This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft File: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft (raw, json) Hash identifier: vqY0IeTMARwfJD0hOGCEOttjSLZtn4nqaH1/TzLeOy8= Subject key identifier: 56:55:30:A8:6E:F5:C1:2E:63:76:4B:73:42:34:D5:52:39:5A:41:B0 Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2 Certificate issuer: /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2 Certificate serial: 019BF2068FEE027632432C2DA9C88AF7B364 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft Manifest number: 17EB Signing time: Sat 24 Jan 2026 22:01:14 +0000 Manifest this update: Sat 24 Jan 2026 22:01:14 +0000 Manifest next update: Sun 25 Jan 2026 22:01:14 +0000 Files and hashes: 1: FuIBir0i-y7SEGRI15m4Ui_zA_0.roa (hash: VPkd3ytwbWG1Sl01GeIeuQbGU6zTZUHeBBof8XyrtUU=) 2: hEKeHB_HwWdm6YwqDL4rLU_ikEo.roa (hash: +KO33p55Ic+lVnlR+TIJivqrXb9HN4n63k+7GR880Ng=) 3: jzWys3LhqUMk6bdrR3m0wvK8IUQ.roa (hash: eUY96707RIGkVAKREkjXDqXCVYEyY1vwd6gYVeK0EmU=) 4: nf4A4HCstvpa-65TJj04mTKWQoM.roa (hash: sgwGBrZAZly4O4y3WPWRW8wBHIIzPULSvh12WgBbRv4=) 5: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl (hash: 74THVuUpzTuaKKIw25wnJ9uHibjBSDkhI0QeGvpH85w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:06:8f:ee:02:76:32:43:2c:2d:a9:c8:8a:f7:b3:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2 Validity Not Before: Jan 24 22:01:14 2026 GMT Not After : Jan 25 22:01:14 2026 GMT Subject: CN=565530a86ef5c12e63764b734234d552395a41b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e2:cf:d3:06:e3:88:f1:e2:22:2f:c8:70:3e: 7a:61:6b:ed:93:f7:32:fa:35:da:89:e2:ad:6b:f5: 04:f0:0a:e3:1e:d1:dd:60:dd:21:9a:c5:61:9b:04: 4b:80:35:80:eb:07:58:03:f9:37:21:76:ca:59:1f: 0b:5c:72:f4:ec:64:bb:86:8f:d5:92:5d:c1:4b:9c: e9:7b:b9:eb:76:21:a5:f7:0e:5b:d8:bf:f0:89:22: 1d:33:e3:de:33:2f:71:c7:9d:61:45:89:3c:d2:43: ce:48:5d:28:8f:f2:32:eb:34:12:2f:55:b1:b4:1e: 91:62:88:23:3c:29:91:45:85:20:f6:d1:50:46:f3: e8:a9:d6:70:24:53:27:64:b0:7f:ab:e1:39:3b:a0: 84:f7:ab:e9:44:01:a2:cc:ce:d4:5f:5f:c8:f6:8a: 99:e9:f3:3f:6e:1f:d6:90:5d:a6:96:26:87:93:29: d3:65:da:1a:4f:bc:d0:db:26:24:7a:8d:e0:c0:6d: 32:06:25:ba:97:72:44:9f:33:59:cd:31:3e:7a:3d: f5:cd:e9:34:80:a3:3f:09:6b:80:61:4b:03:9b:c6: 86:b6:f0:7a:82:17:c6:60:e9:36:f9:13:f8:51:ec: f1:c6:be:d9:cf:40:0a:87:5b:00:c2:2a:0d:ce:e3: 3a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:55:30:A8:6E:F5:C1:2E:63:76:4B:73:42:34:D5:52:39:5A:41:B0 