This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft File: YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json) Hash identifier: rs8fERYpl8xSLFhvIt+aEBInaQxJgh+oe/XQjbzKNhc= Subject key identifier: FC:79:AC:5A:40:C0:34:69:B8:DC:0A:F0:3A:F4:B2:4B:C8:4E:0E:65 Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b Certificate serial: 019BF72D7992D96D61A370116F82111BEDD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft Manifest number: 14A0 Signing time: Sun 25 Jan 2026 22:01:51 +0000 Manifest this update: Sun 25 Jan 2026 22:01:51 +0000 Manifest next update: Mon 26 Jan 2026 22:01:51 +0000 Files and hashes: 1: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: jEN15gJjQIE5Zk+CMHPiqy7YnBLf3yQ3ugmAF/l0JYk=) 2: r07b59Kbc0tU4fUroKjDGDeksk4.roa (hash: VbjM5vBRkz4uK7ac3fSu6tjCMa1PBV229HM3K4xTekY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:79:92:d9:6d:61:a3:70:11:6f:82:11:1b:ed:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b Validity Not Before: Jan 25 22:01:51 2026 GMT Not After : Jan 26 22:01:51 2026 GMT Subject: CN=fc79ac5a40c03469b8dc0af03af4b24bc84e0e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c9:79:6e:22:4d:46:b9:85:0f:e2:34:70:b9: 08:f6:38:94:f9:eb:96:43:b5:e3:dd:54:f6:0e:6c: a3:e5:d3:1f:80:5e:8f:cc:3e:40:4e:a4:a1:8d:75: 8d:04:b1:59:61:a4:73:2c:a6:61:86:7c:81:b8:b4: 0b:5d:21:e7:43:03:a8:ca:fa:e8:b0:e9:12:70:39: 26:4a:9e:8e:97:e3:e3:44:fe:10:32:78:20:9c:1b: 45:03:22:ed:3c:0b:d2:8e:ab:73:2f:d9:d4:3e:63: bf:87:50:99:a0:ba:49:d6:7c:ff:83:ba:fb:3f:50: 7d:8e:64:bf:db:6a:31:70:e8:46:19:46:eb:76:2b: 57:93:2b:92:b9:d5:c2:6c:3b:83:e1:90:21:81:60: 17:8a:83:da:60:e4:b9:cd:46:f3:aa:bc:ee:0c:11: 5f:2e:4f:c0:54:15:f6:e8:64:90:03:ba:08:f6:7b: cf:46:f7:e3:8e:40:83:85:6a:97:b5:b2:0d:05:bd: fe:43:e3:cf:6a:6c:98:4e:73:0c:92:d0:f0:8a:23: 25:61:b6:ba:f2:9f:06:09:cf:f5:41:cc:f3:e5:f4: 8a:47:43:55:27:fd:31:e0:56:f5:ab:2e:ff:07:7d: 52:ec:3b:61:b8:38:a9:36:b7:cb:c4:d6:30:1a:db: 27:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:79:AC:5A:40:C0:34:69:B8:DC:0A:F0:3A:F4:B2:4B:C8:4E:0E:65 X509v3 Authority Key Identifier: keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a1:82:78:b3:38:11:68:93:ce:7b:b0:9b:d6:65:e0:31:3d: 69:ba:a6:d5:26:25:b9:92:a8:14:e4:eb:94:9c:19:db:00:9e: a4:ad:31:e9:78:56:85:70:43:e1:f3:9e:24:83:de:42:24:93: ec:ae:09:88:f0:5d:c6:34:b9:7d:2d:82:b2:f3:3b:2f:8a:6a: 20:54:6f:6e:87:a1:36:eb:8f:27:0c:95:8a:17:47:37:6f:06: 99:46:0d:40:4d:84:5f:cd:59:c2:98:8e:d4:b1:7d:3f:03:29: c3:61:e4:c4:6d:19:01:77:e5:11:cc:06:24:b6:df:f2:02:10: 93:f6:29:38:33:93:5c:a8:9e:57:45:71:9d:d2:80:53:33:64: 33:3e:ea:dd:03:97:4e:a5:b1:de:64:ef:7f:33:5a:0b:af:22: e8:b2:a7:69:70:81:bc:45:fb:eb:ee:04:ff:90:38:70:df:8f: 03:73:dd:b2:b0:99:6f:f9:c0:33:e2:4a:e7:42:7e:7e:88:85: 7a:70:6e:ed:8b:15:fe:fb:61:3b:68:b5:3a:bd:fc:d0:0f:26: dd:21:42:48:95:23:2f:cd:c8:43:a6:04:44:50:c1:35:b2:96: 45:25:4b:58:f6:fd:2a:58:9c:0b:f0:2c:55:20:e1:70:1d:01: 51:c6:e2:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LXmS2W1ho3ARb4IRG+3QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjg1N2M0M2NhMWRmMDRjYjY5YTRhMGFhYzg2MjliZGYz Mjc1NmIwHhcNMjYwMTI1MjIwMTUxWhcNMjYwMTI2MjIwMTUxWjAzMTEwLwYDVQQD EyhmYzc5YWM1YTQwYzAzNDY5YjhkYzBhZjAzYWY0YjI0YmM4NGUwZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsl5biJNRrmFD+I0cLkI9jiU+euW Q7Xj3VT2Dmyj5dMfgF6PzD5ATqShjXWNBLFZYaRzLKZhhnyBuLQLXSHnQwOoyvro sOkScDkmSp6Ol+PjRP4QMnggnBtFAyLtPAvSjqtzL9nUPmO/h1CZoLpJ1nz/g7r7 P1B9jmS/22oxcOhGGUbrditXkyuSudXCbDuD4ZAhgWAXioPaYOS5zUbzqrzuDBFf Lk/AVBX26GSQA7oI9nvPRvfjjkCDhWqXtbINBb3+Q+PPamyYTnMMktDwiiMlYba6 8p8GCc/1Qczz5fSKR0NVJ/0x4Fb1qy7/B31S7DthuDipNrfLxNYwGtsnEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPx5rFpAwDRpuNwK8Dr0skvITg5lMB8GA1UdIwQY MBaAFGBoV8Q8od8Ey2mkoKrIYpvfMnVrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdoWHhEeWgzd1RMYWFTZ3FzaGltOTh5ZFdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi85NWQ3ZGMtMGM4Yi00OTQxLWI5YzEt ZDQ3MTBkMDIyMzM2LzEvWUdoWHhEeWgzd1RMYWFTZ3FzaGltOTh5ZFdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi85NWQ3ZGMtMGM4Yi00OTQxLWI5YzEtZDQ3MTBkMDIyMzM2 LzEvWUdoWHhEeWgzd1RMYWFTZ3FzaGltOTh5ZFdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKGCeLM4 EWiTznuwm9Zl4DE9abqm1SYluZKoFOTrlJwZ2wCepK0x6XhWhXBD4fOeJIPeQiST 7K4JiPBdxjS5fS2CsvM7L4pqIFRvboehNuuPJwyVihdHN28GmUYNQE2EX81ZwpiO 1LF9PwMpw2HkxG0ZAXflEcwGJLbf8gIQk/YpODOTXKieV0VxndKAUzNkMz7q3QOX TqWx3mTvfzNaC68i6LKnaXCBvEX76+4E/5A4cN+PA3PdsrCZb/nAM+JK50J+foiF enBu7YsV/vthO2i1Or380A8m3SFCSJUjL83IQ6YERFDBNbKWRSVLWPb9KlicC/As VSDhcB0BUcbipw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:22:38 2026 by rpki-client