This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft File: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json) Hash identifier: C3XIUeXMbP0CYRD4rUvN1ltM2pgRlz7tLaveG8A14IY= Subject key identifier: 3C:6F:DC:A2:6F:95:2F:82:59:A9:33:3C:4B:BD:CD:0E:FE:BF:D9:E3 Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4 Certificate issuer: /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4 Certificate serial: 019BF6BEE619C7D942A6520B66202F2A8633 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 20:01:04 +0000 Manifest this update: Sun 25 Jan 2026 20:01:04 +0000 Manifest next update: Mon 26 Jan 2026 20:01:04 +0000 Files and hashes: 1: vrzaOZyt0yuGmEkZWTfpBfvU0FM.roa (hash: wM8w9UXwnJwWC//EoV2cIpFlr+CCNnYEJvvmregOsvI=) 2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: agIB/uPi6pbGVl8F3yYBLX2ktNtOS7pjTxNojLUQLN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:e6:19:c7:d9:42:a6:52:0b:66:20:2f:2a:86:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4 Validity Not Before: Jan 25 20:01:04 2026 GMT Not After : Jan 26 20:01:04 2026 GMT Subject: CN=3c6fdca26f952f8259a9333c4bbdcd0efebfd9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:43:4a:3f:a2:43:5a:aa:c4:6e:c2:65:4c:e4: 25:7c:cc:79:01:4e:23:dc:9e:cb:a7:b9:26:5c:68: 54:79:f6:77:51:b8:9e:d7:e6:8e:fe:d1:a8:57:d2: 34:1e:32:60:54:b6:fc:37:b3:98:24:73:10:e6:05: 49:a3:1f:5d:df:ea:0e:76:1e:70:83:39:5b:d8:a4: 91:c1:17:26:4a:e0:60:70:07:9d:c2:50:dc:45:b4: e1:8b:f1:78:9c:1e:ae:f4:4b:fc:77:e5:28:a6:dd: 6a:6f:10:0c:8c:d0:24:72:90:b5:95:bf:d6:a1:74: 64:6b:ad:63:4c:f5:f5:2e:a1:31:97:50:aa:4d:56: 8a:14:ac:09:25:80:0b:61:f3:53:35:01:72:9a:a7: 99:ac:cc:32:bc:76:08:11:79:12:d6:07:bc:d6:85: eb:08:a3:77:bc:fd:80:ed:46:b6:a9:ab:b3:f8:59: c3:0a:a2:4d:a1:a0:f2:75:7f:5c:79:e1:f5:08:ac: f0:09:03:78:4a:e0:22:f2:39:27:2a:6c:9b:7a:a8: 99:38:63:16:4c:6e:11:f6:35:ee:e3:ac:7b:fb:20: c5:26:11:3a:d0:4e:fd:b4:2e:18:6a:78:38:7e:06: 9e:ca:89:8a:db:b6:77:12:dc:7b:b1:54:1f:21:be: d0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6F:DC:A2:6F:95:2F:82:59:A9:33:3C:4B:BD:CD:0E:FE:BF:D9:E3 X509v3 Authority Key Identifier: keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:02:11:5d:6d:90:65:9a:e6:13:07:3c:21:d9:c3:1e:79:02: d5:66:84:3f:b1:55:c4:6c:5e:a5:e2:2c:61:cb:71:f2:9b:79: 89:0f:4c:83:7f:4e:90:e1:60:80:59:cc:ca:af:33:bc:18:09: 4d:c2:bc:de:e4:70:9b:74:0d:74:67:61:74:22:7e:87:05:87: eb:58:eb:48:bb:5c:c7:0b:01:80:d3:24:e1:4d:70:25:5a:c1: 33:52:08:9f:b6:53:bc:10:f4:6f:98:5c:59:5f:e9:7f:6c:b5: d5:0d:56:bf:91:d0:75:14:bc:70:fc:08:60:83:5d:7b:4c:3e: 30:97:71:30:f1:91:68:da:5e:2b:92:b2:06:f5:61:d7:4c:a8: 47:f9:66:0d:28:fa:7c:e7:c6:b1:1f:1c:47:39:25:47:7a:9c: 39:1c:35:d3:17:10:b7:bf:96:22:bf:58:e4:e5:3e:e7:0e:92: 75:4f:6c:cd:d9:7f:e6:74:40:e2:fb:c5:5f:95:49:9a:3f:d5: 14:e2:25:05:da:0f:05:46:0d:d8:80:39:31:cd:5a:9b:c9:c4: 8f:c4:77:30:c3:7c:51:b2:8d:cf:dc:a5:27:15:2e:5c:32:a8: 18:2d:71:21:96:72:eb:2f:ca:6b:36:7d:c0:7c:fc:31:ab:89: 6a:c2:45:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vuYZx9lCplILZiAvKoYzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMGMyZGFjYWZkZmE1Mzk5N2VkM2IwYTcwZGZiYzI3MGE5 MzNiZjQwHhcNMjYwMTI1MjAwMTA0WhcNMjYwMTI2MjAwMTA0WjAzMTEwLwYDVQQD EygzYzZmZGNhMjZmOTUyZjgyNTlhOTMzM2M0YmJkY2QwZWZlYmZkOWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UNKP6JDWqrEbsJlTOQlfMx5AU4j 3J7Lp7kmXGhUefZ3Ubie1+aO/tGoV9I0HjJgVLb8N7OYJHMQ5gVJox9d3+oOdh5w gzlb2KSRwRcmSuBgcAedwlDcRbThi/F4nB6u9Ev8d+Uopt1qbxAMjNAkcpC1lb/W oXRka61jTPX1LqExl1CqTVaKFKwJJYALYfNTNQFymqeZrMwyvHYIEXkS1ge81oXr CKN3vP2A7Ua2qauz+FnDCqJNoaDydX9ceeH1CKzwCQN4SuAi8jknKmybeqiZOGMW TG4R9jXu46x7+yDFJhE60E79tC4Yang4fgaeyomK27Z3Etx7sVQfIb7Q3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxv3KJvlS+CWakzPEu9zQ7+v9njMB8GA1UdIwQY MBaAFMoMLayv36U5l+07CnDfvCcKkzv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83MzM1OTgtNzRlOC00N2FhLThjOGUt OTllYzg4YzQ3NzYwLzEveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS83MzM1OTgtNzRlOC00N2FhLThjOGUtOTllYzg4YzQ3NzYw LzEveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwIRXW2Q ZZrmEwc8IdnDHnkC1WaEP7FVxGxepeIsYctx8pt5iQ9Mg39OkOFggFnMyq8zvBgJ TcK83uRwm3QNdGdhdCJ+hwWH61jrSLtcxwsBgNMk4U1wJVrBM1IIn7ZTvBD0b5hc WV/pf2y11Q1Wv5HQdRS8cPwIYINde0w+MJdxMPGRaNpeK5KyBvVh10yoR/lmDSj6 fOfGsR8cRzklR3qcORw10xcQt7+WIr9Y5OU+5w6SdU9szdl/5nRA4vvFX5VJmj/V FOIlBdoPBUYN2IA5Mc1am8nEj8R3MMN8UbKNz9ylJxUuXDKoGC1xIZZy6y/KazZ9 wHz8MauJasJFPA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:12 2026 by rpki-client