This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft File: YPWqx2_mvykTNdGaZY5kiRBbhp8.mft (raw, json) Hash identifier: UFtqiLS3wrE/UqIzdilDiJ+ooLs9Sjif3F9jS1mj1CU= Subject key identifier: 02:12:66:C0:89:F5:9B:1D:D0:A9:26:FF:11:6C:5F:AC:5B:58:B9:38 Authority key identifier: 60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F Certificate issuer: /CN=60f5aac76fe6bf291335d19a658e6489105b869f Certificate serial: 019BD9FE01F2E0A158278F41B18B5C58EC0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft Manifest number: 03AC Signing time: Tue 20 Jan 2026 06:01:01 +0000 Manifest this update: Tue 20 Jan 2026 06:01:01 +0000 Manifest next update: Wed 21 Jan 2026 06:01:01 +0000 Files and hashes: 1: YPWqx2_mvykTNdGaZY5kiRBbhp8.crl (hash: 7l54ENSICeZufmML9nWs0G4XZ0Jqwnvfp3sJMnBYnzg=) 2: nsMVjB3dBsEs4QDP-UqrSgiiMZk.roa (hash: 4KH9ak7vbK8YvGmfh6MjtuXURmPLUowjhWOo+NHtQgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:fe:01:f2:e0:a1:58:27:8f:41:b1:8b:5c:58:ec:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f5aac76fe6bf291335d19a658e6489105b869f Validity Not Before: Jan 20 06:01:01 2026 GMT Not After : Jan 21 06:01:01 2026 GMT Subject: CN=021266c089f59b1dd0a926ff116c5fac5b58b938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2b:f1:8c:7c:da:d1:3f:7b:0a:ae:ab:76:f6: d9:07:08:24:de:72:92:ef:6e:33:06:ef:43:b5:87: 8c:ec:14:fa:49:5c:30:7f:43:4e:b5:cb:d5:fa:0d: 58:e9:4b:47:e3:0b:a1:d0:28:66:a1:f5:4b:6f:0d: 9c:29:85:4d:ed:0f:25:d5:d6:14:7d:32:50:6f:03: 39:d8:fe:d7:b1:c5:a6:55:eb:d2:6c:82:71:21:f5: 42:8a:92:ff:9f:6e:65:5f:d3:87:87:07:66:c6:06: 9c:61:65:62:86:dd:c3:ca:c5:2d:84:52:1f:5b:7e: 5b:fe:bc:a5:46:2b:48:6a:cd:2f:f3:dd:48:55:75: 71:f0:88:5f:7c:f0:a6:b1:5d:0e:59:9d:52:71:b1: bd:d1:06:f7:d9:74:a8:22:89:17:aa:99:6e:e1:77: 11:b4:30:e8:e4:af:ad:45:7d:80:46:cd:c6:19:f1: 9c:7c:9d:f1:02:76:cc:82:34:67:0c:0d:0c:de:6a: 37:8a:a0:f4:c3:02:70:56:2e:9d:30:55:81:ff:49: 33:d0:9a:7d:40:ec:fc:fe:06:68:3e:c7:41:55:f7: e7:d9:2f:bd:97:58:cd:fc:98:c6:ca:50:74:44:d1: ec:79:2a:5e:3b:a2:bb:17:66:f3:74:5f:e6:48:2b: c0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:12:66:C0:89:F5:9B:1D:D0:A9:26:FF:11:6C:5F:AC:5B:58:B9:38 X509v3 Authority Key Identifier: keyid:60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:55:19:d3:dd:6c:4c:7d:e0:9f:20:ad:6b:1a:fa:d9:49:14: 93:5a:52:36:6a:c7:6a:31:6b:60:ac:79:dc:a9:34:1e:f1:3d: