This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft File: YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft (raw, json) Hash identifier: doUe5TORsIp8R+bVohLiDK6KR7FU7pmudUdht4wYv1E= Subject key identifier: 81:D9:55:10:F6:DB:95:B1:03:12:A9:2C:1D:86:0A:FD:05:CD:B8:84 Authority key identifier: 63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB Certificate issuer: /CN=63062302b438592376c4264f49dc5e673edb2cfb Certificate serial: 019C4134999118184412772E85B73119C834 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft Manifest number: 0BF9 Signing time: Mon 09 Feb 2026 07:01:32 +0000 Manifest this update: Mon 09 Feb 2026 07:01:32 +0000 Manifest next update: Tue 10 Feb 2026 07:01:32 +0000 Files and hashes: 1: YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl (hash: 8Hsj7lg7z2Kiv1YRTHYNh9wh7UQz22MYdM0srcoa//s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:99:91:18:18:44:12:77:2e:85:b7:31:19:c8:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63062302b438592376c4264f49dc5e673edb2cfb Validity Not Before: Feb 9 07:01:32 2026 GMT Not After : Feb 10 07:01:32 2026 GMT Subject: CN=81d95510f6db95b10312a92c1d860afd05cdb884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c2:03:07:76:8a:f4:d1:c9:bc:1d:5b:97:3a: 4d:f1:fc:0a:2c:4d:0b:79:24:3f:de:73:78:72:62: 19:64:03:44:e5:f2:d2:36:fd:42:3c:60:d9:11:96: a1:e8:0a:4e:8a:68:ff:91:be:30:7c:e6:18:47:84: 0e:af:60:35:e0:5e:79:fd:ca:75:49:26:ad:e4:2e: c8:67:0c:22:8b:ec:1c:97:fa:3f:7f:5b:91:c8:9d: b7:4b:b8:8d:d8:ab:c6:b6:b3:21:8f:b7:fb:a0:cc: 55:56:c9:d8:1b:3f:77:2c:61:07:dc:ed:3d:41:d7: dc:7c:29:4d:af:9c:90:96:29:7d:32:90:48:2d:01: db:1c:7f:ba:58:89:32:f1:49:d0:97:ec:54:bc:99: d7:00:cc:2b:e7:0e:12:87:f6:7d:d3:bc:b9:bd:3a: f6:29:24:b8:14:0e:a6:1b:e2:dc:87:b5:51:80:80: 6b:15:24:34:7a:b5:f4:d3:53:5a:43:11:cf:64:99: b5:c9:97:ca:eb:c7:8f:c8:4d:44:a1:7a:d5:d9:95: 70:00:70:cb:03:59:ba:44:1c:3a:b1:4c:57:ae:01: 60:15:5e:56:79:fc:e7:16:bb:65:56:89:50:b4:ef: 83:4d:14:7b:76:c4:c4:a7:8d:44:c1:24:bf:1b:24: f2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D9:55:10:F6:DB:95:B1:03:12:A9:2C:1D:86:0A:FD:05:CD:B8:84 X509v3 Authority Key Identifier: keyid:63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:75:ea:27:d5:28:60:61:36:65:ab:3a:a2:ec:2c:0d:b3:b8: 99:1f:50:75:df:d2:0b:fe:ac:55:3b:d3:c4:0e:a3:63:24:2e: f1:bc:25:c4:41:1c:26:d5:59:6f:ae:51:a3:ce:ae:11:23:a1: 5f:5c:1d:87:20:f9:2f:c9:ef:68:c2:e7:e1:ca:de:cd:ea:bb: 39:f3:77:73:7d:a3:63:0b:75:79:3a:69:be:f2:d3:04:cf:7f: e1:27:78:68:77:ba:f4:7a:b7:d6:5f:6a:a3:ff:1f:03:2b:3d: da:e3:c1:62:ba:2a:c1:d0:e3:e8:95:30:ea:08:db:10:61:2c: 00:90:93:46:5d:b1:7d:2a:97:9f:97:21:75:e2:ec:1d:c8:f0: 55:0e:3f:cb:9e:cd:79:f8:bf:7e:79:d3:94:c7:06:c2:b7:6e: 8e:58:b9:ae:73:5f:f2:3a:c1:d4:3d:c8:68:16:46:83:db:dd: 90:5b:dc:5e:0d:e7:8b:8a:15:da:45:8c:3e:0a:09:0d:f2:e3: a7:5d:3d:0a:07:36:8c:51:9c:6c:83:b2:c9:03:eb:4b:fd:81: 08:e5:65:09:a6:73:83:6a:37:0c:74:32:42:a7:b7:d9:b5:ce: 35:2c:c4:86:35:5b:9e:ca:ef:78:e8:fb:c7:8e:f8:6b:56:e7: 81:6c:1f:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNJmRGBhEEncuhbcxGcg0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMDYyMzAyYjQzODU5MjM3NmM0MjY0ZjQ5ZGM1ZTY3M2Vk YjJjZmIwHhcNMjYwMjA5MDcwMTMyWhcNMjYwMjEwMDcwMTMyWjAzMTEwLwYDVQQD Eyg4MWQ5NTUxMGY2ZGI5NWIxMDMxMmE5MmMxZDg2MGFmZDA1Y2RiODg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcIDB3aK9NHJvB1blzpN8fwKLE0L eSQ/3nN4cmIZZANE5fLSNv1CPGDZEZah6ApOimj/kb4wfOYYR4QOr2A14F55/cp1 SSat5C7IZwwii+wcl/o/f1uRyJ23S7iN2KvGtrMhj7f7oMxVVsnYGz93LGEH3O09 QdfcfClNr5yQlil9MpBILQHbHH+6WIky8UnQl+xUvJnXAMwr5w4Sh/Z907y5vTr2 KSS4FA6mG+Lch7VRgIBrFSQ0erX001NaQxHPZJm1yZfK68ePyE1EoXrV2ZVwAHDL A1m6RBw6sUxXrgFgFV5WefznFrtlVolQtO+DTRR7dsTEp41EwSS/GyTyCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHZVRD225WxAxKpLB2GCv0FzbiEMB8GA1UdIwQY MBaAFGMGIwK0OFkjdsQmT0ncXmc+2yz7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXdZakFyUTRXU04yeENaUFNkeGVaejdiTFBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84YmRkMDAtNzk0My00NTg0LTg0ZjMt M2IyNDJkNTRlNzg4LzEvWXdZakFyUTRXU04yeENaUFNkeGVaejdiTFBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84YmRkMDAtNzk0My00NTg0LTg0ZjMtM2IyNDJkNTRlNzg4 LzEvWXdZakFyUTRXU04yeENaUFNkeGVaejdiTFBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnXqJ9Uo YGE2Zas6ouwsDbO4mR9Qdd/SC/6sVTvTxA6jYyQu8bwlxEEcJtVZb65Ro86uESOh X1wdhyD5L8nvaMLn4crezeq7OfN3c32jYwt1eTppvvLTBM9/4Sd4aHe69Hq31l9q o/8fAys92uPBYroqwdDj6JUw6gjbEGEsAJCTRl2xfSqXn5chdeLsHcjwVQ4/y57N efi/fnnTlMcGwrdujli5rnNf8jrB1D3IaBZGg9vdkFvcXg3ni4oV2kWMPgoJDfLj p109Cgc2jFGcbIOyyQPrS/2BCOVlCaZzg2o3DHQyQqe32bXONSzEhjVbnsrveOj7 x474a1bngWwfvw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:47 2026 by rpki-client