This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft File: 1-YoC0gxrfeNXEl84sXNcobkfh7M.mft (raw, json) Hash identifier: zyAMVtSdDO9Yr/APO/m2Q3TH+pVybnpsYY0F7Mr0eUs= Subject key identifier: F7:2E:EC:AF:6C:1E:6F:26:40:3E:39:2F:02:5E:9E:BC:FB:31:30:C0 Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3 Certificate issuer: /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3 Certificate serial: 019BF23DBC8B6942A74D6910D08C930F5D47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft Manifest number: 15C5 Signing time: Sat 24 Jan 2026 23:01:30 +0000 Manifest this update: Sat 24 Jan 2026 23:01:30 +0000 Manifest next update: Sun 25 Jan 2026 23:01:30 +0000 Files and hashes: 1: 1-YoC0gxrfeNXEl84sXNcobkfh7M.crl (hash: BdP8I1LDV8EygIFDDGAJq8j659JlBAYwjCI443Cgum8=) 2: 1lUz7Shr8fMa_pb6NtzznyZ41To.roa (hash: C1rnmJ3xKxL7Gseh79+XfFJXuiu5gmvcrxIosMgQNT4=) 3: 49ww4rPn3g7MqsmGfDqf0YpDy8s.roa (hash: fAAcaoMC+CvPBu2Hms/Nf/sHfWr9TponmPW+VL5Kk7Q=) 4: HkXjWGsEB_nzvxNHP8dGv7MAq7Q.roa (hash: 1xbJ8+wmJvUYu+3DXk9VVxz7EgtP35YeVUeb75i94aM=) 5: o8qBYm0XB-DKW0l9z4LxLJjVMt8.roa (hash: 6+/jpm9f+1fc/q145oBtk8Pmiq4grW2fLOR+zKT6VOc=) 6: vwVgz0AlWqP316EcZY-4ylK0yIA.roa (hash: FuDRoo1XnKDsM6Yjjqt7YCB9VBp4VwF44kzWhYXP7o4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:3d:bc:8b:69:42:a7:4d:69:10:d0:8c:93:0f:5d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3 Validity Not Before: Jan 24 23:01:30 2026 GMT Not After : Jan 25 23:01:30 2026 GMT Subject: CN=f72eecaf6c1e6f26403e392f025e9ebcfb3130c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f6:4a:bd:a9:f2:0f:b2:3f:c3:c5:9b:bc:27: f1:34:c7:a6:64:56:3d:20:9f:b3:04:97:98:9d:3a: 20:9e:89:3a:a1:37:c6:2e:32:b1:a1:ea:a3:a6:0b: be:9f:08:83:a1:76:29:33:41:e4:9e:7f:a9:6a:cb: 96:7e:bf:59:6b:16:d7:11:54:2d:2b:93:8c:aa:b0: aa:39:cc:2d:ff:7e:d3:63:27:a3:69:15:9d:bf:62: 83:53:a9:5b:5e:dd:24:fd:09:a8:3f:6a:27:6e:9b: 2f:58:a6:a6:d3:db:6a:83:85:93:44:3a:24:f4:fb: df:ee:b5:a7:8a:12:37:9c:15:36:26:fa:c5:ac:d2: 13:ee:ec:1e:1f:20:af:4a:de:4d:22:7e:4d:84:d5: 98:38:34:55:66:fe:65:55:09:aa:07:b2:36:1f:0c: 9a:0f:af:c7:18:ce:cb:08:31:9f:69:08:29:ae:a3: b5:44:5e:a6:9a:02:7d:d7:4c:fd:5a:4d:79:5a:bb: 99:d4:64:c8:52:dc:8a:d0:3b:fc:5f:62:35:a1:2d: 30:b4:cf:57:1c:6c:db:f0:dc:8e:60:f5:2b:93:95: db:5b:80:41:4d:38:c5:33:09:b4:7c:7e:27:59:d1: fc:84:a2:5e:d0:22:56:b5:fd:68:d2:30:8c:d5:22: 13:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:2E:EC:AF:6C:1E:6F:26:40:3E:39:2F:02:5E:9E:BC:FB:31:30:C0 X509v3 Authority Key Identifier: keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ab:ea:17:32:b0:02:be:c7:02:a2:a8:41:d8:fe:33:22:28: f3:a5:3e:f8:27:05:d0:77:3d:1a:67:62:e0:7c:ea:7c:84:0d: 7b:59:06:96:8e:2e:06:47:85:03:44:59:8c:20:7c:4f:2d:1e: 5e:9e:b9:82:f2:35:2e:34:c8:eb:5e:6d:b7:1c:06:32:ee:c3: 9b:a2:e1:6a:f8:e6:64:bb:df:44:1c:0e:27:08:52:2f:2a:49: e6:42:31:a8:6c:59:b9:39:90:7b:df:6f:ee:10:5d:5b:1a:93: fb:c7:0f:58:13:37:eb:91:44:b4:7e:f2:f1:8d:e7:24:6c:04: 2f:14:eb:9c:c9:b8:3a:79:d6:bf:0a:96:de:45:de:7c:c2:26: 89:fd:83:4d:b9:c8:9c:b9:0e:ff:d3:0b:c4:5c:13:3e:78:10: 2a:2a:8f:86:2b:03:78:5b:51:d8:3a:52:2c:bc:2a:dd:a0:de: 4c:d9:dc:19:12:ce:ca:e1:ea:e5:cd:5a:ee:ed:6d:1a:1c:eb: 16:5f:8a:91:f7:2f:6b:0c:99:92:42:fe:ab:b6:97:5c:05:a3: ba:d0:bc:98:b1:83:e8:d8:0d:d3:88:6a:26:3d:a3:fc:07:2f: 00:fe:94:9f:1e:ce:8f:6f:3d:2e:c1:1d:da:d1:43:b8:f9:ba: 71:8a:f8:ad -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZvyPbyLaUKnTWkQ0IyTD11HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5OGEwMmQyMGM2YjdkZTM1NzEyNWYzOGIxNzM1Y2ExYjkx Zjg3YjMwHhcNMjYwMTI0MjMwMTMwWhcNMjYwMTI1MjMwMTMwWjAzMTEwLwYDVQQD EyhmNzJlZWNhZjZjMWU2ZjI2NDAzZTM5MmYwMjVlOWViY2ZiMzEzMGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/ZKvanyD7I/w8WbvCfxNMemZFY9 IJ+zBJeYnTognok6oTfGLjKxoeqjpgu+nwiDoXYpM0Hknn+pasuWfr9ZaxbXEVQt K5OMqrCqOcwt/37TYyejaRWdv2KDU6lbXt0k/QmoP2onbpsvWKam09tqg4WTRDok 9Pvf7rWnihI3nBU2JvrFrNIT7uweHyCvSt5NIn5NhNWYODRVZv5lVQmqB7I2Hwya D6/HGM7LCDGfaQgprqO1RF6mmgJ910z9Wk15WruZ1GTIUtyK0Dv8X2I1oS0wtM9X HGzb8NyOYPUrk5XbW4BBTTjFMwm0fH4nWdH8hKJe0CJWtf1o0jCM1SIT2QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPcu7K9sHm8mQD45LwJenrz7MTDAMB8GA1UdIwQY MBaAFPmKAtIMa33jVxJfOLFzXKG5H4ezMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Zb0MwZ3hyZmVOWEVsODRzWE5jb2JrZmg3TS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvYTkyMDZlLWMxZTEtNGMxNS05NTMz LWFjZTNkNjc1ZDNjZC8xLzEtWW9DMGd4cmZlTlhFbDg0c1hOY29ia2ZoN00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzdiL2E5MjA2ZS1jMWUxLTRjMTUtOTUzMy1hY2UzZDY3NWQz Y2QvMS8xLVlvQzBneHJmZU5YRWw4NHNYTmNvYmtmaDdNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6vq FzKwAr7HAqKoQdj+MyIo86U++CcF0Hc9Gmdi4HzqfIQNe1kGlo4uBkeFA0RZjCB8 Ty0eXp65gvI1LjTI615ttxwGMu7Dm6LhavjmZLvfRBwOJwhSLypJ5kIxqGxZuTmQ e99v7hBdWxqT+8cPWBM365FEtH7y8Y3nJGwELxTrnMm4OnnWvwqW3kXefMImif2D TbnInLkO/9MLxFwTPngQKiqPhisDeFtR2DpSLLwq3aDeTNncGRLOyuHq5c1a7u1t GhzrFl+KkfcvawyZkkL+q7aXXAWjutC8mLGD6NgN04hqJj2j/AcvAP6Unx7Oj289 LsEd2tFDuPm6cYr4rQ== -----END CERTIFICATE-----Generated at Sun Jan 25 05:41:38 2026 by rpki-client