This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft File: YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft (raw, json) Hash identifier: zZaAttnyykTT0JReT1X0O7jKhQ9K55pf2A5qcAJCXwI= Subject key identifier: DB:AA:81:2D:07:34:D6:45:12:76:BC:05:A2:D0:04:04:82:9A:1C:03 Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98 Certificate issuer: /CN=607e5caff4f47b2b8dc81cc36c8e346662639898 Certificate serial: 019BF6518BFB0201E3EFC85E7AEC2A2052BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft Manifest number: 1447 Signing time: Sun 25 Jan 2026 18:01:37 +0000 Manifest this update: Sun 25 Jan 2026 18:01:37 +0000 Manifest next update: Mon 26 Jan 2026 18:01:37 +0000 Files and hashes: 1: 3IMyxyNm6r93DqPE2aE52SXbIuI.roa (hash: QbQusr/PsSc9ZEq6dT5CeLnT4svv4+NWJleDs2gqqNo=) 2: YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl (hash: kYGDJHeSZR8k7wa2rDNxlBMEvN6fzAiyeCL0kF/o9YQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:8b:fb:02:01:e3:ef:c8:5e:7a:ec:2a:20:52:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898 Validity Not Before: Jan 25 18:01:37 2026 GMT Not After : Jan 26 18:01:37 2026 GMT Subject: CN=dbaa812d0734d6451276bc05a2d00404829a1c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e9:30:fb:f4:d6:70:ee:f3:3d:1d:86:85:f0: 6d:ec:d3:cb:07:3f:7b:9d:5e:11:28:45:d5:16:6c: 39:14:33:2c:af:c1:d1:d0:0a:11:59:d1:99:4a:75: ee:77:53:50:ae:48:10:a0:7c:46:e1:75:36:5e:e6: 98:c4:84:80:5e:d9:94:4c:8d:72:cc:d3:7b:46:28: b7:09:45:fd:09:3d:90:18:83:60:c0:d7:ca:03:11: 36:0b:eb:df:0b:9b:d5:8d:86:11:f8:b2:02:0e:3b: bf:f7:ff:c5:6f:42:c1:bf:e7:66:b0:07:cb:34:85: 76:af:f0:b2:b5:93:bb:1d:92:ae:6b:61:29:3e:46: 4a:33:5d:d1:3d:64:d8:cf:9d:2b:16:40:95:28:9d: f6:fa:65:ff:47:a6:ad:8d:34:a2:09:80:53:47:a2: 70:85:80:b3:d5:77:f1:e4:d9:d0:46:d8:28:a7:e6: 1c:35:df:d4:d7:4b:07:c6:3b:9d:ea:c9:eb:4c:03: 6e:59:8a:35:bf:d8:b2:88:d1:3b:1b:69:14:c1:d8: 5c:10:ed:3c:17:15:51:02:b1:81:ac:ea:71:d1:30: 04:50:e8:fd:f9:6b:b8:65:32:dd:92:d3:54:7e:a0: 7a:ba:e5:a3:5f:ef:a4:4d:11:23:3c:53:a2:0e:4c: e5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AA:81:2D:07:34:D6:45:12:76:BC:05:A2:D0:04:04:82:9A:1C:03 X509v3 Authority Key Identifier: keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1f:c7:70:96:f5:c6:67:1a:27:ab:f2:f3:da:12:46:86:5f: 01:44:37:91:e8:a6:e8:ff:ab:09:e1:60:2d:de:a2:a6:a5:0b: 