This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft File: YMZLBPqPX-5oZvXHn499zqUBJRU.mft (raw, json) Hash identifier: YLOTxUjadbzxXlBeA1Pj49WgcFGyQY8LaZG4L0Ye5yc= Subject key identifier: 08:6C:02:B0:0B:94:E2:11:4B:50:E5:C0:F8:E6:8C:A5:5D:60:5A:80 Authority key identifier: 60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15 Certificate issuer: /CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515 Certificate serial: 019BFAD247C65D2FE1F4AD1CE53349493850 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft Manifest number: 13DB Signing time: Mon 26 Jan 2026 15:00:43 +0000 Manifest this update: Mon 26 Jan 2026 15:00:43 +0000 Manifest next update: Tue 27 Jan 2026 15:00:43 +0000 Files and hashes: 1: 5eILOK-1-Suo2fVqfn_W0lL0-TQ.roa (hash: NzVDzsu+Kq+X+04Ws4gqYwLVPdBaLiyudai4ILZxsxg=) 2: YMZLBPqPX-5oZvXHn499zqUBJRU.crl (hash: JeY7Ptn/rlC+1GwTMIT6dxezeuTCUvFza5qErbaZo1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:47:c6:5d:2f:e1:f4:ad:1c:e5:33:49:49:38:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515 Validity Not Before: Jan 26 15:00:43 2026 GMT Not After : Jan 27 15:00:43 2026 GMT Subject: CN=086c02b00b94e2114b50e5c0f8e68ca55d605a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:45:ee:bb:1a:3a:34:47:61:03:bf:66:54: c2:b5:5b:7b:d8:af:53:2c:55:64:25:84:2f:8d:17: d3:fb:19:08:7c:56:16:46:70:e5:f6:c1:eb:87:bf: 76:12:7a:64:ce:75:16:c0:70:93:9c:73:25:da:94: 96:24:c3:46:0b:fc:b7:9a:9e:45:f4:18:43:13:5c: 0b:78:2a:52:bc:b4:0a:a8:af:22:5c:30:03:fc:ef: ee:02:21:86:0d:30:a1:e3:7c:02:38:28:0a:85:a2: 62:fa:c0:0f:ff:f2:a4:a9:51:bc:fc:c2:f7:1c:c6: f6:f3:e5:9a:b6:3e:3d:59:6f:f4:6f:e5:22:d1:98: 7e:ac:3c:57:6e:84:0c:b7:a3:f3:4a:4a:50:ba:06: 81:1b:73:21:44:2b:1c:13:36:55:83:6c:cc:95:f8: f0:14:5c:b4:2a:30:0a:09:14:fe:3e:e5:a2:45:11: 85:b1:92:df:7e:21:54:4c:78:2f:86:fa:ae:a0:80: 4c:dc:23:99:24:d7:7c:93:e8:9e:21:ed:f6:0b:f0: 30:67:90:ae:09:3f:a7:18:98:52:2b:0d:cc:e7:e0: 52:a8:85:a3:5e:f0:37:77:09:64:aa:a7:8a:3b:0f: 83:19:12:61:a0:a4:8c:bf:70:df:11:c5:41:a6:99: 2b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6C:02:B0:0B:94:E2:11:4B:50:E5:C0:F8:E6:8C:A5:5D:60:5A:80 X509v3 Authority Key Identifier: keyid:60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:9c:72:eb:0f:42:45:58:6b:97:b1:df:8c:73:71:ef:59:df: 8a:70:e1:3b:2a:dc:8d:6b:93:ce:a2:d5:9f:e8:fe:0a:1e:2c: 