This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft File: Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json) Hash identifier: Kg+qmWiYVtribOpS/76aBCnT9iGP7t4XD6IyZAkUBSQ= Subject key identifier: 05:C2:49:9F:7A:E8:53:38:C0:6F:84:9E:DA:09:CF:2E:15:C0:FF:9F Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Certificate serial: 019BE9FADDA766010B69010BBF7A27A56F0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft Manifest number: 116D Signing time: Fri 23 Jan 2026 08:31:30 +0000 Manifest this update: Fri 23 Jan 2026 08:31:30 +0000 Manifest next update: Sat 24 Jan 2026 08:31:30 +0000 Files and hashes: 1: 1K65w38M6qfSAhDPAumVfRtILbQ.roa (hash: gO+r/hBjuB8Ccta4Lz/HE+KAZTAzDxZlP8+em5+Zihk=) 2: 36VLbdU0YfHtOFhKlTvPhr-GKCY.roa (hash: ah0Mz3pCFiIlopLEIS1Tng+y+TvEE5d1jtSiEFfa/Do=) 3: 5yLyWIXfSv1r4k0_8nbdgA7HwJE.roa (hash: PQO62SQb8gcwDSWQltry1WEIm/d+EWmKX802izLgZ6Y=) 4: ADpHV81oLRNww3UPkZ2ylbeVYyQ.roa (hash: iE6K3Xh2IcBpnGljqbTHKAlsyrSy/6CD1qKuMNW47GQ=) 5: BlQ7QLfD5x6iutqgeo_eVzPaVtk.roa (hash: a6swOT7R/RX0SYVC7Z4btelSh4NSQ/SQytt7lytGyYw=) 6: E3X5DvCSlkdtfxAadUSESD3eJrk.roa (hash: kCGyuLKDilqRCLENtFOYzrUVWzlMBuvjueB/aZz2GHM=) 7: MDRHnTjt9DlUVua8sWg9_JbxY2U.roa (hash: i8n3TTVTE/GiyRPUsoyJpcq8KFM55OaIVs9pme0mfxA=) 8: OIno0Fs-55H-D72GQ5c13Zi1CPI.roa (hash: vmLm0N+PLmnj2GYBUhwxaLjwC8Q7jjZ6RJ/dEke+sus=) 9: SmLI4SmTecXNrl07lfbd5xd21lo.roa (hash: vFi3IJw/jL8mIUo7W9BhOmCtQalvVRWxm4SWl+O6Y4o=) 10: T-5iPcnqsCezQTEheWZWzWtrA18.roa (hash: IDRrVJDQTAycZw+3lmD3j1ROsNlDG2qWSW1sP/pYHrg=) 11: TEKfYHkotwU7_5ucl5CauD9rWBg.roa (hash: 2nLll6//1iJ2CCFmRLPt+PdNzBEZUp9S5l++rLed9jU=) 12: VEToInKbcqDe5lDhchbIl4AMp0Y.roa (hash: inka8uep2qo5aJFsSvXAFA+QL1UyC8x6RDmrR1OvuhU=) 13: VzdgV1bxOOkMBio-OPwUCejv-eI.roa (hash: Dzp/xLOc3m+FFo59d9oRR774pTKwEklWqH44s+jw078=) 14: WyLZrdb3qSOC31iVFKjKw8KpzYY.roa (hash: N/64ZJFkJRymrNDS4aAi5HI9lv2esPjvZv+p1U/Ss94=) 15: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: N3SjEDebCHP0rDdyjkhbbH3cXPxRdCyo8Y4h9gsvyys=) 16: efcP8-qp6rGIDUknP6ranBAFenc.roa (hash: eCznaG89xquMPr3uYbjxlMYwYWoDIZp7pfe+xehKenM=) 17: f8yn9hbw75bPtwP_3x1I77YrtTw.roa (hash: lbfxwVpBH3kCxRse/jePifr7mqG4EpAtxe5vRU33ODY=) 18: ih5Tik-miT3yn0gYGk7C4bCXJEo.roa (hash: 7XCAdlzsVKGd3oObkJcWEkL8UHGW4ZKL9LLtudw/LCM=) 19: nq1iKk8w1XflIXtC17UgSNfU_oM.roa (hash: F+lcomVmFtP5h7X/ECDiniz6Fh7EseUhUsvEf8G4EC0=) 20: pUUSDW7JRITPLH3NewhxW4cUvRY.roa (hash: qkr6YH2kb+kFgIzqY0pDMe+J2a9UaWnHDsLI3Fg85+Y=) 21: rcB_gTKQyon5L1ekK6QyPY33ncE.roa (hash: m6GuZytNUPy8PIlHIB9uYKzZao0j2orEwSJM8CoLyyE=) 22: wSN7r7hNDmQ5P3z7bDOOJY4KzPI.roa (hash: GUz9F5+jeMSsRRJHGP5PXsDLe9kd5RoheH3WCvm1Crg=) 23: yjp0F1DNzleK6-vCRsNxWVIlBNw.roa (hash: 3j9dCEuG9ERZFB+WenZiPdRjdEvmFVjCWNLAT55vJ+I=) 24: z-53IXFcKJ6y4Mf6a0CbR1GDMyI.roa (hash: 7n5dh4QPCbMNxOIfvTg67aQhUq6LDc9VCW/176Z07bA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 08:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e9:fa:dd:a7:66:01:0b:69:01:0b:bf:7a:27:a5:6f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Validity Not Before: Jan 23 08:31:30 2026 GMT Not After : Jan 24 08:31:30 2026 GMT Subject: