This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft File: mY6csn89GrzEzGHDwbv9xyYo5Xs.mft (raw, json) Hash identifier: tw0wu6fpnQU82xwRPUtxF8Ld0AyhJ1L8qzN0wvuiZFA= Subject key identifier: 34:4A:1D:50:71:DD:14:83:81:EF:3B:A2:B9:1E:6B:2F:CD:41:6D:A0 Authority key identifier: 99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B Certificate issuer: /CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b Certificate serial: 019C41A1BB3E4FC685CB8F4F1E3ACC7292C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 09:00:43 +0000 Manifest this update: Mon 09 Feb 2026 09:00:43 +0000 Manifest next update: Tue 10 Feb 2026 09:00:43 +0000 Files and hashes: 1: 1-oq4TG_7HWiqOVy_FENVUEkGtDI.roa (hash: WkyuSbuUrQsBUNZKIgd/RxLYyL6Wt7Nlixkah71KQxI=) 2: mY6csn89GrzEzGHDwbv9xyYo5Xs.crl (hash: 41Z5oNNn832kZkQkzUealrOZQTqIXSvMtTR/gqGSzb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:bb:3e:4f:c6:85:cb:8f:4f:1e:3a:cc:72:92:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b Validity Not Before: Feb 9 09:00:43 2026 GMT Not After : Feb 10 09:00:43 2026 GMT Subject: CN=344a1d5071dd148381ef3ba2b91e6b2fcd416da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:31:0a:0c:a9:52:35:82:0b:85:6b:4e:0a:b3: 89:31:da:97:71:5c:ea:2c:4a:12:e8:92:38:8e:1c: 6c:b8:7d:68:85:f4:59:97:78:91:ce:99:5f:13:9e: 3d:39:e0:ca:75:c1:0f:3e:42:9d:6f:d5:80:ef:e4: a4:a0:ad:9c:35:f7:d6:9a:26:aa:32:09:e0:fd:32: 23:11:25:f1:87:2f:91:a3:76:ca:d2:1d:c0:cd:1f: e5:09:e5:a2:51:aa:b6:9b:e0:9f:24:b6:c7:54:ba: ff:5c:c3:c1:b3:0a:ab:e0:87:4b:7e:c9:77:97:a0: 64:02:03:dc:06:f0:89:b1:15:92:77:2c:9c:44:ec: 0a:09:0f:81:89:cc:86:da:89:cb:48:31:82:96:88: 3f:3d:eb:2e:47:37:9e:b9:45:15:d8:2c:3c:05:31: 0c:fc:da:dd:01:1a:18:00:3f:54:b6:ff:c0:00:65: a3:6b:a3:82:70:6c:a2:e3:97:64:0a:bd:5a:dc:28: d4:8d:66:89:06:8b:0d:98:98:7d:b3:1b:d8:9f:f5: b4:b2:18:96:80:a8:2e:a9:0e:3c:64:51:3e:6c:93: 3a:12:da:aa:e7:c7:25:a3:bc:aa:61:b3:c5:f3:da: 5c:dd:1c:15:2e:08:22:38:6a:25:cc:c3:41:85:05: 42:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4A:1D:50:71:DD:14:83:81:EF:3B:A2:B9:1E:6B:2F:CD:41:6D:A0 X509v3 Authority Key Identifier: keyid:99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3c:20:29:52:99:e5:71:57:38:52:e6:56:c6:6b:77:79:61: 6d:76:db:92:4d:06:cb:af:f6:53:c6:e3:55:c2:4f:de:07:bf: d7:b5:23:75:2a:5c:57:31:be:1f:da:33:42:00:ff:1e:78:9a: a3:64:1f:89:50:c9:30:a1:9b:80:59:58:79:fd:8a:92:00:0a: dc:ec:c7:d4:bf:45:66:2d:47:c2:6c:4a:13:58:c6:51:76:48: d8:07:d5:07:fb:a7:c2:08:9a:80:46:f9:62:34:a4:c8:9c:16: 5a:ac:99:08:0c:ce:2c:9d:56:e6:be:be:8e:0d:8c:ed:c7:67: ab:9d:79:6d:7d:51:d4:6f:a4:f6:a2:50:07:29:e2:19:28:35: 14:13:b8:10:46:bf:d8:65:9b:8b:6a:68:c9:b9:b0:3e:08:12: 1a:c8:f0:a9:5e:1f:ce:33:7f:24:4d:10:34:3d:bb:8d:5d:f2: 11:f5:88:ea:93:69:b5:eb:2d:3c:7f:cd:a8:4d:2b:df:61:5e: 45:10:30:8f:9d:41:fc:cf:d4:b6:10:db:80:8e:f3:f3:f9:99: 77:7c:3f:66:3a:5c:e0:3f:61:37:e4:ee:c4:93:7b:a6:50:47: d0:53:ef:83:86:33:c3:26:76:4b:dc:f6:f6:2b:ea:25:40:d2: f3:68:ea:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBobs+T8aFy49PHjrMcpLGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OGU5Y2IyN2YzZDFhYmNjNGNjNjFjM2MxYmJmZGM3MjYy OGU1N2IwHhcNMjYwMjA5MDkwMDQzWhcNMjYwMjEwMDkwMDQzWjAzMTEwLwYDVQQD EygzNDRhMWQ1MDcxZGQxNDgzODFlZjNiYTJiOTFlNmIyZmNkNDE2ZGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTEKDKlSNYILhWtOCrOJMdqXcVzq LEoS6JI4jhxsuH1ohfRZl3iRzplfE549OeDKdcEPPkKdb9WA7+SkoK2cNffWmiaq Mgng/TIjESXxhy+Ro3bK0h3AzR/lCeWiUaq2m+CfJLbHVLr/XMPBswqr4IdLfsl3 l6BkAgPcBvCJsRWSdyycROwKCQ+BicyG2onLSDGClog/PesuRzeeuUUV2Cw8BTEM /NrdARoYAD9Utv/AAGWja6OCcGyi45dkCr1a3CjUjWaJBosNmJh9sxvYn/W0shiW gKguqQ48ZFE+bJM6Etqq58clo7yqYbPF89pc3RwVLggiOGolzMNBhQVCWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRKHVBx3RSDge87orkeay/NQW2gMB8GA1UdIwQY MBaAFJmOnLJ/PRq8xMxhw8G7/ccmKOV7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zYzlmNGEtNDQ1Ni00NTgxLWIyODct NTJkNmIzZTQ3ODlmLzEvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8zYzlmNGEtNDQ1Ni00NTgxLWIyODctNTJkNmIzZTQ3ODlm LzEvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTwgKVKZ 5XFXOFLmVsZrd3lhbXbbkk0Gy6/2U8bjVcJP3ge/17UjdSpcVzG+H9ozQgD/Hnia o2QfiVDJMKGbgFlYef2KkgAK3OzH1L9FZi1HwmxKE1jGUXZI2AfVB/unwgiagEb5 YjSkyJwWWqyZCAzOLJ1W5r6+jg2M7cdnq515bX1R1G+k9qJQByniGSg1FBO4EEa/ 2GWbi2poybmwPggSGsjwqV4fzjN/JE0QND27jV3yEfWI6pNptestPH/NqE0r32Fe RRAwj51B/M/UthDbgI7z8/mZd3w/Zjpc4D9hN+TuxJN7plBH0FPvg4YzwyZ2S9z2 9ivqJUDS82jqNg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:48:01 2026 by rpki-client