This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json) Hash identifier: CAMJ5a7JVw+ocjuyD3Ceyni0Sip7sC5cfPbi6SmBu20= Subject key identifier: 49:86:24:5B:80:28:C7:1F:0A:21:BE:0E:B5:AB:12:EF:99:CB:AA:36 Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d Certificate serial: 019BF763D68FE05A097FB09E6588AC92896A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft Manifest number: 0CD1 Signing time: Sun 25 Jan 2026 23:01:13 +0000 Manifest this update: Sun 25 Jan 2026 23:01:13 +0000 Manifest next update: Mon 26 Jan 2026 23:01:13 +0000 Files and hashes: 1: 1lPDb-Qc7dgd58_k0ugXvgO36w8.roa (hash: up0wKM+by5cZA7R34zmGPf+ho8Ei16Ys0MiWkd/R1jk=) 2: NbUyaKZBv1RnKePQIxmyxsT9zGw.roa (hash: YfuIIb8IL5a5Ql6qciTZgKEuG43i9WjmWByHoP25V3M=) 3: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: gIalWnmt1skbQxOL8quYRooLBrM3mAPFDnSM8BynY1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:d6:8f:e0:5a:09:7f:b0:9e:65:88:ac:92:89:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d Validity Not Before: Jan 25 23:01:13 2026 GMT Not After : Jan 26 23:01:13 2026 GMT Subject: CN=4986245b8028c71f0a21be0eb5ab12ef99cbaa36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:84:ca:9e:7f:e0:5c:5e:02:7e:d4:9b:ea:eb: 18:4c:08:39:c3:7a:d5:bd:85:4f:8c:33:a8:75:a7: 5e:78:09:7d:ec:8e:25:7f:ec:68:72:9e:1d:ae:b2: 9d:90:5d:ee:3c:b7:1b:d9:52:66:d3:b6:32:97:62: 29:48:78:50:f9:a4:b9:72:6f:e0:e2:61:67:62:b5: 14:09:5c:be:62:26:d5:5d:0d:e1:0e:39:6b:97:06: 10:dd:98:18:c0:24:49:a6:ce:cd:e3:b8:9e:2f:13: 0c:dd:c0:32:60:b8:b2:42:20:77:5e:ab:06:c0:3b: 0b:01:b5:77:80:eb:72:72:66:74:79:65:eb:40:27: fb:59:da:00:56:dc:a5:2b:a9:66:55:4d:4f:70:45: 91:5c:8e:76:e5:b7:2b:69:4f:02:8d:2a:68:33:3d: 25:27:4e:54:22:09:92:c9:dc:63:8c:38:47:bd:75: 4c:59:3f:10:68:ae:31:5e:56:59:97:d6:97:a2:98: 2c:39:21:d6:30:50:67:81:6c:4d:1a:c2:d2:8e:e6: 15:b6:0e:0c:d5:46:6c:aa:a0:e7:3a:f6:63:44:64: 4c:26:5d:b2:4c:c8:6a:35:cf:39:e3:34:69:91:9d: 8a:22:8e:bc:c4:96:79:e6:bf:9c:28:c5:19:48:cb: f8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:86:24:5B:80:28:C7:1F:0A:21:BE:0E:B5:AB:12:EF:99:CB:AA:36 X509v3 Authority Key Identifier: keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:31:9a:86:ba:7d:0d:b4:5f:95:62:6b:0f:5e:2d:1d:bd:69: 06:6d:18:69:c0:6a:b4:9f:2e:e7:32:54:61:ad:25:17:41:92: 6e:68:32:00:92:a0:3c:8b:55:6e:f5:f5:62:37:ca:af:b2:07: 72:ea:33:de:4a:6e:75:eb:eb:be:74:ed:b3:05:49:10:d4:43: 87:a3:59:5c:c2:c2:50:ad:d5:b0:8e:82:5a:14:fb:22:67:6a: c1:5e:f5:72:36:c2:45:cf:1b:0d:50:81:b8:1c:b9:27:de:9e: 96:77:8e:7b:93:78:fe:c3:f6:6c:a4:48:57:f4:d3:ed:ee:fd: 39:1f:c7:93:5f:81:d3:9c:c2:3d:4a:6c:34:c4:49:9d:63:ca: 03:ea:29:a4:df:15:54:61:19:e1:69:1a:b6:7d:2d:20:dc:b2: 12:99:73:b0:0a:ab:03:86:2e:b6:2a:ec:ff:eb:78:00:6c:90: d7:10:6e:c4:2b:d3:40:ff:3f:48:41:2d:22:07:3c:11:0a:c0: f4:97:d4:ae:7d:57:52:f8:67:19:d1:73:c7:f4:83:7c:77:81: 89:5d:b9:6b:b0:1e:17:e6:ad:f4:0f:f0:c7:7f:b6:42:42:ac: 82:e4:2a:b5:e4:76:1f:9e:e9:a9:a9:d1:d9:a6:f9:39:48:29: 53:85:0c:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y9aP4FoJf7CeZYiskolqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODc3ZjRjZTBkMzYxNjE3NzI0ZDRiMjg5YTg5MThjNWM2 ZDcyMmQwHhcNMjYwMTI1MjMwMTEzWhcNMjYwMTI2MjMwMTEzWjAzMTEwLwYDVQQD Eyg0OTg2MjQ1YjgwMjhjNzFmMGEyMWJlMGViNWFiMTJlZjk5Y2JhYTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqITKnn/gXF4CftSb6usYTAg5w3rV vYVPjDOodadeeAl97I4lf+xocp4drrKdkF3uPLcb2VJm07Yyl2IpSHhQ+aS5cm/g 4mFnYrUUCVy+YibVXQ3hDjlrlwYQ3ZgYwCRJps7N47ieLxMM3cAyYLiyQiB3XqsG wDsLAbV3gOtycmZ0eWXrQCf7WdoAVtylK6lmVU1PcEWRXI525bcraU8CjSpoMz0l J05UIgmSydxjjDhHvXVMWT8QaK4xXlZZl9aXopgsOSHWMFBngWxNGsLSjuYVtg4M 1UZsqqDnOvZjRGRMJl2yTMhqNc854zRpkZ2KIo68xJZ55r+cKMUZSMv4XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmGJFuAKMcfCiG+DrWrEu+Zy6o2MB8GA1UdIwQY MBaAFGGHf0zg02FhdyTUsomokYxcbXItMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jNDNiMmYtMTBiYS00MTcwLWI1MjEt YzcyMjIxN2U1M2I2LzEvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9jNDNiMmYtMTBiYS00MTcwLWI1MjEtYzcyMjIxN2U1M2I2 LzEvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTGahrp9 DbRflWJrD14tHb1pBm0YacBqtJ8u5zJUYa0lF0GSbmgyAJKgPItVbvX1YjfKr7IH cuoz3kpudevrvnTtswVJENRDh6NZXMLCUK3VsI6CWhT7ImdqwV71cjbCRc8bDVCB uBy5J96elneOe5N4/sP2bKRIV/TT7e79OR/Hk1+B05zCPUpsNMRJnWPKA+oppN8V VGEZ4Wkatn0tINyyEplzsAqrA4Yutirs/+t4AGyQ1xBuxCvTQP8/SEEtIgc8EQrA 9JfUrn1XUvhnGdFzx/SDfHeBiV25a7AeF+at9A/wx3+2QkKsguQqteR2H57pqanR 2ab5OUgpU4UMxA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:46:29 2026 by rpki-client