This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json) Hash identifier: 7LfMtupR0TI8nIS64ePv6yEJ9ViCvi2MoAs8YfO6RF8= Subject key identifier: 60:A9:AC:59:2C:15:F4:98:41:19:EF:C8:3F:FD:07:D9:94:9B:B8:40 Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94 Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094 Certificate serial: 019BFE0B0F449F0A666C82A13CDE56DB18E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft Manifest number: 1718 Signing time: Tue 27 Jan 2026 06:01:36 +0000 Manifest this update: Tue 27 Jan 2026 06:01:36 +0000 Manifest next update: Wed 28 Jan 2026 06:01:36 +0000 Files and hashes: 1: Lsrf7nsJ0SILJoz91hQ7QSVYOyM.roa (hash: e35RQqzj6QwkN2NUro/zWKe5ECceCwxDtJyTfKjd9Gc=) 2: XCiWygchwIEKERqPFwZ00-sFrY0.roa (hash: tFv0lTiieMgtOpoLPIFuEMNuZOBOLhYh1Oi1gR7OKqY=) 3: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: qBfCF4HG4VH0WTP7F87YZEO3zKq6M6OS0Q92UB7jwa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0b:0f:44:9f:0a:66:6c:82:a1:3c:de:56:db:18:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637104d927e7e1ef8febbffddf28145495011094 Validity Not Before: Jan 27 06:01:36 2026 GMT Not After : Jan 28 06:01:36 2026 GMT Subject: CN=60a9ac592c15f4984119efc83ffd07d9949bb840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f7:7d:4a:c9:f0:99:03:0d:6f:c4:85:d5:6b: 88:76:57:e2:94:2c:a3:3e:29:08:73:26:0c:3c:87: 00:db:9f:9c:0e:f1:9e:86:91:40:cb:64:11:1e:e3: 45:c7:26:dd:14:a1:a3:58:95:43:36:32:31:7f:76: 08:ca:73:a5:14:a9:9a:fa:06:35:a4:17:93:20:78: ae:65:1a:32:03:e4:a3:d3:c8:26:be:97:ff:57:b0: 10:30:74:05:41:ae:1c:d3:d0:1c:86:89:0b:50:91: 0c:01:e0:f6:6f:df:a4:fd:4a:6e:ec:39:3a:a5:a6: 22:67:63:1b:0e:c7:b3:da:7b:85:86:1c:0a:bc:0a: fa:f9:3d:ec:2d:9f:68:d0:70:70:0a:ee:0c:85:8e: a0:09:96:48:8e:ba:78:67:56:81:5c:f8:b2:7b:4d: b6:e4:de:34:ff:63:dd:a2:82:1f:aa:a0:29:8e:5d: 49:83:8f:6c:47:cd:7f:ae:10:b1:19:fb:82:73:50: 54:4e:c5:9b:18:82:8d:06:20:f4:b0:cc:22:11:25: f8:a2:bc:02:b2:65:19:37:f7:fe:d6:4f:c6:66:d4: cb:82:86:25:85:f6:e0:29:af:d9:31:45:0f:5d:05: 3e:64:ed:d8:17:09:9d:d2:e0:c7:ab:28:62:31:8c: 58:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A9:AC:59:2C:15:F4:98:41:19:EF:C8:3F:FD:07:D9:94:9B:B8:40 X509v3 Authority Key Identifier: keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:75:78:31:23:0f:11:4d:17:2d:cf:e4:23:80:b4:82:04:f3: 3b:73:8b:a5:6f:3f:5e:52:94:22:f7:d5:4a:73:7f:f8:de:b0: 11:4e:63:00:09:f4:01:cf:91:b9:4d:d5:e0:55:58:bf:31:a6: 92:e5:20:dd:a2:3c:a5:be:2c:40:b6:be:9b:26:29:fc:33:71: ee:9b:2e:db:db:b3:64:60:ac:dd:4b:2d:03:5a:b3:57:de:2a: e9:80:69:6f:b5:43:a0:37:3f:da:52:38:c4:40:61:9a:78:60: ac:04:b4:f1:64:ce:5e:b0:25:f1:b9:cb:36:ca:86:ed:98:d7: 8e:20:7c:de:8c:7d:d4:04:b1:46:de:2d:cd:de:62:2d:ca:d0: d1:31:28:02:64:1d:9d:47:c1:65:9c:64:f8:f3:ba:e9:f6:96: de:50:6d:12:aa:16:7a:8a:e7:59:23:c6:19:f2:4b:91:b9:5a: 5e:4f:5d:02:a7:5b:85:9d:15:da:5e:02:55:b6:d5:ad:80:9e: 14:04:86:65:98:6c:ce:26:f0:55:07:24:7f:ec:97:dc:f2:07: 14:ab:f0:e8:19:55:30:8e:66:48:ca:aa:73:41:c7:c4:6e:0f: 7d:66:3a:30:8b:6e:04:81:74:c1:b8:34:e0:93:13:0f:53:2e: f3:c2:f8:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+Cw9EnwpmbIKhPN5W2xjgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNzEwNGQ5MjdlN2UxZWY4ZmViYmZmZGRmMjgxNDU0OTUw MTEwOTQwHhcNMjYwMTI3MDYwMTM2WhcNMjYwMTI4MDYwMTM2WjAzMTEwLwYDVQQD Eyg2MGE5YWM1OTJjMTVmNDk4NDExOWVmYzgzZmZkMDdkOTk0OWJiODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fd9SsnwmQMNb8SF1WuIdlfilCyj PikIcyYMPIcA25+cDvGehpFAy2QRHuNFxybdFKGjWJVDNjIxf3YIynOlFKma+gY1 pBeTIHiuZRoyA+Sj08gmvpf/V7AQMHQFQa4c09AchokLUJEMAeD2b9+k/Upu7Dk6 paYiZ2MbDsez2nuFhhwKvAr6+T3sLZ9o0HBwCu4MhY6gCZZIjrp4Z1aBXPiye022 5N40/2PdooIfqqApjl1Jg49sR81/rhCxGfuCc1BUTsWbGIKNBiD0sMwiESX4orwC smUZN/f+1k/GZtTLgoYlhfbgKa/ZMUUPXQU+ZO3YFwmd0uDHqyhiMYxY6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCprFksFfSYQRnvyD/9B9mUm7hAMB8GA1UdIwQY MBaAFGNxBNkn5+Hvj+u//d8oFFSVARCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUt NmU0YWVjODZmZTFlLzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUtNmU0YWVjODZmZTFl LzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXV4MSMP EU0XLc/kI4C0ggTzO3OLpW8/XlKUIvfVSnN/+N6wEU5jAAn0Ac+RuU3V4FVYvzGm kuUg3aI8pb4sQLa+myYp/DNx7psu29uzZGCs3UstA1qzV94q6YBpb7VDoDc/2lI4 xEBhmnhgrAS08WTOXrAl8bnLNsqG7ZjXjiB83ox91ASxRt4tzd5iLcrQ0TEoAmQd nUfBZZxk+PO66faW3lBtEqoWeornWSPGGfJLkblaXk9dAqdbhZ0V2l4CVbbVrYCe FASGZZhszibwVQckf+yX3PIHFKvw6BlVMI5mSMqqc0HHxG4PfWY6MItuBIF0wbg0 4JMTD1Mu88L4xA== -----END CERTIFICATE-----Generated at Tue Jan 27 11:51:33 2026 by rpki-client