This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: kTQkx1IjTETB19oHgmF69ZImbrFu0WGuVLcY48d5tN0= Subject key identifier: 32:AE:A3:00:74:92:6E:86:D2:C5:29:A9:12:30:5B:61:A1:FF:13:82 Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 019BFCC0FCAF345F9741F641EABE80CA3B60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 17F2 Signing time: Tue 27 Jan 2026 00:01:04 +0000 Manifest this update: Tue 27 Jan 2026 00:01:04 +0000 Manifest next update: Wed 28 Jan 2026 00:01:04 +0000 Files and hashes: 1: 1FtPTBCuaFKFdfLMe7kvs8wBT2U.roa (hash: cKQ2d36EvAcAkY7lWf5+zr4pq/8g+Yc09UpRwXaS9fU=) 2: 286ljgduSQ23zXxMskYIQVpjxXw.roa (hash: 7kRo+hhGrmwGIHUv917EDTqyatYEBV1hJSeuWZhlap4=) 3: 4PDvFK89C4F409g_XmWPwr7q1a0.roa (hash: 9lF1IQm65iaYh5J0JpeOleT0SuGGi5cwQEdnoe/v5JQ=) 4: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: 7GptErDT9IVWpkmg/qTa8WzpP+zomr9aYT2Lk5uCZ2M=) 5: XpUefWEiJeIsRivUE_i8Xfs2GR8.roa (hash: PBHeI5NfF0k/v47sxglrYiZdodvTKkFHSpMBQlDcdXc=) 6: ZIFHSotu32VSRWz3yy7p-c2LO-A.roa (hash: HtmF/vHud7OvPwqTimOkx4Bd9iGAFPGDNsHwtbVJBZ0=) 7: Zc2NwjC7aoT6KGmTlpJCVRtAAxM.roa (hash: Lw8AgQnNa+u3srZTik73U4zlVyuicSwiTs/U27h1T58=) 8: a0ljWjjOMmlqv-KUZ9yfJ5o3o08.roa (hash: HgXqjfFgX4E4spO/gFoOPoWjpP4kI1tcmHiNguLieIw=) 9: bPL_MeYosxpJav1FZrlBnVGpssY.roa (hash: xbaf1MsiC38LB8r3yBiWSr3FjpTVnJNfGoxcFxBJEYM=) 10: tXhbIuVpYeE_jd1CU4lv2cgwfnw.roa (hash: lxyF6ei0/QTcu7Po0gkCzFazsZNHVkwJorFWOFgBWYI=) 11: vjXTFvPzZIb1zeRSL_kprTEdqbI.roa (hash: JwHjdybMdJ5oxvKoHkQM559e6BBUTavDx0DxnmOgdS0=) 12: yvxp8xW14Xp2PiR7kJbkc75G14A.roa (hash: o93DGCCTavhE3gLHe6hFNvurmN1iNt5bMJ8d0jqfGPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c0:fc:af:34:5f:97:41:f6:41:ea:be:80:ca:3b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Jan 27 00:01:04 2026 GMT Not After : Jan 28 00:01:04 2026 GMT Subject: CN=32aea30074926e86d2c529a912305b61a1ff1382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:bf:dd:02:e7:95:f1:08:ac:61:5d:55:41: 6f:cf:c5:b6:4c:cc:07:01:6e:0f:5f:28:65:35:40: 94:64:4b:64:5f:40:31:38:3d:57:48:c8:7f:61:16: ac:02:90:24:ef:45:31:07:bf:ef:1d:f0:50:35:a9: ca:a8:e1:46:8c:0d:f1:4f:0c:dd:b8:fc:4f:d6:55: f7:e6:34:05:bc:06:ec:fd:1e:50:60:72:a5:d6:88: 68:4d:11:93:0d:b6:3a:fe:27:2d:c0:43:98:7b:72: 79:af:3b:e3:bb:4b:51:81:cd:70:3b:7e:37:25:03: b8:5d:13:b2:bb:5b:f7:d4:ed:4f:bb:8a:35:ee:b3: 38:09:4e:e0:87:c4:9c:ba:e0:83:4b:d4:f1:a1:c6: 00:d1:4f:d2:51:0c:b5:d0:d3:ea:1c:2c:a9:db:f1: 