This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft File: ya74cWdYXSiYMVqjdT8_po2tLG0.mft (raw, json) Hash identifier: SnalU6BejhSPtl+6V8CO91gpc4oE0nwoBLytxqYBkIQ= Subject key identifier: D9:EA:46:AA:A0:F0:42:E6:D1:87:A7:CF:4B:83:06:85:9E:90:46:FB Authority key identifier: C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D Certificate issuer: /CN=c9aef87167585d2898315aa3753f3fa68dad2c6d Certificate serial: 019C44D9903D9B1C53360377481F7DB86DFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft Manifest number: 04DB Signing time: Tue 10 Feb 2026 00:00:34 +0000 Manifest this update: Tue 10 Feb 2026 00:00:34 +0000 Manifest next update: Wed 11 Feb 2026 00:00:34 +0000 Files and hashes: 1: 4PMuCFyBSoj7qyq3rjq0aPdFuCI.roa (hash: kOdph/hAaSpeDx3Y3960ZxqCLZYMPimF4UrI1AiHxJA=) 2: ya74cWdYXSiYMVqjdT8_po2tLG0.crl (hash: dZaM4+1QxXhEU5VFqTn7NNS6w7b67Y/KR4xmGTqq4lQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:90:3d:9b:1c:53:36:03:77:48:1f:7d:b8:6d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9aef87167585d2898315aa3753f3fa68dad2c6d Validity Not Before: Feb 10 00:00:34 2026 GMT Not After : Feb 11 00:00:34 2026 GMT Subject: CN=d9ea46aaa0f042e6d187a7cf4b8306859e9046fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5b:57:c6:f3:79:86:f8:b3:79:51:f7:fe:e8: f9:c9:18:f1:83:37:b7:a1:83:c9:78:1f:03:c7:44: ad:03:8c:83:e8:d9:0f:e1:5e:da:37:1b:88:f6:0a: 37:64:a1:55:af:1f:67:24:e3:9a:40:6b:df:23:6d: 04:23:3c:3a:91:a7:1e:5a:27:6a:bb:b2:12:f0:80: b2:ae:07:d4:6e:d8:cb:83:46:85:01:30:8b:22:ce: ed:ac:23:22:df:c1:df:a9:a9:6c:1f:25:e6:21:44: 7f:bd:13:98:b4:12:69:18:1b:bb:ac:4a:72:58:8a: 5d:93:dd:b3:b2:76:9f:52:e6:68:d3:20:ea:3f:d3: b9:23:de:b0:e9:18:0f:8c:eb:50:24:10:32:8a:86: 4b:9c:07:bd:9a:b1:7a:fe:3e:cd:cc:c4:87:64:e5: 43:d3:d7:34:2f:2e:fe:18:06:d8:da:eb:91:07:54: 66:49:66:de:03:34:ea:f9:8a:a4:8a:a7:4c:ae:ed: d0:ac:ac:e5:33:9c:da:1f:80:50:24:98:cf:69:4e: b0:6a:3c:6b:59:41:1d:3b:8e:ad:1d:77:5c:ec:44: 00:69:0e:d9:23:0e:6f:4d:17:33:a6:bc:9d:58:ce: 3a:9f:94:4d:90:82:1c:69:f3:91:ea:de:4e:36:ca: 07:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EA:46:AA:A0:F0:42:E6:D1:87:A7:CF:4B:83:06:85:9E:90:46:FB X509v3 Authority Key Identifier: keyid:C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:1e:ac:69:51:47:02:40:3e:2a:b5:1d:b0:3b:62:98:48:79: c1:99:d9:72:c7:e8:06:69:06:9d:89:b8:a4:d9:65:67:d7:7d: