:e8:78:a9:af:7f:c7:a6:e6:c8:32: 7e:54:3d:60:5e:9f:80:c5:d8:b0:56:46:13:72:e1:a8:f1:f8: 00:58:1c:af:f4:dd:bf:50:2d:82:8b:d1:06:c3:de:f5:1b:3c: 7b:9b:8d:29:7f:4d:81:cd:77:bb:c4:10:07:de:86:6f:31:87: 52:c8:a9:c9:0e:90:c4:fd:c3:af:5a:09:f5:72:c1:c1:20:10: fd:d2:8c:3e:b3:db:db:d4:43:4b:7f:f4:fb:75:ea:94:00:44: ff:b7:eb:e0:1d:27:fe:d1:77:ef:6c:76:97:52:c4:0a:b8:4b: b3:c4:34:c7:db:89:03:30:98:f9:e5:f2:f8:10:10:c2:0b:12: 7c:94:6d:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00O5wpb5ae70VMFsetv00MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NjhjYTgyMTQ3ZWQyMjc3YjRiY2M2OWE1Mjg1YmFlNzM1 ZjJlNDQwHhcNMjYwMTI1MTEwMTMxWhcNMjYwMTI2MTEwMTMxWjAzMTEwLwYDVQQD EygzZGExZGE5NjRkMGIzMzUwNTI5Y2VjOTAwMjM2ZWI0NGM3MTA4Njk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCGB0ULBn7lIaqPCMyg3M8/TynN8 qCsaKhrakexWqAXQYxAvvBgmsjhIvGF2FtGvm8B54oetIXvoWJP79sQpJM0co9j9 agbFKq1oEOF2xD7Jxwk5jjUPnlWQpNJ4d41lQ9p1U4QX5zDe7JaZUQOblA/xwRvr YQM3utaO0qOQJ+Nz1xX0BOq6FZZucn+jKZVedMZdcvDtgC+IUog1LOj/ExpJgazm 0JpF/WGWgqdM4wY3arJxU/f+ryz9+L9L7IRDLtG049IBYx5wlY3bhA1aCWFHGeaM n7xEcdNpncIuxrzyPdRfkEOmI1ZJFg1LXrUyarsXEuCvbqYapRuWSqlXeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2h2pZNCzNQUpzskAI260THEIaZMB8GA1UdIwQY MBaAFMhoyoIUftIne0vMaaUoW65zXy5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wNDJjMzMtYWI2Yi00OGJlLWE0OTIt NjY4NDkwMTk2MjdlLzEveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8wNDJjMzMtYWI2Yi00OGJlLWE0OTItNjY4NDkwMTk2Mjdl LzEveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/fvFySL ugaCrqeVjpYiSVTYN3Ir1AahgZi6ElK8NNDwiylnrt/0UoEozoXR1SsvXQqKMuX9 TCCjWVQcNnLQVWWEOK0LJ0DEGZWKvi7Vc8YrFZPn07q27K0EP7Jp2S6CF++v7FtB YeuGRY/XdMKnLITfRDHoeKmvf8em5sgyflQ9YF6fgMXYsFZGE3LhqPH4AFgcr/Td v1AtgovRBsPe9Rs8e5uNKX9Ngc13u8QQB96GbzGHUsipyQ6QxP3Dr1oJ9XLBwSAQ /dKMPrPb29RDS3/0+3XqlABE/7fr4B0n/tF372x2l1LECrhLs8Q0x9uJAzCY+eXy +BAQwgsSfJRtPw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:16:05 2026 by rpki-client