This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft File: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json) Hash identifier: yMuDhnv8ymX/3033ggRFk9CnZohRvfc5QrQuYNSPDAo= Subject key identifier: DA:42:61:33:C0:C6:E8:EE:72:EE:A4:9C:40:C3:4E:75:5E:21:CF:CD Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3 Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3 Certificate serial: 019BF3BDBA9A164672DB2210AE20B73B1CF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft Manifest number: 1536 Signing time: Sun 25 Jan 2026 06:00:56 +0000 Manifest this update: Sun 25 Jan 2026 06:00:56 +0000 Manifest next update: Mon 26 Jan 2026 06:00:56 +0000 Files and hashes: 1: J0qpnA35YrWdkNYZVcd9jRpBOBE.roa (hash: XoaXScXKpwP2trg33PIg2cyrDiDDcWR43c4XEEKEOb0=) 2: PN9Auf6nfCjQOBl6zYFAwEaQaC0.roa (hash: gjfumwwkQOIiQ7wTm/N/cWS4x7vvKCrISYqhYWQWJAY=) 3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: lSp0R58xiH8kZ7i2J3KdNSwxsrNHkg5kRhdqfiFWUmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:ba:9a:16:46:72:db:22:10:ae:20:b7:3b:1c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3 Validity Not Before: Jan 25 06:00:56 2026 GMT Not After : Jan 26 06:00:56 2026 GMT Subject: CN=da426133c0c6e8ee72eea49c40c34e755e21cfcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:59:7f:27:c3:26:c1:72:63:79:0d:b4:c5:5a: 49:d1:bb:a5:f5:ed:f4:19:d9:e0:a2:b6:62:17:75: f5:23:c9:c3:19:f6:dd:fa:54:f5:a6:80:31:6a:b3: 71:eb:c7:85:f3:7d:35:b7:2f:e2:af:d6:73:8d:b4: 81:b4:ac:b8:c9:f7:29:5d:20:b3:4f:5e:7f:5f:37: 51:13:e8:3d:b4:3d:aa:8e:94:6f:81:38:21:98:84: d5:f8:21:b2:66:85:71:ae:b9:b4:99:1d:09:5c:80: 88:44:e2:b4:e6:c6:10:cb:84:bb:a0:0b:ab:26:e8: 27:10:7f:78:55:84:c5:b6:4f:9e:80:55:41:ae:48: bf:52:fa:87:c5:38:35:cd:b1:f8:9a:4e:ee:19:44: b0:93:0d:9c:1c:60:85:e0:6f:c2:11:2b:f5:d6:6e: 54:f6:61:ba:98:e5:57:89:e5:08:8e:47:97:9d:a5: 89:9e:5d:c1:5c:b7:77:fc:51:fa:f2:d0:f8:28:82: ad:73:01:b5:b2:0d:47:6f:dd:69:1c:f9:57:84:94: 3b:6b:d4:4a:79:bf:8b:23:32:8f:f5:5c:76:c1:aa: e3:8a:5d:6c:12:ea:26:f6:f2:27:21:79:a6:1b:28: ba:22:1b:0b:30:50:10:70:8d:ce:43:a5:d3:69:30: 4b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:42:61:33:C0:C6:E8:EE:72:EE:A4:9C:40:C3:4E:75:5E:21:CF:CD X509v3 Authority Key Identifier: keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:92:5b:ed:82:5b:79:f9:05:31:04:c9:53:d3:aa:db:03:ea: a2:4a:3a:eb:0e:f7:01:0d:b4:bc:ea:8d:55:09:11:93:4d:b4: 