23:26:09:16:ed:14:83:3c:4a:c7:6f:a4:b8:91:7f:ab:44:fd: 2b:46:0a:b3:96:54:cd:79:87:07:73:19:15:d4:b0:8a:de:37: 8e:fe:3d:ef:45:8b:26:79:ce:5f:df:ff:e5:ee:44:19:84:a1: 76:ed:1d:24:ed:2a:69:22:38:30:83:16:4c:8a:73:e7:ed:34: 37:9e:4a:09:2f:73:c1:25:50:91:65:8e:e3:5b:3a:cd:bf:92: a9:c6:92:0b:bf:17:65:71:44:65:d0:b8:bc:e0:1f:15:75:57: 7c:c8:ca:69:46:1a:ef:b9:68:af:5a:b5:db:98:d4:3e:37:a2: 28:bd:21:bf:1e:c6:34:d9:f0:fe:89:d7:7b:80:fd:69:c5:77: 9b:02:3a:7c:75:95:18:6b:66:68:8c:ac:a5:74:ab:e7:cd:24: b6:3d:f3:03:98:14:ec:44:f4:5a:90:73:a4:a6:35:e4:83:b3: 7a:bd:32:2f:a6:25:09:7d:d8:15:50:91:79:eb:37:b6:34:75: 01:95:e3:36:67:c2:17:a5:cf:28:3c:4c:1f:1b:1e:04:cb:11: ae:63:aa:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60kfGXS/h9K0c5TNJSThQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYzY0YjA0ZmE4ZjVmZWU2ODY2ZjVjNzlmOGY3ZGNlYTUw MTI1MTUwHhcNMjYwMTI2MTUwMDQzWhcNMjYwMTI3MTUwMDQzWjAzMTEwLwYDVQQD EygwODZjMDJiMDBiOTRlMjExNGI1MGU1YzBmOGU2OGNhNTVkNjA1YTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNdF7rsaOjRHYQO/ZlTCtVt72K9T LFVkJYQvjRfT+xkIfFYWRnDl9sHrh792EnpkznUWwHCTnHMl2pSWJMNGC/y3mp5F 9BhDE1wLeCpSvLQKqK8iXDAD/O/uAiGGDTCh43wCOCgKhaJi+sAP//KkqVG8/ML3 HMb28+Watj49WW/0b+Ui0Zh+rDxXboQMt6PzSkpQugaBG3MhRCscEzZVg2zMlfjw FFy0KjAKCRT+PuWiRRGFsZLffiFUTHgvhvquoIBM3COZJNd8k+ieIe32C/AwZ5Cu CT+nGJhSKw3M5+BSqIWjXvA3dwlkqqeKOw+DGRJhoKSMv3DfEcVBppkrZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhsArALlOIRS1DlwPjmjKVdYFqAMB8GA1UdIwQY MBaAFGDGSwT6j1/uaGb1x5+Pfc6lASUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU1aTEJQcVBYLTVvWnZYSG40OTl6cVVCSlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84MjQ5MWItOGNhZi00ODFiLWIxNDYt NjAxYTU4ZjYzMzkzLzEvWU1aTEJQcVBYLTVvWnZYSG40OTl6cVVCSlJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84MjQ5MWItOGNhZi00ODFiLWIxNDYtNjAxYTU4ZjYzMzkz LzEvWU1aTEJQcVBYLTVvWnZYSG40OTl6cVVCSlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpxy6w9C RVhrl7HfjHNx71nfinDhOyrcjWuTzqLVn+j+Ch4sIyYJFu0UgzxKx2+kuJF/q0T9 K0YKs5ZUzXmHB3MZFdSwit43jv4970WLJnnOX9//5e5EGYShdu0dJO0qaSI4MIMW TIpz5+00N55KCS9zwSVQkWWO41s6zb+SqcaSC78XZXFEZdC4vOAfFXVXfMjKaUYa 77lor1q125jUPjeiKL0hvx7GNNnw/onXe4D9acV3mwI6fHWVGGtmaIyspXSr580k tj3zA5gU7ET0WpBzpKY15IOzer0yL6YlCX3YFVCRees3tjR1AZXjNmfCF6XPKDxM HxseBMsRrmOqPg== -----END CERTIFICATE-----Generated at Tue Jan 27 00:09:57 2026 by rpki-client