This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json) Hash identifier: rlFsZE7n5GO/sIIY4dKdlqS289erCqUNO77xevd/BvM= Subject key identifier: DD:24:41:9C:0E:3A:43:D8:D3:57:1B:25:4C:E1:D3:64:CA:61:19:F2 Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1 Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1 Certificate serial: 019C43904F36477B460207358F7870B83700 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft Manifest number: 0FD6 Signing time: Mon 09 Feb 2026 18:00:56 +0000 Manifest this update: Mon 09 Feb 2026 18:00:56 +0000 Manifest next update: Tue 10 Feb 2026 18:00:56 +0000 Files and hashes: 1: txC54j_S7HZrQJFinO7KZYt-RYQ.roa (hash: Brb/AGg54bXB31WxKutqNfmuYrMVTPjvpdr/gdDFZQ0=) 2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: iOwudqzvuoK0Kzf0EzBemxrhA2n4szcy2QlTmZnEQPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:4f:36:47:7b:46:02:07:35:8f:78:70:b8:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1 Validity Not Before: Feb 9 18:00:56 2026 GMT Not After : Feb 10 18:00:56 2026 GMT Subject: CN=dd24419c0e3a43d8d3571b254ce1d364ca6119f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:47:3e:d2:9a:0e:2a:8f:bb:fb:dd:1f:e4:21: 85:2e:c8:42:08:09:5e:68:00:f2:09:df:c1:79:fa: 68:cc:59:fb:84:84:19:49:2e:c5:9d:ba:ee:06:f5: cb:90:f9:ad:2e:bb:0a:fb:ee:11:2c:bf:82:2c:d5: 0e:2d:72:f8:ca:cd:69:61:22:9c:86:a4:49:5e:d9: e6:2a:11:c6:37:d5:36:db:33:23:f6:b0:50:08:a6: 5e:bc:b6:a2:24:97:8c:96:be:d2:03:5a:85:f5:23: 02:be:1e:78:f3:df:13:b3:87:af:84:8b:e9:c3:61: 87:c2:0b:1e:ed:2f:81:f4:03:b0:b6:83:6d:40:4c: 6f:d2:ce:9b:49:6e:e9:70:23:fa:05:29:26:54:20: f5:cd:98:20:80:0d:4c:6f:a4:7c:30:3b:ff:da:f7: 5b:ef:db:3b:63:81:6c:65:10:45:38:46:17:39:e2: 38:17:8a:a2:17:24:1e:e5:a9:06:9c:0e:13:62:69: 4d:37:e9:9d:6f:61:8a:32:ff:32:79:36:df:87:d5: 51:48:fb:9e:c3:c0:3d:a4:b8:7d:af:f1:2c:a7:0b: c0:4c:e3:51:e6:3d:0d:ce:74:de:65:b8:72:e8:85: ed:6b:c8:cd:90:4d:18:9b:cd:0f:f8:86:e4:26:52: 77:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:24:41:9C:0E:3A:43:D8:D3:57:1B:25:4C:E1:D3:64:CA:61:19:F2 X509v3 Authority Key Identifier: keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:87:05:68:ba:3f:dd:5d:e4:98:ba:2c:a1:a8:60:19:64:6e: 2c:4a:a7:31:4e:6d:d8:09:20:65:bc:24:01:66:3a:6b:47:92: 36:68:11:47:73:1d:e7:7e:09:6c:a5:57:9e:6a:b0:84:78:88: df:f1:ce:79:42:1c:a7:8f:de:23:5c:2c:79:4d:59:b9:6d:ad: c9:dc:b4:61:7c:3d:e0:94:41:c2:d2:7e:9c:dc:ed:e1:24:a4: 22:57:54:bf:bc:26:6a:69:fd:a7:3b:11:1a:2f:1e:2d:72:c2: 8c:3e:9b:ea:2f:ef:c8:c0:3a:59:4b:f6:62:9e:21:43:f5:6a: 5e:61:9e:e0:6d:00:18:f7:84:da:de:b9:1a:27:ac:c3:0e:b5: d9:9e:95:35:03:57:0c:36:dc:de:65:6e:f4:eb:96:52:f2:59: 34:3a:a3:53:6c:54:c3:22:85:76:48:a2:35:0b:5d:6a:a0:b0: ba:7b:4d:2f:71:b9:b1:1e:63:38:18:23:8c:4e:13:da:74:db: f1:c6:79:bb:32:65:43:4a:c7:1d:f2:4a:ec:58:89:09:1b:7f: 1e:ba:96:02:b1:e7:92:4d:91:ca:db:54:e8:8b:41:b3:31:f3: 72:c4:be:1a:a3:30:82:c1:16:89:dc:4b:b5:33:4b:b5:97:4b: 51:6f:0a:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkE82R3tGAgc1j3hwuDcAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MzY3MDk4N2QwMWQ0MWVlMmI1NjQ2OThjODI3MWY1MGRl ZTRjZTEwHhcNMjYwMjA5MTgwMDU2WhcNMjYwMjEwMTgwMDU2WjAzMTEwLwYDVQQD EyhkZDI0NDE5YzBlM2E0M2Q4ZDM1NzFiMjU0Y2UxZDM2NGNhNjExOWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykc+0poOKo+7+90f5CGFLshCCAle aADyCd/BefpozFn7hIQZSS7FnbruBvXLkPmtLrsK++4RLL+CLNUOLXL4ys1pYSKc hqRJXtnmKhHGN9U22zMj9rBQCKZevLaiJJeMlr7SA1qF9SMCvh54898Ts4evhIvp w2GHwgse7S+B9AOwtoNtQExv0s6bSW7pcCP6BSkmVCD1zZgggA1Mb6R8MDv/2vdb 79s7Y4FsZRBFOEYXOeI4F4qiFyQe5akGnA4TYmlNN+mdb2GKMv8yeTbfh9VRSPue w8A9pLh9r/EspwvATONR5j0NznTeZbhy6IXta8jNkE0Ym80P+IbkJlJ3XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0kQZwOOkPY01cbJUzh02TKYRnyMB8GA1UdIwQY MBaAFMg2cJh9AdQe4rVkaYyCcfUN7kzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYt MmE2MGNjOThhOGQzLzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYtMmE2MGNjOThhOGQz LzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIcFaLo/ 3V3kmLosoahgGWRuLEqnMU5t2AkgZbwkAWY6a0eSNmgRR3Md534JbKVXnmqwhHiI 3/HOeUIcp4/eI1wseU1ZuW2tydy0YXw94JRBwtJ+nNzt4SSkIldUv7wmamn9pzsR Gi8eLXLCjD6b6i/vyMA6WUv2Yp4hQ/VqXmGe4G0AGPeE2t65Giesww612Z6VNQNX DDbc3mVu9OuWUvJZNDqjU2xUwyKFdkiiNQtdaqCwuntNL3G5sR5jOBgjjE4T2nTb 8cZ5uzJlQ0rHHfJK7FiJCRt/HrqWArHnkk2RyttU6ItBszHzcsS+GqMwgsEWidxL tTNLtZdLUW8KTA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:48 2026 by rpki-client