This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft File: ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft (raw, json) Hash identifier: X41PM+8ute6YmNrha/nLTB+WI4yCQ/D8IUsPIEaa5Qo= Subject key identifier: EF:9B:92:67:5D:C2:CA:E4:C1:AA:D2:49:BD:BF:FD:51:83:52:10:E8 Authority key identifier: CA:41:FD:B7:E0:16:D9:60:EF:E2:9C:0B:48:94:B8:73:AA:4D:21:E2 Certificate issuer: /CN=ca41fdb7e016d960efe29c0b4894b873aa4d21e2 Certificate serial: 019BB35E3F40A86F3AF2A068AAE332B638F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykH9t-AW2WDv4pwLSJS4c6pNIeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft Manifest number: 037E Signing time: Mon 12 Jan 2026 18:00:56 +0000 Manifest this update: Mon 12 Jan 2026 18:00:56 +0000 Manifest next update: Tue 13 Jan 2026 18:00:56 +0000 Files and hashes: 1: oige68hRBiXUkOK8iHHDWo8nk74.roa (hash: j1qWPqgO+nK+2rkNLUIphbABAHPc6uAzHBH1FOhC3L4=) 2: ykH9t-AW2WDv4pwLSJS4c6pNIeI.crl (hash: PI3cN8GIzOnPL0Y3hYgws39vh9akiSknRA6AIiHEZ9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft rsync://rpki.ripe.net/repository/DEFAULT/ykH9t-AW2WDv4pwLSJS4c6pNIeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:5e:3f:40:a8:6f:3a:f2:a0:68:aa:e3:32:b6:38:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca41fdb7e016d960efe29c0b4894b873aa4d21e2 Validity Not Before: Jan 12 18:00:56 2026 GMT Not After : Jan 13 18:00:56 2026 GMT Subject: CN=ef9b92675dc2cae4c1aad249bdbffd51835210e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e1:6d:52:bf:e4:d0:aa:24:d1:2d:f8:9e:e0: 27:9d:05:90:83:97:08:1c:bf:56:15:27:a8:c4:c8: ee:3e:98:88:dc:87:55:a9:be:a1:3c:fa:87:f6:2b: 6a:b3:9a:40:6e:0f:b9:5c:92:a0:fa:c5:f0:f3:7d: df:02:99:ce:8c:5c:d2:c5:00:06:10:74:13:20:2c: 16:96:be:46:21:aa:ef:86:01:fc:14:8f:10:7d:87: 19:86:8e:ee:dd:2a:a4:82:51:89:dd:a6:37:d0:a4: 21:1e:86:e2:c4:74:32:ef:71:74:10:ee:b1:6b:84: ba:ff:11:9f:a3:5f:1d:93:43:13:ec:ab:a6:7d:86: 58:d6:75:fd:b4:e2:0a:ce:0d:65:25:81:ac:f1:0b: b3:6a:f1:a7:d7:7e:40:ef:5a:3f:b4:16:80:47:01: 0b:53:fe:30:47:cf:6b:20:40:43:3b:9b:82:d0:d2: 85:0d:38:19:ad:67:24:08:b2:b8:e0:b5:fd:b7:89: 20:5f:36:60:b8:55:f3:d0:49:3e:fc:a5:66:b2:86: d8:d0:c9:2b:90:6a:46:cd:e5:dd:cb:81:02:72:b6: ba:90:f5:1e:5f:2d:54:f6:99:e9:ea:25:30:d4:cc: f3:f1:60:da:f8:23:2b:a1:28:dd:f6:b6:c3:70:fa: 65:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9B:92:67:5D:C2:CA:E4:C1:AA:D2:49:BD:BF:FD:51:83:52:10:E8 X509v3 Authority Key Identifier: