This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft File: Y14XDZsHxQ0bKa6GliBssUWk8fc.mft (raw, json) Hash identifier: OpoPj1SwLcZSH0deCwHamUCRE+9//8L0gU3li43/JO0= Subject key identifier: C1:8E:E9:3B:41:A3:90:70:A2:5A:A1:95:AA:94:B0:99:35:6E:17:5F Authority key identifier: 63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7 Certificate issuer: /CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7 Certificate serial: 019BFAD27865BB3FC2790E5DD40993BA1EA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft Manifest number: 0140 Signing time: Mon 26 Jan 2026 15:00:55 +0000 Manifest this update: Mon 26 Jan 2026 15:00:55 +0000 Manifest next update: Tue 27 Jan 2026 15:00:55 +0000 Files and hashes: 1: Y14XDZsHxQ0bKa6GliBssUWk8fc.crl (hash: Cgywi2d7Y6uTWDroJkJ5hU+vIQ9inGYMF6Q9g+Tci3E=) 2: w5p1hXEjQ2Xz1V3bTFCKNXnxTbs.roa (hash: BkrEG8IgRqXV47SrXBW3QPf+J5iuuBWyqjvE+aHIr/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:78:65:bb:3f:c2:79:0e:5d:d4:09:93:ba:1e:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7 Validity Not Before: Jan 26 15:00:55 2026 GMT Not After : Jan 27 15:00:55 2026 GMT Subject: CN=c18ee93b41a39070a25aa195aa94b099356e175f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d0:13:d3:e4:1e:f1:fc:40:9f:d1:50:35:46: a6:c5:04:d4:1e:6d:23:5a:e1:0a:32:6b:e8:19:86: db:85:fe:cc:8d:fe:00:db:e0:ff:43:77:86:da:1a: 91:7c:24:8b:43:0f:ca:74:7b:96:45:5b:ab:55:be: d0:98:f6:d5:cb:ab:69:92:75:9c:f4:95:51:62:79: df:27:11:e8:43:c7:29:0d:29:60:40:8b:4b:0a:94: aa:af:c8:b5:40:ee:73:79:9e:ef:e2:39:94:2a:b1: 65:56:21:e8:df:6d:3d:64:40:59:8f:ac:ff:b8:98: 10:b1:c3:cf:d8:95:29:d8:00:09:ac:cc:7e:ca:9a: 7c:f5:b5:11:e7:a9:b7:21:6b:25:63:23:0a:61:81: c0:fc:cd:a3:eb:bd:c2:1e:5a:3b:6f:3d:df:2c:19: 96:74:72:d0:a1:9d:7f:a7:18:9c:03:bc:8e:c4:88: 77:74:fb:2f:3e:01:61:06:41:25:10:8f:40:91:f4: 70:35:ee:4f:5c:8d:81:57:12:f0:c4:0b:78:a2:a4: 58:a3:0b:48:99:05:19:43:f2:b5:d5:2b:fc:a4:d0: af:55:a3:af:de:67:b3:42:fa:41:b3:6f:8e:49:1d: f7:08:e6:76:10:37:bb:5f:a4:04:57:61:cf:cc:39: 5d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8E:E9:3B:41:A3:90:70:A2:5A:A1:95:AA:94:B0:99:35:6E:17:5F X509v3 Authority Key Identifier: keyid:63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:f6:8e:d8:29:af:b7:dc:be:7e:70:fe:f3:06:8a:ad:a3:e4: 5a:27:92:c8:6c:7a:7f:1f:c1:8d:13:27:94:f2:43:af:eb:15: 5e:81:dd:df:52:28:a9:61:0d:ba:80:5a:cb:01:bd:ed:82:87: e7:5c:0f:13:15:8e:42:0f:01:29:de:15:62:9e:61:97:bf:ba: 4a:25:d5:7f:fa:b8:36:47:17:88:66:7b:a8:2f:ec:83:8e:3c: b3:d6:5b:30:73:c1:40:fc:39:56:a1:65:d4:9e:ef:be:11:1a: 76:00:0b:5f:13:e0:d0:22:ca:ec:ba:9a:77:bd:7c:2f:30:ad: 4c:77:02:ba:2e:64:5d:84:6b:c7:3d:6f:b6:b1:72:43:b2:24: 4d:7e:68:44:88:ca:0e:87:fb:49:f6:7b:c6:db:37:9b:c7:7f: 24:7c:64:23:1b:46:5c:f6:71:b2:ff:f5:6d:6b:97:8b:7c:b4: 88:37:88:bd:fa:35:83:75:e7:69:80:3a:1d:e3:dd:e1:43:85: 1b:33:b7:44:97:76:7c:5b:e5:db:79:10:f0:e7:4b:f3:fa:5e: c9:98:ee:0a:4d:a3:66:c9:f1:e1:72:c6:71:4e:0e:f1:ef:fd: e4:52:ef:8b:15:d9:df:97:03:80:77:4b:89:f6:54:df:dc:c3: f4:26:ca:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60nhluz/CeQ5d1AmTuh6pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNWUxNzBkOWIwN2M1MGQxYjI5YWU4Njk2MjA2Y2IxNDVh NGYxZjcwHhcNMjYwMTI2MTUwMDU1WhcNMjYwMTI3MTUwMDU1WjAzMTEwLwYDVQQD EyhjMThlZTkzYjQxYTM5MDcwYTI1YWExOTVhYTk0YjA5OTM1NmUxNzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dAT0+Qe8fxAn9FQNUamxQTUHm0j WuEKMmvoGYbbhf7Mjf4A2+D/Q3eG2hqRfCSLQw/KdHuWRVurVb7QmPbVy6tpknWc 9JVRYnnfJxHoQ8cpDSlgQItLCpSqr8i1QO5zeZ7v4jmUKrFlViHo3209ZEBZj6z/ uJgQscPP2JUp2AAJrMx+ypp89bUR56m3IWslYyMKYYHA/M2j673CHlo7bz3fLBmW dHLQoZ1/pxicA7yOxIh3dPsvPgFhBkElEI9AkfRwNe5PXI2BVxLwxAt4oqRYowtI mQUZQ/K11Sv8pNCvVaOv3mezQvpBs2+OSR33COZ2EDe7X6QEV2HPzDldmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGO6TtBo5BwolqhlaqUsJk1bhdfMB8GA1UdIwQY MBaAFGNeFw2bB8UNGymuhpYgbLFFpPH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83YjJmY2MtZWJjOS00YjAyLWI3MTYt ZjgwZDVmMzE2NjRlLzEvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS83YjJmY2MtZWJjOS00YjAyLWI3MTYtZjgwZDVmMzE2NjRl LzEvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyPaO2Cmv t9y+fnD+8waKraPkWieSyGx6fx/BjRMnlPJDr+sVXoHd31IoqWENuoBaywG97YKH 51wPExWOQg8BKd4VYp5hl7+6SiXVf/q4NkcXiGZ7qC/sg448s9ZbMHPBQPw5VqFl 1J7vvhEadgALXxPg0CLK7Lqad718LzCtTHcCui5kXYRrxz1vtrFyQ7IkTX5oRIjK Dof7SfZ7xts3m8d/JHxkIxtGXPZxsv/1bWuXi3y0iDeIvfo1g3XnaYA6HePd4UOF GzO3RJd2fFvl23kQ8OdL8/peyZjuCk2jZsnx4XLGcU4O8e/95FLvixXZ35cDgHdL ifZU39zD9CbKpg== -----END CERTIFICATE-----Generated at Mon Jan 26 19:39:15 2026 by rpki-client