f2:6d:81:ca:43:b3:d5:f5:6f:60:0b:9a:5d:e4:48:5e:ee:1a: 89:17:67:ef:ae:79:d6:a2:7f:35:c1:7d:53:28:61:84:a0:f1: 67:42:25:52:5b:8f:23:62:4c:67:ca:86:22:57:97:ea:47:4f: b2:b4:1e:5c:78:cc:b5:81:ce:9f:8d:f3:52:e8:c6:75:0d:29: b0:72:9e:75:f2:72:f7:e6:64:49:d4:fc:04:b4:0d:13:b6:46: e8:56:80:fa:c9:32:af:fb:dc:7a:05:83:80:59:a6:f9:7a:2a: 1d:ee:6a:79:38:38:9e:4b:c0:4d:07:8c:4c:d6:63:cf:b9:7d: 03:3c:5e:bc:87:84:13:a4:4f:4c:89:4b:27:2d:60:59:3f:d3: 68:2b:ad:8f:55:e7:92:40:9c:c0:c3:40:31:30:4a:aa:20:a1: 87:b5:a7:b1:ac:3f:26:ab:cd:4f:77:b4:c8:07:1e:b3:bc:d5: dc:51:e6:ec:5a:c9:82:80:30:22:f7:77:ae:78:f4:89:60:c9: 62:76:8a:9b:5b:bd:92:9c:4f:8a:7c:c2:b8:50:7b:6f:87:4a: eb:12:e6:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZ/gHy4KFYJ49BsYtcWOwMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZjVhYWM3NmZlNmJmMjkxMzM1ZDE5YTY1OGU2NDg5MTA1 Yjg2OWYwHhcNMjYwMTIwMDYwMTAxWhcNMjYwMTIxMDYwMTAxWjAzMTEwLwYDVQQD EygwMjEyNjZjMDg5ZjU5YjFkZDBhOTI2ZmYxMTZjNWZhYzViNThiOTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSvxjHza0T97Cq6rdvbZBwgk3nKS 724zBu9DtYeM7BT6SVwwf0NOtcvV+g1Y6UtH4wuh0ChmofVLbw2cKYVN7Q8l1dYU fTJQbwM52P7XscWmVevSbIJxIfVCipL/n25lX9OHhwdmxgacYWViht3DysUthFIf W35b/rylRitIas0v891IVXVx8IhffPCmsV0OWZ1ScbG90Qb32XSoIokXqplu4XcR tDDo5K+tRX2ARs3GGfGcfJ3xAnbMgjRnDA0M3mo3iqD0wwJwVi6dMFWB/0kz0Jp9 QOz8/gZoPsdBVffn2S+9l1jN/JjGylB0RNHseSpeO6K7F2bzdF/mSCvAoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAISZsCJ9Zsd0Kkm/xFsX6xbWLk4MB8GA1UdIwQY MBaAFGD1qsdv5r8pEzXRmmWOZIkQW4afMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVBXcXgyX212eWtUTmRHYVpZNWtpUkJiaHA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMTJiMDAtYWY4Mi00NzM1LWFhYzEt MmJmYjZhZGRjZjQ1LzEvWVBXcXgyX212eWtUTmRHYVpZNWtpUkJiaHA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMTJiMDAtYWY4Mi00NzM1LWFhYzEtMmJmYjZhZGRjZjQ1 LzEvWVBXcXgyX212eWtUTmRHYVpZNWtpUkJiaHA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1UZ091s TH3gnyCtaxr62UkUk1pSNmrHajFrYKx53Kk0HvE98m2BykOz1fVvYAuaXeRIXu4a iRdn76551qJ/NcF9UyhhhKDxZ0IlUluPI2JMZ8qGIleX6kdPsrQeXHjMtYHOn43z UujGdQ0psHKedfJy9+ZkSdT8BLQNE7ZG6FaA+skyr/vcegWDgFmm+XoqHe5qeTg4 nkvATQeMTNZjz7l9AzxevIeEE6RPTIlLJy1gWT/TaCutj1XnkkCcwMNAMTBKqiCh h7Wnsaw/JqvNT3e0yAces7zV3FHm7FrJgoAwIvd3rnj0iWDJYnaKm1u9kpxPinzC uFB7b4dK6xLm0A== -----END CERTIFICATE-----Generated at Tue Jan 20 07:50:07 2026 by rpki-client