71:4a:a6:54:45:ad:f3:08:2c:6e:76:38:96:6c:a3:6b:8f:b8: f1:fd:f6:7c:31:6e:ab:f2:0e:68:57:a2:30:cb:73:31:5f:13: ca:c0:6b:9e:3d:cc:bc:23:d1:27:80:67:84:cc:17:44:cb:3b: fa:98:2a:3f:28:bd:17:96:d6:6f:44:5a:f0:ec:4a:86:1b:34: 00:8d:08:23:1a:89:36:74:27:6b:5d:6b:5d:6c:8b:76:54:c8: c1:e0:08:b2:f1:0c:0c:6c:05:89:39:56:99:dd:35:cb:20:7c: 09:16:f6:45:19:58:18:f8:4a:73:f8:a9:bc:65:13:a4:b2:75: 84:55:42:e2:9c:c7:27:79:c3:d6:c8:f9:e5:d7:52:e7:74:0b: 64:92:a0:8e:e2:15:40:d1:07:65:1d:3f:18:00:d4:f8:22:e8: 80:0c:67:1c:2d:72:f1:fc:9e:98:30:30:7f:1e:a3:ca:4e:6e: b7:78:48:87:a4:d6:40:4a:21:6d:4f:c4:e6:1d:f7:cd:3a:3e: 9e:ce:b6:0f:e6:a4:4c:1f:9e:68:4e:7e:9c:d2:65:06:a8:aa: 7a:fa:26:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UYv7AgHj78heeuwqIFK8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwN2U1Y2FmZjRmNDdiMmI4ZGM4MWNjMzZjOGUzNDY2NjI2 Mzk4OTgwHhcNMjYwMTI1MTgwMTM3WhcNMjYwMTI2MTgwMTM3WjAzMTEwLwYDVQQD EyhkYmFhODEyZDA3MzRkNjQ1MTI3NmJjMDVhMmQwMDQwNDgyOWExYzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOkw+/TWcO7zPR2GhfBt7NPLBz97 nV4RKEXVFmw5FDMsr8HR0AoRWdGZSnXud1NQrkgQoHxG4XU2XuaYxISAXtmUTI1y zNN7Rii3CUX9CT2QGINgwNfKAxE2C+vfC5vVjYYR+LICDju/9//Fb0LBv+dmsAfL NIV2r/CytZO7HZKua2EpPkZKM13RPWTYz50rFkCVKJ32+mX/R6atjTSiCYBTR6Jw hYCz1Xfx5NnQRtgop+YcNd/U10sHxjud6snrTANuWYo1v9iyiNE7G2kUwdhcEO08 FxVRArGBrOpx0TAEUOj9+Wu4ZTLdktNUfqB6uuWjX++kTREjPFOiDkzl/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNuqgS0HNNZFEna8BaLQBASCmhwDMB8GA1UdIwQY MBaAFGB+XK/09Hsrjcgcw2yONGZiY5iYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUg1Y3JfVDBleXVOeUJ6RGJJNDBabUpqbUpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83ZDY2ZGUtNWYwYy00NzY1LWEwZjYt NjdmYmYyMTU1ZTRlLzEvWUg1Y3JfVDBleXVOeUJ6RGJJNDBabUpqbUpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi83ZDY2ZGUtNWYwYy00NzY1LWEwZjYtNjdmYmYyMTU1ZTRl LzEvWUg1Y3JfVDBleXVOeUJ6RGJJNDBabUpqbUpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXR/HcJb1 xmcaJ6vy89oSRoZfAUQ3keim6P+rCeFgLd6ipqULcUqmVEWt8wgsbnY4lmyja4+4 8f32fDFuq/IOaFeiMMtzMV8TysBrnj3MvCPRJ4BnhMwXRMs7+pgqPyi9F5bWb0Ra 8OxKhhs0AI0IIxqJNnQna11rXWyLdlTIweAIsvEMDGwFiTlWmd01yyB8CRb2RRlY GPhKc/ipvGUTpLJ1hFVC4pzHJ3nD1sj55ddS53QLZJKgjuIVQNEHZR0/GADU+CLo gAxnHC1y8fyemDAwfx6jyk5ut3hIh6TWQEohbU/E5h33zTo+ns62D+akTB+eaE5+ nNJlBqiqevombw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:56 2026 by rpki-client