This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json) Hash identifier: qpGS5tNfftD7FnJJbiFLgQ3Iox/u9I/JaDHRa9Y6feI= Subject key identifier: 12:25:0F:2F:96:DF:65:DB:FC:CC:6A:92:A7:C9:D7:00:9F:87:47:00 Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 019BD7D94C84CEB83171D629F20B561ECB99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft Manifest number: 0F5B Signing time: Mon 19 Jan 2026 20:01:40 +0000 Manifest this update: Mon 19 Jan 2026 20:01:40 +0000 Manifest next update: Tue 20 Jan 2026 20:01:40 +0000 Files and hashes: 1: 0sTykt04zhafsgKWmG0fpAc6Xi4.roa (hash: s3D/zF9I60gRgjWMCWnW5l2vwcfUO0zatEx48bleBv8=) 2: 13bSAbvbvGDWUO5yvtSsKXnlK94.roa (hash: DXldFZAd6AGXUWvxh5LvcSzCrQoe+CYXwhAGhk24KDA=) 3: De_n5gWs77mFUbESDcEhMP4Zgu4.roa (hash: 6EezXySVgGXz55sVzTpFqjj+QzByDEb/wr63m1U01ek=) 4: T5zUGgRal9JKPPCQ5ILhLwlQlHM.roa (hash: YHDYE65RL2KgOZOOjjz6vjoQjHzxsBWW9qIdkVOIzBk=) 5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: 2e/J0pJ5Yup/UGYAqzOn9/gbajUz11CywAbQ++lsHmI=) 6: Z943jXHlAqEjC8HhkAmn0vuwcbY.roa (hash: zwEb4pXvmmR3brxpaMTgJgnaLu7vluGbc09IMA9MXt4=) 7: aZEJdlE8rryKdFsxcXIyoyt-SOg.roa (hash: BG6zGbPXxvvnXkdjQ9fWCyghzw5YTxYUyEjcqpnK0GU=) 8: d9cqCh7w_HREeS5tpm1EQv7bdkc.roa (hash: DnP+rNEbo3897fPDs3e26jS0WYx/AYH67Gkmxad3fpM=) 9: gxtTMluPb7DYJgy3wd0DpvfzwWM.roa (hash: fBS9RrpCcxHbEWQUD3mBXd03agLj4TXtQErbhFsWylM=) 10: kCoYCOa0aSPUd5aTKPlExBlfEhw.roa (hash: zI+RjbSOrq8P/7v/EkD36oGJO3KdfzSf7MtA8j+FrxI=) 11: rCdVkvlt_G1LGQUde5JSbjVQWY4.roa (hash: cVPKC03A+0G/4nVl6AX0govpW+3dUmuY6t25DXrvz8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:d9:4c:84:ce:b8:31:71:d6:29:f2:0b:56:1e:cb:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Jan 19 20:01:40 2026 GMT Not After : Jan 20 20:01:40 2026 GMT Subject: CN=12250f2f96df65dbfccc6a92a7c9d7009f874700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:40:55:1e:28:cf:14:15:d1:78:b9:23:53:d7: b0:bd:aa:15:8e:8f:6d:42:40:88:d3:81:ee:8b:ad: f7:da:a9:b1:b3:02:0c:3f:86:a3:cc:83:06:6e:1f: 17:22:b9:1e:14:a7:09:26:81:7c:b0:08:64:bb:44: 0b:c3:e5:0c:48:7b:0f:01:a9:47:00:8c:de:2d:ff: 4c:dd:d4:17:d8:70:8c:5e:2f:f2:7f:cc:48:08:bd: 53:06:f8:e7:34:54:2a:7b:b8:1b:12:f9:9b:24:83: 62:09:78:b2:30:e3:39:c7:e4:67:35:c5:ad:83:4e: 52:86:b5:66:e6:62:a4:d6:02:72:84:7a:8e:27:a6: 13:d4:07:07:38:67:51:2f:4d:37:67:ad:a5:b5:e2: 63:6c:a3:a9:f7:1f:14:7a:d2:33:0b:b9:27:21:0b: 5c:6a:de:a4:4c:47:b0:f8:41:3c:1f:3f:ab:ac:f2: 