This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft File: i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json) Hash identifier: Ly6v4GTXaM4YpmH7aHfuFRegO1kDrdDoPLBD0qf9W98= Subject key identifier: F1:FA:E9:40:52:38:B3:94:39:66:82:42:1A:8E:4F:83:69:6A:7C:64 Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Certificate serial: 019B8127F96A013046DB7E53ED531988A17F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft Manifest number: 17AE Signing time: Sat 03 Jan 2026 00:00:39 +0000 Manifest this update: Sat 03 Jan 2026 00:00:39 +0000 Manifest next update: Sun 04 Jan 2026 00:00:39 +0000 Files and hashes: 1: 3fmRvkperMmvyU4KqpsUtOxTyt4.roa (hash: 7eZzl4W/3A8ZztuV2lmxwvx6VP7+Qvs+/fsXhTjc0rc=) 2: 7Tcz0pE1-IDNMp7AQ99DVCGrgjI.roa (hash: IYa4nqDQg0w4fOWwfwmQezvrBABwOK7SbfWTarCYxSQ=) 3: 7W1NXgkMSkIdBVSG746iQwH_IUI.roa (hash: 8/Z+GxzPEApZfT9MVxqAMLn34ihqPk9rP7wFg/FqfLU=) 4: EdFWUcc8IVOoO0eCHGrnGkFmsGg.roa (hash: hRMzKjUqKk1WuOs7kzmRaFOXrwrTn6B37s4zIKdomao=) 5: Ljk83VCvMFaaB88IfYzmXG7UKBY.roa (hash: f8wXBBWZbB++s5ojWl86XJPa1ZQ8YeSsSho2itzHWeE=) 6: MVvq6Rgk9g4xb6udrHASJS9rhUU.roa (hash: M5I2tbJMcYnMo8jDDImO8+z5cJdQDV2EBlWZ+aqbq4Q=) 7: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: mcstYZGAYmkCK6sC51sK0Bll113GdInPu7W6/CutlSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 23:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:27:f9:6a:01:30:46:db:7e:53:ed:53:19:88:a1:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Validity Not Before: Jan 3 00:00:39 2026 GMT Not After : Jan 4 00:00:39 2026 GMT Subject: CN=f1fae9405238b394396682421a8e4f83696a7c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ec:01:65:b2:60:4a:01:93:ba:92:6c:35:6b: 64:4c:ac:f3:39:de:c2:a8:f6:b7:eb:bc:f3:0a:e5: 2b:0e:12:46:6b:1b:bb:50:6a:69:2b:2e:2f:4a:6c: cb:7b:ea:e4:79:39:ea:77:d7:0c:ce:8a:7a:25:8a: a7:24:6d:60:dd:79:46:97:ca:21:ea:9b:1d:72:18: 3a:2a:78:d0:ab:0c:60:36:a0:8a:d2:28:fa:39:b0: 94:ae:25:0a:4f:48:4a:6f:a5:3a:71:df:9c:c6:00: 5d:5f:0e:6f:4b:0e:dc:e8:4d:0b:02:44:64:9e:9a: 43:4c:63:cf:02:9a:40:0f:1e:97:75:2c:55:b0:ca: ee:c9:62:6f:4c:4f:93:9a:4b:ea:c6:e1:65:33:93: 1c:f9:96:cc:ec:2e:88:79:07:94:fd:a4:7c:a4:4b: c9:2c:db:37:f2:70:48:55:4f:e4:de:7f:3f:1e:bd: d5:c2:1e:e6:ff:7c:4d:b6:21:3c:33:41:2a:b7:d6: 7b:f0:2e:41:59:ea:c8:51:64:41:23:59:c1:62:bc: 47:bc:72:45:78:6a:19:53:32:69:76:72:c0:a0:51: 5a:66:10:5d:80:3a:02:e7:64:a1:c1:ba:ae:4b:1c: 95:8e:dc:86:77:a8:81:dd:33:4a:2b:67:23:65:d8: 02:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FA:E9:40:52:38:B3:94:39:66:82:42:1A:8E:4F:83:69:6A:7C:64 X509v3 Authority Key Identifier: keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:00:ba:81:d1:19:1a:fe:1d:27:0d:91:70:12:81:e4:21:97: 0a:bb:79:b4:ac:f3:8c:c3:fe:c9:f1:6e:9a:e0:48:32:c4:fa: 8b:1f:1b:f3:98:aa:89:fa:11:ea:7d:40:d4:1e:37:a6:7a:68: cb:5a:7d:c0:c0:97:25:4b:cd:47:41:4a:77:3e:54:a1:83:3a: d8:2a:70:e7:e0:45:ce:c0:af:ed:4c:6f:64:01:ed:bb:c1:1f: 2f:63:7f:a5:5b:58:0e:c9:4c:1b:9a:72:c7:f9:b4:84:a5:2b: a6:7e:7d:df:70:52:b7:0f:b3:8d:3a:78:17:8e:42:2c:5a:75: 1b:f1:8e:1d:16:4d:d1:55:90:33:ca:09:59:32:6d:b2:28:ac: bb:56:99:7c:06:6b:43:03:d7:fc:18:48:e0:7b:53:23:9a:7f: fb:97:30:2a:61:20:c2:39:74:ae:ca:d3:27:58:4c:ed:74:73: 42:62:6f:da:bf:e1:22:e0:5f:da:b9:3c:da:0b:13:b7:b5:13: 80:e1:27:7a:21:44:2d:18:84:a4:e6:12:c2:fe:4f:f6:69:57: 51:02:42:2a:bc:c0:3b:04:e4:92:1e:41:63:be:a7:68:60:14: 32:32:f1:3a:b3:35:da:cb:c3:d5:e8:14:b2:cf:3b:fe:eb:25: 83:50:dd:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuBJ/lqATBG235T7VMZiKF/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZmNhN2M5NmU4MDQ1MDVhNDhiOTk2MDNkOWIyMTI0ZjFk ZDM3MDIwHhcNMjYwMTAzMDAwMDM5WhcNMjYwMTA0MDAwMDM5WjAzMTEwLwYDVQQD EyhmMWZhZTk0MDUyMzhiMzk0Mzk2NjgyNDIxYThlNGY4MzY5NmE3YzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+wBZbJgSgGTupJsNWtkTKzzOd7C qPa367zzCuUrDhJGaxu7UGppKy4vSmzLe+rkeTnqd9cMzop6JYqnJG1g3XlGl8oh 6psdchg6KnjQqwxgNqCK0ij6ObCUriUKT0hKb6U6cd+cxgBdXw5vSw7c6E0LAkRk nppDTGPPAppADx6XdSxVsMruyWJvTE+TmkvqxuFlM5Mc+ZbM7C6IeQeU/aR8pEvJ LNs38nBIVU/k3n8/Hr3Vwh7m/3xNtiE8M0Eqt9Z78C5BWerIUWRBI1nBYrxHvHJF eGoZUzJpdnLAoFFaZhBdgDoC52ShwbquSxyVjtyGd6iB3TNKK2cjZdgC6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPH66UBSOLOUOWaCQhqOT4NpanxkMB8GA1UdIwQY MBaAFIv8p8lugEUFpIuZYD2bISTx3TcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAt MThiMWE5MzdhNTY3LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAtMThiMWE5MzdhNTY3 LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQC6gdEZ Gv4dJw2RcBKB5CGXCrt5tKzzjMP+yfFumuBIMsT6ix8b85iqifoR6n1A1B43pnpo y1p9wMCXJUvNR0FKdz5UoYM62Cpw5+BFzsCv7UxvZAHtu8EfL2N/pVtYDslMG5py x/m0hKUrpn5933BStw+zjTp4F45CLFp1G/GOHRZN0VWQM8oJWTJtsiisu1aZfAZr QwPX/BhI4HtTI5p/+5cwKmEgwjl0rsrTJ1hM7XRzQmJv2r/hIuBf2rk82gsTt7UT gOEneiFELRiEpOYSwv5P9mlXUQJCKrzAOwTkkh5BY76naGAUMjLxOrM12svD1egU ss87/uslg1DdjA== -----END CERTIFICATE-----Generated at Sat Jan 3 08:21:16 2026 by rpki-client