This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft File: YP9t9Egm-fEGScV46sQWFnBSlCc.mft (raw, json) Hash identifier: 2R2dZHTeqOh6i3/VsOmgKKpNRNEXwibZIEMTlUbwdyU= Subject key identifier: 20:01:74:3A:50:E4:6E:A7:71:70:6A:11:C9:36:C0:EB:98:6C:F3:FF Authority key identifier: 60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27 Certificate issuer: /CN=60ff6df44826f9f10649c578eac4161670529427 Certificate serial: 019C43591267DBCE50E3620CB1CF1EE59833 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 17:00:36 +0000 Manifest this update: Mon 09 Feb 2026 17:00:36 +0000 Manifest next update: Tue 10 Feb 2026 17:00:36 +0000 Files and hashes: 1: YP9t9Egm-fEGScV46sQWFnBSlCc.crl (hash: eH57VpMeog46zEKn8K6EDxzUUi95t1w/dWfJcVgXFHA=) 2: bi5rESVj86GmUsAdmL-jFDYQj7Q.roa (hash: OC/uMHVwkkjFxo7Q7u2D9vo2U1CM0p48Ycc2AmRTk6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:12:67:db:ce:50:e3:62:0c:b1:cf:1e:e5:98:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60ff6df44826f9f10649c578eac4161670529427 Validity Not Before: Feb 9 17:00:36 2026 GMT Not After : Feb 10 17:00:36 2026 GMT Subject: CN=2001743a50e46ea771706a11c936c0eb986cf3ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:35:2f:b1:16:d5:a0:d6:3f:e8:44:8f:92:63: aa:d6:ab:64:f7:81:6b:5b:e5:e1:92:fa:72:aa:16: 41:9c:55:78:b7:19:b2:df:43:e2:fc:43:30:99:15: 58:2f:0f:f8:96:02:de:b1:d6:98:11:16:fe:8d:b4: 88:16:ec:3a:68:b3:74:68:cb:36:bb:d7:e1:13:9e: 56:d4:56:eb:a3:1b:4a:c5:39:5e:3e:d4:53:19:b7: 37:7c:a3:5a:a3:54:c0:4f:b7:2a:a2:98:c1:77:6d: 43:a5:10:c2:3c:2a:07:56:86:26:45:1e:9b:1b:e3: cd:24:ba:2c:86:94:96:4f:0f:46:38:76:7e:a4:9f: 44:16:5f:11:45:41:20:ee:e0:be:a7:df:ce:2e:50: b7:ca:01:03:5c:bb:6e:29:40:5b:df:d1:0c:61:8a: a2:fc:17:47:b1:24:7a:4b:8a:e3:43:6e:c7:23:da: e3:9f:62:60:9b:1a:0d:c8:d8:04:97:f1:23:90:26: 4d:63:c7:25:85:d7:3b:59:44:0f:db:7d:81:8a:80: 86:d0:0b:a3:ab:62:d5:3d:ec:0e:43:dc:e7:81:1e: f1:ba:e0:1d:c4:91:74:1a:64:71:bc:90:f8:d6:3a: 93:b3:1e:de:9c:d8:ad:4a:0c:fa:89:64:a1:12:b3: ed:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:01:74:3A:50:E4:6E:A7:71:70:6A:11:C9:36:C0:EB:98:6C:F3:FF X509v3 Authority Key Identifier: keyid:60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:97:7a:93:a3:5d:4c:e6:6a:59:e9:d0:9f:49:d7:ba:61:11: 70:03:11:1d:2b:5f:a0:e4:62:c6:ef:7c:fc:0d:cd:cc:88:be: