This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft File: yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft (raw, json) Hash identifier: 7ljR1nHVrcnB2uxDBLQna1WwCWnL/6rNwhWuMEw6hE4= Subject key identifier: 00:9F:75:D2:55:69:78:CE:F5:06:42:14:3B:8C:B4:76:FB:D8:D8:06 Authority key identifier: C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03 Certificate issuer: /CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03 Certificate serial: 019C432298300392FEF53DD4344B53A9D3FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft Manifest number: 130E Signing time: Mon 09 Feb 2026 16:01:06 +0000 Manifest this update: Mon 09 Feb 2026 16:01:06 +0000 Manifest next update: Tue 10 Feb 2026 16:01:06 +0000 Files and hashes: 1: yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl (hash: p6AA4Xm1hYf59yKsxTs/PekbSbqEx5vcHVB1sMB2LhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:98:30:03:92:fe:f5:3d:d4:34:4b:53:a9:d3:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03 Validity Not Before: Feb 9 16:01:06 2026 GMT Not After : Feb 10 16:01:06 2026 GMT Subject: CN=009f75d2556978cef50642143b8cb476fbd8d806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d4:a8:fc:0a:e2:71:23:d6:a9:82:dd:35:9e: c4:5e:aa:a5:7a:e7:1e:68:31:86:db:b7:9f:31:3b: 24:e8:32:1b:9f:6c:f0:1d:b1:18:d8:09:f3:47:fc: f0:74:45:4e:3f:fb:2a:2a:be:fa:27:99:df:91:19: d8:fb:ca:18:84:c0:50:44:51:9b:a2:da:8b:85:eb: 8d:54:a7:3d:01:65:84:1c:78:11:4a:95:c3:fe:5c: 16:65:b6:5f:ab:ef:10:d1:55:bf:a1:ed:16:d3:b1: a6:b7:8c:74:ff:d5:2a:9b:37:9c:9c:6a:48:27:41: 19:a6:a7:64:b4:23:2d:02:bd:77:e9:af:d8:d5:56: 9b:6d:07:bc:18:69:1f:c9:99:e4:ba:e5:0f:4a:b6: c9:df:0f:a8:aa:3d:19:6b:17:67:64:09:47:61:ef: 35:40:a8:65:1e:c9:bf:19:dc:5d:bf:b7:40:5f:84: f0:a8:7d:02:8c:be:3e:61:bd:d3:56:94:03:1d:11: e2:49:ce:64:68:63:59:b1:93:5d:b5:2f:4d:8d:ae: 68:26:2f:36:3e:f1:0b:40:cd:57:27:8b:fb:e8:7a: 69:2a:77:e3:a2:18:70:43:f0:56:af:2a:1b:ea:25: e7:a6:eb:9d:50:19:7c:ce:47:40:6b:1d:45:a9:47: d7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9F:75:D2:55:69:78:CE:F5:06:42:14:3B:8C:B4:76:FB:D8:D8:06 X509v3 Authority Key Identifier: keyid:C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:a4:f9:13:72:87:fb:43:c7:3d:2b:69:35:32:31:3f:89:c2: 25:18:ef:2a:59:a9:68:e6:d3:0f:6c:32:e7:64:6d:89:56:63: 40:3d:41:d1:37:f0:a2:44:b0:9c:08:1f:9a:40:e3:b9:e5:1f: 6f:60:79:d1:9a:85:cd:79:bc:b4:bd:3a:07:6d:f5:59:09:d8: 84:93:56:93:35:43:8f:d6:9c:ab:03:89:e6:a8:bb:40:8f:29: ac:d3:83:a6:6b:69:2e:24:1f:54:97:f8:f1:e7:0d:e1:21:99: 1a:e3:db:32:7f:54:7d:eb:f1:28:ef:f3:37:70:0c:81:39:1a: 3e:92:38:91:6b:02:9c:4c:4e:01:9c:d9:03:e0:ae:77:01:29: ba:10:ce:80:7c:fd:8f:b5:c1:e4:5f:9e:b5:70:a0:94:71:54: d2:e4:6c:80:e7:ea:87:cf:8e:a0:54:ca:41:e6:6c:b8:c8:91: 1c:93:d8:d8:25:c7:93:9a:eb:d9:44:30:55:f5:e2:4c:2a:9b: 23:bd:26:14:37:c3:ab:fc:f5:13:bd:50:c8:2e:1d:1b:eb:90: d5:05:9f:1d:63:35:a4:84:92:f8:f1:03:1f:7b:4a:e4:6a:2a: 89:77:7f:cc:0c:d6:ed:99:40:f0:0d:81:e6:1a:fe:97:7a:a5: 16:d3:90:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpgwA5L+9T3UNEtTqdP6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MDFmYzFmOTE4MThlNDhkNmZkMTBlZDZmOWM1MzlhODg4 NTRiMDMwHhcNMjYwMjA5MTYwMTA2WhcNMjYwMjEwMTYwMTA2WjAzMTEwLwYDVQQD EygwMDlmNzVkMjU1Njk3OGNlZjUwNjQyMTQzYjhjYjQ3NmZiZDhkODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktSo/AricSPWqYLdNZ7EXqqleuce aDGG27efMTsk6DIbn2zwHbEY2AnzR/zwdEVOP/sqKr76J5nfkRnY+8oYhMBQRFGb otqLheuNVKc9AWWEHHgRSpXD/lwWZbZfq+8Q0VW/oe0W07Gmt4x0/9UqmzecnGpI J0EZpqdktCMtAr136a/Y1VabbQe8GGkfyZnkuuUPSrbJ3w+oqj0ZaxdnZAlHYe81 QKhlHsm/Gdxdv7dAX4TwqH0CjL4+Yb3TVpQDHRHiSc5kaGNZsZNdtS9Nja5oJi82 PvELQM1XJ4v76HppKnfjohhwQ/BWryob6iXnpuudUBl8zkdAax1FqUfXwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACfddJVaXjO9QZCFDuMtHb72NgGMB8GA1UdIwQY MBaAFMkB/B+RgY5I1v0Q7W+cU5qIhUsDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVFIOEg1R0Jqa2pXX1JEdGI1eFRtb2lGU3dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82Zjk4M2ItM2U1Ni00YzgyLTlmMzgt NWYxZDg1NjJiNTJmLzEveVFIOEg1R0Jqa2pXX1JEdGI1eFRtb2lGU3dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy82Zjk4M2ItM2U1Ni00YzgyLTlmMzgtNWYxZDg1NjJiNTJm LzEveVFIOEg1R0Jqa2pXX1JEdGI1eFRtb2lGU3dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMaT5E3KH +0PHPStpNTIxP4nCJRjvKlmpaObTD2wy52RtiVZjQD1B0TfwokSwnAgfmkDjueUf b2B50ZqFzXm8tL06B231WQnYhJNWkzVDj9acqwOJ5qi7QI8prNODpmtpLiQfVJf4 8ecN4SGZGuPbMn9UfevxKO/zN3AMgTkaPpI4kWsCnExOAZzZA+CudwEpuhDOgHz9 j7XB5F+etXCglHFU0uRsgOfqh8+OoFTKQeZsuMiRHJPY2CXHk5rr2UQwVfXiTCqb I70mFDfDq/z1E71QyC4dG+uQ1QWfHWM1pISS+PEDH3tK5GoqiXd/zAzW7ZlA8A2B 5hr+l3qlFtOQ+g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:52 2026 by rpki-client