This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft File: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft (raw, json) Hash identifier: Dh0i+rPV+uUIsLs0ix4KbkbC25gE5zYJL+ble67BdpY= Subject key identifier: 6E:41:4C:6C:81:2D:7C:39:70:EF:4D:F4:8D:A4:DA:6A:73:A2:DA:A6 Authority key identifier: 61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8 Certificate issuer: /CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8 Certificate serial: 019C047AB4688AC66DE1058948FDFAD665D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft Manifest number: 0C81 Signing time: Wed 28 Jan 2026 12:01:16 +0000 Manifest this update: Wed 28 Jan 2026 12:01:16 +0000 Manifest next update: Thu 29 Jan 2026 12:01:16 +0000 Files and hashes: 1: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl (hash: 4OjYRiHkDilOZfDmLzVfJLcEopj8PmsFpyOHMS27R/Q=) 2: pgpahIBh1JVMRLJjJw7ASp6a1Cg.roa (hash: L10pq0OGKRh0sHJ3XX+pOGwbnH1MYXhkG9/kZOYZEMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:7a:b4:68:8a:c6:6d:e1:05:89:48:fd:fa:d6:65:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8 Validity Not Before: Jan 28 12:01:16 2026 GMT Not After : Jan 29 12:01:16 2026 GMT Subject: CN=6e414c6c812d7c3970ef4df48da4da6a73a2daa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6b:3a:15:e4:f6:7d:42:81:bc:3b:2a:5a:33: 86:ca:1e:5f:ab:3c:3b:72:34:4a:ad:b4:07:3b:d6: b6:4d:36:b2:d6:1a:b1:a5:93:5b:f2:58:e8:6e:02: b1:bb:0a:0e:24:ba:f4:f7:23:d9:79:0a:a9:60:87: ca:bc:90:0a:4a:63:b4:1d:f7:07:0e:f9:e0:39:81: f6:dc:95:de:b6:29:24:3e:44:dc:f2:40:da:ef:b6: 6e:55:50:60:a5:e0:b7:a3:26:03:8c:7f:2a:72:72: 8d:17:0d:3f:64:e8:f1:87:69:9a:f1:f1:20:01:ae: 67:3e:8f:83:79:b9:4a:45:9f:1c:55:84:86:b1:00: 70:0d:58:c0:81:3a:57:a8:3b:29:39:64:de:4d:ac: d4:c7:cb:cb:cc:c7:d5:81:fa:79:a8:c4:31:a6:76: 75:57:b9:e0:06:fb:a8:8b:8f:8f:33:fa:6d:29:16: 06:95:cc:18:67:0c:c8:48:a7:cd:50:0d:95:e3:4b: d2:56:54:d9:f0:ee:4d:7f:6f:42:c0:4c:bc:a0:13: 90:88:1a:60:f9:20:c8:84:96:c1:2a:86:ee:49:a5: 02:db:f5:3e:cd:b7:f7:45:13:fc:2f:83:9b:e2:c0: d8:85:29:80:24:b3:c6:dd:5d:24:c8:c4:56:59:27: e8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:41:4C:6C:81:2D:7C:39:70:EF:4D:F4:8D:A4:DA:6A:73:A2:DA:A6 X509v3 Authority Key Identifier: keyid:61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:97:15:35:d8:78:15:97:31:27:7c:fb:d2:4e:c8:b1:2c:29: fc:d6:4f:3b:ac:9a:97:e7:e9:48:87:a8:4d:66:7c:d8:b0:c8: f5:fb:ab:15:29:f1:8c:a8:1c:88:4d:97:72:11:65:97:63:60: cc:48:2c:67:bf:ef:bb:cf:64:52:68:34:83:1e:9a:e1:ed:f2: ca:af:3f:bb:97:30:6d:b4:9b:4e:87:18:dd:22:aa:d1:14:88: fb:3c:15:41:bf:58:6d:fb:05:e7:62:f4:3a:6b:36:bd:6a:66: b0:08:2e:c4:b3:e1:fa:21:8f:7d:5a:d6:91:a8:fe:a5:6f:27: 3b:67:01:8b:41:54:0a:0e:a7:f0:a9:d7:c8:ff:4c:c8:c3:a8: 21:5f:7a:87:93:50:38:28:2c:fd:e2:34:6f:75:c4:4a:89:56: dc:aa:d8:c1:e2:b1:9e:bc:4b:68:f1:e3:b9:61:b8:9c:82:43: cc:ef:60:fa:28:7e:b8:67:c2:c0:93:25:48:af:19:82:bb:53: 24:b3:41:1e:4e:2d:99:48:db:54:9c:9a:5d:26:70:b5:ae:51: 67:a7:70:23:2b:da:81:71:25:f9:fe:d3:fb:5d:b7:16:f5:89: 87:3d:a7:f3:c4:f8:81:48:29:30:86:40:16:62:6a:34:c2:54: b4:6d:64:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwEerRoisZt4QWJSP361mXWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZWRmZTdhNGZjNjRkZTUyOWQxNjJkZjJmZWQwNzgwYzZl NWUxYTgwHhcNMjYwMTI4MTIwMTE2WhcNMjYwMTI5MTIwMTE2WjAzMTEwLwYDVQQD Eyg2ZTQxNGM2YzgxMmQ3YzM5NzBlZjRkZjQ4ZGE0ZGE2YTczYTJkYWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2s6FeT2fUKBvDsqWjOGyh5fqzw7 cjRKrbQHO9a2TTay1hqxpZNb8ljobgKxuwoOJLr09yPZeQqpYIfKvJAKSmO0HfcH DvngOYH23JXetikkPkTc8kDa77ZuVVBgpeC3oyYDjH8qcnKNFw0/ZOjxh2ma8fEg Aa5nPo+DeblKRZ8cVYSGsQBwDVjAgTpXqDspOWTeTazUx8vLzMfVgfp5qMQxpnZ1 V7ngBvuoi4+PM/ptKRYGlcwYZwzISKfNUA2V40vSVlTZ8O5Nf29CwEy8oBOQiBpg +SDIhJbBKobuSaUC2/U+zbf3RRP8L4Ob4sDYhSmAJLPG3V0kyMRWWSforQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5BTGyBLXw5cO9N9I2k2mpzotqmMB8GA1UdIwQY MBaAFGHt/npPxk3lKdFi3y/tB4DG5eGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWUzLWVrX0dUZVVwMFdMZkwtMEhnTWJsNGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iODFkMDgtNjZjOS00YmU5LWEyMjEt YWZmODcxYjViNWY3LzEvWWUzLWVrX0dUZVVwMFdMZkwtMEhnTWJsNGFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iODFkMDgtNjZjOS00YmU5LWEyMjEtYWZmODcxYjViNWY3 LzEvWWUzLWVrX0dUZVVwMFdMZkwtMEhnTWJsNGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpcVNdh4 FZcxJ3z70k7IsSwp/NZPO6yal+fpSIeoTWZ82LDI9furFSnxjKgciE2XchFll2Ng zEgsZ7/vu89kUmg0gx6a4e3yyq8/u5cwbbSbTocY3SKq0RSI+zwVQb9YbfsF52L0 Oms2vWpmsAguxLPh+iGPfVrWkaj+pW8nO2cBi0FUCg6n8KnXyP9MyMOoIV96h5NQ OCgs/eI0b3XESolW3KrYweKxnrxLaPHjuWG4nIJDzO9g+ih+uGfCwJMlSK8ZgrtT JLNBHk4tmUjbVJyaXSZwta5RZ6dwIyvagXEl+f7T+123FvWJhz2n88T4gUgpMIZA FmJqNMJUtG1kiw== -----END CERTIFICATE-----Generated at Wed Jan 28 19:17:16 2026 by rpki-client