This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft File: YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft (raw, json) Hash identifier: jjExWsOeIdT15RxejEYTsHJRqVewC/evlAXgZ8KkALc= Subject key identifier: F4:C1:D1:CC:53:DF:4C:36:C6:44:ED:2F:D1:F2:E5:DE:5B:53:B8:DA Authority key identifier: 63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE Certificate issuer: /CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe Certificate serial: 019BAE011A1BE0C692B21C71F9A645D54AD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft Manifest number: 17C4 Signing time: Sun 11 Jan 2026 17:01:06 +0000 Manifest this update: Sun 11 Jan 2026 17:01:06 +0000 Manifest next update: Mon 12 Jan 2026 17:01:06 +0000 Files and hashes: 1: YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl (hash: WGherHl6qXoi8VWqYDXWWZy5xnT8uUQhhFWKzbse0BA=) 2: coMNRuLas3Tzh1MyZbDj5D6HNyE.roa (hash: LTyoIj935pE4PL0ewRd56WshIlHqNXgIDUvsbXIblXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:01:1a:1b:e0:c6:92:b2:1c:71:f9:a6:45:d5:4a:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe Validity Not Before: Jan 11 17:01:06 2026 GMT Not After : Jan 12 17:01:06 2026 GMT Subject: CN=f4c1d1cc53df4c36c644ed2fd1f2e5de5b53b8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:05:be:d4:5b:4c:66:bb:48:65:b9:a5:7b:de: da:7f:13:3b:91:37:cb:32:04:af:49:da:30:1b:c5: 6c:84:31:46:ac:36:0a:38:4b:fe:ad:8d:41:9c:d8: 64:4e:eb:4d:a0:34:50:87:cf:a3:15:16:11:b5:b6: 40:16:cd:30:5d:37:6a:51:f4:89:d5:f5:f7:e1:48: 76:73:e6:bb:a7:db:04:93:26:f2:c1:5b:58:1a:fb: 05:60:3f:04:a1:82:bc:f0:cf:ec:9a:e6:8f:2b:60: 02:c1:8d:41:93:5f:9e:6f:cd:04:8a:1e:cb:41:05: b9:75:1a:a9:e3:5b:32:fb:b2:9c:1d:a1:78:92:11: c6:cc:82:a0:c7:68:8b:d3:22:ac:e0:4f:3b:82:ed: 2b:bf:41:86:cd:30:de:33:47:b7:36:ae:64:e2:6a: b4:1c:9d:e9:d2:4d:ae:09:e5:15:e6:17:d7:9f:6e: 32:d2:3a:e3:d5:24:fb:fd:96:9e:1a:62:1e:f8:e6: aa:12:7c:02:49:93:35:c9:3e:b9:02:01:59:04:eb: 5b:5a:fa:27:48:92:59:66:21:5c:a8:fa:90:e8:dc: 88:ec:1c:bc:b8:25:8e:51:eb:01:09:4a:4c:f3:09: 92:9d:9b:df:15:61:48:aa:08:18:e1:06:14:25:32: 44:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C1:D1:CC:53:DF:4C:36:C6:44:ED:2F:D1:F2:E5:DE:5B:53:B8:DA X509v3 Authority Key Identifier: keyid:63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:37:f8:d6:06:3c:87:59:b0:f4:62:1e:de:54:ef:b5:06:6d: b6:73:11:49:b9:df:ab:c3:0b:6a:4f:b7:ad:fb:c2:96:3f:38: 