This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft File: YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json) Hash identifier: m4ICYV+mF/ardruICBPxjrnA0iFYIkeLo0xsHW/7Oyg= Subject key identifier: F0:43:91:3F:C2:8B:EF:01:C8:07:66:33:9C:81:75:84:69:D5:BB:15 Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b Certificate serial: 019C1FBB7AD8D9030A207135313085B279B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft Manifest number: 14B5 Signing time: Mon 02 Feb 2026 19:01:46 +0000 Manifest this update: Mon 02 Feb 2026 19:01:46 +0000 Manifest next update: Tue 03 Feb 2026 19:01:46 +0000 Files and hashes: 1: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: U2y0HYiejWxrNv5lFkyi8l9ti6VhHpSiKnwmkaPcWAk=) 2: r07b59Kbc0tU4fUroKjDGDeksk4.roa (hash: VbjM5vBRkz4uK7ac3fSu6tjCMa1PBV229HM3K4xTekY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:bb:7a:d8:d9:03:0a:20:71:35:31:30:85:b2:79:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b Validity Not Before: Feb 2 19:01:46 2026 GMT Not After : Feb 3 19:01:46 2026 GMT Subject: CN=f043913fc28bef01c80766339c81758469d5bb15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:41:3e:66:e0:2e:9f:77:45:00:bf:b8:52:10: ec:63:c3:52:85:41:43:1a:5a:73:e0:7a:fc:f4:49: 65:78:32:26:4d:60:e1:56:65:33:ae:cc:b2:b0:53: 2d:ef:46:8b:4a:68:77:ce:2f:26:02:46:f9:ed:a0: ec:b4:23:47:f1:52:13:be:47:ca:69:d3:24:5c:e9: f8:66:86:82:29:bc:06:07:e3:bf:ef:f4:29:4d:41: 5c:c0:66:df:e1:16:1b:a0:f5:ac:2b:df:e9:03:7a: 2b:80:89:04:44:e9:1c:38:2c:50:fc:8c:57:ab:fd: e4:24:0b:02:92:47:6c:3a:fc:27:91:95:3e:07:6d: be:e2:1e:6c:df:c7:4f:ed:1a:4f:f9:c8:0e:dc:c8: 55:f6:63:cd:66:5a:46:b2:2d:0b:40:4f:28:37:7e: 81:49:0c:34:ed:01:b1:0c:cb:c3:82:00:7b:ad:ca: ce:fd:44:b4:4f:60:b8:2e:64:7b:80:df:a8:55:56: a7:ea:f5:ce:d2:f9:4b:c9:ad:3c:35:b7:a6:50:bc: d9:31:96:38:2c:00:27:f8:5b:37:18:47:2d:d5:d3: c4:77:66:95:7e:1d:2e:b0:5c:a2:77:df:38:ae:4f: 99:7f:f1:d8:9b:f9:40:34:32:d2:3e:91:cb:b8:2d: c7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:43:91:3F:C2:8B:EF:01:C8:07:66:33:9C:81:75:84:69:D5:BB:15 X509v3 Authority Key Identifier: keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:df:2a:6d:46:be:6b:2e:19:1b:a7:92:d0:d4:5f:f8:19:87: 9a:c4:1e:41:09:42:d3:7a:1e:4c:1d:ee:69:fa:42:1f:8e:dc: a4:52:9b:fa:d6:16:63:17:e2:08:22:ba:86:84:2a:22:3c:56: 