This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft File: ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json) Hash identifier: KS+iEPgO1nHQvt0b5yt711KxKNTo+kSI4EkKNhw13DU= Subject key identifier: 16:CD:0F:7A:B8:CA:41:DF:61:14:A5:32:C7:85:BC:A3:B1:BE:64:CA Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40 Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40 Certificate serial: 019B9FD7BBEBF1712BECA3D624407605311E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft Manifest number: 17B9 Signing time: Thu 08 Jan 2026 23:01:14 +0000 Manifest this update: Thu 08 Jan 2026 23:01:14 +0000 Manifest next update: Fri 09 Jan 2026 23:01:14 +0000 Files and hashes: 1: 5YAovCxiYTc45JxdA6EOYqy_CLE.roa (hash: wZ5E1HSFWMUzYs9A5z2qRllifuxDCxhIkgExNKQWRew=) 2: o7-btfh1I6OULBYVzfVu8_XzE8o.roa (hash: CirfY9g/PTwiRwcav7zVDik3hwZOaK4g3NLJCOiIgh8=) 3: s3B1HUa2SokATPpurusQRG5Iukw.roa (hash: 1Hq8X3MkOQ+G5UxzpqLyMdcWFxP/sRci1VBMm2DB1QI=) 4: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: lnj0zk86dw6sy/dGQQujbb4XFjVBFrQuPSLa8WTIIp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9f:d7:bb:eb:f1:71:2b:ec:a3:d6:24:40:76:05:31:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40 Validity Not Before: Jan 8 23:01:14 2026 GMT Not After : Jan 9 23:01:14 2026 GMT Subject: CN=16cd0f7ab8ca41df6114a532c785bca3b1be64ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:86:7c:a4:18:cb:df:bd:97:08:bf:af:08:13: 12:72:6e:16:a7:0c:dd:ca:7d:a4:6e:40:44:fb:11: 12:e1:5e:61:c9:e4:34:47:a8:47:64:a7:21:62:33: 8e:b0:35:a1:fb:34:ed:52:c3:b2:81:d0:21:4d:39: d5:ea:9a:38:98:82:cb:81:79:da:72:b4:9d:03:17: ba:b9:05:ab:e9:f5:c3:18:0a:05:0c:ea:4e:72:37: c5:fc:f2:48:f9:bc:df:91:e7:16:0b:b9:e1:8d:17: 49:14:6d:7a:0d:78:cb:2e:5d:cd:b0:0e:78:be:e7: a1:06:77:62:19:87:a3:b3:4c:16:59:9e:43:8f:1b: 6f:60:78:24:47:dd:31:ad:c6:57:49:f1:35:af:be: cd:12:ff:ae:cc:25:eb:a3:4b:f0:68:28:56:55:e3: 04:24:ec:a2:cd:03:32:40:05:42:b4:77:5e:48:7b: 31:7b:ac:e8:33:82:3e:38:e6:79:94:a9:f2:d9:18: 16:9d:7f:f0:9c:8e:2c:8b:2c:01:fb:bd:52:2e:1b: 32:97:54:97:47:63:c3:31:31:32:71:40:d9:86:de: db:0d:e3:0e:a3:d6:9b:32:36:e5:cf:4f:36:d2:9f: f3:0a:95:39:fc:68:fa:3a:55:f1:12:1e:83:6b:c6: 7d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CD:0F:7A:B8:CA:41:DF:61:14:A5:32:C7:85:BC:A3:B1:BE:64:CA X509v3 Authority Key Identifier: keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:1c:ee:9f:b5:74:9d:23:51:42:67:05:1c:63:5a:b4:4e:5c: ee:89:a8:a8:c2:b7:96:bb:58:8d:d8:a4:4e:cc:4c:9b:e4:4a: 6d:d3:d6:6f:02:57:dd:cd:6d:c2:ad:e3:68:45:df:57:6b:81: 26:3c:36:1b:9b:a4:b3:3f:3b:12:d1:86:5f:38:b1:5e:50:b8: 32:20:e8:2d:e9:66:eb:98:9c:b0:92:c3:18:0e:3c:8f:32:7b: 41:76:d2:79:2c:b9:86:54:0f:6d:03:82:f4:13:80:5b:bb:8e: f8:fb:82:e7:88:71:e0:50:eb:c4:3e:81:d2:82:b9:0a:2d:d2: 03:c5:97:58:c7:02:3f:15:65:56:08:41:cb:7f:9f:91:da:74: 4a:71:67:5b:41:7e:22:a8:32:52:26:23:3a:5d:33:2d:e4:99: d3:1f:a8:07:f7:8f:d3:c3:96:75:36:c4:80:e1:72:4f:69:e7: 7f:27:49:20:f9:cd:28:b1:1d:2f:10:ac:40:3e:3a:8b:9d:43: 2e:53:03:84:9c:42:a2:93:9e:58:b6:09:4b:7d:df:26:4b:5e: 96:33:9e:96:e7:ed:55:79:ed:5a:51:d0:3f:1e:8d:f4:51:5e: a1:39:e8:14:cb:4f:13:fe:46:5a:b5:35:a9:75:17:1b:c6:a8: 5a:d5:1d:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuf17vr8XEr7KPWJEB2BTEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTI2Zjk2MzUxMTg5M2ZhNGQ5ZmJkNWU2NGUwZjhhNDM4 MzdlNDAwHhcNMjYwMTA4MjMwMTE0WhcNMjYwMTA5MjMwMTE0WjAzMTEwLwYDVQQD EygxNmNkMGY3YWI4Y2E0MWRmNjExNGE1MzJjNzg1YmNhM2IxYmU2NGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4Z8pBjL372XCL+vCBMScm4Wpwzd yn2kbkBE+xES4V5hyeQ0R6hHZKchYjOOsDWh+zTtUsOygdAhTTnV6po4mILLgXna crSdAxe6uQWr6fXDGAoFDOpOcjfF/PJI+bzfkecWC7nhjRdJFG16DXjLLl3NsA54 vuehBndiGYejs0wWWZ5DjxtvYHgkR90xrcZXSfE1r77NEv+uzCXro0vwaChWVeME JOyizQMyQAVCtHdeSHsxe6zoM4I+OOZ5lKny2RgWnX/wnI4siywB+71SLhsyl1SX R2PDMTEycUDZht7bDeMOo9abMjblz0820p/zCpU5/Gj6OlXxEh6Da8Z9wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbND3q4ykHfYRSlMseFvKOxvmTKMB8GA1UdIwQY MBaAFMqSb5Y1EYk/pNn71eZOD4pDg35AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NGI3YmItMjYwNS00MjViLWIzNDEt MTQ2MDVkYjU0M2QwLzEveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy80NGI3YmItMjYwNS00MjViLWIzNDEtMTQ2MDVkYjU0M2Qw LzEveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphzun7V0 nSNRQmcFHGNatE5c7omoqMK3lrtYjdikTsxMm+RKbdPWbwJX3c1twq3jaEXfV2uB Jjw2G5uksz87EtGGXzixXlC4MiDoLelm65icsJLDGA48jzJ7QXbSeSy5hlQPbQOC 9BOAW7uO+PuC54hx4FDrxD6B0oK5Ci3SA8WXWMcCPxVlVghBy3+fkdp0SnFnW0F+ IqgyUiYjOl0zLeSZ0x+oB/eP08OWdTbEgOFyT2nnfydJIPnNKLEdLxCsQD46i51D LlMDhJxCopOeWLYJS33fJkteljOeluftVXntWlHQPx6N9FFeoTnoFMtPE/5GWrU1 qXUXG8aoWtUdWg== -----END CERTIFICATE-----Generated at Fri Jan 9 01:11:58 2026 by rpki-client