This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft File: 0YpW1qFOZ2P8dzOopflDHbdWjLU.mft (raw, json) Hash identifier: tgcxXd4SVmtJKbP0ID+logA++kYv5KK3qB9w8K/MAiE= Subject key identifier: D2:DE:A3:99:85:E6:0C:6F:05:A1:F7:56:29:57:D2:63:81:87:5F:FA Authority key identifier: D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5 Certificate issuer: /CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5 Certificate serial: 019C1E02F494848C14592CAC265D79B5B3BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft Manifest number: 1792 Signing time: Mon 02 Feb 2026 11:00:35 +0000 Manifest this update: Mon 02 Feb 2026 11:00:35 +0000 Manifest next update: Tue 03 Feb 2026 11:00:35 +0000 Files and hashes: 1: 0YpW1qFOZ2P8dzOopflDHbdWjLU.crl (hash: /g8cymxb3uit7jB5TzNJJO/NcCJFrR7OEPzKTXg85Q0=) 2: 1-BUCojs1oWaXAaxy03s5Db9MiJk.roa (hash: tiMBJlRoBCDWpjG2YxYym9l9MTTcSiD5be7NjPI5OEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:02:f4:94:84:8c:14:59:2c:ac:26:5d:79:b5:b3:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5 Validity Not Before: Feb 2 11:00:35 2026 GMT Not After : Feb 3 11:00:35 2026 GMT Subject: CN=d2dea39985e60c6f05a1f7562957d26381875ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e5:c4:cd:9c:11:08:ab:33:8f:81:6b:7f:1d: 3b:ad:1d:da:6b:bd:c0:37:c9:25:e7:89:8e:2d:81: bc:01:08:e7:6a:fa:27:80:32:3a:9d:e1:85:ff:1e: 67:3b:68:83:0d:3c:50:57:c4:b8:57:93:43:12:43: e5:b3:ef:81:02:49:ed:e7:76:36:8f:23:27:42:e1: 8c:b3:cd:99:91:04:c7:43:c6:fc:c9:5f:0d:2c:63: 38:84:2c:82:36:40:79:3b:8d:12:8d:a4:ad:c0:11: 78:a6:f8:48:76:8e:98:ac:de:f3:98:fe:f8:a7:17: 7c:d4:1f:d6:e8:0c:e7:f5:31:01:2b:1c:b2:53:70: 93:ca:fe:ce:87:4b:08:7d:e1:00:25:f0:f6:8d:7e: 18:06:a7:01:b5:22:a5:7e:de:8a:b0:31:52:98:ea: d3:10:3b:7a:91:5f:92:60:5c:42:78:34:a4:df:04: ce:68:1f:fd:0f:e8:e3:47:74:5c:71:4c:9b:94:5c: 75:a4:78:41:91:5d:60:a8:6c:be:bf:a9:b6:18:07: c0:25:33:97:dc:e9:e0:0b:fd:81:07:57:9a:76:1d: 6a:5c:b7:8a:c2:39:02:76:51:80:82:be:34:fe:f6: 2e:f8:0f:7a:43:69:25:26:cd:37:83:fc:7e:0d:91: 7a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DE:A3:99:85:E6:0C:6F:05:A1:F7:56:29:57:D2:63:81:87:5F:FA X509v3 Authority Key Identifier: keyid:D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:13:c1:ed:85:48:a9:e3:e1:ed:22:57:6a:69:52:d0:78:af: de:be:df:2d:02:33:ca:d2:23:7d:8e:dc:c7:b8:cb:75:55:93: f4:aa:e0:62:3f:5c:d7:66:9a:b3:84:16:b3:f6:15:cd:80:44: 7e:4c:00:63:82:60:3e:ae:4e:42:bf:b9:2c:24:82:51:44:9a: 12:bc:fe:59:c4:55:cb:72:28:89:0b:65:49:9d:43:e7:97:24: 76:ec:a6:95:04:4e:87:ff:0b:c5:8f:47:10:53:f0:04:29:85: 97:b6:9d:96:a7:24:17:3a:c9:92:a1:18:18:8f:95:db:60:d4: b5:48:7f:c3:d2:e1:29:a1:1b:a5:86:2a:d2:5e:7b:c9:60:7a: 10:d6:be:64:cc:e3:28:2e:ed:10:46:f2:a4:9f:7b:98:e7:cf: ed:be:7b:5e:e1:1d:ff:8b:3c:8a:4c:af:a6:e6:65:6c:e5:a4: 99:a0:b0:14:ae:83:34:b2:db:fc:2c:a3:ea:e4:17:86:49:71: a0:88:18:89:85:db:66:5e:0d:29:4e:66:da:0a:83:29:b2:14: 76:2c:75:78:5d:50:26:f5:a7:70:1d:06:fc:c5:e9:26:e0:72: fa:d6:47:e8:1f:b5:6f:9b:22:82:2c:bb:63:fa:8b:ff:3d:f1: 34:39:32:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZweAvSUhIwUWSysJl15tbO+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOGE1NmQ2YTE0ZTY3NjNmYzc3MzNhOGE1Zjk0MzFkYjc1 NjhjYjUwHhcNMjYwMjAyMTEwMDM1WhcNMjYwMjAzMTEwMDM1WjAzMTEwLwYDVQQD EyhkMmRlYTM5OTg1ZTYwYzZmMDVhMWY3NTYyOTU3ZDI2MzgxODc1ZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uXEzZwRCKszj4Frfx07rR3aa73A N8kl54mOLYG8AQjnavongDI6neGF/x5nO2iDDTxQV8S4V5NDEkPls++BAknt53Y2 jyMnQuGMs82ZkQTHQ8b8yV8NLGM4hCyCNkB5O40SjaStwBF4pvhIdo6YrN7zmP74 pxd81B/W6Azn9TEBKxyyU3CTyv7Oh0sIfeEAJfD2jX4YBqcBtSKlft6KsDFSmOrT EDt6kV+SYFxCeDSk3wTOaB/9D+jjR3RccUyblFx1pHhBkV1gqGy+v6m2GAfAJTOX 3OngC/2BB1eadh1qXLeKwjkCdlGAgr40/vYu+A96Q2klJs03g/x+DZF6BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLeo5mF5gxvBaH3VilX0mOBh1/6MB8GA1UdIwQY MBaAFNGKVtahTmdj/HczqKX5Qx23Voy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mMmVjNTMtMjIzYi00YjNiLTlkMjAt Y2VlYzVhNzM5YzcyLzEvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9mMmVjNTMtMjIzYi00YjNiLTlkMjAtY2VlYzVhNzM5Yzcy LzEvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBPB7YVI qePh7SJXamlS0Hiv3r7fLQIzytIjfY7cx7jLdVWT9KrgYj9c12aas4QWs/YVzYBE fkwAY4JgPq5OQr+5LCSCUUSaErz+WcRVy3IoiQtlSZ1D55ckduymlQROh/8LxY9H EFPwBCmFl7adlqckFzrJkqEYGI+V22DUtUh/w9LhKaEbpYYq0l57yWB6ENa+ZMzj KC7tEEbypJ97mOfP7b57XuEd/4s8ikyvpuZlbOWkmaCwFK6DNLLb/Cyj6uQXhklx oIgYiYXbZl4NKU5m2gqDKbIUdix1eF1QJvWncB0G/MXpJuBy+tZH6B+1b5sigiy7 Y/qL/z3xNDkyRg== -----END CERTIFICATE-----Generated at Mon Feb 2 15:48:04 2026 by rpki-client