This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft File: YMjVd0f3KXAO8vVhT2397I0Rny0.mft (raw, json) Hash identifier: hY5yqrtHFay0iPiYZ8mkva9jw4ZwUzpMY3YmX5eG5fE= Subject key identifier: 8E:7C:98:F8:2C:CF:5C:E6:62:56:BB:D5:32:16:B6:22:C5:9E:4B:7B Authority key identifier: 60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D Certificate issuer: /CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d Certificate serial: 019BFD2F16099CDCBE42832C50727D23E864 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft Manifest number: 10C7 Signing time: Tue 27 Jan 2026 02:01:19 +0000 Manifest this update: Tue 27 Jan 2026 02:01:19 +0000 Manifest next update: Wed 28 Jan 2026 02:01:19 +0000 Files and hashes: 1: FlHMbNs80F0IuT4Av0zk4nnd58w.roa (hash: uOKcbHsW+r2mNq3fiimqbh7cRriRbTOrF8Meua/Wzbk=) 2: QuPhVmekJ4dhqBPpcI5OG6WfkBk.roa (hash: c8GP0XBznN8FZcjPHI/drnI5xLOeTCTAN2FjtvB53n0=) 3: YMjVd0f3KXAO8vVhT2397I0Rny0.crl (hash: iyBoXS5puuneYRVCIVzy52QiKcdbJVCX+CFO5F68fFI=) 4: t94EIWlSW9NG33DSL0GHqLJL-LQ.roa (hash: FMpxWzf+dsmMIA+7EsV6yVLkhEZ3HpxaZOBxRMrjb4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 02:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2f:16:09:9c:dc:be:42:83:2c:50:72:7d:23:e8:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d Validity Not Before: Jan 27 02:01:19 2026 GMT Not After : Jan 28 02:01:19 2026 GMT Subject: CN=8e7c98f82ccf5ce66256bbd53216b622c59e4b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b9:39:f8:47:06:de:7a:c4:4f:1e:e1:e5:2d: 4a:de:be:6f:6b:12:df:fe:29:3e:cf:4d:79:53:35: b2:90:1d:8f:60:e6:82:16:a7:69:29:38:95:92:cd: ab:5a:72:6c:37:25:f4:da:09:2b:0e:06:00:eb:60: 52:2a:e8:c8:b8:f9:90:b7:64:3e:0c:f2:03:dc:f2: 5e:7a:02:8e:fd:9b:0c:82:cd:d6:81:89:ee:02:f9: b0:01:fb:0d:37:19:a1:3c:3c:34:0f:de:e6:46:84: ba:80:c1:bc:0a:ed:ca:fe:d0:b5:57:9e:c3:7e:d7: 59:1f:e3:f4:e2:9d:7e:fa:06:b4:29:81:63:f9:4d: bb:eb:34:23:4a:ff:da:4b:5c:e1:75:fe:2e:ea:fc: 8c:a9:bf:9e:a1:65:5e:d3:d2:7c:d6:af:db:c6:2b: c8:d3:14:78:b3:bf:06:84:d5:63:1d:fe:63:99:7f: 37:96:6d:66:43:fe:6d:17:f4:06:37:d1:c7:02:35: 99:b0:a9:17:20:18:aa:8b:a3:b9:1a:4e:de:0d:19: 2f:4d:87:56:3f:b9:66:a6:68:d2:3c:96:ee:f0:6b: 55:79:1d:7b:77:9f:ca:33:06:a5:9d:c0:72:9c:5c: 5a:bd:74:55:1b:7f:12:fe:ff:3a:e4:33:2b:5a:8b: 05:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7C:98:F8:2C:CF:5C:E6:62:56:BB:D5:32:16:B6:22:C5:9E:4B:7B X509v3 Authority Key Identifier: keyid:60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:9e:48:07:f4:a2:f2:6e:d2:ac:44:e6:d7:e4:a3:e5:ea:20: fb:a8:8c:5f:1a:5b:a6:57:fd:ab:41:5d:8c:4e:e2:c1:d0:34: 50:f6:ae:0c:0d:69:9c:c1:d5:34:21:a4:81:62:28:1d:5c:a8: f4:3e:be:22:08:58:f4:ef:fe:32:8a:bc:fe:66:77:44:d3:8b: 06:80:79:9a:44:a9:d5:c7:79:8b:b9:da:bb:65:c8:72:3f:65: 2e:14:c9:c2:30:06:a6:1c:87:69:01:95:5a:24:f0:6d:f7:20: 4e:7e:0a:5e:10:7b:0d:3c:11:fe:3a:2c:75:82:a4:0a:e0:2a: ab:70:d8:4a:44:64:53:de:6a:37:18:cb:cd:f2:3a:9d:0f:7d: ee:f4:c0:58:89:11:92:d5:2a:eb:cd:78:88:f8:1e:14:d8:22: 4e:ae:12:0c:96:46:70:b6:e5:ab:ac:b2:18:91:18:5a:40:2e: 25:14:c5:e0:d1:96:ca:ff:86:51:15:48:4b:99:3d:e7:9d:21: 05:e0:6b:71:80:0b:5a:3b:b9:a3:8a:0e:78:46:92:cd:0a:74: 51:ca:8f:a5:83:17:95:44:dc:af:27:38:18:45:42:a8:da:a6: 15:cd:10:0e:80:44:18:b2:37:e0:b1:11:dd:1b:8d:b5:1e:6a: c3:30:8f:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LxYJnNy+QoMsUHJ9I+hkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYzhkNTc3NDdmNzI5NzAwZWYyZjU2MTRmNmRmZGVjOGQx MTlmMmQwHhcNMjYwMTI3MDIwMTE5WhcNMjYwMTI4MDIwMTE5WjAzMTEwLwYDVQQD Eyg4ZTdjOThmODJjY2Y1Y2U2NjI1NmJiZDUzMjE2YjYyMmM1OWU0YjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrk5+EcG3nrETx7h5S1K3r5vaxLf /ik+z015UzWykB2PYOaCFqdpKTiVks2rWnJsNyX02gkrDgYA62BSKujIuPmQt2Q+ DPID3PJeegKO/ZsMgs3WgYnuAvmwAfsNNxmhPDw0D97mRoS6gMG8Cu3K/tC1V57D ftdZH+P04p1++ga0KYFj+U276zQjSv/aS1zhdf4u6vyMqb+eoWVe09J81q/bxivI 0xR4s78GhNVjHf5jmX83lm1mQ/5tF/QGN9HHAjWZsKkXIBiqi6O5Gk7eDRkvTYdW P7lmpmjSPJbu8GtVeR17d5/KMwalncBynFxavXRVG38S/v865DMrWosF5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI58mPgsz1zmYla71TIWtiLFnkt7MB8GA1UdIwQY MBaAFGDI1XdH9ylwDvL1YU9t/eyNEZ8tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU1qVmQwZjNLWEFPOHZWaFQyMzk3STBSbnkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zOWQ3MzQtNmZiMS00ZGMwLWExMjgt ZDc1ZjU5NWZhN2MzLzEvWU1qVmQwZjNLWEFPOHZWaFQyMzk3STBSbnkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8zOWQ3MzQtNmZiMS00ZGMwLWExMjgtZDc1ZjU5NWZhN2Mz LzEvWU1qVmQwZjNLWEFPOHZWaFQyMzk3STBSbnkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQp5IB/Si 8m7SrETm1+Sj5eog+6iMXxpbplf9q0FdjE7iwdA0UPauDA1pnMHVNCGkgWIoHVyo 9D6+IghY9O/+Moq8/mZ3RNOLBoB5mkSp1cd5i7nau2XIcj9lLhTJwjAGphyHaQGV WiTwbfcgTn4KXhB7DTwR/josdYKkCuAqq3DYSkRkU95qNxjLzfI6nQ997vTAWIkR ktUq6814iPgeFNgiTq4SDJZGcLblq6yyGJEYWkAuJRTF4NGWyv+GURVIS5k9550h BeBrcYALWju5o4oOeEaSzQp0UcqPpYMXlUTcryc4GEVCqNqmFc0QDoBEGLI34LER 3RuNtR5qwzCPGQ== -----END CERTIFICATE-----Generated at Tue Jan 27 13:04:18 2026 by rpki-client