This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft File: Y42aUATFktCTzImw2QdS4nnVGFQ.mft (raw, json) Hash identifier: gjkVhCdr017znqvk/rafDD7bmg3xiPFEjpz4opxAwzA= Subject key identifier: 53:54:2A:65:08:9A:84:20:4C:B6:58:CF:57:96:F1:99:A9:BB:48:84 Authority key identifier: 63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54 Certificate issuer: /CN=638d9a5004c592d093cc89b0d90752e279d51854 Certificate serial: 019C43C760749B27C4ED2D58D7D4D28E5BF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 19:01:05 +0000 Manifest this update: Mon 09 Feb 2026 19:01:05 +0000 Manifest next update: Tue 10 Feb 2026 19:01:05 +0000 Files and hashes: 1: Y42aUATFktCTzImw2QdS4nnVGFQ.crl (hash: ZJXCniTAd/jjTlTBIQITZiT+3ppfgO9TaGzNePy13dE=) 2: yh8RCY-bj175I6qO1y_qoa8Z7Jc.roa (hash: 4zdPWYLlDQUfMdRZQkA+GGAtm8jeXR0HD9R4ibPVvfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:60:74:9b:27:c4:ed:2d:58:d7:d4:d2:8e:5b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=638d9a5004c592d093cc89b0d90752e279d51854 Validity Not Before: Feb 9 19:01:05 2026 GMT Not After : Feb 10 19:01:05 2026 GMT Subject: CN=53542a65089a84204cb658cf5796f199a9bb4884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:55:b6:6d:24:8f:f7:cd:f5:8d:26:07:18:c2: af:46:c3:2c:27:c0:06:78:7f:67:4d:cb:52:f3:7b: 36:96:af:ff:84:14:a1:30:c0:46:a7:ce:d6:33:ac: 51:12:0d:63:59:50:13:ef:6d:1e:47:4a:40:81:99: 60:a5:a7:46:e4:e6:e6:c7:9d:19:83:24:bf:39:b5: e0:39:be:50:c0:5a:9b:59:88:65:44:25:20:f0:f3: 81:78:1d:37:78:17:e0:5b:65:d5:41:5d:3d:cf:63: 23:c5:6b:ce:86:f0:e3:b1:dd:ab:e2:05:e6:00:80: da:a7:0d:6b:8e:98:bd:54:1c:b0:48:70:68:45:ae: 52:0a:90:07:6d:5d:25:78:3c:05:93:70:12:65:12: 4d:84:01:99:74:0e:1c:eb:09:cf:f2:c9:03:f2:a7: ab:ec:0d:a8:be:32:14:c6:60:7a:90:cd:d1:bd:8d: 12:18:b7:44:8e:5c:ca:e4:2b:ea:52:4a:0a:c2:e5: 8c:65:23:eb:66:23:a9:24:41:7b:62:c5:f5:60:82: 43:af:2f:d0:f0:c3:dd:43:ac:c7:de:0e:d6:94:a7: a2:ae:28:82:a6:4f:7d:7b:e9:31:93:bd:92:5f:bd: f9:d2:f7:54:1b:43:2a:35:5c:64:24:40:ea:14:a1: e1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:54:2A:65:08:9A:84:20:4C:B6:58:CF:57:96:F1:99:A9:BB:48:84 X509v3 Authority Key Identifier: keyid:63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:35:3c:ad:bb:a6:00:fd:eb:b4:99:29:5a:b6:24:57:4c:ac: c3:82:26:d2:f4:ed:96:1d:82:4f:3b:ee:68:4b:a2:4c:dd:c5: bf:e1:71:79:2c:71:e3:21:5f:fe:95:d6:c7:94:62:03:8b:13: a6:7d:1f:63:8d:6a:65:8f:68:2b:c5:53:c4:8c:7c:33:81:d3: b5:bb:60:7e:4b:b7:56:e3:a4:93:d3:09:9b:61:8b:2a:58:61: c6:8b:6d:64:45:ed:1e:4d:48:14:7b:ce:d1:54:8f:6e:4c:69: d5:9a:d0:1a:1a:68:3a:d7:1c:86:84:06:d0:07:ab:bf:57:e7: b5:72:66:41:28:21:13:1e:08:a8:13:05:06:e7:2d:32:77:f0: 02:13:33:d7:19:f2:31:d5:1d:ba:f1:97:11:d1:b4:2f:c7:4c: 04:50:00:fb:e8:78:96:58:81:49:3f:de:11:75:b8:81:8c:19: 62:cc:7d:a1:4a:1c:84:1e:81:3c:9c:7f:56:53:38:5d:50:79: d1:12:7a:09:5d:72:11:ab:8f:54:d4:c0:47:ad:aa:54:2c:89: 1e:96:9b:ef:08:43:7b:31:ae:53:21:c7:3b:0b:94:b8:bf:59: 11:93:f4:58:9a:98:98:bf:67:1d:d7:ea:a7:44:21:99:5f:ec: da:48:42:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDx2B0myfE7S1Y19TSjlv2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzOGQ5YTUwMDRjNTkyZDA5M2NjODliMGQ5MDc1MmUyNzlk NTE4NTQwHhcNMjYwMjA5MTkwMTA1WhcNMjYwMjEwMTkwMTA1WjAzMTEwLwYDVQQD Eyg1MzU0MmE2NTA4OWE4NDIwNGNiNjU4Y2Y1Nzk2ZjE5OWE5YmI0ODg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFW2bSSP9831jSYHGMKvRsMsJ8AG eH9nTctS83s2lq//hBShMMBGp87WM6xREg1jWVAT720eR0pAgZlgpadG5Obmx50Z gyS/ObXgOb5QwFqbWYhlRCUg8POBeB03eBfgW2XVQV09z2MjxWvOhvDjsd2r4gXm AIDapw1rjpi9VBywSHBoRa5SCpAHbV0leDwFk3ASZRJNhAGZdA4c6wnP8skD8qer 7A2ovjIUxmB6kM3RvY0SGLdEjlzK5CvqUkoKwuWMZSPrZiOpJEF7YsX1YIJDry/Q 8MPdQ6zH3g7WlKeiriiCpk99e+kxk72SX7350vdUG0MqNVxkJEDqFKHhDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNUKmUImoQgTLZYz1eW8Zmpu0iEMB8GA1UdIwQY MBaAFGONmlAExZLQk8yJsNkHUuJ51RhUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTQyYVVBVEZrdENUekltdzJRZFM0bm5WR0ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wY2Y2ZDctZDhlZi00NGE4LWFhMDct Nzc2OGQ0ZmJkY2QzLzEvWTQyYVVBVEZrdENUekltdzJRZFM0bm5WR0ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8wY2Y2ZDctZDhlZi00NGE4LWFhMDctNzc2OGQ0ZmJkY2Qz LzEvWTQyYVVBVEZrdENUekltdzJRZFM0bm5WR0ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTU8rbum AP3rtJkpWrYkV0ysw4Im0vTtlh2CTzvuaEuiTN3Fv+FxeSxx4yFf/pXWx5RiA4sT pn0fY41qZY9oK8VTxIx8M4HTtbtgfku3VuOkk9MJm2GLKlhhxottZEXtHk1IFHvO 0VSPbkxp1ZrQGhpoOtcchoQG0Aerv1fntXJmQSghEx4IqBMFBuctMnfwAhMz1xny MdUduvGXEdG0L8dMBFAA++h4lliBST/eEXW4gYwZYsx9oUochB6BPJx/VlM4XVB5 0RJ6CV1yEauPVNTAR62qVCyJHpab7whDezGuUyHHOwuUuL9ZEZP0WJqYmL9nHdfq p0QhmV/s2khCuw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:01 2026 by rpki-client