This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft File: YsTHQ9XCr88n8QTrbgMWEWyFx94.mft (raw, json) Hash identifier: 9S3rzfBJFFraahnitJbllTlSgABlKtf5adWRptRsmKU= Subject key identifier: B3:46:97:0A:38:22:52:C1:B6:75:2F:E4:6E:F3:CB:48:6A:D8:DC:28 Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de Certificate serial: 019BAE01150A60BDD9701E1E5A0B20270E9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft Manifest number: 0D8F Signing time: Sun 11 Jan 2026 17:01:04 +0000 Manifest this update: Sun 11 Jan 2026 17:01:04 +0000 Manifest next update: Mon 12 Jan 2026 17:01:04 +0000 Files and hashes: 1: DT8ZHpsnu95pA077Bij5e4AaTEY.roa (hash: QTft8cX4BupKj8g0B2lC6ytondXy0rFBo523NlqKQRE=) 2: YsTHQ9XCr88n8QTrbgMWEWyFx94.crl (hash: fhpbdPT9F8WlqGF0y/IxfDW+wuL0EQLRyJldWqzblzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:01:15:0a:60:bd:d9:70:1e:1e:5a:0b:20:27:0e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de Validity Not Before: Jan 11 17:01:04 2026 GMT Not After : Jan 12 17:01:04 2026 GMT Subject: CN=b346970a382252c1b6752fe46ef3cb486ad8dc28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e0:58:11:5b:06:7f:f6:83:70:3e:2b:d6:06: c2:9d:b5:1f:ba:63:1c:f1:52:b6:bb:c9:40:92:a2: fd:2e:52:47:cc:36:35:ed:e8:bc:ab:e0:8f:a4:c0: 61:f8:78:fc:2d:da:62:40:8e:4d:55:d1:1f:7d:6a: 51:85:3c:f6:1e:53:59:98:99:46:6b:50:ce:2b:01: f9:4b:11:db:da:4d:af:39:8d:fd:ed:46:39:80:a6: 9f:3b:f1:84:14:3d:f3:29:45:98:5c:f3:21:71:2e: 30:13:4e:d1:9b:d5:bf:b7:76:9f:df:3e:94:a5:56: 51:01:0c:e1:43:bc:7b:70:b7:37:94:e4:6b:b6:82: 5c:ee:8f:dd:31:9c:d5:c4:6d:ac:10:fa:94:98:8b: 2d:c8:2b:5e:6b:b1:71:d2:8d:c9:0b:34:9d:c0:22: 97:3d:42:e1:b5:9b:66:0c:8b:84:26:79:c8:71:d4: 17:31:22:03:4e:20:15:cd:42:22:6c:50:bb:c6:04: d1:cb:92:19:2c:22:cf:64:91:18:00:91:ed:01:ca: 59:33:65:b7:aa:15:95:5c:0c:b2:ab:80:59:ab:be: 83:bc:82:43:ac:96:2c:83:0b:1f:83:11:73:d2:31: 10:6a:5d:d0:f4:57:f7:b8:f1:2c:26:ac:dc:d4:8b: ab:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:46:97:0A:38:22:52:C1:B6:75:2F:E4:6E:F3:CB:48:6A:D8:DC:28 X509v3 Authority Key Identifier: keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:00:59:8e:f6:d7:0c:f4:f3:b9:8d:21:d3:92:3c:98:ea:82: ea:2d:c8:df:a4:a6:9d:23:a1:98:c9:b1:58:47:97:9e:75:a6: 0d:ce:76:22:95:de:4b:a0:77:e3:f8:7e:df:11:77:69:0d:27: 18:c2:3d:ff:03:c1:0b:c3:18:e8:5e:87:90:43:e3:2c:a4:b4: 37:21:ab:4d:b1:d8:17:e1:92:02:c6:55:4c:78:dc:7a:47:ba: de:c6:58:3b:fb:ed:92:de:bf:80:70:68:23:f8:96:54:e4:3c: 99:1f:f9:c8:9e:2c:eb:07:88:2c:e7:90:47:f9:e1:c2:5f:38: b7:5a:29:ac:8f:27:bd:1d:ce:f3:39:74:1b:31:91:7f:0d:61: 6c:02:09:d2:51:3a:05:e0:49:63:09:69:40:19:c3:f9:60:fb: fa:11:54:6a:aa:e0:e7:38:35:05:9e:f5:40:d9:92:c5:7c:3b: 76:ae:69:b1:3b:81:1d:f6:db:ed:ec:a4:25:5c:ba:1a:ab:90: 9c:c2:63:8a:b1:b4:3f:04:f6:22:4f:db:4f:1e:9e:31:9e:23: 55:87:fd:ab:59:51:66:95:14:46:f2:ea:5d:b1:4e:1e:5a:37: 78:cd:1b:cf:65:40:dd:d8:be:5b:b1:76:8e:6f:02:d3:4f:1e: 00:f2:7e:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuuARUKYL3ZcB4eWgsgJw6aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYzRjNzQzZDVjMmFmY2YyN2YxMDRlYjZlMDMxNjExNmM4 NWM3ZGUwHhcNMjYwMTExMTcwMTA0WhcNMjYwMTEyMTcwMTA0WjAzMTEwLwYDVQQD EyhiMzQ2OTcwYTM4MjI1MmMxYjY3NTJmZTQ2ZWYzY2I0ODZhZDhkYzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuBYEVsGf/aDcD4r1gbCnbUfumMc 8VK2u8lAkqL9LlJHzDY17ei8q+CPpMBh+Hj8LdpiQI5NVdEffWpRhTz2HlNZmJlG a1DOKwH5SxHb2k2vOY397UY5gKafO/GEFD3zKUWYXPMhcS4wE07Rm9W/t3af3z6U pVZRAQzhQ7x7cLc3lORrtoJc7o/dMZzVxG2sEPqUmIstyCtea7Fx0o3JCzSdwCKX PULhtZtmDIuEJnnIcdQXMSIDTiAVzUIibFC7xgTRy5IZLCLPZJEYAJHtAcpZM2W3 qhWVXAyyq4BZq76DvIJDrJYsgwsfgxFz0jEQal3Q9Ff3uPEsJqzc1IurIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNGlwo4IlLBtnUv5G7zy0hq2NwoMB8GA1UdIwQY MBaAFGLEx0PVwq/PJ/EE624DFhFshcfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83MjhjNDAtZjcxMi00ZmVmLTg5NDUt ZGUzNTJhOTJmNmJhLzEvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My83MjhjNDAtZjcxMi00ZmVmLTg5NDUtZGUzNTJhOTJmNmJh LzEvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgBZjvbX DPTzuY0h05I8mOqC6i3I36SmnSOhmMmxWEeXnnWmDc52IpXeS6B34/h+3xF3aQ0n GMI9/wPBC8MY6F6HkEPjLKS0NyGrTbHYF+GSAsZVTHjceke63sZYO/vtkt6/gHBo I/iWVOQ8mR/5yJ4s6weILOeQR/nhwl84t1oprI8nvR3O8zl0GzGRfw1hbAIJ0lE6 BeBJYwlpQBnD+WD7+hFUaqrg5zg1BZ71QNmSxXw7dq5psTuBHfbb7eykJVy6GquQ nMJjirG0PwT2Ik/bTx6eMZ4jVYf9q1lRZpUURvLqXbFOHlo3eM0bz2VA3di+W7F2 jm8C008eAPJ+qA== -----END CERTIFICATE-----Generated at Mon Jan 12 02:36:13 2026 by rpki-client