This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft File: YZz5qeC2RhrYM4dawRaPiSP9VQs.mft (raw, json) Hash identifier: SG0M2ZLlagTMCQYFoFfpzSfWJMB2R5Z+CO9MnX7cFVc= Subject key identifier: A9:59:82:D8:E3:E1:1A:A6:C3:69:D8:66:26:08:5F:FD:69:F0:6E:24 Authority key identifier: 61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B Certificate issuer: /CN=619cf9a9e0b6461ad833875ac1168f8923fd550b Certificate serial: 019BFA2E1A2F2F58CB72C39A35E3D21B9DE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft Manifest number: 046B Signing time: Mon 26 Jan 2026 12:01:23 +0000 Manifest this update: Mon 26 Jan 2026 12:01:23 +0000 Manifest next update: Tue 27 Jan 2026 12:01:23 +0000 Files and hashes: 1: YZz5qeC2RhrYM4dawRaPiSP9VQs.crl (hash: JBft3ODDbuUR+GN8FddunSpQbn1XYQaEy58g/RgJUFU=) 2: yjWJBP_-NJfhexDZzlwqedaPyY4.roa (hash: SkEjGblzIkRFnt59eOfa2NG/dhlC1N31bem5GR7D9p0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:1a:2f:2f:58:cb:72:c3:9a:35:e3:d2:1b:9d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=619cf9a9e0b6461ad833875ac1168f8923fd550b Validity Not Before: Jan 26 12:01:23 2026 GMT Not After : Jan 27 12:01:23 2026 GMT Subject: CN=a95982d8e3e11aa6c369d86626085ffd69f06e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d3:5d:0d:81:07:32:71:6a:fd:1a:39:95:d6: a6:be:d2:63:02:09:ec:5e:6d:c8:b9:65:5d:37:e3: b1:b4:08:65:6b:51:b7:96:e4:ed:f7:88:ee:9b:83: fa:89:af:e4:4e:9e:3d:3c:7c:80:00:da:74:d9:35: 2c:af:63:78:1d:e5:29:63:a1:20:31:87:e2:87:c4: b8:4d:5c:ac:99:48:f6:76:36:f7:bd:fa:dd:fd:9f: 41:85:52:d7:95:05:b4:bc:a5:be:14:64:96:2b:bd: ea:bb:64:f5:80:f5:c0:7f:8b:f7:6a:1a:bc:f8:9d: 61:71:23:b4:08:3d:3f:2f:14:c2:b0:71:12:78:59: 2c:42:fe:88:19:03:89:a5:44:84:9b:08:c5:2e:b7: b2:36:d0:f1:41:19:2f:d0:1e:d8:03:d9:22:23:7a: 48:08:5b:04:0b:9c:64:62:1c:8c:be:98:23:82:9e: 0c:ff:2b:01:fa:8a:6b:bc:db:1f:b5:56:6a:d4:eb: b4:36:40:7b:a2:67:9a:ea:3e:6b:9c:16:7f:1c:6e: e0:cb:e2:a4:2c:d3:b6:e5:2c:8c:4a:c2:8d:63:46: 41:80:b9:1d:48:1c:24:49:cc:92:ab:8b:b5:67:3e: 81:43:e0:2f:77:d3:ae:42:f2:84:9d:e2:62:67:90: 33:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:59:82:D8:E3:E1:1A:A6:C3:69:D8:66:26:08:5F:FD:69:F0:6E:24 X509v3 Authority Key Identifier: keyid:61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:30:2e:df:a7:e7:03:5b:94:bc:c6:08:c1:40:21:50:73:32: 