This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft File: yJtbKWmeLdQYBAwO33UAhdhyBEI.mft (raw, json) Hash identifier: fWqRYH2Iz06QKniIDl2lk/ouTur8UT8uVPO4NGuNIB0= Subject key identifier: 1A:41:85:D1:C7:33:92:CE:9C:AB:2E:B1:78:25:CD:FE:DC:E7:E6:52 Authority key identifier: C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42 Certificate issuer: /CN=c89b5b29699e2dd418040c0edf750085d8720442 Certificate serial: 019C420F9F6CA8FC999BB3D4439E5947FE8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft Manifest number: 0EE1 Signing time: Mon 09 Feb 2026 11:00:45 +0000 Manifest this update: Mon 09 Feb 2026 11:00:45 +0000 Manifest next update: Tue 10 Feb 2026 11:00:45 +0000 Files and hashes: 1: yJtbKWmeLdQYBAwO33UAhdhyBEI.crl (hash: +cgtOMHqbEoYagQXIrVh4uEXkHPhsNqrb/GCH8BoFYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:9f:6c:a8:fc:99:9b:b3:d4:43:9e:59:47:fe:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c89b5b29699e2dd418040c0edf750085d8720442 Validity Not Before: Feb 9 11:00:45 2026 GMT Not After : Feb 10 11:00:45 2026 GMT Subject: CN=1a4185d1c73392ce9cab2eb17825cdfedce7e652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:80:dc:66:f3:92:14:ab:8b:f0:cd:b3:84:b7: 97:fd:2e:4e:a8:7d:2f:cb:db:93:fb:22:77:ad:a2: 2b:9c:f0:73:24:d1:56:c3:5b:86:45:6a:08:4d:d8: 28:d6:6c:e9:9b:9d:8d:3a:38:a7:2d:c4:4e:bd:39: d9:c3:58:c8:9c:8d:75:16:e7:03:62:8f:6a:31:fc: 79:ff:c7:d5:d6:dd:20:fb:a3:77:14:cd:9a:57:b5: 3e:4d:cf:a7:bb:d8:c5:0d:e3:aa:29:c1:57:ae:36: 1a:94:69:c2:3f:ef:c3:0b:03:68:42:5d:fa:0c:02: b3:2c:fd:78:e4:76:a2:9f:9a:bb:5c:3a:7d:81:25: 66:8a:82:ac:7a:52:3c:29:06:31:b0:54:22:3b:fb: e4:69:23:6f:8d:c7:d0:0f:30:d4:85:79:9e:a9:04: fc:15:e1:66:82:e8:e1:8f:78:a2:a7:9d:1e:d5:70: ea:f9:25:70:b5:8c:eb:41:90:09:dc:b7:e5:be:53: 77:c3:43:ea:7d:45:a1:c1:12:75:36:15:a3:b0:d7: 39:d4:4f:52:b8:8a:6c:c4:92:24:61:d4:1f:41:5b: c1:f1:e1:bd:8b:8b:55:06:85:ca:c9:d6:4f:9b:45: 6a:7e:53:fc:29:59:09:07:25:32:ec:a5:7c:90:58: ba:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:41:85:D1:C7:33:92:CE:9C:AB:2E:B1:78:25:CD:FE:DC:E7:E6:52 X509v3 Authority Key Identifier: keyid:C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:79:49:85:71:e9:87:b4:76:69:a7:7e:0d:db:03:59:d7:fe: 7b:df:be:62:b6:59:b7:cd:d9:b8:17:45:d3:c9:60:47:c9:08: 0e:12:38:06:50:55:87:a8:00:29:c4:fb:06:44:86:a8:a0:70: 