ac:58:f2:f2:0e:1c:06:11:12:aa:b3:66:dc:f3:d4:75:ff:b8: 92:bb:e3:66:19:5d:e6:bc:30:a0:50:4e:e5:84:8b:87:ac:c3: a5:16:90:42:7b:5b:4b:cd:0e:6f:3d:7d:48:9c:51:e5:56:6d: 6b:34:dc:95:5a:2e:02:0f:de:a3:a0:db:26:ec:ca:97:a4:25: f1:f9:b3:49:d8:4b:1a:cf:e3:fe:3e:ae:a2:31:bb:e2:24:a6: 91:0e:01:d5:66:7d:a1:17:30:0c:fe:79:cf:38:d2:4e:bb:ec: 34:81:66:87:67:c1:03:97:3d:52:a5:40:75:d9:d1:52:6f:7d: dc:c8:34:e2:81:f7:99:5d:e1:19:d4:d0:26:f8:f9:3f:a5:fc: af:85:23:9e:c3:52:ec:ed:f7:c1:db:49:25:c6:f4:41:6d:5c: 3a:65:ba:e7:64:4f:68:b9:5f:40:eb:2f:39:7e:a1:68:79:6e: 07:55:1a:ad:b5:b9:bd:a5:32:09:18:e3:fc:d9:69:32:f7:4c: 75:37:25:44:60:1c:17:a2:94:d3:ef:24:c1:f6:c0:17:ac:3c: 05:12:f3:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWRJn285Q42IMsc8e5ZgzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmY2ZGY0NDgyNmY5ZjEwNjQ5YzU3OGVhYzQxNjE2NzA1 Mjk0MjcwHhcNMjYwMjA5MTcwMDM2WhcNMjYwMjEwMTcwMDM2WjAzMTEwLwYDVQQD EygyMDAxNzQzYTUwZTQ2ZWE3NzE3MDZhMTFjOTM2YzBlYjk4NmNmM2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujUvsRbVoNY/6ESPkmOq1qtk94Fr W+XhkvpyqhZBnFV4txmy30Pi/EMwmRVYLw/4lgLesdaYERb+jbSIFuw6aLN0aMs2 u9fhE55W1FbroxtKxTlePtRTGbc3fKNao1TAT7cqopjBd21DpRDCPCoHVoYmRR6b G+PNJLoshpSWTw9GOHZ+pJ9EFl8RRUEg7uC+p9/OLlC3ygEDXLtuKUBb39EMYYqi /BdHsSR6S4rjQ27HI9rjn2JgmxoNyNgEl/EjkCZNY8clhdc7WUQP232BioCG0Auj q2LVPewOQ9zngR7xuuAdxJF0GmRxvJD41jqTsx7enNitSgz6iWShErPt5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCABdDpQ5G6ncXBqEck2wOuYbPP/MB8GA1UdIwQY MBaAFGD/bfRIJvnxBknFeOrEFhZwUpQnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVA5dDlFZ20tZkVHU2NWNDZzUVdGbkJTbENjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mZWEyNGItOTg0Yy00NWYyLTgwNDUt OWE5NWNmODIzZjliLzEvWVA5dDlFZ20tZkVHU2NWNDZzUVdGbkJTbENjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mZWEyNGItOTg0Yy00NWYyLTgwNDUtOWE5NWNmODIzZjli LzEvWVA5dDlFZ20tZkVHU2NWNDZzUVdGbkJTbENjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJd6k6Nd TOZqWenQn0nXumERcAMRHStfoORixu98/A3NzIi+rFjy8g4cBhESqrNm3PPUdf+4 krvjZhld5rwwoFBO5YSLh6zDpRaQQntbS80Obz19SJxR5VZtazTclVouAg/eo6Db JuzKl6Ql8fmzSdhLGs/j/j6uojG74iSmkQ4B1WZ9oRcwDP55zzjSTrvsNIFmh2fB A5c9UqVAddnRUm993Mg04oH3mV3hGdTQJvj5P6X8r4UjnsNS7O33wdtJJcb0QW1c OmW652RPaLlfQOsvOX6haHluB1UarbW5vaUyCRjj/NlpMvdMdTclRGAcF6KU0+8k wfbAF6w8BRLzUw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:45:07 2026 by rpki-client