X509v3 Authority Key Identifier: keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e8:da:f4:e7:43:d5:58:d5:5f:5e:1c:f2:96:73:bc:59:63: fb:9e:ee:31:5c:c2:6f:51:b9:1e:73:38:e3:f6:51:2a:87:28: 3d:23:ce:d2:85:17:36:70:68:4d:95:52:52:c3:df:1d:cf:51: 34:dd:ad:d3:1f:e5:9c:bb:c6:1c:c1:f3:13:7c:c1:8c:a5:87: a9:2e:b1:b6:0c:c8:db:19:9c:8b:74:6b:db:85:db:5a:df:40: 50:26:2e:f1:d2:a6:a6:c7:d1:e6:43:8f:4d:e6:5e:1c:35:ce: c9:71:cc:f4:d2:1a:e6:e6:c3:0c:c1:03:83:67:06:df:23:13: c9:8d:bd:f7:56:0d:c3:e0:63:3e:5c:9a:ad:4d:2e:3a:fb:b2: ea:77:b1:6e:66:f0:bf:7d:4e:c5:76:93:8d:ae:42:1c:e3:dd: 83:7a:8c:cf:a1:de:5b:fd:ab:2b:4c:07:ec:bf:d1:e1:31:df: 25:b6:71:86:63:0f:4a:05:fd:98:f2:cc:d9:4b:34:54:78:4a: af:58:d1:7a:bf:9a:1d:d5:d2:4d:c3:8b:ae:57:fb:18:6f:58: fb:b2:9a:0d:c1:29:30:89:80:89:1f:62:96:4d:8e:74:c0:df: 92:17:8c:b3:49:7a:f1:c6:c9:28:19:cd:fb:fb:fa:44:48:06: aa:b6:b5:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyBo/uAnYyQywtqciK97NkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzRiMTMzODdmYWIxZGNmOGI2N2YxNmEwYTQzNzYwODYw MGM0YzIwHhcNMjYwMTI0MjIwMTE0WhcNMjYwMTI1MjIwMTE0WjAzMTEwLwYDVQQD Eyg1NjU1MzBhODZlZjVjMTJlNjM3NjRiNzM0MjM0ZDU1MjM5NWE0MWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuLP0wbjiPHiIi/IcD56YWvtk/cy +jXaieKta/UE8ArjHtHdYN0hmsVhmwRLgDWA6wdYA/k3IXbKWR8LXHL07GS7ho/V kl3BS5zpe7nrdiGl9w5b2L/wiSIdM+PeMy9xx51hRYk80kPOSF0oj/Iy6zQSL1Wx tB6RYogjPCmRRYUg9tFQRvPoqdZwJFMnZLB/q+E5O6CE96vpRAGizM7UX1/I9oqZ 6fM/bh/WkF2mliaHkynTZdoaT7zQ2yYkeo3gwG0yBiW6l3JEnzNZzTE+ej31zek0 gKM/CWuAYUsDm8aGtvB6ghfGYOk2+RP4Uezxxr7Zz0AKh1sAwioNzuM6fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZVMKhu9cEuY3ZLc0I01VI5WkGwMB8GA1UdIwQY MBaAFMo0sTOH+rHc+LZ/FqCkN2CGAMTCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYt MDQwNTIzNGFiM2YxLzEveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYtMDQwNTIzNGFiM2Yx LzEveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuja9OdD 1VjVX14c8pZzvFlj+57uMVzCb1G5HnM44/ZRKocoPSPO0oUXNnBoTZVSUsPfHc9R NN2t0x/lnLvGHMHzE3zBjKWHqS6xtgzI2xmci3Rr24XbWt9AUCYu8dKmpsfR5kOP TeZeHDXOyXHM9NIa5ubDDMEDg2cG3yMTyY2991YNw+BjPlyarU0uOvuy6nexbmbw v31OxXaTja5CHOPdg3qMz6HeW/2rK0wH7L/R4THfJbZxhmMPSgX9mPLM2Us0VHhK r1jRer+aHdXSTcOLrlf7GG9Y+7KaDcEpMImAiR9ilk2OdMDfkheMs0l68cbJKBnN +/v6REgGqra1Yg== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:46 2026 by rpki-client