This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json) Hash identifier: JTCit8OgDDeFaMF2j6+TK70sKM4iXpLwHJPPRcgGz0s= Subject key identifier: 79:44:BF:BD:0A:0C:67:39:F6:94:FE:14:C2:A7:86:14:88:57:E4:8D Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42 Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942 Certificate serial: 019BFBE54ED49E197C9052AF44557210020F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft Manifest number: 1633 Signing time: Mon 26 Jan 2026 20:01:07 +0000 Manifest this update: Mon 26 Jan 2026 20:01:07 +0000 Manifest next update: Tue 27 Jan 2026 20:01:07 +0000 Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: 6t65JVkkavcgB9LjYAp1FnYNPstlbu76/wXkFfii/J4=) 2: tCO87qgLeHdiJcQ1IV_bd46Jvho.roa (hash: 2SSHDUuNwyIUrIbmZYF0QjOFxPKwxanOkPswUq79oUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e5:4e:d4:9e:19:7c:90:52:af:44:55:72:10:02:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942 Validity Not Before: Jan 26 20:01:07 2026 GMT Not After : Jan 27 20:01:07 2026 GMT Subject: CN=7944bfbd0a0c6739f694fe14c2a786148857e48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:0e:4a:d6:8e:48:83:07:cd:54:73:20:9f:19: 5c:ed:db:43:d5:3e:2e:de:81:5c:84:0c:96:d3:2d: 41:6a:da:76:bb:28:76:dd:40:a1:9a:73:54:10:fc: 14:29:7d:7c:2d:f3:66:a4:3b:82:26:51:94:43:7e: 6d:07:a5:0d:d8:55:ad:c1:53:ee:21:e8:bb:99:09: 91:93:2e:a8:cc:da:5b:c5:40:9d:70:d0:ef:da:6f: 79:d2:c9:93:ca:6a:d9:e4:15:75:9f:a4:08:73:22: e3:1e:78:40:0d:f1:a2:6a:4e:c4:20:6c:71:51:c9: 41:c4:4e:98:f6:77:fb:d4:b1:ac:98:0f:19:fa:a0: 15:1a:44:c5:8d:43:c5:4e:3c:89:27:a8:ca:d6:d0: be:dd:56:79:de:59:d0:77:f5:08:7f:14:eb:de:37: ff:9b:49:b9:f1:36:ac:56:d6:50:f1:cc:8d:4b:23: 6f:3b:b4:89:e7:e5:43:9a:60:ca:c9:18:fb:64:53: f4:1c:97:89:d9:dd:2d:fd:d5:ff:7d:fe:7c:86:b0: ba:ec:51:8b:f9:80:a9:e5:45:b7:26:32:6f:0c:07: a8:f7:21:39:95:3b:81:91:2b:e1:3c:37:ae:6c:bc: a1:3f:c0:ca:35:4b:c1:08:d8:53:f9:5d:3a:3e:13: 74:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:44:BF:BD:0A:0C:67:39:F6:94:FE:14:C2:A7:86:14:88:57:E4:8D X509v3 Authority Key Identifier: keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:c7:42:d2:ca:15:66:15:ed:0b:1a:1d:69:94:98:88:5c:05: 70:fe:cb:27:2d:9d:60:57:4a:be:fb:ec:d1:d9:99:1b:6f:f8: 53:a8:60:6d:20:ba:0a:40:00:1d:2a:23:9f:58:db:12:8b:da: 92:cc:b4:63:49:07:3c:69:76:4f:7d:28:d5:85:f4:90:a3:c5: 53:1c:80:a2:a3:28:01:07:55:52:52:5d:73:34:36:4d:8d:08: c3:ce:23:2d:87:73:e4:57:c1:a3:b9:28:5f:cd:70:52:c9:03: 4b:34:1a:a8:da:d9:2f:30:5a:93:9a:fd:f3:b8:b0:80:59:15: fa:a7:6a:38:07:81:68:30:aa:80:df:8f:39:1a:2b:5f:c3:0d: cc:f9:fa:ed:62:13:55:ce:94:77:25:5c:1b:15:10:cf:e5:7a: 82:48:29:50:e5:f6:06:f0:c8:19:44:bf:4a:a5:43:06:0e:c9: fa:9d:ca:71:1f:7b:44:7f:c1:05:33:70:1e:67:cf:0c:12:24: 09:cd:01:10:b1:d9:2d:d8:cf:40:fa:f4:5d:32:0d:2e:dd:57: 9e:61:c0:1c:4a:c8:08:73:3e:4c:03:53:28:5c:d5:1c:5f:e9: 02:c3:b2:85:80:54:a2:b3:f8:24:d2:8e:d8:59:a1:a3:8b:29: 9e:08:47:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75U7Unhl8kFKvRFVyEAIPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMTMzMWVjY2Q5NmQwMmMxMDM1NzM0Y2QwMGEzOTBlODMx MWQ5NDIwHhcNMjYwMTI2MjAwMTA3WhcNMjYwMTI3MjAwMTA3WjAzMTEwLwYDVQQD Eyg3OTQ0YmZiZDBhMGM2NzM5ZjY5NGZlMTRjMmE3ODYxNDg4NTdlNDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9w5K1o5IgwfNVHMgnxlc7dtD1T4u 3oFchAyW0y1Batp2uyh23UChmnNUEPwUKX18LfNmpDuCJlGUQ35tB6UN2FWtwVPu Iei7mQmRky6ozNpbxUCdcNDv2m950smTymrZ5BV1n6QIcyLjHnhADfGiak7EIGxx UclBxE6Y9nf71LGsmA8Z+qAVGkTFjUPFTjyJJ6jK1tC+3VZ53lnQd/UIfxTr3jf/ m0m58TasVtZQ8cyNSyNvO7SJ5+VDmmDKyRj7ZFP0HJeJ2d0t/dX/ff58hrC67FGL +YCp5UW3JjJvDAeo9yE5lTuBkSvhPDeubLyhP8DKNUvBCNhT+V06PhN0iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlEv70KDGc59pT+FMKnhhSIV+SNMB8GA1UdIwQY MBaAFGATMezNltAsEDVzTNAKOQ6DEdlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iZjY1NmItZmY5My00NTRiLWEzOWUt M2IxMTMxZTUwNGI4LzEvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iZjY1NmItZmY5My00NTRiLWEzOWUtM2IxMTMxZTUwNGI4 LzEvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcdC0soV ZhXtCxodaZSYiFwFcP7LJy2dYFdKvvvs0dmZG2/4U6hgbSC6CkAAHSojn1jbEova ksy0Y0kHPGl2T30o1YX0kKPFUxyAoqMoAQdVUlJdczQ2TY0Iw84jLYdz5FfBo7ko X81wUskDSzQaqNrZLzBak5r987iwgFkV+qdqOAeBaDCqgN+PORorX8MNzPn67WIT Vc6UdyVcGxUQz+V6gkgpUOX2BvDIGUS/SqVDBg7J+p3KcR97RH/BBTNwHmfPDBIk Cc0BELHZLdjPQPr0XTINLt1XnmHAHErICHM+TANTKFzVHF/pAsOyhYBUorP4JNKO 2Fmho4spnghH2w== -----END CERTIFICATE-----Generated at Tue Jan 27 00:36:55 2026 by rpki-client