This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft File: YmqokTLSpoTY0qGj9-QPIjRjbzg.mft (raw, json) Hash identifier: b5+EfYYZXA2hoqXWqvRDJZpQlvkPYW6gJ11rJm5Kf/k= Subject key identifier: FF:B1:23:89:AB:5E:C4:25:3D:E9:73:FC:37:7A:CE:CC:A0:C8:C4:4E Authority key identifier: 62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38 Certificate issuer: /CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38 Certificate serial: 019BF8767AA982690479A8EA9B61B76EEF6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft Manifest number: 15C6 Signing time: Mon 26 Jan 2026 04:01:12 +0000 Manifest this update: Mon 26 Jan 2026 04:01:12 +0000 Manifest next update: Tue 27 Jan 2026 04:01:12 +0000 Files and hashes: 1: WCWp0vmGJYt70q-YkfGeiqk74HA.roa (hash: WWuYuPcraJwNveZ8Pjl950Glgpk1p9KqCUVVhSjy+fs=) 2: YmqokTLSpoTY0qGj9-QPIjRjbzg.crl (hash: duWqyQv0+1vHYaKGL5LbhnT4t078ohaUp3OQR5/8HFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:7a:a9:82:69:04:79:a8:ea:9b:61:b7:6e:ef:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38 Validity Not Before: Jan 26 04:01:12 2026 GMT Not After : Jan 27 04:01:12 2026 GMT Subject: CN=ffb12389ab5ec4253de973fc377acecca0c8c44e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6e:3e:8f:84:d6:40:d4:cb:53:94:65:fa:29: 12:3d:52:22:72:45:56:7f:ff:f4:b9:4f:19:dc:58: a2:9d:92:e7:fc:be:d3:9b:07:78:c2:41:e0:31:eb: 5f:c6:a3:9f:55:6a:e4:77:b5:71:29:03:06:dc:4d: 55:3d:b2:f0:d1:40:d0:c9:1a:c0:3b:17:9b:e4:54: 32:5e:59:d3:78:a2:e4:c5:43:b7:06:89:b5:a6:e6: f0:f2:2b:f1:d4:48:36:dc:e9:21:5d:7f:d4:45:30: 2f:48:46:d2:1b:2f:79:13:e8:cd:f3:c7:07:31:7e: c8:94:68:e0:1c:c1:54:59:1f:98:ea:10:73:b6:f7: 8e:65:fa:1f:97:ad:08:09:eb:49:d4:94:00:36:10: e9:41:5d:e7:3a:c6:c3:28:71:a8:22:91:f3:7c:cc: ee:70:d6:68:d1:a6:73:14:ae:50:73:94:78:43:4c: 55:10:a0:da:ef:f9:9d:dd:97:47:31:f7:9d:a1:e7: 7f:63:0c:e4:ae:71:17:c9:4a:58:2c:30:31:ad:58: 38:ca:c2:41:63:35:4b:50:8a:07:90:35:ab:49:76: 8c:49:97:ea:ed:e3:c9:9e:de:81:57:a1:02:26:14: b8:82:06:27:7d:ff:41:3a:a0:80:64:4c:74:eb:12: ae:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B1:23:89:AB:5E:C4:25:3D:E9:73:FC:37:7A:CE:CC:A0:C8:C4:4E X509v3 Authority Key Identifier: keyid:62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:2b:7a:6e:88:3a:bf:bb:c8:46:64:37:b6:39:5c:0d:92:b4: f7:0a:ba:80:4b:04:ac:80:23:7b:4f:1e:94:5f:35:53:9e:8d: 