60:b3:cc:67:e5:bc:07:6d:82:00:36:7e:52:90:5f: a1:97:a4:a7:db:05:a3:71:fc:8a:48:ff:e4:bd:dd: 03:49:bb:5f:c3:e1:3c:a9:b7:29:50:3f:e8:a1:1d: e7:a9:77:57:09:82:b6:a1:f9:53:9e:d1:69:54:f6: 1b:fb:4f:ea:5c:bd:35:2d:df:21:b3:f8:49:5c:be: 96:db:bc:3d:ff:80:ab:61:2a:95:d2:e9:60:89:3f: 30:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AE:A3:00:74:92:6E:86:D2:C5:29:A9:12:30:5B:61:A1:FF:13:82 X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e2:61:a7:63:8c:9c:c4:f4:cb:81:58:19:d3:45:a2:5a:bd: f0:bf:8b:9b:ed:f0:47:e6:5d:c5:4a:1d:69:28:44:25:9c:da: a4:9f:d7:8b:00:75:89:30:08:20:18:eb:5b:e5:84:76:6f:50: 37:a1:3e:88:f9:83:2d:97:9c:e7:5e:93:94:0f:ad:b7:31:92: 70:5c:d6:1e:63:02:5f:3b:8f:07:04:c9:2b:2f:3d:2c:00:75: a5:c8:9d:22:a1:d2:30:80:6c:b5:5d:3d:1f:cc:03:6b:28:8d: f6:9b:4e:89:3b:00:84:cc:38:bb:b8:00:c4:7e:25:c6:a3:3c: 24:a7:c1:3f:f0:d8:85:dd:19:f5:33:72:b1:9f:a2:96:5d:31: b0:ff:c2:31:f5:1f:38:7b:27:6d:17:3f:d9:bf:d0:4f:45:00: c5:67:14:86:2d:ff:98:51:19:67:96:fb:14:a4:1f:a7:b1:d0: e5:24:2c:82:b4:18:99:ed:cc:bf:09:0b:c7:90:47:79:b8:23: 3c:90:fb:ef:98:b6:3c:9e:23:a8:98:bb:2a:7b:f5:dc:0a:e2: db:e9:f2:98:52:73:ec:92:65:54:70:81:1a:6e:46:8d:28:91: e1:74:3c:c9:36:49:45:8f:92:6a:9c:ab:f3:9b:30:15:91:94: a0:c3:e7:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wPyvNF+XQfZB6r6AyjtgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjYwMTI3MDAwMTA0WhcNMjYwMTI4MDAwMTA0WjAzMTEwLwYDVQQD EygzMmFlYTMwMDc0OTI2ZTg2ZDJjNTI5YTkxMjMwNWI2MWExZmYxMzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteK/3QLnlfEIrGFdVUFvz8W2TMwH AW4PXyhlNUCUZEtkX0AxOD1XSMh/YRasApAk70UxB7/vHfBQNanKqOFGjA3xTwzd uPxP1lX35jQFvAbs/R5QYHKl1ohoTRGTDbY6/ictwEOYe3J5rzvju0tRgc1wO343 JQO4XROyu1v31O1Pu4o17rM4CU7gh8ScuuCDS9TxocYA0U/SUQy10NPqHCyp2/Fg s8xn5bwHbYIANn5SkF+hl6Sn2wWjcfyKSP/kvd0DSbtfw+E8qbcpUD/ooR3nqXdX CYK2oflTntFpVPYb+0/qXL01Ld8hs/hJXL6W27w9/4CrYSqV0ulgiT8wUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKuowB0km6G0sUpqRIwW2Gh/xOCMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeJhp2OM nMT0y4FYGdNFolq98L+Lm+3wR+ZdxUodaShEJZzapJ/XiwB1iTAIIBjrW+WEdm9Q N6E+iPmDLZec516TlA+ttzGScFzWHmMCXzuPBwTJKy89LAB1pcidIqHSMIBstV09 H8wDayiN9ptOiTsAhMw4u7gAxH4lxqM8JKfBP/DYhd0Z9TNysZ+ill0xsP/CMfUf OHsnbRc/2b/QT0UAxWcUhi3/mFEZZ5b7FKQfp7HQ5SQsgrQYme3MvwkLx5BHebgj PJD775i2PJ4jqJi7Knv13Ari2+nymFJz7JJlVHCBGm5GjSiR4XQ8yTZJRY+Sapyr 85swFZGUoMPn+w== -----END CERTIFICATE-----Generated at Tue Jan 27 05:36:42 2026 by rpki-client