This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft File: YYzEbXHnhIl4SIlh17UauhVB88Q.mft (raw, json) Hash identifier: rTOG0ffFfz9q1u/NJquZ8FqF1eEpOqISV7VcJmyS8Ns= Subject key identifier: 07:76:22:85:F0:A4:B8:07:7A:67:03:8B:3B:B7:A7:E7:61:D7:C4:DC Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4 Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4 Certificate serial: 019BF46347015C236B11528B4D677371E54E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft Manifest number: 06F1 Signing time: Sun 25 Jan 2026 09:01:45 +0000 Manifest this update: Sun 25 Jan 2026 09:01:45 +0000 Manifest next update: Mon 26 Jan 2026 09:01:45 +0000 Files and hashes: 1: 6rOwkiiwPMSDxttw83Oe03eKzrw.roa (hash: TUFJPMQ+agFJKUgYR8BN1zSkPDdsC9rfa9hlgnJj66I=) 2: NXzgYU-C6vYUH9piPE5IVfQUDws.roa (hash: 7H+XPAkztFsa8CV9iN0q4tQ4EIhX9svKu9hI+JunkN0=) 3: YYzEbXHnhIl4SIlh17UauhVB88Q.crl (hash: Wfr5Lp4RQNOk/sud3snNzMjJ9iT094qjv2Ls/EOBdl0=) 4: q5tcHMC53hVldl9vmJfxMoSPLXw.roa (hash: iSEcJDYplK+Xu/KP8Xlxc71CNA1iyM93A92Fn+WGFtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:47:01:5c:23:6b:11:52:8b:4d:67:73:71:e5:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4 Validity Not Before: Jan 25 09:01:45 2026 GMT Not After : Jan 26 09:01:45 2026 GMT Subject: CN=07762285f0a4b8077a67038b3bb7a7e761d7c4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d3:6f:6f:88:fe:59:a2:eb:43:f5:88:46:4c: be:e0:09:50:91:a2:65:24:c3:8a:bd:37:dc:58:ad: 0c:79:8a:3d:a9:7d:d6:a3:09:c3:e6:f9:86:a6:19: 88:d4:25:47:cc:5d:cc:aa:be:20:48:50:08:32:06: 2c:7f:2a:eb:22:45:9b:47:fc:48:5b:f1:0a:7d:c5: 89:68:43:9d:1b:d2:e4:c8:63:b9:5e:ed:9c:9f:e3: 16:13:b7:d0:c3:fa:7a:7a:56:78:a1:58:66:6d:0c: 3c:1d:ee:f4:b3:c0:cc:12:a3:f7:5a:ac:81:0d:bd: 04:d9:b7:30:0f:0d:96:69:b1:82:b8:e4:9c:b4:51: 55:36:a7:58:7d:c9:de:57:f7:b2:ff:84:fe:74:1b: cb:8d:97:0d:0f:e6:3f:7f:0a:af:b4:7a:e1:d0:41: a4:77:b4:8d:d3:26:a4:0b:fd:24:fa:d5:21:e6:c4: 5f:bb:e4:fd:c8:5c:5d:0c:a0:a9:1c:44:f8:4a:ff: 0a:61:5a:f2:14:41:48:ed:4b:e3:2f:3e:c6:94:a6: 85:8e:2c:f5:84:db:22:5e:ab:42:4b:4d:8e:a2:93: 45:62:6a:97:9d:49:a5:d6:9d:ff:5d:bd:b7:ce:1d: 8c:a8:33:70:a3:40:8d:ad:c8:f7:3c:d9:72:13:53: 16:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:76:22:85:F0:A4:B8:07:7A:67:03:8B:3B:B7:A7:E7:61:D7:C4:DC X509v3 Authority Key Identifier: keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:3b:af:0a:1b:3b:16:27:8b:91:57:91:ee:05:d1:5c:1b:8d: 1f:16:f0:02:6f:7c:d3:ae:07:07:2f:c3:70:3b:d2:a9:3f:a2: 99:79:14:43:e8:b8:5b:be:07:1b:dc:c6:9f:71:f0:c7:93:01: f0:f2:77:e9:f9:7e:5f:a7:86:5b:ca:33:1a:80:46:7a:a1:69: dd:26:cf:b6:49:20:a7:84:be:10:d7:5d:76:c9:49:1d:d3:1e: d3:83:c1:f3:58:89:71:63:6e:f9:4a:fb:43:d0:22:37:34:3c: 82:5a:ef:69:a6:76:06:39:2a:f3:82:3e:68:1e:3e:92:cd:38: e9:0f:f5:e0:d5:66:1d:87:32:f4:0b:19:bf:c4:9e:16:b4:46: 42:28:45:12:8d:ee:59:3b:8d:47:df:0a:2b:6f:3d:10:fc:0b: 3f:4f:ce:2b:69:24:59:bd:34:9e:9d:c4:63:4f:e7:c4:cc:14: 8d:41:9a:fe:bf:e4:f2:be:8b:5d:df:bc:71:69:20:01:c3:26: 84:62:80:2f:4e:9b:8a:53:a5:a6:03:57:ce:cb:66:da:b1:49: 9f:7a:00:0b:ea:83:95:ea:aa:b7:b0:af:3f:f7:e7:a3:8b:37: f7:5a:9b:47:a1:cd:82:f2:04:3c:42:10:af:c3:7d:95:2e:77: 7e:cd:d7:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Y0cBXCNrEVKLTWdzceVOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxOGNjNDZkNzFlNzg0ODk3ODQ4ODk2MWQ3YjUxYWJhMTU0 MWYzYzQwHhcNMjYwMTI1MDkwMTQ1WhcNMjYwMTI2MDkwMTQ1WjAzMTEwLwYDVQQD EygwNzc2MjI4NWYwYTRiODA3N2E2NzAzOGIzYmI3YTdlNzYxZDdjNGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdNvb4j+WaLrQ/WIRky+4AlQkaJl JMOKvTfcWK0MeYo9qX3WownD5vmGphmI1CVHzF3Mqr4gSFAIMgYsfyrrIkWbR/xI W/EKfcWJaEOdG9LkyGO5Xu2cn+MWE7fQw/p6elZ4oVhmbQw8He70s8DMEqP3WqyB Db0E2bcwDw2WabGCuOSctFFVNqdYfcneV/ey/4T+dBvLjZcND+Y/fwqvtHrh0EGk d7SN0yakC/0k+tUh5sRfu+T9yFxdDKCpHET4Sv8KYVryFEFI7UvjLz7GlKaFjiz1 hNsiXqtCS02OopNFYmqXnUml1p3/Xb23zh2MqDNwo0CNrcj3PNlyE1MWzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAd2IoXwpLgHemcDizu3p+dh18TcMB8GA1UdIwQY MBaAFGGMxG1x54SJeEiJYde1GroVQfPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xMjc0MzAtZDRlOC00ZGEzLWJlYTIt NGVmMTljY2M1N2QwLzEvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xMjc0MzAtZDRlOC00ZGEzLWJlYTItNGVmMTljY2M1N2Qw LzEvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwDuvChs7 FieLkVeR7gXRXBuNHxbwAm98064HBy/DcDvSqT+imXkUQ+i4W74HG9zGn3Hwx5MB 8PJ36fl+X6eGW8ozGoBGeqFp3SbPtkkgp4S+ENdddslJHdMe04PB81iJcWNu+Ur7 Q9AiNzQ8glrvaaZ2Bjkq84I+aB4+ks046Q/14NVmHYcy9AsZv8SeFrRGQihFEo3u WTuNR98KK289EPwLP0/OK2kkWb00np3EY0/nxMwUjUGa/r/k8r6LXd+8cWkgAcMm hGKAL06bilOlpgNXzstm2rFJn3oAC+qDleqqt7CvP/fno4s391qbR6HNgvIEPEIQ r8N9lS53fs3XCw== -----END CERTIFICATE-----Generated at Sun Jan 25 15:10:17 2026 by rpki-client