07:d3:ca:25:2d:01:10:05:72:a3:f9:88:9c:af:25:98:f3:e0: 1e:68:10:e8:af:92:cd:af:b9:cc:bb:c6:3c:65:fc:2e:07:0c: e5:a9:2e:d2:a2:25:f3:74:7c:07:2a:6f:2a:5d:31:b2:5d:b6: 73:6b:3e:41:7d:7b:31:d0:9e:ad:37:6c:9d:f8:9a:a4:f4:11: 57:a9:0a:27:55:77:c7:b0:e0:eb:e5:5e:e3:45:7d:ca:f1:8e: 97:2a:63:6b:d7:49:dd:3d:23:93:49:63:bc:83:13:c1:c5:6d: 20:b1:82:f5:85:38:6c:88:d6:21:47:53:ab:d9:49:2d:0b:e6: a7:b2:0d:3b:b5:3d:58:66:6e:9d:0f:0e:8a:17:0f:c7:1c:43: 7c:7a:3a:d2:b9:37:53:95:f0:47:c4:22:e5:98:4a:e4:50:f6: 43:9a:66:4f:3a:31:bc:a4:76:f9:7a:8a:c7:53:33:09:96:68: 6b:00:99:a2:6e:76:a6:2f:4c:33:79:19:e3:b1:ea:ed:f5:34: eb:0f:4e:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD59sqPyZm7PUQ55ZR/6LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4OWI1YjI5Njk5ZTJkZDQxODA0MGMwZWRmNzUwMDg1ZDg3 MjA0NDIwHhcNMjYwMjA5MTEwMDQ1WhcNMjYwMjEwMTEwMDQ1WjAzMTEwLwYDVQQD EygxYTQxODVkMWM3MzM5MmNlOWNhYjJlYjE3ODI1Y2RmZWRjZTdlNjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoDcZvOSFKuL8M2zhLeX/S5OqH0v y9uT+yJ3raIrnPBzJNFWw1uGRWoITdgo1mzpm52NOjinLcROvTnZw1jInI11FucD Yo9qMfx5/8fV1t0g+6N3FM2aV7U+Tc+nu9jFDeOqKcFXrjYalGnCP+/DCwNoQl36 DAKzLP145Hain5q7XDp9gSVmioKselI8KQYxsFQiO/vkaSNvjcfQDzDUhXmeqQT8 FeFmgujhj3iip50e1XDq+SVwtYzrQZAJ3LflvlN3w0PqfUWhwRJ1NhWjsNc51E9S uIpsxJIkYdQfQVvB8eG9i4tVBoXKydZPm0VqflP8KVkJByUy7KV8kFi6NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpBhdHHM5LOnKsusXglzf7c5+ZSMB8GA1UdIwQY MBaAFMibWylpni3UGAQMDt91AIXYcgRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUp0YktXbWVMZFFZQkF3TzMzVUFoZGh5QkVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS81ZWMzODEtN2M1NC00YmE0LWI5YzEt Njc1NzU5YTNiMGI3LzEveUp0YktXbWVMZFFZQkF3TzMzVUFoZGh5QkVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS81ZWMzODEtN2M1NC00YmE0LWI5YzEtNjc1NzU5YTNiMGI3 LzEveUp0YktXbWVMZFFZQkF3TzMzVUFoZGh5QkVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHlJhXHp h7R2aad+DdsDWdf+e9++YrZZt83ZuBdF08lgR8kIDhI4BlBVh6gAKcT7BkSGqKBw B9PKJS0BEAVyo/mInK8lmPPgHmgQ6K+Sza+5zLvGPGX8LgcM5aku0qIl83R8Bypv Kl0xsl22c2s+QX17MdCerTdsnfiapPQRV6kKJ1V3x7Dg6+Ve40V9yvGOlypja9dJ 3T0jk0ljvIMTwcVtILGC9YU4bIjWIUdTq9lJLQvmp7INO7U9WGZunQ8OihcPxxxD fHo60rk3U5XwR8Qi5ZhK5FD2Q5pmTzoxvKR2+XqKx1MzCZZoawCZom52pi9MM3kZ 47Hq7fU06w9OFA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:04 2026 by rpki-client