cc:ce:2b:c4:87:f1:1a:86:6a:b4:6c:c9:dd:05:52:15:84:9a: bb:cb:47:4c:a0:ea:ea:45:aa:ca:07:22:23:fb:05:5e:0f:22: eb:e7:df:c3:0c:2c:72:da:d7:54:b1:f8:59:eb:e9:49:f8:9f: bc:8a:92:31:61:c7:b5:7e:ee:85:50:bb:54:21:47:84:c5:9d: 02:e4:aa:74:44:1e:38:8c:af:91:da:b8:94:d0:97:84:92:4e: 12:f5:13:5b:7a:dd:1b:d7:e7:f8:bb:f0:b6:55:f1:89:c9:d2: e2:b3:e3:75:f7:e5:35:54:13:58:5f:8f:d8:51:47:5f:81:6a: 2e:b4:4d:f4:df:c0:c6:aa:1c:08:a0:81:fe:0a:bc:42:30:1f: a8:81:20:2f:b4:d7:4a:4d:aa:75:99:3c:26:fd:ae:fa:f3:95: a2:2c:d1:a5:cd:05:b0:0b:3f:ea:13:b3:75:ca:89:78:f2:d1: 88:ec:89:0d:98:3c:35:0b:54:c9:31:e8:aa:d5:fc:a5:69:66: d6:03:5d:57:4d:85:e7:7e:62:42:fd:f5:45:88:07:89:1a:fe: ac:96:5a:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2ZA9mxxTNgN3SB99uG38MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YWVmODcxNjc1ODVkMjg5ODMxNWFhMzc1M2YzZmE2OGRh ZDJjNmQwHhcNMjYwMjEwMDAwMDM0WhcNMjYwMjExMDAwMDM0WjAzMTEwLwYDVQQD EyhkOWVhNDZhYWEwZjA0MmU2ZDE4N2E3Y2Y0YjgzMDY4NTllOTA0NmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1tXxvN5hvizeVH3/uj5yRjxgze3 oYPJeB8Dx0StA4yD6NkP4V7aNxuI9go3ZKFVrx9nJOOaQGvfI20EIzw6kaceWidq u7IS8ICyrgfUbtjLg0aFATCLIs7trCMi38HfqalsHyXmIUR/vROYtBJpGBu7rEpy WIpdk92zsnafUuZo0yDqP9O5I96w6RgPjOtQJBAyioZLnAe9mrF6/j7NzMSHZOVD 09c0Ly7+GAbY2uuRB1RmSWbeAzTq+YqkiqdMru3QrKzlM5zaH4BQJJjPaU6wajxr WUEdO46tHXdc7EQAaQ7ZIw5vTRczprydWM46n5RNkIIcafOR6t5ONsoH0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnqRqqg8ELm0Yenz0uDBoWekEb7MB8GA1UdIwQY MBaAFMmu+HFnWF0omDFao3U/P6aNrSxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWE3NGNXZFlYU2lZTVZxamRUOF9wbzJ0TEcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84NWNlODItZGQwNi00OTU4LTllODIt ZGIxMGRjZmVjNGJmLzEveWE3NGNXZFlYU2lZTVZxamRUOF9wbzJ0TEcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84NWNlODItZGQwNi00OTU4LTllODItZGIxMGRjZmVjNGJm LzEveWE3NGNXZFlYU2lZTVZxamRUOF9wbzJ0TEcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEh6saVFH AkA+KrUdsDtimEh5wZnZcsfoBmkGnYm4pNllZ9d9zM4rxIfxGoZqtGzJ3QVSFYSa u8tHTKDq6kWqygciI/sFXg8i6+ffwwwsctrXVLH4WevpSfifvIqSMWHHtX7uhVC7 VCFHhMWdAuSqdEQeOIyvkdq4lNCXhJJOEvUTW3rdG9fn+LvwtlXxicnS4rPjdffl NVQTWF+P2FFHX4FqLrRN9N/AxqocCKCB/gq8QjAfqIEgL7TXSk2qdZk8Jv2u+vOV oizRpc0FsAs/6hOzdcqJePLRiOyJDZg8NQtUyTHoqtX8pWlm1gNdV02F535iQv31 RYgHiRr+rJZadQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:36:05 2026 by rpki-client