This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft File: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft (raw, json) Hash identifier: Ukz5fyhAEkrqCfiLLWam8pgEpen6JfsmR09TPWlPjRI= Subject key identifier: B3:EA:1E:33:10:61:EF:BA:7C:68:56:4F:76:FF:09:7F:21:F2:34:8A Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2 Certificate issuer: /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2 Certificate serial: 019BD13188A21C6956A2A213A0CACF7D5AB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft Manifest number: 17DA Signing time: Sun 18 Jan 2026 13:00:42 +0000 Manifest this update: Sun 18 Jan 2026 13:00:42 +0000 Manifest next update: Mon 19 Jan 2026 13:00:42 +0000 Files and hashes: 1: FuIBir0i-y7SEGRI15m4Ui_zA_0.roa (hash: VPkd3ytwbWG1Sl01GeIeuQbGU6zTZUHeBBof8XyrtUU=) 2: hEKeHB_HwWdm6YwqDL4rLU_ikEo.roa (hash: +KO33p55Ic+lVnlR+TIJivqrXb9HN4n63k+7GR880Ng=) 3: jzWys3LhqUMk6bdrR3m0wvK8IUQ.roa (hash: eUY96707RIGkVAKREkjXDqXCVYEyY1vwd6gYVeK0EmU=) 4: nf4A4HCstvpa-65TJj04mTKWQoM.roa (hash: sgwGBrZAZly4O4y3WPWRW8wBHIIzPULSvh12WgBbRv4=) 5: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl (hash: xkaLGWDvzw5zo0ptuE/Dxs+LwXzRH6A3cY1CX8yekPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d1:31:88:a2:1c:69:56:a2:a2:13:a0:ca:cf:7d:5a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2 Validity Not Before: Jan 18 13:00:42 2026 GMT Not After : Jan 19 13:00:42 2026 GMT Subject: CN=b3ea1e331061efba7c68564f76ff097f21f2348a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:4c:e3:6b:d4:09:33:6c:a3:fd:1f:fa:03: 33:6a:cb:ed:4f:29:cc:0e:dc:4f:41:e3:9d:52:79: 6d:7b:44:55:52:08:e7:53:aa:ea:7b:7f:a2:9a:64: 5e:6e:28:98:36:08:d6:9c:c0:b8:ac:05:09:4c:99: 38:0c:22:99:c1:2b:72:ff:d2:67:51:c6:3b:9f:15: e4:f8:66:fb:f0:d4:15:a4:69:6f:53:52:5e:a6:e4: 66:46:66:35:2f:56:7b:a2:68:bb:2f:2f:46:10:34: ea:22:30:c6:e7:42:8a:ca:a8:d3:ae:5c:61:69:85: 1a:61:ad:36:13:53:8c:32:38:18:08:ff:2b:43:28: df:1e:b6:a7:84:38:e0:f3:56:ed:ef:ca:52:45:59: 35:0b:ea:0c:1c:cd:eb:83:d9:54:9b:b5:2b:3b:4c: a2:11:32:be:3c:f7:35:7d:db:14:c4:04:9e:72:80: 2e:6c:75:5a:4b:32:86:9d:74:d5:36:74:e8:88:29: f6:9d:0c:99:80:3b:ad:ef:48:d9:a6:7d:0b:ac:ef: a0:26:81:4e:f9:1f:1c:1a:5f:f9:26:00:3c:04:37: 16:24:05:42:5d:a4:a0:eb:95:0d:8b:4b:15:03:30: 12:b5:59:d1:39:c8:54:73:e8:1a:0e:96:eb:bc:aa: a0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EA:1E:33:10:61:EF:BA:7C:68:56:4F:76:FF:09:7F:21:F2:34:8A