This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft File: YmC2AROb4BNWnr-OG-taaUuch-w.mft (raw, json) Hash identifier: NDZRaSIH3+ji/SK0RYuyg2Ovyir/21OpbPJSEA2nl7c= Subject key identifier: 23:A5:11:64:0D:AE:33:D9:12:90:1B:C5:D2:57:4B:8C:65:90:6F:32 Authority key identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC Certificate issuer: /CN=6260b601139be013569ebf8e1beb5a694b9c87ec Certificate serial: 019BFB40068BDADC357872BE8226E6FAF0B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft Manifest number: 04D3 Signing time: Mon 26 Jan 2026 17:00:35 +0000 Manifest this update: Mon 26 Jan 2026 17:00:35 +0000 Manifest next update: Tue 27 Jan 2026 17:00:35 +0000 Files and hashes: 1: YmC2AROb4BNWnr-OG-taaUuch-w.crl (hash: zuJdgdZeiGAGRbpXo2EEh3J8yuVu5nZhpR9CFu036Mk=) 2: iDtpVtTwYVksijrN6HIEl5X0bek.roa (hash: LToGh6bU1qAlZ0kYUZ6vCkNysm+SzStfP+9TRnHtZXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:06:8b:da:dc:35:78:72:be:82:26:e6:fa:f0:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6260b601139be013569ebf8e1beb5a694b9c87ec Validity Not Before: Jan 26 17:00:35 2026 GMT Not After : Jan 27 17:00:35 2026 GMT Subject: CN=23a511640dae33d912901bc5d2574b8c65906f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:00:40:be:a2:0b:5a:0e:03:10:3e:d7:b0: c0:03:c8:29:88:0a:dd:ad:e3:61:18:da:1d:ed:c6: 97:56:5c:7c:39:04:80:eb:5f:a1:3a:26:42:5e:3a: 19:c7:2b:95:dc:86:69:e9:e3:9d:1e:71:18:83:23: cd:cb:c7:3b:fc:21:f4:aa:3d:1f:9f:4f:3b:28:71: 2c:a9:d7:d1:e6:3c:14:6e:41:dc:17:92:38:01:85: f8:6d:e9:03:d7:0f:a3:36:0b:7b:6c:fd:dc:19:2a: 34:c2:73:40:2f:2f:89:27:86:5c:90:57:e1:29:fc: dc:2d:22:10:7f:65:36:59:43:30:3b:48:3e:b6:29: 0c:9d:61:08:b4:bf:18:08:c5:d0:f2:d0:8e:0a:12: 4a:42:9d:8e:2e:d2:6f:1b:0d:43:32:25:f2:ef:68: 45:01:29:4a:67:93:d6:85:9f:1e:17:33:97:ae:ff: 4c:76:b5:2f:0b:c7:35:42:21:a8:80:db:3f:e6:61: 32:55:4e:4d:82:94:c2:36:d4:e7:43:8b:d8:35:4e: 3d:89:17:9a:a1:0c:f2:72:29:f2:e5:88:dd:cf:c5: 38:46:29:7f:57:a3:a5:05:d3:f5:45:8e:b9:35:97: 36:f7:73:c5:38:6a:4b:0a:db:4f:77:29:8a:43:2a: 36:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A5:11:64:0D:AE:33:D9:12:90:1B:C5:D2:57:4B:8C:65:90:6F:32 X509v3 Authority Key Identifier: keyid:62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:8d:f4:9d:8b:4c:51:fa:a4:99:5e:5b:89:0d:54:4c:b1:ec: d2:08:e1:16:33:08:1b:1a:b0:6a:72:d6:46:6b:98:fe:49:00: 85:ed:e7:54:46:91:36:98:6e:d1:b9:79:8f:26:b5:8e:4d:86: 45:0d:a4:c7:49:73:df:e4:f1:33:8f:77:8e:e5:c8:cc:34:02: ab:bb:c7:4b:b9:b4:59:65:18:fd:4d:61:8e:30:bd:b0:7c:aa: 1d:ec:cb:99:a8:64:52:24:8e:6d:62:be:dc:35:66:53:64:72: 0c:5b:c3:65:ca:66:6c:48:5b:b2:a2:4a:b3:b0:ea:67:ec:bf: c0:71:3f:8e:f2:d1:8b:ea:43:67:41:43:bb:03:87:3b:f8:b6: 08:8a:c1:70:45:74:2e:70:f3:c7:ae:d1:c4:22:9d:4b:ff:40: 13:15:14:3f:e4:93:9a:f4:31:08:f5:cc:b8:ee:02:c9:97:38: ca:c7:11:15:b0:e7:63:da:4b:2e:1b:55:bb:d5:9f:e8:71:86: 0d:03:2e:17:84:28:ff:1e:2b:69:c2:dc:e0:91:06:c1:10:d1: 94:9c:34:6f:be:af:fa:f7:ae:3e:57:39:0d:da:8d:b3:68:66: ea:9e:9b:a0:9f:31:3e:c4:86:6f:5d:28:9c:20:d2:c7:59:26: fc:4e:48:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QAaL2tw1eHK+gibm+vC2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNjBiNjAxMTM5YmUwMTM1NjllYmY4ZTFiZWI1YTY5NGI5 Yzg3ZWMwHhcNMjYwMTI2MTcwMDM1WhcNMjYwMTI3MTcwMDM1WjAzMTEwLwYDVQQD EygyM2E1MTE2NDBkYWUzM2Q5MTI5MDFiYzVkMjU3NGI4YzY1OTA2ZjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqsAQL6iC1oOAxA+17DAA8gpiArd reNhGNod7caXVlx8OQSA61+hOiZCXjoZxyuV3IZp6eOdHnEYgyPNy8c7/CH0qj0f n087KHEsqdfR5jwUbkHcF5I4AYX4bekD1w+jNgt7bP3cGSo0wnNALy+JJ4ZckFfh KfzcLSIQf2U2WUMwO0g+tikMnWEItL8YCMXQ8tCOChJKQp2OLtJvGw1DMiXy72hF ASlKZ5PWhZ8eFzOXrv9MdrUvC8c1QiGogNs/5mEyVU5NgpTCNtTnQ4vYNU49iRea oQzyciny5Yjdz8U4Ril/V6OlBdP1RY65NZc293PFOGpLCttPdymKQyo2jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOlEWQNrjPZEpAbxdJXS4xlkG8yMB8GA1UdIwQY MBaAFGJgtgETm+ATVp6/jhvrWmlLnIfsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85OTFkM2MtZTMzOC00ODYxLThhYjEt MjliYjZhYjJjZjVjLzEvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85OTFkM2MtZTMzOC00ODYxLThhYjEtMjliYjZhYjJjZjVj LzEvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbI30nYtM UfqkmV5biQ1UTLHs0gjhFjMIGxqwanLWRmuY/kkAhe3nVEaRNphu0bl5jya1jk2G RQ2kx0lz3+TxM493juXIzDQCq7vHS7m0WWUY/U1hjjC9sHyqHezLmahkUiSObWK+ 3DVmU2RyDFvDZcpmbEhbsqJKs7DqZ+y/wHE/jvLRi+pDZ0FDuwOHO/i2CIrBcEV0 LnDzx67RxCKdS/9AExUUP+STmvQxCPXMuO4CyZc4yscRFbDnY9pLLhtVu9Wf6HGG DQMuF4Qo/x4racLc4JEGwRDRlJw0b76v+veuPlc5DdqNs2hm6p6boJ8xPsSGb10o nCDSx1km/E5IiQ== -----END CERTIFICATE-----Generated at Mon Jan 26 18:46:31 2026 by rpki-client