This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft File: ygAblIWVvOJJE_gRr_cePM5F1lY.mft (raw, json) Hash identifier: dc8oMEEtcGhimlaqxTGOvGK9jHVCwn0VZ1x1cGQNIYY= Subject key identifier: 9F:6F:72:00:91:F1:60:C9:32:B2:E7:D8:12:CA:D0:CD:E6:CC:38:EB Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56 Certificate issuer: /CN=ca001b948595bce24913f811aff71e3cce45d656 Certificate serial: 019C1B026D1E05AEB343ACA8D76265D2EB3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft Manifest number: 17FF Signing time: Sun 01 Feb 2026 21:01:09 +0000 Manifest this update: Sun 01 Feb 2026 21:01:09 +0000 Manifest next update: Mon 02 Feb 2026 21:01:09 +0000 Files and hashes: 1: _xsLd4qUBjb6_7VD2WkixJfaVoY.roa (hash: nohQUdIFn7a7lR0P0bYRkbo26wNDU405wKs7TmIgPaA=) 2: jyhNKA-sqNdbKhKjDCM2oFmxAKA.asa (hash: +kK89jyXB9T4Lltl2vWeU7yjctVLp1sfe0s6KqTiyYE=) 3: ygAblIWVvOJJE_gRr_cePM5F1lY.crl (hash: zOj0w5DqW9afBPIa154aBeBTdasJ3++pHLFkcGU3UyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:02:6d:1e:05:ae:b3:43:ac:a8:d7:62:65:d2:eb:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656 Validity Not Before: Feb 1 21:01:09 2026 GMT Not After : Feb 2 21:01:09 2026 GMT Subject: CN=9f6f720091f160c932b2e7d812cad0cde6cc38eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5e:90:51:7e:69:e3:3a:a3:a9:71:7f:4e:f8: be:6d:43:2b:86:2a:79:37:4e:80:34:d1:96:8a:9b: e2:ca:e3:76:85:39:fb:9a:74:67:1c:21:be:b2:aa: 18:93:51:2e:ea:fe:69:e3:03:7d:b2:ab:27:9e:8a: 5b:47:19:a5:f6:9f:9b:3c:1e:04:b8:fd:41:27:77: 6b:ec:11:a9:54:ba:66:30:8c:28:c8:68:c0:f4:51: 78:c8:75:bd:66:1b:58:c5:b3:c0:55:24:5c:c4:13: 15:71:bc:67:ad:07:68:62:59:ef:b1:cc:2b:9d:8a: bf:1a:63:84:63:4b:c9:0f:24:01:94:8f:73:7d:03: ae:1a:d3:81:d1:14:c2:d4:62:6a:65:20:72:a4:fd: 8d:bf:05:0e:9e:6d:8e:79:d9:58:bc:cf:05:be:c6: d3:84:a0:db:2b:54:1e:09:a3:09:66:31:21:59:f0: d8:02:1d:de:92:09:2f:38:2b:93:3d:5a:e6:8c:02: 7c:58:77:86:aa:39:cb:db:f5:17:0e:a1:34:ae:32: 8c:3d:08:e3:63:52:c7:e8:2c:75:1e:aa:8e:50:0f: a7:6b:db:bb:92:e2:2e:18:6b:14:d6:c5:58:dd:93: 5e:ed:18:d0:47:02:03:9e:7e:95:13:1c:ab:ec:88: cd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6F:72:00:91:F1:60:C9:32:B2:E7:D8:12:CA:D0:CD:E6:CC:38:EB X509v3 Authority Key Identifier: keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:3b:ee:1f:4f:ec:dd:24:de:fd:b0:27:09:d4:e3:3e:46:9b: 70:b4:d1:bb:6f:2f:00:66:d2:8f:fb:4e:73:79:81:fe:c2:32: 