This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json) Hash identifier: C8c6WhVwLFRvTgImtNWK8wrZZabvujEl/JO+yZGEFiQ= Subject key identifier: C6:73:52:04:D6:3A:11:92:A7:D1:DB:2B:30:0D:EA:3D:E2:6D:2F:40 Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25 Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25 Certificate serial: 019BFA9B5409B40DC09A90466B1590BCD987 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft Manifest number: 1718 Signing time: Mon 26 Jan 2026 14:00:42 +0000 Manifest this update: Mon 26 Jan 2026 14:00:42 +0000 Manifest next update: Tue 27 Jan 2026 14:00:42 +0000 Files and hashes: 1: 6ptl5zZN6otvqTbmcxR9jeeyPTw.roa (hash: eOlv0gEoszbDU9BU/wQCemEUN+a4Reu5tk2gCPSosDY=) 2: U2pubs2iBylOl3mQStn1NV5HAeU.roa (hash: 3j+LrDTQ4DdD50DNjrhLgobkQoPmqtoqS9thhekJ5tY=) 3: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: A1BZdBMbrDvml1UH0yGobOGSSBhVDhR9e60OnEHMHtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:54:09:b4:0d:c0:9a:90:46:6b:15:90:bc:d9:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61a14553cacf103274d433e6b268066e01541b25 Validity Not Before: Jan 26 14:00:42 2026 GMT Not After : Jan 27 14:00:42 2026 GMT Subject: CN=c6735204d63a1192a7d1db2b300dea3de26d2f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:42:69:87:e9:e0:5c:92:9f:33:6d:8a:12:a6: 5f:11:d3:53:48:1e:39:9e:f2:a1:0a:f8:bc:70:7a: 51:6a:9e:b8:f0:e5:ed:58:a1:2d:27:59:0d:d3:e1: d2:9f:62:09:12:60:df:55:a1:cf:5e:62:ce:db:24: c2:03:6b:8c:82:1c:87:57:8c:3c:ff:22:dc:5a:f2: b4:ea:1a:4a:c1:c1:48:1c:d2:02:3f:19:4f:ce:76: 5a:0a:34:0d:2d:b9:a8:00:38:e4:a0:b7:45:06:2a: 7c:f7:a9:8e:68:6c:fa:ea:84:8e:19:de:9d:7b:73: 18:98:ac:be:d8:14:0e:01:d2:b2:7d:61:da:43:0d: 0f:f2:b2:63:5b:af:96:64:2b:ad:0d:89:2a:c2:89: 25:12:4f:6f:67:42:34:8d:0c:39:37:6a:5e:09:00: ed:7a:82:00:44:31:2b:70:24:82:94:88:15:7a:75: 35:b9:a8:0f:e3:92:9a:e9:1b:9a:19:82:86:61:0e: ec:9c:6c:c3:43:b6:b0:6a:7f:fd:6b:29:7c:ba:42: 6e:09:de:bc:25:61:d5:57:e5:d8:ad:49:65:0e:d4: ea:47:c5:1f:e8:c6:c1:31:71:ee:6b:a0:e1:45:c0: f9:4a:f9:b1:92:35:8f:9e:0f:57:ff:77:8e:68:46: 53:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:73:52:04:D6:3A:11:92:A7:D1:DB:2B:30:0D:EA:3D:E2:6D:2F:40 X509v3 Authority Key Identifier: keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:42:0d:87:ae:56:0e:29:63:f4:6a:6f:ed:e1:40:0d:f0:78: 2a:0a:b0:e6:07:3a:ac:ff:14:0d:9a:46:80:e3:ce:38:84:fc: 48:c9:62:36:aa:62:3f:d9:01:22:a5:09:f7:c6:55:73:4f:28: b2:85:cc:2a:3c:d2:3b:b3:02:fe:8f:e2:03:fa:69:a5:9c:52: 97:63:86:3b:87:3a:41:bf:64:79:14:98:ff:b1:ae:6e:8b:a3: af:ff:ef:5c:28:82:04:f3:b8:a2:97:24:ac:9e:df:fe:e2:84: 6a:6d:ae:76:96:74:78:86:07:31:0a:26:8a:a5:c0:b6:a1:b6: 37:9d:ce:75:1b:3d:9c:31:4d:f2:40:9e:ba:a1:3b:81:49:9b: d7:d1:75:96:de:34:10:13:1d:43:e2:a1:ff:7a:93:de:a6:cf: 5c:93:84:64:7b:8c:3e:52:79:83:46:ca:43:5b:28:56:c4:88: 55:d0:4f:86:86:cf:76:58:17:52:5e:35:5c:57:24:58:46:ce: 98:98:c6:93:2f:f3:8a:17:4a:ea:32:9a:01:89:28:0c:8e:ca: fe:78:ac:c5:37:55:3c:7d:4f:82:45:86:2a:35:e5:7f:33:62: 52:c6:22:39:98:3e:a0:f6:a1:28:2c:4a:9d:06:d0:d1:eb:0d: 7c:0d:a3:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m1QJtA3AmpBGaxWQvNmHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYTE0NTUzY2FjZjEwMzI3NGQ0MzNlNmIyNjgwNjZlMDE1 NDFiMjUwHhcNMjYwMTI2MTQwMDQyWhcNMjYwMTI3MTQwMDQyWjAzMTEwLwYDVQQD EyhjNjczNTIwNGQ2M2ExMTkyYTdkMWRiMmIzMDBkZWEzZGUyNmQyZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykJph+ngXJKfM22KEqZfEdNTSB45 nvKhCvi8cHpRap648OXtWKEtJ1kN0+HSn2IJEmDfVaHPXmLO2yTCA2uMghyHV4w8 /yLcWvK06hpKwcFIHNICPxlPznZaCjQNLbmoADjkoLdFBip896mOaGz66oSOGd6d e3MYmKy+2BQOAdKyfWHaQw0P8rJjW6+WZCutDYkqwoklEk9vZ0I0jQw5N2peCQDt eoIARDErcCSClIgVenU1uagP45Ka6RuaGYKGYQ7snGzDQ7awan/9ayl8ukJuCd68 JWHVV+XYrUllDtTqR8Uf6MbBMXHua6DhRcD5SvmxkjWPng9X/3eOaEZT9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZzUgTWOhGSp9HbKzAN6j3ibS9AMB8GA1UdIwQY MBaAFGGhRVPKzxAydNQz5rJoBm4BVBslMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAt ZmEyNjZiYjcyZjczLzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAtZmEyNjZiYjcyZjcz LzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEINh65W Dilj9Gpv7eFADfB4Kgqw5gc6rP8UDZpGgOPOOIT8SMliNqpiP9kBIqUJ98ZVc08o soXMKjzSO7MC/o/iA/pppZxSl2OGO4c6Qb9keRSY/7Guboujr//vXCiCBPO4opck rJ7f/uKEam2udpZ0eIYHMQomiqXAtqG2N53OdRs9nDFN8kCeuqE7gUmb19F1lt40 EBMdQ+Kh/3qT3qbPXJOEZHuMPlJ5g0bKQ1soVsSIVdBPhobPdlgXUl41XFckWEbO mJjGky/zihdK6jKaAYkoDI7K/nisxTdVPH1PgkWGKjXlfzNiUsYiOZg+oPahKCxK nQbQ0esNfA2jWQ== -----END CERTIFICATE-----Generated at Mon Jan 26 20:48:53 2026 by rpki-client