This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft File: YMjVd0f3KXAO8vVhT2397I0Rny0.mft (raw, json) Hash identifier: hLSTBF6Nsg2kLM/qGYrkNIrYCIQ/h8WbTq8uY4pzGiE= Subject key identifier: A8:39:AE:28:06:F2:D7:4F:8F:13:43:E9:D2:C6:AB:D0:24:84:EF:00 Authority key identifier: 60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D Certificate issuer: /CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d Certificate serial: 019BFF1D5882268411EAB7AB6A6CEA82936C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft Manifest number: 10C8 Signing time: Tue 27 Jan 2026 11:01:11 +0000 Manifest this update: Tue 27 Jan 2026 11:01:11 +0000 Manifest next update: Wed 28 Jan 2026 11:01:11 +0000 Files and hashes: 1: FlHMbNs80F0IuT4Av0zk4nnd58w.roa (hash: uOKcbHsW+r2mNq3fiimqbh7cRriRbTOrF8Meua/Wzbk=) 2: QuPhVmekJ4dhqBPpcI5OG6WfkBk.roa (hash: c8GP0XBznN8FZcjPHI/drnI5xLOeTCTAN2FjtvB53n0=) 3: YMjVd0f3KXAO8vVhT2397I0Rny0.crl (hash: whO7M46+R694Moh2KP1L9Wk3gDIPiYXchDXPRSIRR1U=) 4: t94EIWlSW9NG33DSL0GHqLJL-LQ.roa (hash: FMpxWzf+dsmMIA+7EsV6yVLkhEZ3HpxaZOBxRMrjb4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:1d:58:82:26:84:11:ea:b7:ab:6a:6c:ea:82:93:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d Validity Not Before: Jan 27 11:01:11 2026 GMT Not After : Jan 28 11:01:11 2026 GMT Subject: CN=a839ae2806f2d74f8f1343e9d2c6abd02484ef00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:22:97:35:60:a6:ba:1f:a6:47:c7:54:64:db: 53:78:73:dc:3f:24:b3:fd:d4:cf:02:41:1c:88:8b: 6b:0a:5d:f6:30:12:9d:21:b2:12:fe:cc:b6:30:46: 9d:79:09:8c:c1:81:df:e7:9d:13:f4:c4:89:85:cc: 08:69:ad:fd:47:c8:6c:b2:a4:1a:05:24:f3:6e:40: e4:dd:7d:b7:00:c2:01:cd:5a:87:08:70:f4:8f:db: fb:72:e9:55:19:c4:a3:8b:61:4e:a2:1c:72:82:18: 55:ce:87:43:4e:fc:a5:8d:d3:29:3b:b4:c5:f5:60: 2b:32:29:e5:2a:8b:cf:50:e5:63:b0:56:65:7e:54: 74:ad:f2:67:fe:8d:98:96:b9:c7:07:79:eb:53:f1: 88:36:d6:5d:c5:a5:86:4b:03:70:ed:33:39:01:4d: 8f:57:77:b5:25:30:b7:ad:10:96:89:43:6b:d6:d5: 83:68:23:c7:d9:9c:10:3f:df:c3:f6:7e:fa:b7:82: 58:a3:7b:1e:f0:da:59:dc:f2:61:1a:6c:e6:c2:4c: 7d:2f:e8:e7:90:6a:d1:f1:08:5b:9a:21:e8:51:15: 18:a9:67:cc:7d:87:b2:52:a9:8a:65:a9:c2:5c:24: 73:63:30:4d:1c:5b:9d:c9:06:e1:33:c0:bf:90:c9: 07:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:39:AE:28:06:F2:D7:4F:8F:13:43:E9:D2:C6:AB:D0:24:84:EF:00 X509v3 Authority Key Identifier: keyid:60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:22:98:21:c8:6f:49:58:a5:30:e1:97:35:91:2d:e0:b3:ef: