This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft File: i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json) Hash identifier: nwOXU3entmKhAMNDsNWZ+qAdqPrKgIU4om9TByznF1M= Subject key identifier: 50:54:28:E3:42:E7:B3:9E:AB:8D:C3:4D:99:59:69:7B:3D:C7:99:A4 Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Certificate serial: 019BF507099A4C745BDAE1ACBF8EEE47D54B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 12:00:37 +0000 Manifest this update: Sun 25 Jan 2026 12:00:37 +0000 Manifest next update: Mon 26 Jan 2026 12:00:37 +0000 Files and hashes: 1: 3fmRvkperMmvyU4KqpsUtOxTyt4.roa (hash: 7eZzl4W/3A8ZztuV2lmxwvx6VP7+Qvs+/fsXhTjc0rc=) 2: 7Tcz0pE1-IDNMp7AQ99DVCGrgjI.roa (hash: IYa4nqDQg0w4fOWwfwmQezvrBABwOK7SbfWTarCYxSQ=) 3: 7W1NXgkMSkIdBVSG746iQwH_IUI.roa (hash: 8/Z+GxzPEApZfT9MVxqAMLn34ihqPk9rP7wFg/FqfLU=) 4: EdFWUcc8IVOoO0eCHGrnGkFmsGg.roa (hash: hRMzKjUqKk1WuOs7kzmRaFOXrwrTn6B37s4zIKdomao=) 5: Ljk83VCvMFaaB88IfYzmXG7UKBY.roa (hash: f8wXBBWZbB++s5ojWl86XJPa1ZQ8YeSsSho2itzHWeE=) 6: MVvq6Rgk9g4xb6udrHASJS9rhUU.roa (hash: M5I2tbJMcYnMo8jDDImO8+z5cJdQDV2EBlWZ+aqbq4Q=) 7: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: 6NBuOi10nf7SagZT4aEAet+Q07sbPX0hjo+gTGe4y2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:09:9a:4c:74:5b:da:e1:ac:bf:8e:ee:47:d5:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Validity Not Before: Jan 25 12:00:37 2026 GMT Not After : Jan 26 12:00:37 2026 GMT Subject: CN=505428e342e7b39eab8dc34d9959697b3dc799a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8e:4d:97:be:8b:82:15:10:65:8c:61:3b:45: f1:8c:ed:a2:54:c2:c7:b5:09:bb:a7:84:8b:02:30: 1b:74:c4:46:b5:25:f2:65:d5:1c:8b:45:72:ce:a4: e8:da:7c:64:90:24:d1:46:ff:85:9e:cd:1a:09:54: 13:c6:5c:60:e6:93:f4:ad:3f:89:75:15:f6:c2:cc: 18:1e:d6:79:49:21:98:fd:f0:cc:ee:cf:a8:44:4e: d8:e9:18:d2:e6:db:0e:93:17:87:47:9a:a3:16:10: b3:a1:0d:4a:0d:3a:ca:06:bd:38:d7:4e:d1:a4:34: 36:42:9e:de:be:13:e1:84:1c:56:8b:b9:01:c9:f1: c9:c0:03:fd:b2:78:fd:52:24:f3:48:37:b9:b8:88: 25:48:c5:76:fb:0f:4e:39:e9:33:e1:72:92:64:9d: 5c:b6:21:42:e4:7a:f6:65:b6:4e:ef:52:e7:95:d9: d7:b0:0b:87:dc:a8:dc:43:9f:87:e1:e2:f7:21:09: 15:2b:16:4a:f8:7b:a8:10:c9:bc:39:6d:e3:b4:8f: 4f:3f:05:b6:3d:ac:c5:cf:2a:5a:9e:2b:9f:b1:20: 7d:32:e7:8a:f4:a3:dc:d4:9a:07:ab:5c:77:cf:b5: c3:c1:d4:d4:b5:13:6e:11:34:80:bf:c8:b5:94:3c: 