This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft File: YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft (raw, json) Hash identifier: sFVzm2FC6p9/AR13i82FZrh8eFg1Kalkrijd5PaYDhA= Subject key identifier: F3:93:83:B4:7D:B7:FE:3C:4E:DC:C6:E1:EA:F1:A6:CF:6F:FB:06:A0 Authority key identifier: 62:23:F5:64:16:3F:64:EA:F1:E1:AD:A6:D6:68:CA:D5:9D:5A:B0:A3 Certificate issuer: /CN=6223f564163f64eaf1e1ada6d668cad59d5ab0a3 Certificate serial: 019BF8ACD27648BC862DDBBA1CF645D2DC18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft Manifest number: 65 Signing time: Mon 26 Jan 2026 05:00:34 +0000 Manifest this update: Mon 26 Jan 2026 05:00:34 +0000 Manifest next update: Tue 27 Jan 2026 05:00:34 +0000 Files and hashes: 1: YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl (hash: 0Yh/fszVsJAYBn34IVszZUkseWz0K/8QTEA3tbzPmhM=) 2: nURomofbDgSrxYM0O1_tcq9RI08.roa (hash: tbGTgdyklPOm5IjmielhkBjtWa6HmczItFnGfm4z+A8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:d2:76:48:bc:86:2d:db:ba:1c:f6:45:d2:dc:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6223f564163f64eaf1e1ada6d668cad59d5ab0a3 Validity Not Before: Jan 26 05:00:34 2026 GMT Not After : Jan 27 05:00:34 2026 GMT Subject: CN=f39383b47db7fe3c4edcc6e1eaf1a6cf6ffb06a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fb:61:d7:2f:dd:23:94:70:9a:f9:b8:64:77: 42:28:c0:c3:8a:9a:58:9c:20:c6:cc:25:fe:d5:7e: 8d:4b:48:92:ad:3f:99:b7:e6:b7:b0:2a:06:ff:9f: 75:31:36:66:8b:0b:51:ba:54:ec:07:c1:74:52:b6: cf:54:b4:ce:9e:09:c7:9e:56:1e:dd:ac:96:11:3e: e4:a7:cb:25:cf:48:dd:84:ae:38:21:55:12:ac:a3: 4f:0e:8c:6b:06:38:d6:46:96:75:3b:ad:6b:f7:80: d1:e5:b5:f3:29:ac:8a:fa:7f:af:13:33:95:97:eb: ce:5a:39:b8:07:78:b6:cd:54:bf:11:3e:97:02:86: 59:10:57:90:f5:5a:f0:a6:9b:46:10:f6:6c:43:0d: 74:28:dd:ea:55:95:e4:d1:94:88:68:19:ad:15:54: c8:22:16:89:7f:57:6e:11:44:ad:e6:29:64:de:c9: 0d:9e:dc:10:ff:fa:4c:b3:e6:af:00:61:59:ba:bb: be:09:d7:17:98:5e:fa:2e:d5:37:1f:75:3d:19:07: a3:7c:2d:d2:7d:f2:0b:36:67:d5:66:b6:0c:f1:62: 2d:28:1a:76:5a:7e:1c:32:e5:14:10:1e:0a:a6:9a: f0:c1:95:b0:68:d3:6f:76:44:3d:73:c8:a4:d6:70: 5f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:93:83:B4:7D:B7:FE:3C:4E:DC:C6:E1:EA:F1:A6:CF:6F:FB:06:A0 X509v3 Authority Key Identifier: keyid:62:23:F5:64:16:3F:64:EA:F1:E1:AD:A6:D6:68:CA:D5:9D:5A:B0:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c7:27:5f:d7:f0:7d:91:1d:70:e7:62:73:db:58:8c:b1:dd: