This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json) Hash identifier: /fomFEfrHziaBnxv2sS1kFlB5xoLLUwAEznka5xRTNM= Subject key identifier: 54:4F:CA:78:F2:2A:61:A0:9A:A3:76:0D:28:50:8D:AF:29:48:2A:F6 Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a Certificate serial: 019BFA64DA3C48F49EDF34E9CD4B86EBCF0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 13:01:11 +0000 Manifest this update: Mon 26 Jan 2026 13:01:11 +0000 Manifest next update: Tue 27 Jan 2026 13:01:11 +0000 Files and hashes: 1: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: CmagbOeM83HhHt32Jj9Y+EE+uNIZrh73ejwScT2UHSk=) 2: aEsbh_haMhsqIB5wCxd9t5IabFM.roa (hash: Ne5BDRQ7SBRIMJmF2NPdjnl9j7TlWo9N5JJSWBtw7bI=) 3: yrgQph9zHMA3wU0ZObxjZhTJQrM.roa (hash: XV/X6CYSDEZtr00aa1x8ls6ykfziXhFe1fHOXXDEkhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:da:3c:48:f4:9e:df:34:e9:cd:4b:86:eb:cf:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a Validity Not Before: Jan 26 13:01:11 2026 GMT Not After : Jan 27 13:01:11 2026 GMT Subject: CN=544fca78f22a61a09aa3760d28508daf29482af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:eb:0d:15:a4:23:36:c0:bc:b7:61:b0:a7:be: fd:4c:e0:50:14:cc:68:06:a5:12:de:6b:66:d2:97: ba:d0:d3:05:72:cb:fa:8f:0c:e1:d9:34:cb:a6:41: 1b:d0:93:db:11:c1:ef:bd:8b:d3:46:ff:7e:ed:48: 9d:58:c3:c8:e6:ed:f5:bb:90:32:fc:96:f8:fa:e4: 43:d5:01:3e:89:63:96:c0:00:bf:d8:95:9b:6c:68: 2d:d8:bb:3f:2f:ac:bd:1d:b3:ea:f0:7a:61:28:2b: 62:65:10:77:96:3a:fa:0e:35:0d:d4:c5:ec:94:e4: e8:87:7a:6d:80:6f:e9:df:e4:ba:1e:28:bf:8d:7e: 43:37:9f:5f:86:5e:25:3b:54:50:8b:64:0c:a1:02: f2:54:bb:48:b7:c9:9f:1d:dc:7f:97:c7:a8:10:7d: 87:00:53:1d:83:c4:7a:82:e4:11:0c:af:9c:ee:e9: a6:a1:4d:af:6d:14:77:38:10:90:6e:c6:6d:8d:4f: 64:92:dd:c1:46:ba:21:5d:15:f6:5f:f5:72:fc:db: 91:7d:71:10:66:8d:bb:ff:6a:b8:ca:33:42:53:b3: 59:b6:5c:ae:df:7c:d3:85:ea:9c:66:f7:c7:98:1c: 2b:23:a3:79:23:1b:78:79:a2:5d:a9:f6:01:73:fb: 1f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4F:CA:78:F2:2A:61:A0:9A:A3:76:0D:28:50:8D:AF:29:48:2A:F6 X509v3 Authority Key Identifier: keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:74:5c:3a:4f:c4:39:eb:b7:ed:8a:e4:ba:85:40:bd:77:15: ee:26:6a:5a:4e:bf:90:1b:c9:71:8e:75:4c:6f:25:23:5c:33: 61:cd:8c:ae:10:4c:ad:f4:c4:3e:0a:8c:97:ab:87:e7:73:ac: 96:61:2d:06:05:f0:b3:b2:eb:0f:0a:13:9d:b7:d7:d3:0a:e2: 5c:df:e6:56:38:1d:62:42:ee:e9:56:72:18:aa:d0:db:cc:54: fa:91:4f:46:33:c5:13:69:2b:3f:bc:77:c4:ed:bf:13:41:b5: dd:ea:7b:19:13:0e:e9:ae:08:ec:27:33:15:b0:e1:f2:0d:2d: 95:e1:87:fc:e0:c8:8b:a5:9a:c2:49:12:d9:49:77:a6:97:5f: 20:e8:b9:d0:15:dc:d2:37:a0:08:7e:93:2c:b4:da:56:49:d9: 9f:8b:e9:8c:e6:50:cf:1d:dd:23:47:7d:37:6c:79:10:ac:f1: dc:c4:4b:87:21:07:02:79:9c:66:bb:27:50:37:00:ff:f3:be: 8c:61:57:61:63:9b:22:7a:f6:39:ab:ff:45:74:8d:65:ad:69: 1f:6c:28:55:f3:21:85:4d:79:d6:b0:34:98:0a:bc:c2:84:94: e3:36:b8:cd:87:c2:29:0e:cd:79:34:b6:a8:47:58:55:75:bb: 1d:31:e1:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZNo8SPSe3zTpzUuG688KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYjk2MTVkZjhjNjU5ZGFjOGNjMDg3YmQwMTFkNGI1ZmYz NzNlMmEwHhcNMjYwMTI2MTMwMTExWhcNMjYwMTI3MTMwMTExWjAzMTEwLwYDVQQD Eyg1NDRmY2E3OGYyMmE2MWEwOWFhMzc2MGQyODUwOGRhZjI5NDgyYWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzesNFaQjNsC8t2Gwp779TOBQFMxo BqUS3mtm0pe60NMFcsv6jwzh2TTLpkEb0JPbEcHvvYvTRv9+7UidWMPI5u31u5Ay /Jb4+uRD1QE+iWOWwAC/2JWbbGgt2Ls/L6y9HbPq8HphKCtiZRB3ljr6DjUN1MXs lOToh3ptgG/p3+S6Hii/jX5DN59fhl4lO1RQi2QMoQLyVLtIt8mfHdx/l8eoEH2H AFMdg8R6guQRDK+c7ummoU2vbRR3OBCQbsZtjU9kkt3BRrohXRX2X/Vy/NuRfXEQ Zo27/2q4yjNCU7NZtlyu33zTheqcZvfHmBwrI6N5Ixt4eaJdqfYBc/sfzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRPynjyKmGgmqN2DShQja8pSCr2MB8GA1UdIwQY MBaAFGC5YV34xlnayMwIe9AR1LX/Nz4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjct NjJkODgxYWE5MDZmLzEvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjctNjJkODgxYWE5MDZm LzEvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3RcOk/E Oeu37YrkuoVAvXcV7iZqWk6/kBvJcY51TG8lI1wzYc2MrhBMrfTEPgqMl6uH53Os lmEtBgXws7LrDwoTnbfX0wriXN/mVjgdYkLu6VZyGKrQ28xU+pFPRjPFE2krP7x3 xO2/E0G13ep7GRMO6a4I7CczFbDh8g0tleGH/ODIi6WawkkS2Ul3ppdfIOi50BXc 0jegCH6TLLTaVknZn4vpjOZQzx3dI0d9N2x5EKzx3MRLhyEHAnmcZrsnUDcA//O+ jGFXYWObInr2Oav/RXSNZa1pH2woVfMhhU151rA0mAq8woSU4za4zYfCKQ7NeTS2 qEdYVXW7HTHhKg== -----END CERTIFICATE-----Generated at Mon Jan 26 19:38:11 2026 by rpki-client