CN=05c2499f7ae85338c06f849eda09cf2e15c0ff9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:eb:fa:fc:88:6c:0a:cc:00:4f:4d:47:6b:5d: 9e:c1:cb:2b:53:b3:9e:b2:be:ea:37:d0:fc:e0:10: e0:11:2f:55:11:28:96:e1:92:13:55:05:07:bb:fc: 10:d3:bb:30:f4:be:09:1e:e3:1c:9b:f7:99:f3:79: d0:f3:ed:2a:c6:43:14:31:da:49:62:f4:f0:db:d7: 71:89:c0:87:b6:cf:77:a8:45:0a:00:6b:ad:cf:e6: 5b:0d:89:16:f3:85:06:99:5a:48:18:40:09:5b:e8: f0:bc:1f:90:52:65:6f:4e:2c:b5:04:75:75:35:8b: 52:04:d9:45:7a:29:a9:2a:56:29:e9:62:5c:8f:87: eb:08:c0:8f:95:5f:11:c1:9d:ce:e1:23:7b:28:1a: b7:9e:8f:25:5e:d3:31:20:cd:ce:01:d5:e8:62:66: 28:89:ec:66:1a:95:16:4d:ba:27:2a:9b:e0:de:72: a4:38:53:df:68:a8:a0:a5:fe:a6:14:8f:35:7b:8a: 13:7a:0c:d3:61:a2:e2:72:ed:62:2f:07:1e:29:1f: e2:07:48:59:c7:c4:10:7f:0a:1e:7a:51:66:fd:10: de:ca:1a:88:50:ba:32:7b:88:c1:74:bc:96:d1:1d: 99:a5:84:10:7d:9d:15:e2:c0:d0:07:8c:98:72:48: 61:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C2:49:9F:7A:E8:53:38:C0:6F:84:9E:DA:09:CF:2E:15:C0:FF:9F X509v3 Authority Key Identifier: keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:2d:5d:da:4f:93:5a:7f:a7:39:9c:de:58:0a:5a:cd:e6:d3: 59:64:d4:83:5b:f6:0d:6e:48:e1:c9:e3:1a:d8:91:a3:13:8d: 3e:d7:5c:dc:39:25:35:c6:a4:17:85:98:b6:a8:78:0e:5c:4e: ac:28:61:26:ac:a5:08:10:bf:37:7c:57:4c:d7:89:74:bb:dd: 8b:b2:80:a1:e8:6c:df:33:d0:2a:93:89:25:49:75:18:5a:32: fb:3b:a9:2a:a0:4f:1f:d0:7c:98:ba:d7:60:f3:50:4e:79:07: 8b:1e:69:09:cd:c4:35:cd:cc:c0:b6:b0:00:b3:0b:73:08:81: 1a:60:3a:69:9f:45:b0:b4:f0:1d:e1:fb:cb:52:65:b4:30:7b: bd:75:a6:cc:e5:72:fe:75:93:6e:bc:61:dd:c9:7b:88:d8:ab: a1:fc:72:4a:11:e1:33:a6:ee:c2:d1:39:33:29:85:60:ac:92: 10:7c:22:c4:13:4c:cc:5a:52:d3:40:00:55:28:af:d5:a7:9c: 80:2f:ef:73:60:0d:f6:29:eb:d8:b3:46:38:42:b4:b7:fd:b0: 84:a3:71:f3:4c:7c:9b:98:20:4e:37:0b:53:93:ce:f2:82:b1: b0:8c:d3:85:3f:95:58:a5:00:85:e1:06:12:36:c9:c2:e9:d3: 4f:63:78:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvp+t2nZgELaQELv3onpW8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh NDA4MjMwHhcNMjYwMTIzMDgzMTMwWhcNMjYwMTI0MDgzMTMwWjAzMTEwLwYDVQQD EygwNWMyNDk5ZjdhZTg1MzM4YzA2Zjg0OWVkYTA5Y2YyZTE1YzBmZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOv6/IhsCswAT01Ha12ewcsrU7Oe sr7qN9D84BDgES9VESiW4ZITVQUHu/wQ07sw9L4JHuMcm/eZ83nQ8+0qxkMUMdpJ YvTw29dxicCHts93qEUKAGutz+ZbDYkW84UGmVpIGEAJW+jwvB+QUmVvTiy1BHV1 NYtSBNlFeimpKlYp6WJcj4frCMCPlV8RwZ3O4SN7KBq3no8lXtMxIM3OAdXoYmYo iexmGpUWTbonKpvg3nKkOFPfaKigpf6mFI81e4oTegzTYaLicu1iLwceKR/iB0hZ x8QQfwoeelFm/RDeyhqIULoye4jBdLyW0R2ZpYQQfZ0V4sDQB4yYckhh9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXCSZ966FM4wG+EntoJzy4VwP+fMB8GA1UdIwQY MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt ZDJjZDI2YjY5ZGYxLzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhi1d2k+T Wn+nOZzeWApazebTWWTUg1v2DW5I4cnjGtiRoxONPtdc3DklNcakF4WYtqh4DlxO rChhJqylCBC/N3xXTNeJdLvdi7KAoehs3zPQKpOJJUl1GFoy+zupKqBPH9B8mLrX YPNQTnkHix5pCc3ENc3MwLawALMLcwiBGmA6aZ9FsLTwHeH7y1JltDB7vXWmzOVy /nWTbrxh3cl7iNirofxyShHhM6buwtE5MymFYKySEHwixBNMzFpS00AAVSiv1aec gC/vc2AN9inr2LNGOEK0t/2whKNx80x8m5ggTjcLU5PO8oKxsIzThT+VWKUAheEG EjbJwunTT2N4ow== -----END CERTIFICATE-----Generated at Fri Jan 23 12:46:12 2026 by rpki-client