This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft File: YTIzl9blKd_wbHzxTRdg1ucGqm8.mft (raw, json) Hash identifier: T87nznzyxnkJKRe9vq35Ku29dX1A+ZYzw4SRETrRGdI= Subject key identifier: F0:D6:B2:58:53:6B:3D:F6:5A:9C:1C:D9:2A:1B:C8:14:4B:71:F7:E7 Authority key identifier: 61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F Certificate issuer: /CN=61323397d6e529dff06c7cf14d1760d6e706aa6f Certificate serial: 019BB1021E383435D4076B4B1A137D226A36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft Manifest number: 0483 Signing time: Mon 12 Jan 2026 07:01:04 +0000 Manifest this update: Mon 12 Jan 2026 07:01:04 +0000 Manifest next update: Tue 13 Jan 2026 07:01:04 +0000 Files and hashes: 1: TVT4_OBKA-2I4FrIkhh2iW24oPw.roa (hash: U1OVtJgMOPc/4XYbv8bLSVgA0GMg+CX+suR8Va/RqoY=) 2: YTIzl9blKd_wbHzxTRdg1ucGqm8.crl (hash: 7hh6TLQFRRMrN47mmjUTH67slCRyMHsS7c/jwUAQ5wk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:02:1e:38:34:35:d4:07:6b:4b:1a:13:7d:22:6a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61323397d6e529dff06c7cf14d1760d6e706aa6f Validity Not Before: Jan 12 07:01:04 2026 GMT Not After : Jan 13 07:01:04 2026 GMT Subject: CN=f0d6b258536b3df65a9c1cd92a1bc8144b71f7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c1:72:6c:49:ea:87:e5:a9:05:f1:9e:4e:66: 6f:f4:f6:c6:8d:42:7c:74:46:dc:c2:09:a3:08:42: b9:b9:f1:31:30:79:1b:0f:24:d0:5e:60:9a:bf:67: 5a:c6:bc:27:2d:a3:5a:c6:6d:7d:fd:5f:18:34:1a: ec:ca:d5:6d:bc:c4:21:c5:03:f5:ac:b9:f9:de:3e: 7c:06:25:6c:77:ed:2d:c9:12:56:6f:1f:0d:e3:11: 2c:a0:a1:d8:7f:26:fe:e8:ab:56:9b:d7:b4:bf:0e: db:eb:88:1b:b3:99:55:6b:43:ec:b1:49:e8:22:8e: 02:e1:a8:6e:11:ed:e8:1c:74:bb:cb:47:15:d3:ea: 09:b4:8e:79:9c:37:35:3c:6f:dc:7c:92:04:c6:69: 2d:3a:14:70:f3:55:1a:05:01:cb:97:ad:3f:b2:30: 0f:83:91:50:8f:6f:db:06:0e:4b:fa:86:db:81:10: a4:b0:aa:48:d7:ad:e9:dd:bd:93:47:66:5d:56:b3: eb:c1:d4:67:b0:2d:f2:eb:e9:b3:46:80:e8:f4:47: 3f:c8:c7:f0:6d:88:29:31:03:99:0a:05:e4:7c:ad: 27:90:0c:d4:79:f4:f7:84:27:2e:0f:46:cd:15:a5: 63:4e:f8:4d:cb:a5:7b:6f:37:8a:cb:61:a8:c4:0b: bc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D6:B2:58:53:6B:3D:F6:5A:9C:1C:D9:2A:1B:C8:14:4B:71:F7:E7 X509v3 Authority Key Identifier: keyid:61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:dc:53:c1:05:23:80:bb:90:2a:08:f6:00:d3:91:fe:b7:42: 1f:03:f7:b5:70:8a:ed:5a:92:21:85:b3:14:6d:06:f9:2b:7d: d3:0c:36:a3:5f:61:12:bd:88:cb:e3:64:4d:5c:1b:1b:e0:f0: 08:0d:13:7e:19:72:70:16:a5:53:39:7b:9b:61:43:88:13:f5: 17:79:90:0e:31:f5:cb:07:7a:e7:d4:70:86:79:6b:16:9a:4f: bd:a6:b7:81:e3:95:5b:3f:5f:78:83:32:ad:3a:fc:18:dd:76: 0d:6b:6a:c2:8b:a4:00:97:ee:9f:2d:32:6e:e3:f6:ba:e9:25: f4:c0:9e:3d:3c:fc:a0:e3:85:60:dd:39:7a:0f:16:73:f1:47: 95:c4:8c:16:71:3a:b9:6c:4f:1a:4d:63:72:06:de:7e:c5:bd: d0:22:56:a4:db:d2:35:6a:e6:98:b1:29:b4:25:8c:a2:31:cd: 7d:0f:58:53:c2:87:a6:02:cd:32:9c:be:45:dc:29:94:38:ca: e9:86:40:23:4f:34:01:85:84:22:3f:3d:0b:46:d8:a1:d7:32: 74:f5:94:b3:9a:5a:88:da:7a:70:fa:d1:aa:e0:ab:e6:d1:b2: eb:ae:67:4c:e9:a2:95:f1:a0:0b:90:cb:b5:d9:5d:20:2e:25: 55:ad:dd:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxAh44NDXUB2tLGhN9Imo2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMzIzMzk3ZDZlNTI5ZGZmMDZjN2NmMTRkMTc2MGQ2ZTcw NmFhNmYwHhcNMjYwMTEyMDcwMTA0WhcNMjYwMTEzMDcwMTA0WjAzMTEwLwYDVQQD EyhmMGQ2YjI1ODUzNmIzZGY2NWE5YzFjZDkyYTFiYzgxNDRiNzFmN2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MFybEnqh+WpBfGeTmZv9PbGjUJ8 dEbcwgmjCEK5ufExMHkbDyTQXmCav2daxrwnLaNaxm19/V8YNBrsytVtvMQhxQP1 rLn53j58BiVsd+0tyRJWbx8N4xEsoKHYfyb+6KtWm9e0vw7b64gbs5lVa0PssUno Io4C4ahuEe3oHHS7y0cV0+oJtI55nDc1PG/cfJIExmktOhRw81UaBQHLl60/sjAP g5FQj2/bBg5L+obbgRCksKpI163p3b2TR2ZdVrPrwdRnsC3y6+mzRoDo9Ec/yMfw bYgpMQOZCgXkfK0nkAzUefT3hCcuD0bNFaVjTvhNy6V7bzeKy2GoxAu8IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDWslhTaz32Wpwc2SobyBRLcffnMB8GA1UdIwQY MBaAFGEyM5fW5Snf8Gx88U0XYNbnBqpvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVRJemw5YmxLZF93Ykh6eFRSZGcxdWNHcW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iYTM5MWItY2I4OS00ZTIxLTk0NGEt ZWYzM2Q4NWE0YTg2LzEvWVRJemw5YmxLZF93Ykh6eFRSZGcxdWNHcW04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9iYTM5MWItY2I4OS00ZTIxLTk0NGEtZWYzM2Q4NWE0YTg2 LzEvWVRJemw5YmxLZF93Ykh6eFRSZGcxdWNHcW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9xTwQUj gLuQKgj2ANOR/rdCHwP3tXCK7VqSIYWzFG0G+St90ww2o19hEr2Iy+NkTVwbG+Dw CA0TfhlycBalUzl7m2FDiBP1F3mQDjH1ywd659RwhnlrFppPvaa3geOVWz9feIMy rTr8GN12DWtqwoukAJfuny0ybuP2uukl9MCePTz8oOOFYN05eg8Wc/FHlcSMFnE6 uWxPGk1jcgbefsW90CJWpNvSNWrmmLEptCWMojHNfQ9YU8KHpgLNMpy+RdwplDjK 6YZAI080AYWEIj89C0bYodcydPWUs5paiNp6cPrRquCr5tGy665nTOmilfGgC5DL tdldIC4lVa3d+A== -----END CERTIFICATE-----Generated at Mon Jan 12 10:19:28 2026 by rpki-client