d4:84:ec:ce:0a:28:11:c0:83:77:38:ce:f0:18:1b:9b:58:80: 24:66:0e:e4:19:41:11:04:4e:fe:64:35:b2:12:ad:42:bd:13: c2:76:9a:47:20:50:c4:91:99:50:f0:57:a7:be:a7:fb:7c:dc: fc:e0:4b:c9:4c:e5:12:2f:ff:d7:c6:a6:25:f4:41:66:0a:99: 64:af:bf:f6:29:13:4c:93:b2:3f:66:68:34:0b:98:7d:d4:9a: 2d:58:3a:1f:59:f6:2d:d3:6a:6f:e6:b4:33:fd:f0:f0:0c:a8: 0f:38:93:84:37:ff:b5:e2:52:f9:3a:92:6b:95:d5:00:60:1d: e1:69:7f:4e:d0:6c:c6:7d:a2:1e:3d:c0:54:d3:18:85:21:78: d7:9a:51:35:a8:f4:c7:5d:1e:52:49:0c:12:75:63:ad:73:43: f8:93:85:9a:2a:a5:07:65:30:0a:37:27:d5:6d:ca:4a:cc:52: e7:a2:fd:1f:37:95:59:72:26:cd:09:5f:77:bd:9a:0d:50:77: e2:fa:01:10:8a:b8:c8:ef:5c:b2:a7:0d:77:47:64:28:34:85: ee:bb:a7:26:f2:a4:a1:a9:3c:9e:35:dd:00:0d:6d:46:4c:f4: 02:26:5e:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/HViCJoQR6reramzqgpNsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYzhkNTc3NDdmNzI5NzAwZWYyZjU2MTRmNmRmZGVjOGQx MTlmMmQwHhcNMjYwMTI3MTEwMTExWhcNMjYwMTI4MTEwMTExWjAzMTEwLwYDVQQD EyhhODM5YWUyODA2ZjJkNzRmOGYxMzQzZTlkMmM2YWJkMDI0ODRlZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiKXNWCmuh+mR8dUZNtTeHPcPySz /dTPAkEciItrCl32MBKdIbIS/sy2MEadeQmMwYHf550T9MSJhcwIaa39R8hssqQa BSTzbkDk3X23AMIBzVqHCHD0j9v7culVGcSji2FOohxyghhVzodDTvyljdMpO7TF 9WArMinlKovPUOVjsFZlflR0rfJn/o2YlrnHB3nrU/GINtZdxaWGSwNw7TM5AU2P V3e1JTC3rRCWiUNr1tWDaCPH2ZwQP9/D9n76t4JYo3se8NpZ3PJhGmzmwkx9L+jn kGrR8QhbmiHoURUYqWfMfYeyUqmKZanCXCRzYzBNHFudyQbhM8C/kMkHbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKg5rigG8tdPjxND6dLGq9AkhO8AMB8GA1UdIwQY MBaAFGDI1XdH9ylwDvL1YU9t/eyNEZ8tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU1qVmQwZjNLWEFPOHZWaFQyMzk3STBSbnkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zOWQ3MzQtNmZiMS00ZGMwLWExMjgt ZDc1ZjU5NWZhN2MzLzEvWU1qVmQwZjNLWEFPOHZWaFQyMzk3STBSbnkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8zOWQ3MzQtNmZiMS00ZGMwLWExMjgtZDc1ZjU5NWZhN2Mz LzEvWU1qVmQwZjNLWEFPOHZWaFQyMzk3STBSbnkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCKYIchv SVilMOGXNZEt4LPv1ITszgooEcCDdzjO8Bgbm1iAJGYO5BlBEQRO/mQ1shKtQr0T wnaaRyBQxJGZUPBXp76n+3zc/OBLyUzlEi//18amJfRBZgqZZK+/9ikTTJOyP2Zo NAuYfdSaLVg6H1n2LdNqb+a0M/3w8AyoDziThDf/teJS+TqSa5XVAGAd4Wl/TtBs xn2iHj3AVNMYhSF415pRNaj0x10eUkkMEnVjrXND+JOFmiqlB2UwCjcn1W3KSsxS 56L9HzeVWXImzQlfd72aDVB34voBEIq4yO9csqcNd0dkKDSF7runJvKkoak8njXd AA1tRkz0AiZeTg== -----END CERTIFICATE-----Generated at Tue Jan 27 14:58:36 2026 by rpki-client