This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft File: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft (raw, json) Hash identifier: ZHe0rIFX1I/NEu7IHBWFYYBb/xuHMsgNPtOW6xXdgf0= Subject key identifier: 81:7F:38:92:DE:39:D9:8A:9D:36:59:CF:CA:EF:E5:AD:A1:06:A7:8E Authority key identifier: 63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F Certificate issuer: /CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f Certificate serial: 019C41D87273A283551582378C24098CBCB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft Manifest number: 118E Signing time: Mon 09 Feb 2026 10:00:29 +0000 Manifest this update: Mon 09 Feb 2026 10:00:29 +0000 Manifest next update: Tue 10 Feb 2026 10:00:29 +0000 Files and hashes: 1: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl (hash: IKhtvjcDMjYl75uud2JW+qAWuI5tUTqHfvpFiiJIGKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:72:73:a2:83:55:15:82:37:8c:24:09:8c:bc:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f Validity Not Before: Feb 9 10:00:29 2026 GMT Not After : Feb 10 10:00:29 2026 GMT Subject: CN=817f3892de39d98a9d3659cfcaefe5ada106a78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ed:47:a0:8a:60:83:e3:99:15:7f:c7:53:18: f1:7e:af:a2:c8:b2:3f:5d:7a:07:9c:bd:36:3d:4e: 3b:1a:1d:32:18:8d:27:07:56:7d:e3:01:32:23:b0: 96:86:3a:1b:71:db:38:79:c7:77:a9:51:5d:a6:2f: d0:61:72:ca:10:44:7a:de:88:1b:f5:c5:05:3c:13: 37:56:1d:2a:c8:7b:58:46:92:fe:c3:28:c0:d3:e1: 4a:a1:e7:82:24:de:94:56:6d:f6:ac:8b:a6:18:bb: 00:28:c8:0a:d8:fb:21:fc:ea:32:c0:a8:7d:20:fa: 10:d8:17:a3:6a:bd:22:84:4c:4b:c7:9a:af:3c:15: c9:82:c7:b1:b3:c1:dc:aa:48:61:20:75:f6:36:ec: 56:91:1a:2d:f6:a5:34:ac:2d:76:da:2c:dd:0f:4e: 02:9b:4d:d0:0c:05:35:e8:6d:f2:da:3a:16:86:4c: eb:57:c3:90:45:3c:e1:ef:1f:11:a2:3b:fa:33:dd: ab:c1:04:2a:d1:c5:64:74:83:47:be:d9:ae:c8:9b: 1d:9c:d2:0b:97:7b:f9:ef:7d:56:cd:2d:cc:e6:b0: 7e:06:b6:39:58:31:2b:df:6a:4a:fe:27:88:16:ea: 61:e3:01:8d:fe:02:8b:b9:23:71:2f:5f:ae:6c:26: ff:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7F:38:92:DE:39:D9:8A:9D:36:59:CF:CA:EF:E5:AD:A1:06:A7:8E X509v3 Authority Key Identifier: keyid:63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8d:0c:cd:27:fd:52:e7:6f:f0:d3:70:2e:4c:69:63:13:42: 63:1b:26:92:38:75:f3:3a:a4:4a:ec:b5:a0:f1:1a:5c:0b:24: c2:94:fa:a2:93:2e:09:aa:59:79:f5:34:60:bc:ae:b6:b4:b7: fe:e1:73:51:8d:fd:5c:8c:9b:1b:11:5e:80:aa:72:51:d2:8c: c4:02:3a:a0:64:6d:79:56:04:f3:a2:f8:39:c3:b8:81:46:37: 43:ff:ad:8b:a1:f8:85:de:9f:4c:4f:ec:5c:21:80:53:42:32: 22:da:0a:d0:e2:c0:c5:a0:66:9e:26:10:f0:ae:24:c4:84:ca: 15:2a:c0:6e:4b:c4:8a:08:79:3b:b6:9e:01:c3:b5:1a:57:2e: 64:97:bb:d5:9c:e9:60:2f:68:75:8c:64:4c:f3:c4:29:f3:e1: bf:2a:a9:6b:29:21:85:51:67:0f:32:2e:a8:8a:09:a5:a5:11: c4:97:ba:91:bb:2f:cc:64:ab:7a:fc:de:75:d6:d1:39:7c:f9: 30:8c:52:be:a4:eb:d4:2e:53:87:6b:cf:6e:cc:d8:d5:dc:81: 4d:03:e9:7f:91:41:0b:e3:f2:55:18:f7:41:25:93:3c:35:e3: 88:c2:5e:5d:e7:df:a4:c5:76:e5:68:ef:84:9f:fe:79:24:18: 0c:c0:6c:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2HJzooNVFYI3jCQJjLy0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzODVlYmVlNDM2M2Y1YWQ5MzM2NmNiMjhmNDJmZDViNzI3 ODNlNmYwHhcNMjYwMjA5MTAwMDI5WhcNMjYwMjEwMTAwMDI5WjAzMTEwLwYDVQQD Eyg4MTdmMzg5MmRlMzlkOThhOWQzNjU5Y2ZjYWVmZTVhZGExMDZhNzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+1HoIpgg+OZFX/HUxjxfq+iyLI/ XXoHnL02PU47Gh0yGI0nB1Z94wEyI7CWhjobcds4ecd3qVFdpi/QYXLKEER63ogb 9cUFPBM3Vh0qyHtYRpL+wyjA0+FKoeeCJN6UVm32rIumGLsAKMgK2Psh/OoywKh9 IPoQ2Bejar0ihExLx5qvPBXJgsexs8HcqkhhIHX2NuxWkRot9qU0rC122izdD04C m03QDAU16G3y2joWhkzrV8OQRTzh7x8Rojv6M92rwQQq0cVkdINHvtmuyJsdnNIL l3v5731WzS3M5rB+BrY5WDEr32pK/ieIFuph4wGN/gKLuSNxL1+ubCb/KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIF/OJLeOdmKnTZZz8rv5a2hBqeOMB8GA1UdIwQY MBaAFGOF6+5DY/WtkzZsso9C/VtyeD5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTRYcjdrTmo5YTJUTm15eWowTDlXM0o0UG04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjJjZDctMzNmMi00NmEyLThiM2Ut N2Q3NGJlNmFlNTU4LzEvWTRYcjdrTmo5YTJUTm15eWowTDlXM0o0UG04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hNjJjZDctMzNmMi00NmEyLThiM2UtN2Q3NGJlNmFlNTU4 LzEvWTRYcjdrTmo5YTJUTm15eWowTDlXM0o0UG04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfY0MzSf9 Uudv8NNwLkxpYxNCYxsmkjh18zqkSuy1oPEaXAskwpT6opMuCapZefU0YLyutrS3 /uFzUY39XIybGxFegKpyUdKMxAI6oGRteVYE86L4OcO4gUY3Q/+ti6H4hd6fTE/s XCGAU0IyItoK0OLAxaBmniYQ8K4kxITKFSrAbkvEigh5O7aeAcO1GlcuZJe71Zzp YC9odYxkTPPEKfPhvyqpaykhhVFnDzIuqIoJpaURxJe6kbsvzGSrevzeddbROXz5 MIxSvqTr1C5Th2vPbszY1dyBTQPpf5FBC+PyVRj3QSWTPDXjiMJeXeffpMV25Wjv hJ/+eSQYDMBs+A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:26 2026 by rpki-client