X509v3 Authority Key Identifier: keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:10:17:a6:bb:0b:09:21:91:7f:f0:08:ba:3e:8c:5b:ed:75: 85:ec:d6:7b:8d:b8:36:10:e9:54:ea:4b:80:82:19:68:4f:aa: 98:1d:24:b7:33:2c:c1:bb:e4:62:da:a8:0d:f6:1f:0a:84:47: cd:bd:c3:56:76:9b:ee:e9:95:b0:75:ee:d7:ba:68:54:f1:6e: 58:8f:89:a1:70:14:d7:48:2f:42:16:3c:ac:61:80:2d:ec:ce: 6c:de:14:b1:89:62:fb:89:ba:c6:8d:bd:6c:5c:89:dd:95:ff: 7e:8a:37:72:2a:19:16:e7:93:1a:40:f8:ea:70:e3:6c:74:a1: 25:29:c2:d1:b3:b0:fa:82:d5:cb:fb:ce:2b:fe:19:95:41:09: bb:88:73:d5:e8:01:3e:6e:97:49:5f:9e:fd:cc:d8:80:6d:06: 75:e6:af:4b:41:57:76:a2:e5:11:6f:e7:20:fa:37:3b:a8:b9: 6c:de:1f:9a:68:84:ca:13:11:17:7a:28:25:6d:2c:e3:7c:10: 6c:0a:7d:fa:aa:fb:82:77:73:d5:59:9e:41:28:6d:ab:58:1b: f0:1c:9f:b4:a4:71:43:55:f5:9a:6e:d9:5d:13:65:34:f2:39: 6e:6a:19:4d:2b:16:ab:d8:bd:51:bb:df:9e:7a:c5:d0:23:b2: 0d:ce:a8:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvRMYiiHGlWoqIToMrPfVqyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzRiMTMzODdmYWIxZGNmOGI2N2YxNmEwYTQzNzYwODYw MGM0YzIwHhcNMjYwMTE4MTMwMDQyWhcNMjYwMTE5MTMwMDQyWjAzMTEwLwYDVQQD EyhiM2VhMWUzMzEwNjFlZmJhN2M2ODU2NGY3NmZmMDk3ZjIxZjIzNDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxNM42vUCTNso/0f+gMzasvtTynM DtxPQeOdUnlte0RVUgjnU6rqe3+immRebiiYNgjWnMC4rAUJTJk4DCKZwSty/9Jn UcY7nxXk+Gb78NQVpGlvU1JepuRmRmY1L1Z7omi7Ly9GEDTqIjDG50KKyqjTrlxh aYUaYa02E1OMMjgYCP8rQyjfHranhDjg81bt78pSRVk1C+oMHM3rg9lUm7UrO0yi ETK+PPc1fdsUxASecoAubHVaSzKGnXTVNnToiCn2nQyZgDut70jZpn0LrO+gJoFO +R8cGl/5JgA8BDcWJAVCXaSg65UNi0sVAzAStVnROchUc+gaDpbrvKqgewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPqHjMQYe+6fGhWT3b/CX8h8jSKMB8GA1UdIwQY MBaAFMo0sTOH+rHc+LZ/FqCkN2CGAMTCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYt MDQwNTIzNGFiM2YxLzEveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYtMDQwNTIzNGFiM2Yx LzEveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxAXprsL CSGRf/AIuj6MW+11hezWe424NhDpVOpLgIIZaE+qmB0ktzMswbvkYtqoDfYfCoRH zb3DVnab7umVsHXu17poVPFuWI+JoXAU10gvQhY8rGGALezObN4UsYli+4m6xo29 bFyJ3ZX/foo3cioZFueTGkD46nDjbHShJSnC0bOw+oLVy/vOK/4ZlUEJu4hz1egB Pm6XSV+e/czYgG0GdeavS0FXdqLlEW/nIPo3O6i5bN4fmmiEyhMRF3ooJW0s43wQ bAp9+qr7gndz1VmeQShtq1gb8ByftKRxQ1X1mm7ZXRNlNPI5bmoZTSsWq9i9Ubvf nnrF0COyDc6oPQ== -----END CERTIFICATE-----Generated at Sun Jan 18 16:44:06 2026 by rpki-client