82:0b:20:aa:9c:90:46:f8:60:82:32:d7:fa:3c:51:97:8c:78: c5:cf:d4:18:33:9c:bd:29:92:23:8a:69:ca:0c:8b:d8:46:cb: b9:bf:55:c6:2d:f0:eb:3c:64:d5:62:01:f3:9f:24:e1:a4:52: 2c:14:6c:0d:8e:42:30:91:99:8e:08:81:9d:dd:d0:f2:e0:76: 0c:88:21:4f:80:46:fa:18:bd:8d:6c:4e:fb:46:91:06:3e:02: 4e:4c:47:45:0d:7e:e1:66:a2:f1:e1:56:60:44:1c:6c:4b:8d: b2:a2:3a:19:be:78:32:fb:81:98:a3:43:d2:d3:2a:df:93:30: 30:18:ee:3f:19:6b:52:a4:2d:36:71:d4:50:b8:39:d3:a6:40: eb:24:f7:bd:43:99:8c:85:d6:a1:2e:5e:68:0e:25:eb:e7:7f: 53:f8:34:82:d7:ce:ae:1a:dc:1f:f5:5f:fb:32:08:d6:5a:db: 96:41:08:ae:97:7e:d9:42:f9:24:74:a1:23:d5:da:60:61:93: 55:d1:5d:d7:79:92:c3:07:9e:95:c8:27:5f:e3:1f:1d:a1:f2: a7:1f:c4:77:f1:c5:7c:d4:4e:cc:37:cf:da:09:a3:bd:cf:b2: 41:52:f7:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LhovL1jLcsOaNePSG53mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxOWNmOWE5ZTBiNjQ2MWFkODMzODc1YWMxMTY4Zjg5MjNm ZDU1MGIwHhcNMjYwMTI2MTIwMTIzWhcNMjYwMTI3MTIwMTIzWjAzMTEwLwYDVQQD EyhhOTU5ODJkOGUzZTExYWE2YzM2OWQ4NjYyNjA4NWZmZDY5ZjA2ZTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79NdDYEHMnFq/Ro5ldamvtJjAgns Xm3IuWVdN+OxtAhla1G3luTt94jum4P6ia/kTp49PHyAANp02TUsr2N4HeUpY6Eg MYfih8S4TVysmUj2djb3vfrd/Z9BhVLXlQW0vKW+FGSWK73qu2T1gPXAf4v3ahq8 +J1hcSO0CD0/LxTCsHESeFksQv6IGQOJpUSEmwjFLreyNtDxQRkv0B7YA9kiI3pI CFsEC5xkYhyMvpgjgp4M/ysB+oprvNsftVZq1Ou0NkB7omea6j5rnBZ/HG7gy+Kk LNO25SyMSsKNY0ZBgLkdSBwkScySq4u1Zz6BQ+Avd9OuQvKEneJiZ5AzmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlZgtjj4Rqmw2nYZiYIX/1p8G4kMB8GA1UdIwQY MBaAFGGc+angtkYa2DOHWsEWj4kj/VULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNmJmYWItZWFjNi00YTQyLTg4NzIt MTRhZmFlOTEzMzZkLzEvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9kNmJmYWItZWFjNi00YTQyLTg4NzItMTRhZmFlOTEzMzZk LzEvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzAu36fn A1uUvMYIwUAhUHMyggsgqpyQRvhggjLX+jxRl4x4xc/UGDOcvSmSI4ppygyL2EbL ub9Vxi3w6zxk1WIB858k4aRSLBRsDY5CMJGZjgiBnd3Q8uB2DIghT4BG+hi9jWxO +0aRBj4CTkxHRQ1+4Wai8eFWYEQcbEuNsqI6Gb54MvuBmKND0tMq35MwMBjuPxlr UqQtNnHUULg506ZA6yT3vUOZjIXWoS5eaA4l6+d/U/g0gtfOrhrcH/Vf+zII1lrb lkEIrpd+2UL5JHShI9XaYGGTVdFd13mSwweelcgnX+MfHaHypx/Ed/HFfNROzDfP 2gmjvc+yQVL3Lw== -----END CERTIFICATE-----Generated at Mon Jan 26 14:25:12 2026 by rpki-client