95:6e:f5:9a:5a:50:0b:3e:54:09:33:c0:43:19:06:31:5d:d9: 4e:c7:f9:2e:80:8f:5d:d5:7e:1f:da:ec:89:32:30:39:a4:9b: 28:c2:c6:e8:ce:25:c1:3d:32:31:73:6f:49:9d:30:cc:f0:f4: 93:96:48:70:69:fd:c8:52:97:14:6b:90:04:7c:ac:ef:2e:0e: 8a:1b:86:a9:e5:77:13:80:66:0d:eb:5b:38:66:44:dd:2a:db: 5f:f2:e8:0b:63:4f:58:fd:6e:e6:e8:05:0f:15:e6:b6:4a:5e: bb:a6:fd:5e:0f:b9:e4:0a:72:0a:89:85:0e:91:b2:9f:df:da: 43:e4:d8:19:9b:d1:6b:02:8d:bb:06:c4:26:d0:ec:10:64:ee: 05:a7:76:20:bd:a4:e7:af:a9:d4:dd:9c:5e:63:a8:75:95:82: 47:0e:ba:fd:ab:fa:ba:52:8f:b3:84:b5:bd:da:ac:de:81:e8: f4:42:af:8a:32:69:e7:61:25:a9:00:39:70:be:b6:78:ba:12: 6b:0a:da:80:d2:8e:8c:32:f0:25:7b:4b:9f:e5:4a:01:19:33: 43:4e:3a:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvbqaFkZy2yIQriC3Oxz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZDViNDg4NDgxMDdiODZlMTQyZDFjMDZjMjlkNGI3MGU3 Mzk0ZDMwHhcNMjYwMTI1MDYwMDU2WhcNMjYwMTI2MDYwMDU2WjAzMTEwLwYDVQQD EyhkYTQyNjEzM2MwYzZlOGVlNzJlZWE0OWM0MGMzNGU3NTVlMjFjZmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApll/J8MmwXJjeQ20xVpJ0bul9e30 GdngorZiF3X1I8nDGfbd+lT1poAxarNx68eF8301ty/ir9ZzjbSBtKy4yfcpXSCz T15/XzdRE+g9tD2qjpRvgTghmITV+CGyZoVxrrm0mR0JXICIROK05sYQy4S7oAur JugnEH94VYTFtk+egFVBrki/UvqHxTg1zbH4mk7uGUSwkw2cHGCF4G/CESv11m5U 9mG6mOVXieUIjkeXnaWJnl3BXLd3/FH68tD4KIKtcwG1sg1Hb91pHPlXhJQ7a9RK eb+LIzKP9Vx2warjil1sEuom9vInIXmmGyi6IhsLMFAQcI3OQ6XTaTBLyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpCYTPAxujucu6knEDDTnVeIc/NMB8GA1UdIwQY MBaAFGPVtIhIEHuG4ULRwGwp1LcOc5TTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTlXMGlFZ1FlNGJoUXRIQWJDblV0dzV6bE5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wMmNkYzItNDBhOC00NzgxLTg2MGIt MjM4OGM5MDZiYzYyLzEvWTlXMGlFZ1FlNGJoUXRIQWJDblV0dzV6bE5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8wMmNkYzItNDBhOC00NzgxLTg2MGItMjM4OGM5MDZiYzYy LzEvWTlXMGlFZ1FlNGJoUXRIQWJDblV0dzV6bE5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJJb7YJb efkFMQTJU9Oq2wPqoko66w73AQ20vOqNVQkRk020lW71mlpQCz5UCTPAQxkGMV3Z Tsf5LoCPXdV+H9rsiTIwOaSbKMLG6M4lwT0yMXNvSZ0wzPD0k5ZIcGn9yFKXFGuQ BHys7y4OihuGqeV3E4BmDetbOGZE3SrbX/LoC2NPWP1u5ugFDxXmtkpeu6b9Xg+5 5ApyComFDpGyn9/aQ+TYGZvRawKNuwbEJtDsEGTuBad2IL2k56+p1N2cXmOodZWC Rw66/av6ulKPs4S1vdqs3oHo9EKvijJp52ElqQA5cL62eLoSawragNKOjDLwJXtL n+VKARkzQ046ZQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:54:32 2026 by rpki-client