This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft File: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft (raw, json) Hash identifier: QL8IZ0XIFntvH36LWqmyIemH/f06LDN6eRzPstaND7c= Subject key identifier: BD:5D:A9:CB:1E:31:99:53:C7:7B:DA:07:7C:23:FF:AB:65:C7:1B:78 Authority key identifier: 63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0 Certificate issuer: /CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0 Certificate serial: 019B77C7F080EA1D2BFBC6AD3FA444FC3485 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft Manifest number: 17A6 Signing time: Thu 01 Jan 2026 04:19:10 +0000 Manifest this update: Thu 01 Jan 2026 04:19:10 +0000 Manifest next update: Fri 02 Jan 2026 04:19:10 +0000 Files and hashes: 1: 1-iaQVGIRiX5iu1fv45oI-_0UAMs.roa (hash: UJsZfJvQEHGoE3GSbiyNR/EqoxSd0S1YeBtQv8m62RM=) 2: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl (hash: M1cRH1XCE3kCSeV9IJv0gt2KYpXyo4pZhUHJ1ByFgWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 04:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:f0:80:ea:1d:2b:fb:c6:ad:3f:a4:44:fc:34:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0 Validity Not Before: Jan 1 04:19:10 2026 GMT Not After : Jan 2 04:19:10 2026 GMT Subject: CN=bd5da9cb1e319953c77bda077c23ffab65c71b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c7:4f:80:71:d5:21:ab:f1:94:7e:89:6a:e7: ac:54:19:7e:98:34:e9:04:93:98:89:72:7b:22:77: 5a:77:06:76:ad:81:25:64:bd:31:f7:e6:16:be:2c: 9e:aa:8d:c2:db:3e:c8:5a:54:d5:94:df:9d:43:cb: 0a:5d:fe:8f:12:ab:05:49:46:3d:62:d8:6c:ea:b6: f2:7d:11:db:83:80:ae:f3:a5:e4:cd:7b:fb:93:b6: cd:09:b7:32:06:2b:38:2c:6a:98:74:92:e6:67:bd: 1e:47:00:50:e0:8c:f3:22:c8:03:fd:7f:fe:e7:d9: 1f:99:20:94:13:f7:7d:ce:73:18:a7:37:f5:da:da: 31:b6:cb:80:3f:ed:63:b5:8a:4a:c2:a7:2e:b8:a6: b4:ee:51:54:e5:2c:d7:91:06:45:63:e2:2e:7d:af: ba:19:2b:bb:df:18:4f:85:f8:bb:9d:b3:c5:a6:1f: 61:5c:09:b5:a3:0a:93:55:ab:1c:5e:91:17:9b:ca: ad:e2:8a:83:f5:d7:56:f8:18:fa:73:d6:b2:f0:c9: 9d:06:6d:49:0b:ec:52:cc:d5:57:b8:73:a9:d3:19: 59:42:4c:94:30:3d:8c:57:df:28:8e:3b:28:14:38: 81:7d:81:7a:38:92:17:ff:34:9f:18:b7:5e:89:de: e9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5D:A9:CB:1E:31:99:53:C7:7B:DA:07:7C:23:FF:AB:65:C7:1B:78 X509v3 Authority Key Identifier: keyid:63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:52:0f:3a:e3:24:90:f8:9c:be:e8:a8:22:8b:ca:72:0e:eb: b6:4b:67:d7:9c:e3:12:10:53:0a:ca:38:0e:10:e3:bf:d8:ad: b2:13:78:fa:ed:35:22:95:5b:63:32:57:64:8e:88:91:a1:f3: 6a:91:48:9a:3d:e1:f3:bc:ac:8b:e0:92:f2:1e:31:44:91:c2: 93:60:0f:8d:64:2e:65:61:49:98:8f:7a:f4:bd:c0:2a:1c:d4: d0:f8:2d:57:42:79:cc:90:45:4c:e1:60:30:e5:99:5a:a8:71: 59:4a:ad:dd:17:ca:fe:90:92:85:b7:cb:0d:5e:7c:65:eb:12: 85:ba:01:34:62:38:d0:10:ba:34:bb:68:14:21:74:48:aa:af: 5f:d1:21:e3:49:fd:e7:ab:10:05:1c:51:c6:46:18:ff:80:01: ca:c5:7a:75:93:9c:51:2e:0d:28:f8:1a:b4:05:74:04:64:6c: 69:95:1a:28:67:5d:af:54:e8:93:50:3b:cd:a4:59:9d:04:51: 15:9e:72:30:9b:88:ad:2b:a5:94:9e:90:a2:b0:39:06:38:ed: fc:3c:8a:44:cc:e7:25:87:d1:d5:34:6d:7f:7a:09:5d:28:23: a9:5e:f0:0b:2c:70:b1:90:2e:8b:ac:9c:93:3a:c4:52:2a:02: 4f:8b:f6:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3x/CA6h0r+8atP6RE/DSFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTJjYWE3ZTE4YWYyZGZiZGIzYTYyNjlkYTJlMDZkZWRj YjZjZjAwHhcNMjYwMTAxMDQxOTEwWhcNMjYwMTAyMDQxOTEwWjAzMTEwLwYDVQQD EyhiZDVkYTljYjFlMzE5OTUzYzc3YmRhMDc3YzIzZmZhYjY1YzcxYjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMdPgHHVIavxlH6JauesVBl+mDTp BJOYiXJ7IndadwZ2rYElZL0x9+YWviyeqo3C2z7IWlTVlN+dQ8sKXf6PEqsFSUY9 Yths6rbyfRHbg4Cu86XkzXv7k7bNCbcyBis4LGqYdJLmZ70eRwBQ4IzzIsgD/X/+ 59kfmSCUE/d9znMYpzf12toxtsuAP+1jtYpKwqcuuKa07lFU5SzXkQZFY+Iufa+6 GSu73xhPhfi7nbPFph9hXAm1owqTVascXpEXm8qt4oqD9ddW+Bj6c9ay8MmdBm1J C+xSzNVXuHOp0xlZQkyUMD2MV98ojjsoFDiBfYF6OJIX/zSfGLdeid7pLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1dqcseMZlTx3vaB3wj/6tlxxt4MB8GA1UdIwQY MBaAFGPiyqfhivLfvbOmJp2i4G3ty2zwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1MS3AtR0s4dC05czZZbW5hTGdiZTNMYlBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wOTk3MDUtNGEzYi00YTY4LWI2YmQt NTM4YWYxMDE3NTA5LzEvWS1MS3AtR0s4dC05czZZbW5hTGdiZTNMYlBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8wOTk3MDUtNGEzYi00YTY4LWI2YmQtNTM4YWYxMDE3NTA5 LzEvWS1MS3AtR0s4dC05czZZbW5hTGdiZTNMYlBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFIPOuMk kPicvuioIovKcg7rtktn15zjEhBTCso4DhDjv9itshN4+u01IpVbYzJXZI6IkaHz apFImj3h87ysi+CS8h4xRJHCk2APjWQuZWFJmI969L3AKhzU0PgtV0J5zJBFTOFg MOWZWqhxWUqt3RfK/pCShbfLDV58ZesShboBNGI40BC6NLtoFCF0SKqvX9Eh40n9 56sQBRxRxkYY/4ABysV6dZOcUS4NKPgatAV0BGRsaZUaKGddr1Tok1A7zaRZnQRR FZ5yMJuIrSullJ6QorA5Bjjt/DyKRMznJYfR1TRtf3oJXSgjqV7wCyxwsZAui6yc kzrEUioCT4v26g== -----END CERTIFICATE-----Generated at Thu Jan 1 10:52:45 2026 by rpki-client