9b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:54:28:E3:42:E7:B3:9E:AB:8D:C3:4D:99:59:69:7B:3D:C7:99:A4 X509v3 Authority Key Identifier: keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:e0:00:f1:9a:6c:e2:d4:65:ef:dc:eb:51:c7:13:f0:ed:78: 0a:ec:b0:fd:c2:73:ec:92:ef:a8:01:87:00:fa:5e:2f:44:e2: af:8d:99:a8:3b:e0:20:82:48:bb:3a:12:8f:da:4f:4a:c3:4b: 25:50:87:8f:05:b3:63:d9:ad:60:38:47:b2:58:e0:be:07:3c: 4c:d0:90:29:b9:37:51:8f:d9:5a:f6:da:74:4c:34:38:e3:2f: cc:3f:3c:e0:ce:06:2e:2f:13:7f:3c:51:47:39:8f:b7:50:09: ce:fa:dc:4f:8b:09:6c:5a:85:bc:f3:2e:ae:30:61:36:1d:3f: 60:0a:5e:92:91:fa:6e:05:9d:b5:81:5a:3e:2e:8c:7e:80:bf: fb:12:58:59:78:ea:94:86:55:87:38:77:1a:f7:12:d8:35:27: 39:51:1e:ab:0b:0a:59:90:15:ed:90:8d:b9:86:f6:5c:67:32: e5:0f:81:20:ae:12:93:e4:cd:90:22:6a:24:d8:1c:8a:d3:fc: 97:a7:58:aa:a6:49:e2:43:44:f3:fe:88:22:47:57:2a:8f:cc: 86:ab:5c:fd:a6:cd:fa:e1:22:c9:91:2f:c6:31:46:ea:b3:27: ae:c1:dc:9a:34:5c:06:78:f7:fb:72:3b:c5:15:e2:69:12:01: f1:e6:35:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BwmaTHRb2uGsv47uR9VLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZmNhN2M5NmU4MDQ1MDVhNDhiOTk2MDNkOWIyMTI0ZjFk ZDM3MDIwHhcNMjYwMTI1MTIwMDM3WhcNMjYwMTI2MTIwMDM3WjAzMTEwLwYDVQQD Eyg1MDU0MjhlMzQyZTdiMzllYWI4ZGMzNGQ5OTU5Njk3YjNkYzc5OWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y5Nl76LghUQZYxhO0XxjO2iVMLH tQm7p4SLAjAbdMRGtSXyZdUci0VyzqTo2nxkkCTRRv+Fns0aCVQTxlxg5pP0rT+J dRX2wswYHtZ5SSGY/fDM7s+oRE7Y6RjS5tsOkxeHR5qjFhCzoQ1KDTrKBr04107R pDQ2Qp7evhPhhBxWi7kByfHJwAP9snj9UiTzSDe5uIglSMV2+w9OOekz4XKSZJ1c tiFC5Hr2ZbZO71LnldnXsAuH3KjcQ5+H4eL3IQkVKxZK+HuoEMm8OW3jtI9PPwW2 PazFzypaniufsSB9MueK9KPc1JoHq1x3z7XDwdTUtRNuETSAv8i1lDybbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBUKONC57Oeq43DTZlZaXs9x5mkMB8GA1UdIwQY MBaAFIv8p8lugEUFpIuZYD2bISTx3TcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAt MThiMWE5MzdhNTY3LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAtMThiMWE5MzdhNTY3 LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAouAA8Zps 4tRl79zrUccT8O14Cuyw/cJz7JLvqAGHAPpeL0Tir42ZqDvgIIJIuzoSj9pPSsNL JVCHjwWzY9mtYDhHsljgvgc8TNCQKbk3UY/ZWvbadEw0OOMvzD884M4GLi8TfzxR RzmPt1AJzvrcT4sJbFqFvPMurjBhNh0/YApekpH6bgWdtYFaPi6MfoC/+xJYWXjq lIZVhzh3GvcS2DUnOVEeqwsKWZAV7ZCNuYb2XGcy5Q+BIK4Sk+TNkCJqJNgcitP8 l6dYqqZJ4kNE8/6IIkdXKo/Mhqtc/abN+uEiyZEvxjFG6rMnrsHcmjRcBnj3+3I7 xRXiaRIB8eY1hw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:44 2026 by rpki-client