This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft File: yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft (raw, json) Hash identifier: mt3kn7U3TtIXQbeQmB9dkK/ibJ8dtOsW0YOJcSV1Zpg= Subject key identifier: AB:2F:E1:A7:22:9B:00:5B:A3:17:0C:D2:83:62:E4:FB:AC:28:E5:16 Authority key identifier: C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7 Certificate issuer: /CN=c9392c3276b243aff740a082c588fb73941ebbf7 Certificate serial: 019BF42BAD1000A32729446F403B98FF4386 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft Manifest number: 075A Signing time: Sun 25 Jan 2026 08:01:01 +0000 Manifest this update: Sun 25 Jan 2026 08:01:01 +0000 Manifest next update: Mon 26 Jan 2026 08:01:01 +0000 Files and hashes: 1: CDYJ5duT-YiN5vn4ue9hcM_s3OA.roa (hash: ZtL4bRFnSWFbHHuzOCLv1emqHa4TMbYiRtAD7J2vEiI=) 2: yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl (hash: KXIfwMXtuNhW/AnUG1R2TCsjMU4FBDciQjra+H8hoJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:ad:10:00:a3:27:29:44:6f:40:3b:98:ff:43:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9392c3276b243aff740a082c588fb73941ebbf7 Validity Not Before: Jan 25 08:01:01 2026 GMT Not After : Jan 26 08:01:01 2026 GMT Subject: CN=ab2fe1a7229b005ba3170cd28362e4fbac28e516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:21:0a:f1:ac:03:2e:79:aa:f6:1b:40:0e:5b: 7c:95:50:ba:21:2c:3e:7f:e8:93:02:1e:6d:68:cf: a2:4d:e3:ea:37:67:6e:ca:f3:11:bd:0b:30:81:6d: ca:16:87:67:50:fd:c5:4a:04:d5:51:02:9c:f4:ea: 9d:7c:20:ad:d2:b0:e2:8d:f3:67:fe:e2:ca:a1:c5: 1e:7a:56:cc:1a:ee:b4:8c:2e:ac:63:00:e2:52:fd: 6e:30:5c:5d:12:8c:32:f2:5a:65:e5:42:29:59:fa: ea:ef:f5:22:6b:1e:c6:ac:b4:37:55:1d:42:4e:6d: 50:c7:a4:c9:ae:75:55:ed:66:73:ca:5c:45:76:9e: 18:ec:ea:75:cf:56:e7:ae:77:e5:3d:c5:19:8e:d6: 90:de:de:cc:ae:e4:d3:f5:9e:06:32:fb:11:1b:93: c1:ba:af:8a:e3:72:c5:df:df:c5:a4:8d:00:ee:84: 4d:2a:6c:49:a9:8d:bf:0c:14:53:4c:6a:e8:2d:e0: 87:c9:1e:42:9a:2d:ce:12:42:17:47:52:31:48:f2: 44:5f:b1:c2:e5:f1:1c:b1:c9:8b:83:e1:ac:c1:af: f7:1a:92:d5:ab:45:10:c6:a3:aa:77:c2:63:0d:2a: 82:d3:d1:9a:3d:5a:09:15:72:7b:5f:c2:71:23:53: 42:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2F:E1:A7:22:9B:00:5B:A3:17:0C:D2:83:62:E4:FB:AC:28:E5:16 X509v3 Authority Key Identifier: keyid:C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:6f:c6:cd:3b:28:f2:ea:4f:c2:07:39:08:2e:a7:a7:02:68: 98:1b:01:e6:e1:47:83:38:0e:31:84:d5:73:8e:a4:73:0f:3b: bc:ca:71:7c:17:6f:57:d8:20:18:fb:81:53:97:df:27:7d:15: d0:82:ae:8d:7a:af:37:f9:b8:77:f8:87:1b:67:af:5f:c5:0d: f4:d8:4d:0b:51:82:5b:c1:c1:03:dc:50:64:31:0b:fb:02:c2: af:d3:76:f3:89:36:0d:c7:c9:63:49:34:71:96:f2:d4:27:d5: 83:f4:2b:40:1b:03:9b:d4:c7:7c:53:be:83:41:e0:97:1a:b6: 91:20:14:3d:0a:04:57:ea:dc:30:8e:0d:62:5e:a0:1c:6d:36: 9a:57:9a:5d:2b:01:4c:87:17:83:51:d5:8f:0c:63:3c:bd:cc: 15:4f:7b:45:e6:2d:f0:41:da:d7:fe:37:43:02:24:84:b5:ff: 1d:73:44:dc:e5:fe:b0:6d:00:f3:a0:39:70:fa:08:44:46:cc: 22:c4:41:4b:d2:29:d5:dd:f1:3f:46:5f:f7:ea:89:6d:58:3d: a1:2d:06:3f:fc:2b:f2:ab:c5:6a:f3:89:c9:4e:c8:99:22:9c: 7f:cf:6b:4d:9c:3a:b1:99:30:92:97:38:82:19:28:03:a5:b4: eb:78:66:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K60QAKMnKURvQDuY/0OGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MzkyYzMyNzZiMjQzYWZmNzQwYTA4MmM1ODhmYjczOTQx ZWJiZjcwHhcNMjYwMTI1MDgwMTAxWhcNMjYwMTI2MDgwMTAxWjAzMTEwLwYDVQQD EyhhYjJmZTFhNzIyOWIwMDViYTMxNzBjZDI4MzYyZTRmYmFjMjhlNTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CEK8awDLnmq9htADlt8lVC6ISw+ f+iTAh5taM+iTePqN2duyvMRvQswgW3KFodnUP3FSgTVUQKc9OqdfCCt0rDijfNn /uLKocUeelbMGu60jC6sYwDiUv1uMFxdEowy8lpl5UIpWfrq7/Uiax7GrLQ3VR1C Tm1Qx6TJrnVV7WZzylxFdp4Y7Op1z1bnrnflPcUZjtaQ3t7MruTT9Z4GMvsRG5PB uq+K43LF39/FpI0A7oRNKmxJqY2/DBRTTGroLeCHyR5Cmi3OEkIXR1IxSPJEX7HC 5fEcscmLg+Gswa/3GpLVq0UQxqOqd8JjDSqC09GaPVoJFXJ7X8JxI1NCxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsv4acimwBboxcM0oNi5PusKOUWMB8GA1UdIwQY MBaAFMk5LDJ2skOv90CggsWI+3OUHrv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yNTZjYjYtZGM0Mi00MWE1LWI5MjAt MjRjYmExYzAzYzk5LzEveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yNTZjYjYtZGM0Mi00MWE1LWI5MjAtMjRjYmExYzAzYzk5 LzEveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgG/GzTso 8upPwgc5CC6npwJomBsB5uFHgzgOMYTVc46kcw87vMpxfBdvV9ggGPuBU5ffJ30V 0IKujXqvN/m4d/iHG2evX8UN9NhNC1GCW8HBA9xQZDEL+wLCr9N284k2DcfJY0k0 cZby1CfVg/QrQBsDm9THfFO+g0Hglxq2kSAUPQoEV+rcMI4NYl6gHG02mleaXSsB TIcXg1HVjwxjPL3MFU97ReYt8EHa1/43QwIkhLX/HXNE3OX+sG0A86A5cPoIREbM IsRBS9Ip1d3xP0Zf9+qJbVg9oS0GP/wr8qvFavOJyU7ImSKcf89rTZw6sZkwkpc4 ghkoA6W063hmzA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:11 2026 by rpki-client