44:ad:9d:24:96:55:b1:2e:8f:b0:8a:d8:7f:0e:11:f1:83:6b: 0d:52:04:1d:1e:c5:f8:3b:93:3f:f1:33:8e:56:85:8a:be:eb: fe:60:9b:21:2e:bc:63:59:9d:25:fa:70:31:01:3d:b7:fa:8b: fe:a6:65:54:4e:fd:46:32:3c:1b:ca:e0:8a:84:c0:c7:ff:fa: be:d7:16:8b:b8:de:e4:99:19:eb:94:ff:a5:eb:1b:f5:09:fa: 01:d1:20:a0:f9:1f:77:06:f7:e0:b1:1d:32:01:74:a6:25:0c: 39:dd:c8:02:e1:59:f3:99:30:12:04:dc:74:cb:0a:b5:4a:94: 29:e9:04:a5:fc:c3:c2:c0:ca:e7:3b:7f:4f:e6:c7:c3:38:c1: 15:1b:1c:93:a7:70:44:2c:44:7b:9b:56:93:44:7d:82:36:bb: 69:f9:a6:dd:a1:d6:7b:48:f3:0e:6e:e3:ac:de:1a:5f:af:88: 14:18:87:46:db:c5:3d:6c:eb:87:4c:bf:26:0b:00:f6:0e:ff: 53:50:98:b0:0a:49:71:e3:5c:d5:e9:75:b1:22:cf:b6:a8:cc: ce:78:00:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuuARob4MaSshxx+aZF1UrWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMTVkZDBiYTExZmRhZjc0ZDUzYjk1NmZjMWM4NDZhN2Uy ZjYxZmUwHhcNMjYwMTExMTcwMTA2WhcNMjYwMTEyMTcwMTA2WjAzMTEwLwYDVQQD EyhmNGMxZDFjYzUzZGY0YzM2YzY0NGVkMmZkMWYyZTVkZTViNTNiOGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AW+1FtMZrtIZbmle97afxM7kTfL MgSvSdowG8VshDFGrDYKOEv+rY1BnNhkTutNoDRQh8+jFRYRtbZAFs0wXTdqUfSJ 1fX34Uh2c+a7p9sEkybywVtYGvsFYD8EoYK88M/smuaPK2ACwY1Bk1+eb80Eih7L QQW5dRqp41sy+7KcHaF4khHGzIKgx2iL0yKs4E87gu0rv0GGzTDeM0e3Nq5k4mq0 HJ3p0k2uCeUV5hfXn24y0jrj1ST7/ZaeGmIe+OaqEnwCSZM1yT65AgFZBOtbWvon SJJZZiFcqPqQ6NyI7By8uCWOUesBCUpM8wmSnZvfFWFIqggY4QYUJTJE9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTB0cxT30w2xkTtL9Hy5d5bU7jaMB8GA1UdIwQY MBaAFGMV3QuhH9r3TVO5VvwchGp+L2H+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXhYZEM2RWYydmROVTdsV19CeUVhbjR2WWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kYWNiOTItZmY3MC00OWZlLWI0Yjgt ODk4OWI0Y2FhMjA2LzEvWXhYZEM2RWYydmROVTdsV19CeUVhbjR2WWY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9kYWNiOTItZmY3MC00OWZlLWI0YjgtODk4OWI0Y2FhMjA2 LzEvWXhYZEM2RWYydmROVTdsV19CeUVhbjR2WWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDf41gY8 h1mw9GIe3lTvtQZttnMRSbnfq8MLak+3rfvClj84RK2dJJZVsS6PsIrYfw4R8YNr DVIEHR7F+DuTP/EzjlaFir7r/mCbIS68Y1mdJfpwMQE9t/qL/qZlVE79RjI8G8rg ioTAx//6vtcWi7je5JkZ65T/pesb9Qn6AdEgoPkfdwb34LEdMgF0piUMOd3IAuFZ 85kwEgTcdMsKtUqUKekEpfzDwsDK5zt/T+bHwzjBFRsck6dwRCxEe5tWk0R9gja7 afmm3aHWe0jzDm7jrN4aX6+IFBiHRtvFPWzrh0y/JgsA9g7/U1CYsApJceNc1el1 sSLPtqjMzngAUw== -----END CERTIFICATE-----Generated at Mon Jan 12 01:07:30 2026 by rpki-client