0f:d7:3d:ae:3a:21:de:64:36:bc:09:c4:4e:60:c4: c0:79:74:74:83:9b:31:c6:e2:f6:32:c2:1f:e3:3d: ee:ed:7e:35:f5:e4:f3:9e:4b:85:f1:09:ce:af:f2: c2:74:9c:91:13:c0:01:ec:8a:0d:a3:81:46:02:f5: 41:df:50:7c:25:8a:db:1d:84:bb:2d:7f:95:e0:b5: a5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:25:0F:2F:96:DF:65:DB:FC:CC:6A:92:A7:C9:D7:00:9F:87:47:00 X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:7f:75:cd:6d:ba:72:b3:49:02:35:6e:e2:95:bc:ed:ff:4e: 2a:4f:94:79:22:45:0f:0b:ed:1d:d1:6f:62:e6:85:5b:91:4e: cb:4d:4d:5f:3d:b0:dc:d6:50:ed:6f:ce:78:f8:06:df:6c:a1: c0:a5:9b:c7:de:fc:63:7c:9f:54:0c:2a:88:d6:69:58:da:27: 8d:ab:44:c4:7f:6a:08:62:55:9c:96:b0:0b:b5:29:d9:5e:ea: 11:ca:0a:03:b0:ee:1d:f4:fb:d5:2a:59:67:a9:ea:c3:ea:5b: b7:a8:1f:17:38:15:d4:a9:dd:36:ac:88:92:59:2d:79:db:98: 4a:3d:8a:73:6f:e6:05:d4:f3:17:0f:29:2e:d8:89:9e:1f:f7: 40:62:4c:27:e9:09:68:36:d1:d9:ef:4b:53:24:3a:48:c9:2f: 92:32:4a:d5:03:27:dc:9b:0e:38:1b:20:e5:12:96:4b:d5:0d: 25:8e:0b:e6:10:b3:ef:b4:b6:71:a1:64:49:bc:68:1f:92:56: 0b:2c:e2:07:ec:90:80:82:f4:95:09:ee:71:e6:7b:3b:ae:75: 07:8f:51:cd:f8:1f:93:60:fb:b9:24:21:99:06:f8:b6:25:ad: 94:f1:1f:36:a8:31:99:24:f6:b2:cd:7e:bc:51:4d:21:4b:55: a8:7d:1e:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvX2UyEzrgxcdYp8gtWHsuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjYwMTE5MjAwMTQwWhcNMjYwMTIwMjAwMTQwWjAzMTEwLwYDVQQD EygxMjI1MGYyZjk2ZGY2NWRiZmNjYzZhOTJhN2M5ZDcwMDlmODc0NzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UBVHijPFBXReLkjU9ewvaoVjo9t QkCI04Hui6332qmxswIMP4ajzIMGbh8XIrkeFKcJJoF8sAhku0QLw+UMSHsPAalH AIzeLf9M3dQX2HCMXi/yf8xICL1TBvjnNFQqe7gbEvmbJINiCXiyMOM5x+RnNcWt g05ShrVm5mKk1gJyhHqOJ6YT1AcHOGdRL003Z62lteJjbKOp9x8UetIzC7knIQtc at6kTEew+EE8Hz+rrPIP1z2uOiHeZDa8CcROYMTAeXR0g5sxxuL2MsIf4z3u7X41 9eTznkuF8QnOr/LCdJyRE8AB7IoNo4FGAvVB31B8JYrbHYS7LX+V4LWl0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIlDy+W32Xb/MxqkqfJ1wCfh0cAMB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQn91zW26 crNJAjVu4pW87f9OKk+UeSJFDwvtHdFvYuaFW5FOy01NXz2w3NZQ7W/OePgG32yh wKWbx978Y3yfVAwqiNZpWNonjatExH9qCGJVnJawC7Up2V7qEcoKA7DuHfT71SpZ Z6nqw+pbt6gfFzgV1KndNqyIklkteduYSj2Kc2/mBdTzFw8pLtiJnh/3QGJMJ+kJ aDbR2e9LUyQ6SMkvkjJK1QMn3JsOOBsg5RKWS9UNJY4L5hCz77S2caFkSbxoH5JW CyziB+yQgIL0lQnuceZ7O651B49Rzfgfk2D7uSQhmQb4tiWtlPEfNqgxmST2ss1+ vFFNIUtVqH0etg== -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:14 2026 by rpki-client