4d:2e:46:5e:ca:d4:c1:27:c2:e1:fc:c9:0a:af:4e:fa:a0:db: a3:0a:e2:00:6c:fd:c6:55:6a:33:94:5c:ab:18:1b:10:f3:c1: 45:11:64:b7:0c:83:7a:45:2a:ce:5e:7d:e7:2d:3a:b7:37:79: 02:05:b9:cf:29:96:87:20:33:7f:b4:09:ee:a3:8e:04:7a:44: 60:ab:a6:c8:3c:8e:e2:42:e2:f0:b7:3a:78:2d:96:b5:ca:08: 17:7c:c8:ec:41:16:67:e0:aa:56:34:09:d1:ea:0d:63:c0:55: 9b:bd:b9:13:30:5e:4f:db:ca:c3:ad:ca:9b:42:73:4a:31:e6: 9a:73:14:5f:53:f8:0d:ef:ba:d3:ab:ff:ce:fa:85:6c:f4:0f: ac:af:67:35:67:e4:b6:14:82:82:a6:b8:fe:82:2a:e2:53:47: 0a:6e:78:e0:68:66:bd:8f:45:e2:f9:3e:3f:e5:cc:c8:bf:23: 4f:2b:16:00:2a:49:23:33:09:53:00:91:30:2d:42:81:33:6e: db:45:44:f6:ff:14:10:66:e7:d8:df:6b:e9:c8:72:2e:f7:1c: 15:c7:50:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbAm0eBa6zQ6yo12Jl0us+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMDAxYjk0ODU5NWJjZTI0OTEzZjgxMWFmZjcxZTNjY2U0 NWQ2NTYwHhcNMjYwMjAxMjEwMTA5WhcNMjYwMjAyMjEwMTA5WjAzMTEwLwYDVQQD Eyg5ZjZmNzIwMDkxZjE2MGM5MzJiMmU3ZDgxMmNhZDBjZGU2Y2MzOGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF6QUX5p4zqjqXF/Tvi+bUMrhip5 N06ANNGWipviyuN2hTn7mnRnHCG+sqoYk1Eu6v5p4wN9sqsnnopbRxml9p+bPB4E uP1BJ3dr7BGpVLpmMIwoyGjA9FF4yHW9ZhtYxbPAVSRcxBMVcbxnrQdoYlnvscwr nYq/GmOEY0vJDyQBlI9zfQOuGtOB0RTC1GJqZSBypP2NvwUOnm2OedlYvM8FvsbT hKDbK1QeCaMJZjEhWfDYAh3ekgkvOCuTPVrmjAJ8WHeGqjnL2/UXDqE0rjKMPQjj Y1LH6Cx1HqqOUA+na9u7kuIuGGsU1sVY3ZNe7RjQRwIDnn6VExyr7IjNHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9vcgCR8WDJMrLn2BLK0M3mzDjrMB8GA1UdIwQY MBaAFMoAG5SFlbziSRP4Ea/3HjzORdZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWdBYmxJV1Z2T0pKRV9nUnJfY2VQTTVGMWxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mZmQ0Y2EtZTUxZS00NDdiLWJjZDIt Y2ZjNmFhMDE2NjY5LzEveWdBYmxJV1Z2T0pKRV9nUnJfY2VQTTVGMWxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9mZmQ0Y2EtZTUxZS00NDdiLWJjZDItY2ZjNmFhMDE2NjY5 LzEveWdBYmxJV1Z2T0pKRV9nUnJfY2VQTTVGMWxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDvuH0/s 3STe/bAnCdTjPkabcLTRu28vAGbSj/tOc3mB/sIyTS5GXsrUwSfC4fzJCq9O+qDb owriAGz9xlVqM5RcqxgbEPPBRRFktwyDekUqzl595y06tzd5AgW5zymWhyAzf7QJ 7qOOBHpEYKumyDyO4kLi8Lc6eC2WtcoIF3zI7EEWZ+CqVjQJ0eoNY8BVm725EzBe T9vKw63Km0JzSjHmmnMUX1P4De+606v/zvqFbPQPrK9nNWfkthSCgqa4/oIq4lNH Cm544GhmvY9F4vk+P+XMyL8jTysWACpJIzMJUwCRMC1CgTNu20VE9v8UEGbn2N9r 6chyLvccFcdQ2g== -----END CERTIFICATE-----Generated at Mon Feb 2 08:14:11 2026 by rpki-client