This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft File: i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json) Hash identifier: p0EsOgt2kGZB020u9etP5so4pl5RztK0VOiUAW9TY/U= Subject key identifier: BC:B2:20:37:85:AE:A2:1D:11:2E:4B:4E:BF:71:B0:7A:90:70:17:FA Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Certificate serial: 019BF6F574B4E8A589CEF657A0FB02D16C36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 21:00:39 +0000 Manifest this update: Sun 25 Jan 2026 21:00:39 +0000 Manifest next update: Mon 26 Jan 2026 21:00:39 +0000 Files and hashes: 1: 3fmRvkperMmvyU4KqpsUtOxTyt4.roa (hash: 7eZzl4W/3A8ZztuV2lmxwvx6VP7+Qvs+/fsXhTjc0rc=) 2: 7Tcz0pE1-IDNMp7AQ99DVCGrgjI.roa (hash: IYa4nqDQg0w4fOWwfwmQezvrBABwOK7SbfWTarCYxSQ=) 3: 7W1NXgkMSkIdBVSG746iQwH_IUI.roa (hash: 8/Z+GxzPEApZfT9MVxqAMLn34ihqPk9rP7wFg/FqfLU=) 4: EdFWUcc8IVOoO0eCHGrnGkFmsGg.roa (hash: hRMzKjUqKk1WuOs7kzmRaFOXrwrTn6B37s4zIKdomao=) 5: Ljk83VCvMFaaB88IfYzmXG7UKBY.roa (hash: f8wXBBWZbB++s5ojWl86XJPa1ZQ8YeSsSho2itzHWeE=) 6: MVvq6Rgk9g4xb6udrHASJS9rhUU.roa (hash: M5I2tbJMcYnMo8jDDImO8+z5cJdQDV2EBlWZ+aqbq4Q=) 7: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: Gzs0k/hRolZJB7eCTZ/57S/JvdlcoeDkYIACSn8PYEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:74:b4:e8:a5:89:ce:f6:57:a0:fb:02:d1:6c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Validity Not Before: Jan 25 21:00:39 2026 GMT Not After : Jan 26 21:00:39 2026 GMT Subject: CN=bcb2203785aea21d112e4b4ebf71b07a907017fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:e9:f2:8c:db:75:13:3b:de:2c:59:4d:a5: 06:e8:9f:ec:74:67:6a:c0:8d:18:24:fd:66:10:1d: 2e:35:b1:15:55:f9:31:cf:08:17:3f:83:f6:59:5b: 70:03:b3:54:30:fd:89:7f:06:58:e4:22:f3:66:f5: d0:81:6a:a8:09:71:30:50:cd:71:dc:7f:39:29:4d: e9:ed:f0:23:3e:c6:50:a0:a6:ae:9c:c4:8f:0a:4b: 33:f8:b9:09:05:5e:47:b7:ea:9f:53:0f:18:71:26: da:36:18:36:b1:74:ba:66:4e:4f:45:63:b5:28:e5: 75:b5:bb:ce:85:f4:d6:fa:43:5b:f1:7e:d7:08:28: 7e:62:1e:a2:74:66:91:37:82:44:e0:e7:6c:17:8d: 26:87:58:32:ed:6d:70:d1:76:ed:08:63:2b:0d:7b: 30:8e:62:c0:a8:3a:ad:7c:04:83:bc:9b:9e:97:64: cc:bf:aa:27:04:30:6b:89:29:20:f5:47:e7:7c:40: a8:cc:2c:e0:4c:ed:fa:2e:ec:97:64:d4:66:ff:23: e0:47:b8:7d:2b:5c:c9:2a:bc:9c:85:33:3d:c2:5b: 62:ee:98:63:28:d5:eb:80:dd:e7:50:9c:13:14:09: ac:64:dd:2d:2a:5c:29:ec:16:3b:a8:62:f3:10:6a: 