This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft File: YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft (raw, json) Hash identifier: caJflOjMyJZpRQ7H+rihm9LPSfU89XGx4rWQ8uWMTRY= Subject key identifier: 58:DE:20:E6:16:94:E2:41:26:2B:BC:DC:92:E5:B8:94:F7:4F:21:89 Authority key identifier: 63:25:F5:14:27:01:67:A4:3E:65:E2:7D:F9:B3:D2:6E:FB:29:C3:1C Certificate issuer: /CN=6325f514270167a43e65e27df9b3d26efb29c31c Certificate serial: 019B76DBB0804B96F21979E63FE8143F5DC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft Manifest number: 17A6 Signing time: Thu 01 Jan 2026 00:01:07 +0000 Manifest this update: Thu 01 Jan 2026 00:01:07 +0000 Manifest next update: Fri 02 Jan 2026 00:01:07 +0000 Files and hashes: 1: 7i3ElD5IcOtwR7N5wXzR1mVlNsw.roa (hash: eiPh0DahvU1iWHrSLpqP3W+j96pO/2cFZ0BXyIe6o9g=) 2: YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl (hash: FWVmJtZQ3aHU9uANl28Xk4qvxEuGA10wfmJNSY498Yc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:db:b0:80:4b:96:f2:19:79:e6:3f:e8:14:3f:5d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6325f514270167a43e65e27df9b3d26efb29c31c Validity Not Before: Jan 1 00:01:07 2026 GMT Not After : Jan 2 00:01:07 2026 GMT Subject: CN=58de20e61694e241262bbcdc92e5b894f74f2189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d1:80:f8:71:4d:20:90:32:62:71:f2:7d:52: 72:07:c4:34:53:62:82:8a:ac:f1:33:b9:f1:17:e0: 3f:9b:91:78:4f:1f:98:29:4e:bc:f3:5f:0f:5e:3d: e9:03:f8:fa:6d:46:4d:a2:21:f6:aa:8b:bb:ed:06: a5:26:51:b9:7d:a5:67:19:b5:9d:63:82:07:e7:8e: c4:02:12:8c:5c:0e:b7:a5:f0:f9:89:49:c7:df:b4: ef:40:b8:69:7f:4b:34:45:2c:64:ca:3b:29:4d:17: c8:49:f5:3a:ff:ef:06:0f:45:9e:4b:0c:45:a4:27: 8c:33:17:9c:8c:8d:7f:72:fa:ca:2f:9d:f3:da:48: 99:66:d6:9b:d8:9a:9e:c1:c8:65:8c:21:57:71:3f: c6:1f:d5:6f:49:b0:60:81:70:7c:d1:b9:13:a8:9b: a7:89:27:17:75:51:cb:ff:ec:ca:b1:c7:b1:9e:a4: 16:91:41:72:1f:c6:9b:5b:a9:38:3b:c3:cd:fe:10: 89:e8:c1:df:3c:e6:12:70:0f:b7:8b:9b:0b:8d:d4: b1:2e:56:67:48:ce:56:b2:0a:82:13:aa:52:bc:e4: 6e:3f:b3:71:29:99:b9:5b:58:5d:12:12:62:6d:f9: b5:fe:53:cc:06:13:fc:40:8b:b7:71:2a:e2:ba:54: 59:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DE:20:E6:16:94:E2:41:26:2B:BC:DC:92:E5:B8:94:F7:4F:21:89 X509v3 Authority Key Identifier: keyid:63:25:F5:14:27:01:67:A4:3E:65:E2:7D:F9:B3:D2:6E:FB:29:C3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3a:de:ed:cc:ea:20:1e:99:ba:ff:98:d2:f3:db:fc:75:24: d8:9c:26:a4:fd:c5:2a:d8:fb:30:aa:16:83:6c:3b:ca:84:f2: 5f:60:8e:23:3d:27:e4:ed:79:5a:8e:0d:f7:75:66:88:17:63: 6d:4c:eb:8a:06:c5:1d:32:25:72:80:eb:32:3a:6a:4b:92:86: ab:c9:d3:13:36:54:e8:dd:9b:e6:f3:13:d4:16:d2:6d:1f:c0: 91:f2:13:56:b1:fe:0a:42:cf:bd:f7:65:6a:2a:27:03:93:c6: 68:aa:12:90:2c:ee:c2:34:10:25:46:ba:a0:01:d6:da:15:b7: 44:7e:4a:2f:e3:50:af:c4:a6:8c:3e:34:a9:e0:25:29:88:aa: 12:a8:58:30:ab:ba:eb:15:2f:ae:f0:23:5f:e0:e5:f1:48:22: d3:21:14:a1:cb:b7:a9:fb:b2:86:b7:3c:6f:12:3d:0c:ad:c2: a3:d0:0a:ea:ae:e1:be:b7:ce:73:b1:ad:48:e1:30:8f:80:7b: 91:48:4f:dd:2a:af:97:1f:b0:50:ba:b3:91:fb:49:14:4b:93: 5e:a7:41:10:dd:99:a6:58:42:82:ca:7b:aa:e2:a5:83:55:45: 40:d8:c1:af:b5:cc:52:4f:aa:ec:6d:6b:ab:0d:ca:a9:41:f7: 47:9c:9a:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt227CAS5byGXnmP+gUP13HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMjVmNTE0MjcwMTY3YTQzZTY1ZTI3ZGY5YjNkMjZlZmIy OWMzMWMwHhcNMjYwMTAxMDAwMTA3WhcNMjYwMTAyMDAwMTA3WjAzMTEwLwYDVQQD Eyg1OGRlMjBlNjE2OTRlMjQxMjYyYmJjZGM5MmU1Yjg5NGY3NGYyMTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNGA+HFNIJAyYnHyfVJyB8Q0U2KC iqzxM7nxF+A/m5F4Tx+YKU68818PXj3pA/j6bUZNoiH2qou77QalJlG5faVnGbWd Y4IH547EAhKMXA63pfD5iUnH37TvQLhpf0s0RSxkyjspTRfISfU6/+8GD0WeSwxF pCeMMxecjI1/cvrKL53z2kiZZtab2JqewchljCFXcT/GH9VvSbBggXB80bkTqJun iScXdVHL/+zKscexnqQWkUFyH8abW6k4O8PN/hCJ6MHfPOYScA+3i5sLjdSxLlZn SM5WsgqCE6pSvORuP7NxKZm5W1hdEhJibfm1/lPMBhP8QIu3cSriulRZ6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjeIOYWlOJBJiu83JLluJT3TyGJMB8GA1UdIwQY MBaAFGMl9RQnAWekPmXiffmz0m77KcMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXlYMUZDY0JaNlEtWmVKOS1iUFNidnNwd3h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MjYyYjgtYTFhNy00ZDEzLTg3OTMt ZDM4ODdkYzQ1YzZkLzEvWXlYMUZDY0JaNlEtWmVKOS1iUFNidnNwd3h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MjYyYjgtYTFhNy00ZDEzLTg3OTMtZDM4ODdkYzQ1YzZk LzEvWXlYMUZDY0JaNlEtWmVKOS1iUFNidnNwd3h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALzre7czq IB6Zuv+Y0vPb/HUk2JwmpP3FKtj7MKoWg2w7yoTyX2COIz0n5O15Wo4N93VmiBdj bUzrigbFHTIlcoDrMjpqS5KGq8nTEzZU6N2b5vMT1BbSbR/AkfITVrH+CkLPvfdl aionA5PGaKoSkCzuwjQQJUa6oAHW2hW3RH5KL+NQr8SmjD40qeAlKYiqEqhYMKu6 6xUvrvAjX+Dl8Ugi0yEUocu3qfuyhrc8bxI9DK3Co9AK6q7hvrfOc7GtSOEwj4B7 kUhP3Sqvlx+wULqzkftJFEuTXqdBEN2ZplhCgsp7quKlg1VFQNjBr7XMUk+q7G1r qw3KqUH3R5yaSA== -----END CERTIFICATE-----Generated at Thu Jan 1 01:02:28 2026 by rpki-client