This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft File: y6AXGgLV5KdftAY1VFrgBkyMzK0.mft (raw, json) Hash identifier: sPC14dH4Pk/JTBn8IhpS3P34FvjYhiYoM7WSDkWO6Q8= Subject key identifier: 39:86:91:BC:F7:1E:62:B6:8A:A0:E9:95:02:E9:64:A6:59:A7:49:E1 Authority key identifier: CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD Certificate issuer: /CN=cba0171a02d5e4a75fb40635545ae0064c8cccad Certificate serial: 019BF61A4582CD9D6F42AAD3380EA45F1666 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft Manifest number: 14F5 Signing time: Sun 25 Jan 2026 17:01:15 +0000 Manifest this update: Sun 25 Jan 2026 17:01:15 +0000 Manifest next update: Mon 26 Jan 2026 17:01:15 +0000 Files and hashes: 1: UxOjp8XUs-Ky59G3Ao0aGxBbUxk.roa (hash: IG/Uj+pARjcg7xsZwOswZLWfcj4Zeh91EtnXY1KelO4=) 2: y6AXGgLV5KdftAY1VFrgBkyMzK0.crl (hash: Vvq6olzKRdaz5gszSSBiZIyPhkXCYO/GpYS4CIQe/Rw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:45:82:cd:9d:6f:42:aa:d3:38:0e:a4:5f:16:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cba0171a02d5e4a75fb40635545ae0064c8cccad Validity Not Before: Jan 25 17:01:15 2026 GMT Not After : Jan 26 17:01:15 2026 GMT Subject: CN=398691bcf71e62b68aa0e99502e964a659a749e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:49:ff:11:0e:81:37:20:e1:57:de:f2:e8:9e: 4b:ba:2d:44:ad:bb:d6:6e:73:69:5f:00:7f:96:34: c1:e3:23:23:c5:35:16:cd:00:75:a3:9b:dc:42:c7: e5:82:11:b1:a8:f9:b3:ad:11:73:00:70:8c:1c:17: ca:01:b6:19:40:45:62:23:a0:e7:e2:4c:f7:ec:47: c2:c2:a0:58:9b:a9:fd:73:4a:10:45:f4:71:7c:d0: 2c:88:df:77:71:a8:6c:92:74:d4:79:13:48:29:6d: 04:07:ff:64:c9:bf:8b:5f:b4:bc:1a:3e:db:0d:53: 3f:a9:d8:5b:bc:f8:40:67:a4:f8:7b:c7:18:fa:b1: 11:41:24:d8:7a:7d:29:95:d5:72:67:11:4b:2f:d3: 15:cd:65:c7:b7:e8:62:a4:a0:bc:27:48:e6:7e:58: 2c:1c:6d:e3:0c:aa:4f:16:70:93:61:ef:f9:7c:42: 30:d4:26:48:54:94:c4:c7:e6:c1:de:86:7b:12:72: 72:a7:de:f2:bb:03:ac:6c:08:7b:2f:64:15:5c:44: 58:e1:e4:eb:27:14:71:21:9b:2b:58:74:00:83:15: 47:77:fb:8a:7e:e7:fd:c2:09:11:37:ec:ee:c4:48: e6:2d:40:15:3a:a5:ea:03:ea:32:a7:82:35:b1:8d: 98:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:86:91:BC:F7:1E:62:B6:8A:A0:E9:95:02:E9:64:A6:59:A7:49:E1 X509v3 Authority Key Identifier: keyid:CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:29:69:e7:a7:2e:cb:82:00:ab:4e:6e:23:28:2a:09:0a:5f: 82:80:e8:0c:06:8d:96:7c:ee:8b:1a:d3:88:79:92:22:15:4e: e8:b0:97:6b:05:7a:f7:74:41:39:2c:36:d3:d3:6f:08:a9:d0: 86:26:66:61:ec:a5:b3:28:bf:e3:57:d7:84:ee:2c:45:09:db: 19:45:40:99:29:e4:a6:d8:73:c2:ea:27:80:8d:a3:30:69:9d: c9:e4:f7:35:11:10:66:36:16:47:30:f8:4f:28:81:e0:d1:16: f2:6d:87:ce:aa:50:03:9a:0c:94:e8:9f:3f:27:c6:0c:db:9b: 46:9e:54:01:e8:38:0b:8d:e0:cb:fe:49:21:fa:1a:ab:ef:dc: c7:f2:06:de:59:ee:f3:68:ee:99:ac:ad:8c:c9:eb:aa:f6:f1: 6d:02:29:19:e7:ac:ea:2c:e5:e9:09:56:55:b2:1d:06:ed:f4: 5b:03:2f:2b:1f:7f:57:df:03:0d:0b:dd:fa:96:71:e4:6c:b9: 44:74:40:b1:d0:3d:08:69:27:17:e7:5c:ba:40:2b:80:2e:b4: 1c:6c:2f:c7:b1:86:2d:b2:5e:c6:d2:0f:d2:ff:35:23:c7:76: 7c:39:74:c0:9e:e6:f9:fb:02:0b:78:a8:1c:34:ac:42:1e:47: ab:2b:77:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GkWCzZ1vQqrTOA6kXxZmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYTAxNzFhMDJkNWU0YTc1ZmI0MDYzNTU0NWFlMDA2NGM4 Y2NjYWQwHhcNMjYwMTI1MTcwMTE1WhcNMjYwMTI2MTcwMTE1WjAzMTEwLwYDVQQD EygzOTg2OTFiY2Y3MWU2MmI2OGFhMGU5OTUwMmU5NjRhNjU5YTc0OWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00n/EQ6BNyDhV97y6J5Lui1ErbvW bnNpXwB/ljTB4yMjxTUWzQB1o5vcQsflghGxqPmzrRFzAHCMHBfKAbYZQEViI6Dn 4kz37EfCwqBYm6n9c0oQRfRxfNAsiN93cahsknTUeRNIKW0EB/9kyb+LX7S8Gj7b DVM/qdhbvPhAZ6T4e8cY+rERQSTYen0pldVyZxFLL9MVzWXHt+hipKC8J0jmflgs HG3jDKpPFnCTYe/5fEIw1CZIVJTEx+bB3oZ7EnJyp97yuwOsbAh7L2QVXERY4eTr JxRxIZsrWHQAgxVHd/uKfuf9wgkRN+zuxEjmLUAVOqXqA+oyp4I1sY2YBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmGkbz3HmK2iqDplQLpZKZZp0nhMB8GA1UdIwQY MBaAFMugFxoC1eSnX7QGNVRa4AZMjMytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTZBWEdnTFY1S2RmdEFZMVZGcmdCa3lNekswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82NTQ0MzMtZTMyMC00MmFlLWJiNjEt NTcwYjE0ODMzNTM0LzEveTZBWEdnTFY1S2RmdEFZMVZGcmdCa3lNekswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC82NTQ0MzMtZTMyMC00MmFlLWJiNjEtNTcwYjE0ODMzNTM0 LzEveTZBWEdnTFY1S2RmdEFZMVZGcmdCa3lNekswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSlp56cu y4IAq05uIygqCQpfgoDoDAaNlnzuixrTiHmSIhVO6LCXawV693RBOSw209NvCKnQ hiZmYeylsyi/41fXhO4sRQnbGUVAmSnkpthzwuongI2jMGmdyeT3NREQZjYWRzD4 TyiB4NEW8m2HzqpQA5oMlOifPyfGDNubRp5UAeg4C43gy/5JIfoaq+/cx/IG3lnu 82jumaytjMnrqvbxbQIpGees6izl6QlWVbIdBu30WwMvKx9/V98DDQvd+pZx5Gy5 RHRAsdA9CGknF+dcukArgC60HGwvx7GGLbJextIP0v81I8d2fDl0wJ7m+fsCC3io HDSsQh5Hqyt3kA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:15 2026 by rpki-client