This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft File: YoO20dhhAunt8qvdqnyTR6rHF8c.mft (raw, json) Hash identifier: S7z6WgHlWSbe97vnR+RGjIzyoZ4+dlQIiFQDLWDzQu8= Subject key identifier: 26:22:BE:FF:2A:F4:07:A6:FF:29:BD:DB:42:E5:5F:02:78:CD:4A:2C Authority key identifier: 62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7 Certificate issuer: /CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7 Certificate serial: 019B7D144FAA1584A169A04226A4B33DF2AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft Manifest number: 17AB Signing time: Fri 02 Jan 2026 05:00:41 +0000 Manifest this update: Fri 02 Jan 2026 05:00:41 +0000 Manifest next update: Sat 03 Jan 2026 05:00:41 +0000 Files and hashes: 1: FKwES05QXgv7GDIVYOX1rJUnQN0.roa (hash: q8y+Z4GqNRIr+efHEWQCbzvWoFlZ2bwXtIGJIqiojdY=) 2: IqcwUeOGcAnS-tBgjkUM-XNO3is.roa (hash: wn0T7F5N0/+0KEuMUe6YilItigsuYUK7JvlaTh+yZLw=) 3: YoO20dhhAunt8qvdqnyTR6rHF8c.crl (hash: IZNUaV1wnbg22KZkCpZbAz9fzvMNlDnk2Rwv7HKKNs4=) 4: h-kICo84mpPHXctcS-vW02QdJxQ.roa (hash: YChUhS+6HZvQd+Isg9GWQNzRMqXToTsR0vsksCA2uaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:14:4f:aa:15:84:a1:69:a0:42:26:a4:b3:3d:f2:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7 Validity Not Before: Jan 2 05:00:41 2026 GMT Not After : Jan 3 05:00:41 2026 GMT Subject: CN=2622beff2af407a6ff29bddb42e55f0278cd4a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a6:87:5d:e3:37:52:c8:ff:89:91:96:23:c0: d0:8a:cd:88:33:b9:46:e7:75:07:6a:d7:9f:98:39: f9:38:d0:3f:2f:e1:e3:aa:0a:1f:78:a7:9d:48:2b: 86:80:b5:61:31:5c:c8:27:e2:07:10:19:36:46:b9: 49:10:d4:ec:06:e3:a9:a6:90:e7:52:05:ee:a2:50: b7:af:a5:1f:5c:7b:c5:ec:e7:f3:6d:50:1c:d6:ab: fb:55:76:9f:f7:f4:5e:0d:6a:ec:30:f3:53:41:bc: 79:a4:9b:df:83:2c:38:da:09:c5:0d:bc:ce:6c:20: 87:1c:5a:4e:23:8c:86:62:52:96:6c:61:0d:0d:a2: 65:52:11:59:c5:56:ab:17:12:57:88:a7:0c:22:da: 1b:d4:e7:0d:79:9a:8f:3f:58:02:67:1b:94:41:25: 1c:c1:40:8f:47:1b:00:11:8f:4f:e9:e1:88:46:12: 57:af:f0:0f:c1:52:4b:8e:4f:44:aa:82:be:58:4c: 37:71:34:ac:55:b4:9c:17:d6:ad:ee:c0:f6:ac:d3: 5a:84:a8:f5:58:ca:42:65:4a:3d:56:de:26:ad:78: 38:ab:c8:54:68:fb:38:13:e4:2a:53:ef:6f:2e:1f: a7:2c:07:a1:0c:25:28:9c:7d:dd:35:78:c7:84:da: 93:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:22:BE:FF:2A:F4:07:A6:FF:29:BD:DB:42:E5:5F:02:78:CD:4A:2C X509v3 Authority Key Identifier: keyid:62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e5:6d:c9:26:82:99:52:3c:45:51:2f:43:5c:1d:5d:9c:7d: ce:71:87:47:ec:a0:f4:62:60:81:4e:30:a1:41:c7:82:84:de: f9:61:ae:66:7a:e9:80:d7:60:a3:19:46:3a:83:9f:b6:3e:e2: 22:00:b2:87:a9:d9:bc:ea:76:4f:58:8e:0c:66:ed:08:06:03: 74:aa:2d:44:ad:d5:b7:fe:03:80:03:76:a1:9f:07:85:4d:bb: f2:d2:4b:ad:d5:18:46:dd:9e:13:07:15:d1:6d:cc:f0:2d:fe: a2:00:24:c6:c7:2a:73:13:c8:79:fc:91:03:1f:84:64:de:6d: 61:c8:f1:e2:86:fd:77:13:09:39:a2:eb:45:af:66:e9:5a:7d: 79:8a:36:c5:07:4c:90:1e:cb:ff:98:3a:bc:e4:2c:8b:be:bc: c8:36:1b:26:54:5c:6a:62:84:f2:a0:33:5c:51:e7:4a:a4:35: 00:67:93:48:8b:ec:f3:b2:b1:00:ca:11:04:25:36:92:4f:ba: fc:e6:b3:a5:91:92:3b:5f:ba:2b:ca:35:69:e4:0f:f4:cd:38: ee:a1:56:20:75:2b:0f:d2:b6:9c:67:34:b3:66:e7:b8:96:2d: 82:35:20:2a:3a:6d:cc:79:11:c1:7e:47:08:24:54:47:04:28: d0:28:1d:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9FE+qFYShaaBCJqSzPfKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyODNiNmQxZDg2MTAyZTllZGYyYWJkZGFhN2M5MzQ3YWFj NzE3YzcwHhcNMjYwMTAyMDUwMDQxWhcNMjYwMTAzMDUwMDQxWjAzMTEwLwYDVQQD EygyNjIyYmVmZjJhZjQwN2E2ZmYyOWJkZGI0MmU1NWYwMjc4Y2Q0YTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaaHXeM3Usj/iZGWI8DQis2IM7lG 53UHatefmDn5ONA/L+HjqgofeKedSCuGgLVhMVzIJ+IHEBk2RrlJENTsBuOpppDn UgXuolC3r6UfXHvF7OfzbVAc1qv7VXaf9/ReDWrsMPNTQbx5pJvfgyw42gnFDbzO bCCHHFpOI4yGYlKWbGENDaJlUhFZxVarFxJXiKcMItob1OcNeZqPP1gCZxuUQSUc wUCPRxsAEY9P6eGIRhJXr/APwVJLjk9EqoK+WEw3cTSsVbScF9at7sD2rNNahKj1 WMpCZUo9Vt4mrXg4q8hUaPs4E+QqU+9vLh+nLAehDCUonH3dNXjHhNqTcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYivv8q9Aem/ym920LlXwJ4zUosMB8GA1UdIwQY MBaAFGKDttHYYQLp7fKr3ap8k0eqxxfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW9PMjBkaGhBdW50OHF2ZHFueVRSNnJIRjhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iZDQzMTctYjllZi00YjIzLTgwYWQt OTE0ZTQ4ODFlZWE4LzEvWW9PMjBkaGhBdW50OHF2ZHFueVRSNnJIRjhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9iZDQzMTctYjllZi00YjIzLTgwYWQtOTE0ZTQ4ODFlZWE4 LzEvWW9PMjBkaGhBdW50OHF2ZHFueVRSNnJIRjhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOVtySaC mVI8RVEvQ1wdXZx9znGHR+yg9GJggU4woUHHgoTe+WGuZnrpgNdgoxlGOoOftj7i IgCyh6nZvOp2T1iODGbtCAYDdKotRK3Vt/4DgAN2oZ8HhU278tJLrdUYRt2eEwcV 0W3M8C3+ogAkxscqcxPIefyRAx+EZN5tYcjx4ob9dxMJOaLrRa9m6Vp9eYo2xQdM kB7L/5g6vOQsi768yDYbJlRcamKE8qAzXFHnSqQ1AGeTSIvs87KxAMoRBCU2kk+6 /OazpZGSO1+6K8o1aeQP9M047qFWIHUrD9K2nGc0s2bnuJYtgjUgKjptzHkRwX5H CCRURwQo0Cgdxg== -----END CERTIFICATE-----Generated at Fri Jan 2 11:19:37 2026 by rpki-client