This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft File: Ymd-4I9LshmAS2czR8OgtqMy1yI.mft (raw, json) Hash identifier: wyXYs5iJC+bogkR5xeWrv0Zi1+/Uh863RQhNfEiS1tY= Subject key identifier: 98:D1:6B:25:40:5B:8E:86:AA:D5:EC:78:9E:7D:45:68:F8:72:4A:DB Authority key identifier: 62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22 Certificate issuer: /CN=62677ee08f4bb219804b673347c3a0b6a332d722 Certificate serial: 019C0856F12CF51BA95EBD7ED6C1E3AED2E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft Manifest number: 07B0 Signing time: Thu 29 Jan 2026 06:00:41 +0000 Manifest this update: Thu 29 Jan 2026 06:00:41 +0000 Manifest next update: Fri 30 Jan 2026 06:00:41 +0000 Files and hashes: 1: Ymd-4I9LshmAS2czR8OgtqMy1yI.crl (hash: 4qpEbGkunZ5FO0elJS0WucP45UovbLLlAGiVhxvTP3A=) 2: eI-ehXddlcSy-ljw7tvO4bB6Wvw.roa (hash: IitlgjD1A9ywmqlI7KTae7u+H+3I3h+Rr83XGfruLVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:08:56:f1:2c:f5:1b:a9:5e:bd:7e:d6:c1:e3:ae:d2:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62677ee08f4bb219804b673347c3a0b6a332d722 Validity Not Before: Jan 29 06:00:41 2026 GMT Not After : Jan 30 06:00:41 2026 GMT Subject: CN=98d16b25405b8e86aad5ec789e7d4568f8724adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f9:68:27:b7:f0:74:2f:c0:ff:ff:52:f5:89: 11:13:f9:58:c9:b1:d0:c0:dc:ca:fc:0a:c2:5a:12: e6:6d:37:46:f2:e9:fd:52:e2:6d:d7:69:55:93:a5: 14:9d:43:7a:e8:bc:7c:5d:e2:f0:3a:20:39:ed:40: 78:59:bf:a5:f1:a2:7a:3f:47:c7:89:88:e5:d4:b3: 0b:40:bb:7d:80:6c:07:ee:c7:5f:1a:71:aa:1e:b2: 6a:d9:f1:29:d5:29:c6:61:30:67:be:bb:e4:e9:a8: 8d:b4:a4:0d:5b:e1:7e:24:a1:fa:af:a0:35:05:75: c2:70:37:47:d0:2d:bb:04:c3:bc:a3:c7:d7:4a:4c: b6:e9:67:b8:6d:45:de:80:6b:cc:96:35:2f:55:67: a5:a7:3f:b9:79:49:a4:82:8e:00:3e:8e:9c:3f:b5: c4:dc:32:5a:9d:f5:7d:a0:ce:ef:5d:ff:c1:47:f1: 46:1b:bf:34:8e:2c:95:60:ee:00:7d:bf:65:e5:e7: 46:3a:e2:4f:3a:40:94:2c:b8:a4:1a:b0:96:14:e7: ed:36:17:b5:b2:49:a3:0d:a5:49:8e:7a:a6:5e:c4: c4:c2:19:23:b7:4c:a5:f6:e5:7a:d3:f0:02:44:6c: 2e:b2:9f:13:c0:06:a0:18:ee:77:8b:0c:1a:86:15: ba:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D1:6B:25:40:5B:8E:86:AA:D5:EC:78:9E:7D:45:68:F8:72:4A:DB X509v3 Authority Key Identifier: keyid:62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:44:92:d0:9e:a8:d1:0c:be:ca:8c:2e:8d:ea:02:0f:90:9d: 97:c6:8a:d5:f0:da:72:99:2c:a6:c0:40:2b:20:65:ae:b1:b7: 