61:4d:b5:b8:66:3d:40:04:01:24:58:b5:62:5a:d6:01:c6:3b: d7:70:44:a7:f3:05:f3:38:6d:2f:f8:f8:c3:cf:e0:1d:08:aa: 6d:43:52:5c:d8:82:e1:81:09:32:37:2f:7a:1c:56:fe:4c:8b: 5e:c4:10:e9:e2:c1:4d:d5:49:62:cf:cf:27:ca:4a:b9:af:a2: 43:97:2d:43:8a:af:fa:b6:73:2d:7e:70:a0:95:42:99:9e:2d: 6d:d7:0f:41:ae:5f:f8:a7:de:36:93:be:5b:9b:cc:77:bc:c5: 87:1a:7d:0d:7a:9b:d2:7e:cd:a3:3a:35:d5:b1:b3:36:f8:a2: 6a:b3:44:3c:2a:26:68:c5:36:12:e4:32:7f:e7:0e:ec:a1:c4: 7f:76:7a:98:3c:9f:34:fc:1a:dd:e2:32:7a:b0:95:6b:58:78: 4d:18:bf:8f:90:df:9f:b7:9f:3d:6f:43:12:a4:cc:dc:9a:16: 30:51:a3:b6:bd:de:83:f3:4a:e0:cb:46:da:6c:b2:7a:d9:a4: 68:3a:5b:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwfu3rY2QMKIHE1MTCFsnm0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjg1N2M0M2NhMWRmMDRjYjY5YTRhMGFhYzg2MjliZGYz Mjc1NmIwHhcNMjYwMjAyMTkwMTQ2WhcNMjYwMjAzMTkwMTQ2WjAzMTEwLwYDVQQD EyhmMDQzOTEzZmMyOGJlZjAxYzgwNzY2MzM5YzgxNzU4NDY5ZDViYjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEE+ZuAun3dFAL+4UhDsY8NShUFD Glpz4Hr89ElleDImTWDhVmUzrsyysFMt70aLSmh3zi8mAkb57aDstCNH8VITvkfK adMkXOn4ZoaCKbwGB+O/7/QpTUFcwGbf4RYboPWsK9/pA3orgIkEROkcOCxQ/IxX q/3kJAsCkkdsOvwnkZU+B22+4h5s38dP7RpP+cgO3MhV9mPNZlpGsi0LQE8oN36B SQw07QGxDMvDggB7rcrO/US0T2C4LmR7gN+oVVan6vXO0vlLya08NbemULzZMZY4 LAAn+Fs3GEct1dPEd2aVfh0usFyid984rk+Zf/HYm/lANDLSPpHLuC3H+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBDkT/Ci+8ByAdmM5yBdYRp1bsVMB8GA1UdIwQY MBaAFGBoV8Q8od8Ey2mkoKrIYpvfMnVrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdoWHhEeWgzd1RMYWFTZ3FzaGltOTh5ZFdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi85NWQ3ZGMtMGM4Yi00OTQxLWI5YzEt ZDQ3MTBkMDIyMzM2LzEvWUdoWHhEeWgzd1RMYWFTZ3FzaGltOTh5ZFdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi85NWQ3ZGMtMGM4Yi00OTQxLWI5YzEtZDQ3MTBkMDIyMzM2 LzEvWUdoWHhEeWgzd1RMYWFTZ3FzaGltOTh5ZFdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM98qbUa+ ay4ZG6eS0NRf+BmHmsQeQQlC03oeTB3uafpCH47cpFKb+tYWYxfiCCK6hoQqIjxW YU21uGY9QAQBJFi1YlrWAcY713BEp/MF8zhtL/j4w8/gHQiqbUNSXNiC4YEJMjcv ehxW/kyLXsQQ6eLBTdVJYs/PJ8pKua+iQ5ctQ4qv+rZzLX5woJVCmZ4tbdcPQa5f +KfeNpO+W5vMd7zFhxp9DXqb0n7Nozo11bGzNviiarNEPComaMU2EuQyf+cO7KHE f3Z6mDyfNPwa3eIyerCVa1h4TRi/j5Dfn7efPW9DEqTM3JoWMFGjtr3eg/NK4MtG 2myyetmkaDpb9w== -----END CERTIFICATE-----Generated at Tue Feb 3 01:52:45 2026 by rpki-client