45:0f:32:7d:60:7a:c5:8f:a2:54:ed:07:01:8e:ba:fb:38:1f: 1b:84:2a:ce:65:f0:81:ea:52:04:be:cb:60:cd:6c:28:ac:38: 11:60:64:c9:4d:e4:6b:9a:e8:45:ff:5d:22:c7:11:dd:9e:ee: 99:95:9b:02:76:32:f2:43:1c:72:a8:46:b7:4d:5d:83:04:6d: 60:3b:cb:8f:82:94:57:5f:2b:ec:c6:b6:d5:77:a3:fc:2f:24: e9:bd:16:bf:14:42:71:1d:49:e5:e1:eb:a7:4f:54:0c:4b:e5: 39:a4:68:a1:a2:a8:b5:fe:76:da:c1:df:80:8a:a4:ef:42:53: c9:c8:06:fa:54:43:96:53:2c:b7:f6:2b:56:14:3b:31:bc:96: 32:49:d7:52:2e:fb:31:df:1b:fb:69:ba:e3:c4:a6:22:7b:bb: 4e:98:ca:48:ec:23:d1:1a:04:5f:28:2b:6a:f6:98:24:5b:de: 9a:62:34:52:b8:b6:f1:0d:e9:bc:b7:98:ab:78:d3:f5:5b:6c: bb:d5:e3:e1:d6:d0:4a:40:da:1a:79:6e:dc:ce:c3:bd:16:29: c1:49:90:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dnqpgmkEeajqm2G3bu9vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmFhODkxMzJkMmE2ODRkOGQyYTFhM2Y3ZTQwZjIyMzQ2 MzZmMzgwHhcNMjYwMTI2MDQwMTEyWhcNMjYwMTI3MDQwMTEyWjAzMTEwLwYDVQQD EyhmZmIxMjM4OWFiNWVjNDI1M2RlOTczZmMzNzdhY2VjY2EwYzhjNDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA224+j4TWQNTLU5Rl+ikSPVIickVW f//0uU8Z3FiinZLn/L7Tmwd4wkHgMetfxqOfVWrkd7VxKQMG3E1VPbLw0UDQyRrA Oxeb5FQyXlnTeKLkxUO3Bom1pubw8ivx1Eg23OkhXX/URTAvSEbSGy95E+jN88cH MX7IlGjgHMFUWR+Y6hBztveOZfofl60ICetJ1JQANhDpQV3nOsbDKHGoIpHzfMzu cNZo0aZzFK5Qc5R4Q0xVEKDa7/md3ZdHMfedoed/YwzkrnEXyUpYLDAxrVg4ysJB YzVLUIoHkDWrSXaMSZfq7ePJnt6BV6ECJhS4ggYnff9BOqCAZEx06xKupwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+xI4mrXsQlPelz/Dd6zsygyMROMB8GA1UdIwQY MBaAFGJqqJEy0qaE2NKho/fkDyI0Y284MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1xb2tUTFNwb1RZMHFHajktUVBJalJqYnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80Y2MwYTgtZWM0NC00OWRkLWEzZTIt MjkyNmZjNWY2MWI3LzEvWW1xb2tUTFNwb1RZMHFHajktUVBJalJqYnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80Y2MwYTgtZWM0NC00OWRkLWEzZTItMjkyNmZjNWY2MWI3 LzEvWW1xb2tUTFNwb1RZMHFHajktUVBJalJqYnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPit6bog6 v7vIRmQ3tjlcDZK09wq6gEsErIAje08elF81U56NRQ8yfWB6xY+iVO0HAY66+zgf G4QqzmXwgepSBL7LYM1sKKw4EWBkyU3ka5roRf9dIscR3Z7umZWbAnYy8kMccqhG t01dgwRtYDvLj4KUV18r7Ma21Xej/C8k6b0WvxRCcR1J5eHrp09UDEvlOaRooaKo tf522sHfgIqk70JTycgG+lRDllMst/YrVhQ7MbyWMknXUi77Md8b+2m648SmInu7 TpjKSOwj0RoEXygravaYJFvemmI0Uri28Q3pvLeYq3jT9Vtsu9Xj4dbQSkDaGnlu 3M7DvRYpwUmQIA== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:06 2026 by rpki-client