2d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B2:20:37:85:AE:A2:1D:11:2E:4B:4E:BF:71:B0:7A:90:70:17:FA X509v3 Authority Key Identifier: keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:7a:b6:00:26:c1:89:23:af:f5:cd:6b:37:ca:5a:df:c0:8f: 81:2a:61:c9:d2:da:a1:11:3e:50:a7:e8:01:d8:d1:53:9b:ea: fb:08:34:26:c5:d0:5b:0b:b2:67:6e:91:72:7b:0f:39:30:56: 28:30:e2:8d:84:04:4e:33:00:30:76:5d:e2:a8:25:2d:c8:42: 26:e9:2c:34:44:0e:c3:09:fa:ca:59:a8:1f:9a:e0:dd:6c:00: 0a:2f:60:2c:64:da:88:9c:74:ed:4b:2b:1a:fa:0c:5a:89:71: b8:72:ee:8d:43:c2:d5:02:d2:89:c5:b5:7f:43:ce:aa:a1:77: a8:06:1b:3e:ec:ec:64:27:d1:9b:5b:19:a9:36:8a:88:00:37: b4:04:3a:36:e2:54:7f:2a:9b:53:bb:4c:1a:bd:9e:c7:64:4f: 82:a3:3d:f8:02:df:ef:54:f1:84:71:9e:3e:20:e2:b2:db:8f: 7f:4a:1d:ee:b4:3b:0e:37:99:75:6b:cc:fe:c8:5e:f3:46:ba: b1:c7:b1:51:f8:93:55:f4:b9:4f:13:0a:c9:f1:0c:05:eb:c6: 23:e2:5b:95:7a:b8:67:6f:d1:e5:a6:32:9a:65:6d:38:cd:55: d3:3a:67:85:08:60:c5:76:48:9c:ee:b0:52:e0:87:8e:58:84: 24:0e:2d:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29XS06KWJzvZXoPsC0Ww2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZmNhN2M5NmU4MDQ1MDVhNDhiOTk2MDNkOWIyMTI0ZjFk ZDM3MDIwHhcNMjYwMTI1MjEwMDM5WhcNMjYwMTI2MjEwMDM5WjAzMTEwLwYDVQQD EyhiY2IyMjAzNzg1YWVhMjFkMTEyZTRiNGViZjcxYjA3YTkwNzAxN2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5Tp8ozbdRM73ixZTaUG6J/sdGdq wI0YJP1mEB0uNbEVVfkxzwgXP4P2WVtwA7NUMP2JfwZY5CLzZvXQgWqoCXEwUM1x 3H85KU3p7fAjPsZQoKaunMSPCksz+LkJBV5Ht+qfUw8YcSbaNhg2sXS6Zk5PRWO1 KOV1tbvOhfTW+kNb8X7XCCh+Yh6idGaRN4JE4OdsF40mh1gy7W1w0XbtCGMrDXsw jmLAqDqtfASDvJuel2TMv6onBDBriSkg9UfnfECozCzgTO36LuyXZNRm/yPgR7h9 K1zJKrychTM9wlti7phjKNXrgN3nUJwTFAmsZN0tKlwp7BY7qGLzEGotGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyyIDeFrqIdES5LTr9xsHqQcBf6MB8GA1UdIwQY MBaAFIv8p8lugEUFpIuZYD2bISTx3TcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAt MThiMWE5MzdhNTY3LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAtMThiMWE5MzdhNTY3 LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHq2ACbB iSOv9c1rN8pa38CPgSphydLaoRE+UKfoAdjRU5vq+wg0JsXQWwuyZ26RcnsPOTBW KDDijYQETjMAMHZd4qglLchCJuksNEQOwwn6ylmoH5rg3WwACi9gLGTaiJx07Usr GvoMWolxuHLujUPC1QLSicW1f0POqqF3qAYbPuzsZCfRm1sZqTaKiAA3tAQ6NuJU fyqbU7tMGr2ex2RPgqM9+ALf71TxhHGePiDistuPf0od7rQ7DjeZdWvM/she80a6 scexUfiTVfS5TxMKyfEMBevGI+JblXq4Z2/R5aYymmVtOM1V0zpnhQhgxXZInO6w UuCHjliEJA4tXw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:26 2026 by rpki-client