This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json) Hash identifier: /KE1pN6OSYMW5X9jhshYddqFrC1A2Jr+jaHbA51aybM= Subject key identifier: CA:49:13:BD:77:B8:6F:59:CD:12:B4:AC:12:E3:50:F2:6A:20:C7:16 Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1 Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1 Certificate serial: 019BF8ACE5343F6ED81D64853403F0294004 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft Manifest number: 0947 Signing time: Mon 26 Jan 2026 05:00:38 +0000 Manifest this update: Mon 26 Jan 2026 05:00:38 +0000 Manifest next update: Tue 27 Jan 2026 05:00:38 +0000 Files and hashes: 1: AE7tKoXDyuuPCaDaUfMyBa4xWdM.roa (hash: xVpRKPTRXjz76O68/XRyRJECKQ9lTBxMBzIgyh25rxU=) 2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: 4ZmKPoP25+euXRlsMtk8rrvXWohzGNcuDIqrJz78U/M=) 3: rNinx4CuZpXEUOOVr_5qkOxUOro.roa (hash: c7dKHMaq9EPZZdDOaPAKKGKEDbpiSPHR+ZX8mfzSM64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:e5:34:3f:6e:d8:1d:64:85:34:03:f0:29:40:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1 Validity Not Before: Jan 26 05:00:38 2026 GMT Not After : Jan 27 05:00:38 2026 GMT Subject: CN=ca4913bd77b86f59cd12b4ac12e350f26a20c716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3a:a3:24:a0:a7:9d:d0:26:71:33:3c:c8:8e: 19:d4:5c:63:5e:50:14:de:6d:9d:1e:a9:43:f1:0a: cc:cc:31:2c:c6:39:e4:a4:45:c6:c1:9e:85:2e:95: 78:da:af:ea:2a:4a:82:da:58:e0:f7:ab:74:e0:37: 88:27:b0:17:b6:20:c9:e8:47:d0:39:95:e8:e0:14: de:65:e3:2e:e0:78:08:61:5b:06:6c:7f:75:ec:62: 8f:3b:60:a2:8e:d4:30:67:3b:51:3d:9f:7b:0d:63: 1c:42:73:7a:08:80:3d:9f:64:8a:b8:aa:9f:8a:d8: 43:2e:8a:80:ca:63:d1:65:68:d5:e0:a5:ca:c4:63: 59:b7:05:e6:1f:b1:6e:6f:b4:38:6d:db:e9:61:52: 0f:3c:06:46:25:69:bc:cf:59:97:0a:78:fc:fe:3a: 8e:74:ec:ad:e9:9b:30:06:46:16:27:1e:19:fb:46: 15:19:21:5f:f3:d1:d8:1b:1f:3a:f5:28:b6:5f:6d: b7:06:c6:82:48:70:b4:92:78:d5:ed:9d:29:e4:79: 43:92:51:06:33:7f:17:cb:9e:62:49:9c:71:e3:59: 40:a0:9f:7b:27:fa:4b:54:c5:e5:f8:3e:ad:98:45: d4:ef:da:b2:6e:f4:88:d2:2c:88:9e:72:7a:cb:e8: 14:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:49:13:BD:77:B8:6F:59:CD:12:B4:AC:12:E3:50:F2:6A:20:C7:16 X509v3 Authority Key Identifier: keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:53:cb:98:85:8b:e0:5b:3c:df:f0:08:12:18:9f:12:0a:87: 18:51:a4:61:e7:94:82:f1:cf:c5:ab:cd:8d:7e:ac:22:a1:77: 80:2b:d2:f5:cf:81:1c:37:18:c7:27:9f:a4:14:8c:ca:89:66: f4:27:07:cc:6a:8c:26:1b:7b:51:fa:5b:a8:95:eb:d2:d9:18: b7:e1:d6:1b:a7:de:09:42:ac:ec:82:8f:b5:bd:eb:f5:4a:bf: 00:bd:d9:2c:57:62:3d:f1:58:31:d1:0b:33:78:58:85:2c:33: a6:e5:5a:6d:84:8a:d2:f8:e8:ac:a5:e8:31:dd:19:b3:36:c0: 3e:a6:87:08:8f:88:11:14:20:38:c4:f3:f4:16:2f:07:03:66: bf:9c:7e:5b:6a:41:73:52:83:d2:1f:f3:76:9a:1c:59:06:ef: bc:30:a6:ee:33:56:81:a3:79:cd:5b:7e:34:7a:6f:cb:b1:fa: 4c:ec:47:87:36:d7:7b:40:d7:27:67:65:26:64:9c:d3:84:93: a0:5f:bd:dc:a5:4a:80:2d:57:9c:05:48:6d:d4:fd:50:66:c3: 0e:44:d6:97:e0:42:fe:12:e9:a7:39:53:7c:6d:5d:6b:b0:e8: 95:53:f6:58:e9:65:91:99:7a:5f:9b:f9:73:f5:b0:3b:67:37: d2:f9:f3:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rOU0P27YHWSFNAPwKUAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZmRjMDlhZDU0YTM5N2M2MDRlOTRhMWM5NjZlMmMyOTYw NTljYzEwHhcNMjYwMTI2MDUwMDM4WhcNMjYwMTI3MDUwMDM4WjAzMTEwLwYDVQQD EyhjYTQ5MTNiZDc3Yjg2ZjU5Y2QxMmI0YWMxMmUzNTBmMjZhMjBjNzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zqjJKCnndAmcTM8yI4Z1FxjXlAU 3m2dHqlD8QrMzDEsxjnkpEXGwZ6FLpV42q/qKkqC2ljg96t04DeIJ7AXtiDJ6EfQ OZXo4BTeZeMu4HgIYVsGbH917GKPO2CijtQwZztRPZ97DWMcQnN6CIA9n2SKuKqf ithDLoqAymPRZWjV4KXKxGNZtwXmH7Fub7Q4bdvpYVIPPAZGJWm8z1mXCnj8/jqO dOyt6ZswBkYWJx4Z+0YVGSFf89HYGx869Si2X223BsaCSHC0knjV7Z0p5HlDklEG M38Xy55iSZxx41lAoJ97J/pLVMXl+D6tmEXU79qybvSI0iyInnJ6y+gUgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpJE713uG9ZzRK0rBLjUPJqIMcWMB8GA1UdIwQY MBaAFGP9wJrVSjl8YE6Uoclm4sKWBZzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yZDBkYTQtYTUzMi00YjAzLTkwNTUt NGE1Y2JkYjUwZTI5LzEvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yZDBkYTQtYTUzMi00YjAzLTkwNTUtNGE1Y2JkYjUwZTI5 LzEvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAllPLmIWL 4Fs83/AIEhifEgqHGFGkYeeUgvHPxavNjX6sIqF3gCvS9c+BHDcYxyefpBSMyolm 9CcHzGqMJht7UfpbqJXr0tkYt+HWG6feCUKs7IKPtb3r9Uq/AL3ZLFdiPfFYMdEL M3hYhSwzpuVabYSK0vjorKXoMd0ZszbAPqaHCI+IERQgOMTz9BYvBwNmv5x+W2pB c1KD0h/zdpocWQbvvDCm7jNWgaN5zVt+NHpvy7H6TOxHhzbXe0DXJ2dlJmSc04ST oF+93KVKgC1XnAVIbdT9UGbDDkTWl+BC/hLppzlTfG1da7DolVP2WOllkZl6X5v5 c/WwO2c30vnzRw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:46:55 2026 by rpki-client