This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft File: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft (raw, json) Hash identifier: AKVjmOQROl1bpQ/xpHewo81iufhKOGqWCreYKdwERFw= Subject key identifier: 0D:C5:3E:3D:3C:68:A4:F7:72:C7:01:DD:93:AF:E6:AA:5B:47:DD:79 Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c Certificate serial: 019BF6519FA787BFD7BC31E045B96B1AB4A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft Manifest number: 17FA Signing time: Sun 25 Jan 2026 18:01:42 +0000 Manifest this update: Sun 25 Jan 2026 18:01:42 +0000 Manifest next update: Mon 26 Jan 2026 18:01:42 +0000 Files and hashes: 1: 5o6k6rNuid97Qh-4yx5_yoP0grk.roa (hash: fdMkIWOquD1CiccVguV8cwles53g42rbkdlJp+WKaT4=) 2: mB7yGysqxM2w0BSJMz4SqdiHSZI.roa (hash: bdgkO9DwF+uIpDi10Iec80EoHKPGBrSErUC5CnGEJa8=) 3: v0ZnLP8B5EQUrIuko5_yQxh3gSA.asa (hash: R4mBNHuUDg1/Cm7AUx43PJr/9fmdUhHVc5FWE7aFrnc=) 4: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl (hash: nqvovbBLXj8IazycKd3ToOsU8WN4r+Wx0lVwCOZMQ7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:9f:a7:87:bf:d7:bc:31:e0:45:b9:6b:1a:b4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c Validity Not Before: Jan 25 18:01:42 2026 GMT Not After : Jan 26 18:01:42 2026 GMT Subject: CN=0dc53e3d3c68a4f772c701dd93afe6aa5b47dd79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:62:e7:44:24:ec:99:9d:43:97:7e:2f:6d:6a: fe:b5:6c:3a:d3:ba:5a:6a:14:d9:73:b3:d4:ab:90: 23:fc:44:c4:8b:45:62:30:4b:8b:67:a2:07:05:1c: 47:eb:f7:18:79:c3:73:40:8f:83:b3:50:bb:8d:f2: 72:f3:2a:6b:2d:33:b3:1e:41:61:78:a2:98:62:f7: 1b:bc:5d:89:5b:a1:d6:70:c4:71:3c:06:34:d2:72: 03:bb:24:c7:69:f6:c4:c3:5d:de:be:52:32:ff:4e: 4b:0c:f6:9d:5a:19:55:2d:1e:6a:0b:84:47:29:87: df:9f:6c:d4:4c:4c:ee:5d:d7:f3:86:a2:b2:12:e3: 31:29:37:2c:50:87:70:ba:87:db:20:16:33:0e:2e: 37:d9:7c:44:fa:c9:76:4f:1e:ed:e9:63:cc:97:3a: ea:1f:95:95:d4:e8:6d:6f:67:2d:6b:52:fa:9f:1b: 3b:2f:02:e5:2e:92:c8:b4:1b:d2:b4:4c:7c:b6:90: 3a:d2:45:c5:de:86:fd:8b:81:1c:e9:ec:2e:e3:13: 5c:20:38:e9:41:9e:5f:e9:13:dd:c9:15:33:81:39: d9:7b:35:a3:c6:b3:df:02:0e:99:e8:49:40:45:20: 3b:45:13:ad:4c:46:55:34:4c:78:a1:56:6d:7d:99: 1a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C5:3E:3D:3C:68:A4:F7:72:C7:01:DD:93:AF:E6:AA:5B:47:DD:79 X509v3 Authority Key Identifier: keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:16:02:2d:6a:0a:20:4c:72:ca:e7:5e:03:51:0c:ec:ec:e6: 23:67:40:be:03:1e:e9:48:e7:2f:d2:5b:36:39:30:9c:77:da: be:26:89:e1:3b:cc:91:54:b7:61:02:0f:b5:4f:e2:e2:21:78: 45:02:1b:0f:b0:c2:18:49:7a:79:b5:9e:30:98:50:f8:83:95: 62:8c:f5:02:bf:34:b8:bc:c2:7e:a4:cc:4f:32:c7:0b:47:17: 71:41:73:82:bf:23:58:ab:4a:51:e3:72:ed:1e:36:79:1f:54: d8:a4:a9:c9:db:ee:9d:82:36:b9:dc:80:97:af:b5:5f:f7:7e: 91:5a:33:87:f5:8f:ca:b1:42:6d:ad:e8:c2:3a:61:a2:3b:8c: 76:43:f9:6c:81:5b:b4:e3:e8:25:07:de:2c:0e:e6:b2:5f:97: f3:b9:4f:db:06:bd:55:ec:51:8c:87:9e:c9:de:92:c2:50:92: 64:c7:00:85:b1:d9:25:92:db:f0:c2:58:c6:13:f8:bc:9a:a6: 74:99:08:45:e4:28:9e:15:2c:3b:c7:b6:cf:ef:c2:9c:37:46: 1c:8c:64:f1:a9:30:1e:ae:36:64:9d:11:92:d3:fb:1e:4b:ff: 68:40:50:23:9f:d8:f3:fb:19:8d:b4:90:ef:c5:9f:a4:b9:93: d5:6e:40:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UZ+nh7/XvDHgRblrGrSoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTYyMThjMjBlZmQ4ZmU1M2ZjYTk5OTBiNzI1ZGQ3OTYz Yzg4NWMwHhcNMjYwMTI1MTgwMTQyWhcNMjYwMTI2MTgwMTQyWjAzMTEwLwYDVQQD EygwZGM1M2UzZDNjNjhhNGY3NzJjNzAxZGQ5M2FmZTZhYTViNDdkZDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGLnRCTsmZ1Dl34vbWr+tWw607pa ahTZc7PUq5Aj/ETEi0ViMEuLZ6IHBRxH6/cYecNzQI+Ds1C7jfJy8yprLTOzHkFh eKKYYvcbvF2JW6HWcMRxPAY00nIDuyTHafbEw13evlIy/05LDPadWhlVLR5qC4RH KYffn2zUTEzuXdfzhqKyEuMxKTcsUIdwuofbIBYzDi432XxE+sl2Tx7t6WPMlzrq H5WV1Ohtb2cta1L6nxs7LwLlLpLItBvStEx8tpA60kXF3ob9i4Ec6ewu4xNcIDjp QZ5f6RPdyRUzgTnZezWjxrPfAg6Z6ElARSA7RROtTEZVNEx4oVZtfZkaTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3FPj08aKT3cscB3ZOv5qpbR915MB8GA1UdIwQY MBaAFMqWIYwg79j+U/ypmQtyXdeWPIhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAt ZDcxMmQ0NzM4MDQ2LzEveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAtZDcxMmQ0NzM4MDQ2 LzEveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRYCLWoK IExyyudeA1EM7OzmI2dAvgMe6UjnL9JbNjkwnHfaviaJ4TvMkVS3YQIPtU/i4iF4 RQIbD7DCGEl6ebWeMJhQ+IOVYoz1Ar80uLzCfqTMTzLHC0cXcUFzgr8jWKtKUeNy 7R42eR9U2KSpydvunYI2udyAl6+1X/d+kVozh/WPyrFCba3owjphojuMdkP5bIFb tOPoJQfeLA7msl+X87lP2wa9VexRjIeeyd6SwlCSZMcAhbHZJZLb8MJYxhP4vJqm dJkIReQonhUsO8e2z+/CnDdGHIxk8akwHq42ZJ0RktP7Hkv/aEBQI5/Y8/sZjbSQ 78WfpLmT1W5AeQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:31 2026 by rpki-client