This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft File: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft (raw, json) Hash identifier: dIhRkCLmPDlLOd6FxgQczF5KkUvHfkb5TAbLmRW0pVE= Subject key identifier: 14:19:23:42:98:AD:20:9A:B5:46:5C:DD:12:BA:E1:DE:72:91:B3:B0 Authority key identifier: 60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55 Certificate issuer: /CN=60c7647b728f7c59f613e89047542fa7855fa355 Certificate serial: 019C43FDC4A0B20734D272DA6325018F63CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft Manifest number: 0DF2 Signing time: Mon 09 Feb 2026 20:00:30 +0000 Manifest this update: Mon 09 Feb 2026 20:00:30 +0000 Manifest next update: Tue 10 Feb 2026 20:00:30 +0000 Files and hashes: 1: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl (hash: gWKxbscB4G2NAVGwWqmH1l+gU1WjRonJWpv354HrOc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:c4:a0:b2:07:34:d2:72:da:63:25:01:8f:63:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60c7647b728f7c59f613e89047542fa7855fa355 Validity Not Before: Feb 9 20:00:30 2026 GMT Not After : Feb 10 20:00:30 2026 GMT Subject: CN=1419234298ad209ab5465cdd12bae1de7291b3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:78:0f:c3:8d:db:fc:c9:dc:f9:dd:f8:3f:1d: d9:f8:16:f6:30:ea:24:d3:d2:27:85:1a:84:aa:3a: 27:74:d3:03:b8:cb:f3:c2:7d:d7:6f:83:ff:c5:d2: e7:02:3f:d9:ac:e6:c2:c6:43:75:9f:3b:85:a8:d9: ac:a5:6b:1c:85:12:86:ce:05:13:3b:9b:29:d7:77: 63:b3:b3:17:aa:52:3c:1d:2f:7e:b0:20:d6:da:25: 7e:d7:cd:0b:c7:83:c5:57:e8:4f:ea:7c:30:ef:57: 32:19:02:d2:72:45:f7:6d:93:fc:e6:52:02:b8:f3: 20:0d:93:ae:ce:f4:20:40:09:af:0d:2c:1d:ee:86: b1:33:ef:47:b7:b5:80:a2:01:e2:18:ea:4d:0e:b5: 81:ba:cc:28:bc:a2:9f:fd:f8:1b:70:3c:a8:2d:41: b7:23:7a:42:42:94:e0:68:0a:37:9b:e5:95:e7:cb: 6b:b4:e5:2e:fa:a6:cb:f8:6a:9c:25:45:4b:66:5a: bc:cc:4f:70:ec:5b:7d:1c:93:62:38:2d:d1:d5:7d: 2d:16:46:1f:b7:37:33:ae:ca:70:e5:21:f8:e9:ef: 94:71:95:73:7c:44:88:70:10:89:d8:23:66:f1:3d: 3b:8b:a9:85:a2:58:3d:14:b8:8a:0c:a1:ce:3a:3d: bc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:19:23:42:98:AD:20:9A:B5:46:5C:DD:12:BA:E1:DE:72:91:B3:B0 X509v3 Authority Key Identifier: keyid:60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:68:23:78:ef:a2:50:d8:05:97:95:65:72:a3:de:b4:09:2b: c3:b7:27:31:9a:0e:2e:3e:5e:0b:ad:7b:1b:ec:63:dc:d0:8d: 5a:ba:bc:48:5e:d1:82:b1:79:98:77:ca:05:32:25:36:b4:25: 1f:fc:63:f0:17:8a:4b:c5:87:f8:79:23:80:1f:78:eb:75:1c: 96:c3:8c:59:10:90:2f:ae:a3:91:0c:6b:bb:08:e4:c3:6d:f6: c8:dc:e9:3f:5c:6a:7a:ee:41:54:9c:3f:29:c2:b4:f4:ae:69: d1:94:84:ef:14:ca:f2:7e:9c:a7:87:9f:d7:c0:e0:59:0a:66: 41:da:40:9a:89:05:d6:77:75:3d:40:2f:d7:04:e2:e0:6d:6c: 7b:30:ee:de:49:f0:c0:bf:ad:45:23:11:1c:9a:68:d6:bd:d2: d1:65:ef:e1:0c:09:a6:49:90:30:7c:9a:9c:7b:45:13:fa:be: 32:a6:9f:39:54:be:38:75:2c:c5:38:3d:fb:e4:a2:02:d5:9d: 23:91:45:66:2f:ca:82:c1:90:cd:56:f2:a5:69:76:30:d2:36: 67:5e:a4:a7:a4:69:c2:09:e6:b2:19:ef:ed:e0:72:99:71:98: b7:d2:59:bc:8a:41:ed:dc:ef:8f:57:91:f2:24:d9:a3:e7:0b: b3:7d:3f:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/cSgsgc00nLaYyUBj2PMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYzc2NDdiNzI4ZjdjNTlmNjEzZTg5MDQ3NTQyZmE3ODU1 ZmEzNTUwHhcNMjYwMjA5MjAwMDMwWhcNMjYwMjEwMjAwMDMwWjAzMTEwLwYDVQQD EygxNDE5MjM0Mjk4YWQyMDlhYjU0NjVjZGQxMmJhZTFkZTcyOTFiM2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXgPw43b/Mnc+d34Px3Z+Bb2MOok 09InhRqEqjondNMDuMvzwn3Xb4P/xdLnAj/ZrObCxkN1nzuFqNmspWschRKGzgUT O5sp13djs7MXqlI8HS9+sCDW2iV+180Lx4PFV+hP6nww71cyGQLSckX3bZP85lIC uPMgDZOuzvQgQAmvDSwd7oaxM+9Ht7WAogHiGOpNDrWBuswovKKf/fgbcDyoLUG3 I3pCQpTgaAo3m+WV58trtOUu+qbL+GqcJUVLZlq8zE9w7Ft9HJNiOC3R1X0tFkYf tzczrspw5SH46e+UcZVzfESIcBCJ2CNm8T07i6mFolg9FLiKDKHOOj28pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQZI0KYrSCatUZc3RK64d5ykbOwMB8GA1UdIwQY MBaAFGDHZHtyj3xZ9hPokEdUL6eFX6NVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU1ka2UzS1BmRm4yRS1pUVIxUXZwNFZmbzFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wZmY2OTAtODE2Ni00M2IyLTk4YTEt YTlkZTRhMzFmZTExLzEvWU1ka2UzS1BmRm4yRS1pUVIxUXZwNFZmbzFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wZmY2OTAtODE2Ni00M2IyLTk4YTEtYTlkZTRhMzFmZTEx LzEvWU1ka2UzS1BmRm4yRS1pUVIxUXZwNFZmbzFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmgjeO+i UNgFl5VlcqPetAkrw7cnMZoOLj5eC617G+xj3NCNWrq8SF7RgrF5mHfKBTIlNrQl H/xj8BeKS8WH+HkjgB9463UclsOMWRCQL66jkQxruwjkw232yNzpP1xqeu5BVJw/ KcK09K5p0ZSE7xTK8n6cp4ef18DgWQpmQdpAmokF1nd1PUAv1wTi4G1sezDu3knw wL+tRSMRHJpo1r3S0WXv4QwJpkmQMHyanHtFE/q+MqafOVS+OHUsxTg9++SiAtWd I5FFZi/KgsGQzVbypWl2MNI2Z16kp6Rpwgnmshnv7eBymXGYt9JZvIpB7dzvj1eR 8iTZo+cLs30/7A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:47 2026 by rpki-client