keyid:CA:41:FD:B7:E0:16:D9:60:EF:E2:9C:0B:48:94:B8:73:AA:4D:21:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykH9t-AW2WDv4pwLSJS4c6pNIeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:c6:9c:56:9f:a3:15:18:2c:08:fd:1e:16:e3:8c:b1:1c:9d: 94:8b:99:17:2e:2b:d7:b4:aa:10:62:e9:96:b9:ea:e2:c0:55: 34:8f:e5:6d:9f:14:2c:b6:2d:00:41:62:31:74:7d:ed:d8:79: b4:10:88:d0:60:23:51:53:c7:d4:a2:e1:45:81:11:9c:71:34: 73:18:79:b5:57:dc:36:12:95:ed:38:b0:37:ab:c0:2c:05:3f: 32:e9:96:b9:4d:c9:8f:ab:0e:d2:0c:4e:1c:29:f4:9f:81:5a: 35:98:42:d7:a7:4e:10:78:43:a6:f2:04:61:6e:34:ef:6d:cf: cb:81:95:b8:ed:ad:2d:19:75:9c:1f:05:83:c3:50:fe:39:85: 73:ca:21:dc:46:43:0a:40:4a:27:0c:d5:0c:d9:9d:a9:2f:a1: 29:13:d9:64:21:ba:da:1e:d6:68:d3:97:0e:d3:06:12:2b:f8: 8b:e7:d1:5c:2c:a4:ad:86:da:50:ba:72:46:a3:f6:1d:42:c9: 5b:49:a5:19:d1:ce:b2:ad:d6:92:33:e4:37:2c:ce:41:b9:55: 92:f5:0a:41:dd:53:fb:92:68:7f:9c:7a:3c:7c:f0:e2:17:cf: 9e:b4:80:24:f4:66:a0:f0:aa:11:c9:3b:4c:aa:f4:05:73:7a: 33:a2:7a:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzXj9AqG868qBoquMytjj0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNDFmZGI3ZTAxNmQ5NjBlZmUyOWMwYjQ4OTRiODczYWE0 ZDIxZTIwHhcNMjYwMTEyMTgwMDU2WhcNMjYwMTEzMTgwMDU2WjAzMTEwLwYDVQQD EyhlZjliOTI2NzVkYzJjYWU0YzFhYWQyNDliZGJmZmQ1MTgzNTIxMGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluFtUr/k0Kok0S34nuAnnQWQg5cI HL9WFSeoxMjuPpiI3IdVqb6hPPqH9itqs5pAbg+5XJKg+sXw833fApnOjFzSxQAG EHQTICwWlr5GIarvhgH8FI8QfYcZho7u3SqkglGJ3aY30KQhHobixHQy73F0EO6x a4S6/xGfo18dk0MT7KumfYZY1nX9tOIKzg1lJYGs8QuzavGn135A71o/tBaARwEL U/4wR89rIEBDO5uC0NKFDTgZrWckCLK44LX9t4kgXzZguFXz0Ek+/KVmsobY0Mkr kGpGzeXdy4ECcra6kPUeXy1U9pnp6iUw1Mzz8WDa+CMroSjd9rbDcPpl1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+bkmddwsrkwarSSb2//VGDUhDoMB8GA1UdIwQY MBaAFMpB/bfgFtlg7+KcC0iUuHOqTSHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWtIOXQtQVcyV0R2NHB3TFNKUzRjNnBOSWVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wMzEwNDctOGM3NC00YWVlLWIwNjUt NDgyODYyZGU3MzBlLzEveWtIOXQtQVcyV0R2NHB3TFNKUzRjNnBOSWVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8wMzEwNDctOGM3NC00YWVlLWIwNjUtNDgyODYyZGU3MzBl LzEveWtIOXQtQVcyV0R2NHB3TFNKUzRjNnBOSWVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMacVp+j FRgsCP0eFuOMsRydlIuZFy4r17SqEGLplrnq4sBVNI/lbZ8ULLYtAEFiMXR97dh5 tBCI0GAjUVPH1KLhRYERnHE0cxh5tVfcNhKV7TiwN6vALAU/MumWuU3Jj6sO0gxO HCn0n4FaNZhC16dOEHhDpvIEYW40723Py4GVuO2tLRl1nB8Fg8NQ/jmFc8oh3EZD CkBKJwzVDNmdqS+hKRPZZCG62h7WaNOXDtMGEiv4i+fRXCykrYbaULpyRqP2HULJ W0mlGdHOsq3WkjPkNyzOQblVkvUKQd1T+5Jof5x6PHzw4hfPnrSAJPRmoPCqEck7 TKr0BXN6M6J6aw== -----END CERTIFICATE-----Generated at Mon Jan 12 22:56:42 2026 by rpki-client