3e:cf:5f:73:04:fb:50:1d:4a:e7:cb:9a:d3:15:10:60:7e:28: cc:c2:8f:fd:c1:a5:b0:a8:7e:81:a8:d7:57:12:99:78:32:49: 65:d5:ce:9d:86:b9:ad:92:5d:68:53:46:52:75:7a:3a:ae:94: a7:8a:0c:1a:a0:33:a8:5d:dc:49:50:a7:ba:d7:50:f2:63:e3: f1:d0:c2:e1:f0:39:d2:1b:aa:24:41:1c:1f:25:c2:4f:d6:15: cc:2a:52:43:9b:87:86:3c:f6:2c:db:31:65:f4:d7:4c:79:46: 0c:df:11:5f:57:ff:1e:4a:ed:a0:3e:5d:f3:c8:a6:d0:00:50: b9:25:09:40:54:08:f7:09:3e:04:0e:a3:f5:41:2b:85:71:fa: 86:7f:ed:e2:cb:44:3d:0c:06:f6:0c:1e:88:a2:6c:cf:d2:fc: 0f:96:5e:8f:ef:74:ad:fe:33:00:68:0d:d5:fe:54:b4:83:7e: d4:8e:05:aa:6e:95:b8:c6:98:53:73:68:4c:c1:eb:35:b3:e1: 17:0a:13:8f:88:31:5a:87:0c:43:fa:0f:65:04:6c:e0:bd:63: ca:35:49:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwIVvEs9RupXr1+1sHjrtLpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNjc3ZWUwOGY0YmIyMTk4MDRiNjczMzQ3YzNhMGI2YTMz MmQ3MjIwHhcNMjYwMTI5MDYwMDQxWhcNMjYwMTMwMDYwMDQxWjAzMTEwLwYDVQQD Eyg5OGQxNmIyNTQwNWI4ZTg2YWFkNWVjNzg5ZTdkNDU2OGY4NzI0YWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/loJ7fwdC/A//9S9YkRE/lYybHQ wNzK/ArCWhLmbTdG8un9UuJt12lVk6UUnUN66Lx8XeLwOiA57UB4Wb+l8aJ6P0fH iYjl1LMLQLt9gGwH7sdfGnGqHrJq2fEp1SnGYTBnvrvk6aiNtKQNW+F+JKH6r6A1 BXXCcDdH0C27BMO8o8fXSky26We4bUXegGvMljUvVWelpz+5eUmkgo4APo6cP7XE 3DJanfV9oM7vXf/BR/FGG780jiyVYO4Afb9l5edGOuJPOkCULLikGrCWFOftNhe1 skmjDaVJjnqmXsTEwhkjt0yl9uV60/ACRGwusp8TwAagGO53iwwahhW68QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjRayVAW46GqtXseJ59RWj4ckrbMB8GA1UdIwQY MBaAFGJnfuCPS7IZgEtnM0fDoLajMtciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1kLTRJOUxzaG1BUzJjelI4T2d0cU15MXlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMjA1ZjItOGQzYy00NTdjLWE2M2Mt NWYxMGVlNWZkMTAwLzEvWW1kLTRJOUxzaG1BUzJjelI4T2d0cU15MXlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iMjA1ZjItOGQzYy00NTdjLWE2M2MtNWYxMGVlNWZkMTAw LzEvWW1kLTRJOUxzaG1BUzJjelI4T2d0cU15MXlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApkSS0J6o 0Qy+yowujeoCD5Cdl8aK1fDacpkspsBAKyBlrrG3Ps9fcwT7UB1K58ua0xUQYH4o zMKP/cGlsKh+gajXVxKZeDJJZdXOnYa5rZJdaFNGUnV6Oq6Up4oMGqAzqF3cSVCn utdQ8mPj8dDC4fA50huqJEEcHyXCT9YVzCpSQ5uHhjz2LNsxZfTXTHlGDN8RX1f/ HkrtoD5d88im0ABQuSUJQFQI9wk+BA6j9UErhXH6hn/t4stEPQwG9gweiKJsz9L8 D5Zej+90rf4zAGgN1f5UtIN+1I4Fqm6VuMaYU3NoTMHrNbPhFwoTj4gxWocMQ/oP ZQRs4L1jyjVJ8g== -----END CERTIFICATE-----Generated at Thu Jan 29 10:02:06 2026 by rpki-client