This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft File: YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft (raw, json) Hash identifier: wpzYKJcVOfH4KyiO7i1MUqBd1AWL7vLJM6A1byiXhkA= Subject key identifier: 1D:BD:77:99:FB:C0:A6:70:59:73:44:AF:85:29:01:E6:54:6B:95:04 Authority key identifier: 62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77 Certificate issuer: /CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77 Certificate serial: 019BF5ABE2E5F7F5390653416F6B7C47872A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft Manifest number: 0213 Signing time: Sun 25 Jan 2026 15:00:41 +0000 Manifest this update: Sun 25 Jan 2026 15:00:41 +0000 Manifest next update: Mon 26 Jan 2026 15:00:41 +0000 Files and hashes: 1: YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl (hash: hfryDtuXJKm1aleFrEpAfO9M35bUsJY0p4Jp2f7oWy0=) 2: otGdouxrN50G3K6_VfBD4sUjZsk.roa (hash: KaxlTsTV8jPWF44UBDhZygEc33e9Bf3O7Tb4YHBXJsA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:e2:e5:f7:f5:39:06:53:41:6f:6b:7c:47:87:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77 Validity Not Before: Jan 25 15:00:41 2026 GMT Not After : Jan 26 15:00:41 2026 GMT Subject: CN=1dbd7799fbc0a670597344af852901e6546b9504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4c:89:21:f6:b0:95:e8:bb:74:9b:0f:e0:fd: 57:f8:1d:a8:a3:79:99:97:e3:61:e4:6e:f5:26:2a: 49:08:48:45:c2:6c:26:d7:d8:03:f3:64:48:de:36: 74:a2:9f:eb:9c:50:ca:79:ef:41:f5:cd:5e:76:d6: 62:23:2a:25:84:88:75:a1:43:d4:69:46:95:60:88: 19:78:ff:ac:5a:97:4f:30:1a:ad:39:15:76:ca:94: d1:10:76:24:90:12:45:72:9d:ac:04:bc:92:f5:9c: 1a:3c:b0:ea:fb:7a:87:13:cc:08:21:ea:b4:6e:73: 4a:ab:15:18:99:21:09:88:8b:8e:4a:57:b2:71:38: 31:92:e6:15:d3:8d:a5:e2:4e:97:83:f3:5e:80:db: 30:02:f4:bd:a0:6e:6e:b4:2e:27:5a:88:6c:db:e6: 06:cf:ad:8c:c6:a6:f9:97:80:c5:dc:f2:63:ed:3a: ab:7d:80:a4:b4:15:17:34:bc:30:ea:b7:f8:5c:e3: ca:58:a9:d7:68:ca:b6:65:46:23:fd:91:c0:7f:18: 50:f5:21:bd:01:46:ee:2f:05:a1:5b:aa:52:9c:cb: 30:2b:72:e0:64:59:9e:c3:32:a9:0b:f3:67:e5:9a: af:69:76:62:cd:e9:94:79:01:96:1a:b7:45:3e:76: 15:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BD:77:99:FB:C0:A6:70:59:73:44:AF:85:29:01:E6:54:6B:95:04 X509v3 Authority Key Identifier: keyid:62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:dc:af:9a:14:69:3c:3e:78:0d:17:7f:cb:ea:c2:82:c8:73: c7:99:d8:65:20:5f:5a:ac:28:2c:99:f6:32:73:7f:9a:01:25: 29:da:c4:36:0f:c9:05:2f:ca:dd:08:f2:ea:66:86:6e:92:71: 59:43:d0:16:79:3f:12:4d:b0:25:bc:04:2b:fa:35:1b:d1:86: 12:97:0f:4f:99:36:cb:b6:f3:71:fa:c9:da:74:07:96:eb:19: fa:6b:12:61:78:55:d7:85:ec:d7:bd:c8:1b:5a:ca:3a:c0:53: 58:a9:66:65:25:bb:08:e1:30:c3:4a:49:02:f5:a1:8b:92:0c: 7a:ee:58:5c:d0:f0:9e:56:3d:f6:17:bf:9b:2c:7b:25:01:d2: a4:6d:30:95:63:d2:50:40:7a:1b:19:53:e4:6a:bf:ce:2a:8e: c7:41:6e:5f:95:0e:e4:44:9c:d0:13:a9:5b:64:f4:d0:34:6f: 92:a6:7d:d2:fc:16:42:a3:f7:3d:98:45:87:c5:d8:6e:91:f4: 1d:11:77:6d:79:4a:af:f2:4a:76:d5:66:0a:75:f2:d0:c8:b7: 9c:e5:9f:61:d7:98:1b:a4:42:23:6c:71:67:be:40:6c:0d:d0: 8b:4e:ef:7c:13:d3:f2:8d:5a:e3:ae:ab:2b:e4:ef:29:16:a9: 3f:17:3b:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q+Ll9/U5BlNBb2t8R4cqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNzhjYjYwZjM1N2Q2MWNiOThiNGM3Y2E5MTVhMTI4MThl ZjJjNzcwHhcNMjYwMTI1MTUwMDQxWhcNMjYwMTI2MTUwMDQxWjAzMTEwLwYDVQQD EygxZGJkNzc5OWZiYzBhNjcwNTk3MzQ0YWY4NTI5MDFlNjU0NmI5NTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EyJIfawlei7dJsP4P1X+B2oo3mZ l+Nh5G71JipJCEhFwmwm19gD82RI3jZ0op/rnFDKee9B9c1edtZiIyolhIh1oUPU aUaVYIgZeP+sWpdPMBqtORV2ypTREHYkkBJFcp2sBLyS9ZwaPLDq+3qHE8wIIeq0 bnNKqxUYmSEJiIuOSleycTgxkuYV042l4k6Xg/NegNswAvS9oG5utC4nWohs2+YG z62Mxqb5l4DF3PJj7TqrfYCktBUXNLww6rf4XOPKWKnXaMq2ZUYj/ZHAfxhQ9SG9 AUbuLwWhW6pSnMswK3LgZFmewzKpC/Nn5ZqvaXZizemUeQGWGrdFPnYV7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB29d5n7wKZwWXNEr4UpAeZUa5UEMB8GA1UdIwQY MBaAFGJ4y2DzV9YcuYtMfKkVoSgY7yx3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW5qTFlQTlgxaHk1aTB4OHFSV2hLQmp2TEhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kMzAwZGUtYzRlYS00MDlmLWE3YTIt MjQxZTg0YzlhNWQ5LzEvWW5qTFlQTlgxaHk1aTB4OHFSV2hLQmp2TEhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9kMzAwZGUtYzRlYS00MDlmLWE3YTItMjQxZTg0YzlhNWQ5 LzEvWW5qTFlQTlgxaHk1aTB4OHFSV2hLQmp2TEhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsNyvmhRp PD54DRd/y+rCgshzx5nYZSBfWqwoLJn2MnN/mgElKdrENg/JBS/K3Qjy6maGbpJx WUPQFnk/Ek2wJbwEK/o1G9GGEpcPT5k2y7bzcfrJ2nQHlusZ+msSYXhV14Xs173I G1rKOsBTWKlmZSW7COEww0pJAvWhi5IMeu5YXNDwnlY99he/myx7JQHSpG0wlWPS UEB6GxlT5Gq/ziqOx0FuX5UO5ESc0BOpW2T00DRvkqZ90vwWQqP3PZhFh8XYbpH0 HRF3bXlKr/JKdtVmCnXy0Mi3nOWfYdeYG6RCI2xxZ75AbA3Qi07vfBPT8o1a466r K+TvKRapPxc7Wg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:26 2026 by rpki-client