b5:3a:af:a9:b3:87:cb:25:88:ab:c2:64:9a:ec:cc:34:1e:96: a0:3e:56:05:cc:ba:5f:82:b6:bf:eb:a2:6e:3d:b7:e8:3f:a2: 42:61:d0:df:af:46:4e:36:4d:64:ca:a8:30:80:35:5d:3e:cd: 14:c0:be:44:17:5c:93:ac:35:16:5c:cd:6a:27:48:f2:3e:ba: fd:a0:38:35:ad:42:02:0e:9c:54:5e:e3:9b:53:97:ef:1d:71: 50:b0:25:fb:48:29:3e:93:d6:97:ff:c6:40:a9:5e:41:91:c4: 87:71:fd:57:49:64:70:51:25:71:b7:fc:30:c4:76:48:d1:e3: 06:db:24:d0:2c:47:e5:19:a9:fd:f6:af:25:75:54:91:18:d2: 50:06:9a:3a:08:35:ae:ae:42:60:f6:43:0e:22:bd:4f:93:80: 89:a2:09:4d:f1:b0:f6:41:75:ef:26:2a:57:90:d2:87:43:fa: f1:f3:67:77:f2:d4:a5:74:de:36:47:fd:c6:5f:11:23:17:a4: 80:35:f7:87:10:ef:3c:f8:39:27:0c:96:a0:c4:a6:e6:86:7c: 44:5c:71:ed:95:d4:ef:e8:e8:46:30:3f:a3:c3:6c:09:55:61: 69:24:2d:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rNJ2SLyGLdu6HPZF0twYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjNmNTY0MTYzZjY0ZWFmMWUxYWRhNmQ2NjhjYWQ1OWQ1 YWIwYTMwHhcNMjYwMTI2MDUwMDM0WhcNMjYwMTI3MDUwMDM0WjAzMTEwLwYDVQQD EyhmMzkzODNiNDdkYjdmZTNjNGVkY2M2ZTFlYWYxYTZjZjZmZmIwNmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPth1y/dI5Rwmvm4ZHdCKMDDippY nCDGzCX+1X6NS0iSrT+Zt+a3sCoG/591MTZmiwtRulTsB8F0UrbPVLTOngnHnlYe 3ayWET7kp8slz0jdhK44IVUSrKNPDoxrBjjWRpZ1O61r94DR5bXzKayK+n+vEzOV l+vOWjm4B3i2zVS/ET6XAoZZEFeQ9VrwpptGEPZsQw10KN3qVZXk0ZSIaBmtFVTI IhaJf1duEUSt5ilk3skNntwQ//pMs+avAGFZuru+CdcXmF76LtU3H3U9GQejfC3S ffILNmfVZrYM8WItKBp2Wn4cMuUUEB4KpprwwZWwaNNvdkQ9c8ik1nBfJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOTg7R9t/48TtzG4erxps9v+wagMB8GA1UdIwQY MBaAFGIj9WQWP2Tq8eGtptZoytWdWrCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlQMVpCWV9aT3J4NGEybTFtaksxWjFhc0tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kNmViZjgtOWMzNS00ZGQzLWFiZjUt ZTk3YjY1Nzk0NDM5LzEvWWlQMVpCWV9aT3J4NGEybTFtaksxWjFhc0tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9kNmViZjgtOWMzNS00ZGQzLWFiZjUtZTk3YjY1Nzk0NDM5 LzEvWWlQMVpCWV9aT3J4NGEybTFtaksxWjFhc0tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMcnX9fw fZEdcOdic9tYjLHdtTqvqbOHyyWIq8JkmuzMNB6WoD5WBcy6X4K2v+uibj236D+i QmHQ369GTjZNZMqoMIA1XT7NFMC+RBdck6w1FlzNaidI8j66/aA4Na1CAg6cVF7j m1OX7x1xULAl+0gpPpPWl//GQKleQZHEh3H9V0lkcFElcbf8MMR2SNHjBtsk0CxH 5Rmp/favJXVUkRjSUAaaOgg1rq5CYPZDDiK9T5OAiaIJTfGw9kF17yYqV5DSh0P6 8fNnd/LUpXTeNkf9xl8RIxekgDX3hxDvPPg5JwyWoMSm5oZ8RFxx7ZXU7+joRjA/ o8NsCVVhaSQtuw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:57:47 2026 by rpki-client