This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft File: JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft (raw, json) Hash identifier: mQpt6DTWQZCYivB+wING/4KN22lz6PKB+v0g3i6M9k0= Subject key identifier: EB:85:AE:B0:08:58:23:D7:43:DF:8F:C0:02:5C:70:1D:2F:4C:27:FE Authority key identifier: 27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A Certificate issuer: /CN=271b98a60a926820a48cb43a4af308c88ff2721a Certificate serial: 019C446B90485B1703FA8494F3CAB002281C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft Manifest number: 10D5 Signing time: Mon 09 Feb 2026 22:00:25 +0000 Manifest this update: Mon 09 Feb 2026 22:00:25 +0000 Manifest next update: Tue 10 Feb 2026 22:00:25 +0000 Files and hashes: 1: JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl (hash: dLucwp+mXorW/6UCL/KlykysD84mlZA7AmOESQjYKj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:90:48:5b:17:03:fa:84:94:f3:ca:b0:02:28:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=271b98a60a926820a48cb43a4af308c88ff2721a Validity Not Before: Feb 9 22:00:25 2026 GMT Not After : Feb 10 22:00:25 2026 GMT Subject: CN=eb85aeb0085823d743df8fc0025c701d2f4c27fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b5:cf:65:ad:b0:dc:7f:ba:75:3c:7a:b4:ba: 50:b5:50:2b:ee:7c:5d:4b:c2:13:ae:7d:90:7d:ee: c0:65:1f:fb:10:ec:3b:af:20:9a:5a:71:97:90:b3: b9:44:02:e2:b2:af:1d:ab:96:83:ae:c6:6e:23:62: 0b:b3:94:06:69:45:92:44:cd:1a:3c:99:f4:10:3b: 36:7a:a9:32:4f:f7:a2:55:0e:f0:eb:ca:5c:a8:32: 10:68:4e:cf:98:cf:a0:f3:74:75:a1:2c:a6:7c:e2: 31:a0:ce:75:4c:31:df:43:c8:9f:50:b2:b2:d3:98: 43:9b:7b:bf:2d:39:f6:f9:28:ea:8a:3f:1b:06:b8: 1e:4b:be:bd:cf:df:1b:5e:e3:bc:cf:f0:85:b7:1c: 89:45:ef:29:ed:55:05:f3:ae:7b:34:d0:b3:fd:ca: 83:fa:8f:4f:94:6e:8d:c8:e9:21:7d:0f:83:f5:29: e8:87:90:78:75:d4:80:bc:f8:6a:ea:b3:38:6a:29: f7:6e:27:48:3f:1c:42:10:9b:1e:9d:f3:dc:52:2a: a2:1d:8a:37:57:36:bd:54:7c:7d:48:14:32:33:ff: d5:36:bf:15:91:71:e0:19:7d:b6:a8:77:c7:d7:80: b5:dc:7f:bf:79:c9:65:49:9e:3f:5c:03:6c:9b:42: 0b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:85:AE:B0:08:58:23:D7:43:DF:8F:C0:02:5C:70:1D:2F:4C:27:FE X509v3 Authority Key Identifier: keyid:27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:01:9b:4e:0a:3c:74:fb:fe:57:bc:03:4a:3c:10:47:4c:a9: f9:79:bc:28:5d:82:c8:43:43:ef:10:2c:c4:cb:90:c2:63:b7: 7f:56:f0:6a:5b:50:9b:5c:f5:cb:03:56:0c:dc:44:98:b7:1b: c8:ce:31:05:f1:88:f7:4d:9d:5d:3c:74:d6:88:2c:00:2d:e2: a9:54:34:1b:d0:3c:2e:36:42:b9:5f:f9:bd:2d:2b:45:74:38: 43:22:a1:d8:f2:77:81:0a:c6:04:5c:69:2b:24:4c:08:61:70: 83:17:e1:15:15:0d:ec:bb:b9:d0:75:b2:c8:28:bf:1e:e5:a4: 2f:76:a0:75:78:2e:2f:0c:85:92:ea:26:f1:76:df:bb:5f:6e: 38:54:0a:df:2d:fa:b5:f2:bf:88:26:10:2b:b6:ed:f3:c0:04: fb:b0:78:ad:96:fd:57:9a:c7:22:c3:43:8a:02:6f:03:42:57: 8d:9b:af:65:6b:0c:89:cc:8f:e6:6d:d9:0f:72:46:bd:f5:9a: 8e:fb:fa:ac:9c:b5:24:d5:84:54:19:05:f5:c4:14:08:aa:cb: 27:b3:0c:0c:ee:0b:6f:0d:52:93:a2:2f:9d:7d:e4:68:0b:7f: 61:5d:a3:f8:db:cd:93:2c:b1:a6:aa:c5:11:83:bd:90:e9:ee: 8e:36:13:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa5BIWxcD+oSU88qwAigcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MWI5OGE2MGE5MjY4MjBhNDhjYjQzYTRhZjMwOGM4OGZm MjcyMWEwHhcNMjYwMjA5MjIwMDI1WhcNMjYwMjEwMjIwMDI1WjAzMTEwLwYDVQQD EyhlYjg1YWViMDA4NTgyM2Q3NDNkZjhmYzAwMjVjNzAxZDJmNGMyN2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrXPZa2w3H+6dTx6tLpQtVAr7nxd S8ITrn2Qfe7AZR/7EOw7ryCaWnGXkLO5RALisq8dq5aDrsZuI2ILs5QGaUWSRM0a PJn0EDs2eqkyT/eiVQ7w68pcqDIQaE7PmM+g83R1oSymfOIxoM51TDHfQ8ifULKy 05hDm3u/LTn2+Sjqij8bBrgeS769z98bXuO8z/CFtxyJRe8p7VUF8657NNCz/cqD +o9PlG6NyOkhfQ+D9Snoh5B4ddSAvPhq6rM4ain3bidIPxxCEJsenfPcUiqiHYo3 Vza9VHx9SBQyM//VNr8VkXHgGX22qHfH14C13H+/ecllSZ4/XANsm0IL/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuFrrAIWCPXQ9+PwAJccB0vTCf+MB8GA1UdIwQY MBaAFCcbmKYKkmggpIy0OkrzCMiP8nIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnh1WXBncVNhQ0NrakxRNlN2TUl5SV95Y2hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85NzRkODAtZDM5NC00OTYyLWE2YTMt Y2U0ZDg0NTU1NGZkLzEvSnh1WXBncVNhQ0NrakxRNlN2TUl5SV95Y2hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85NzRkODAtZDM5NC00OTYyLWE2YTMtY2U0ZDg0NTU1NGZk LzEvSnh1WXBncVNhQ0NrakxRNlN2TUl5SV95Y2hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAGbTgo8 dPv+V7wDSjwQR0yp+Xm8KF2CyEND7xAsxMuQwmO3f1bwaltQm1z1ywNWDNxEmLcb yM4xBfGI902dXTx01ogsAC3iqVQ0G9A8LjZCuV/5vS0rRXQ4QyKh2PJ3gQrGBFxp KyRMCGFwgxfhFRUN7Lu50HWyyCi/HuWkL3agdXguLwyFkuom8Xbfu19uOFQK3y36 tfK/iCYQK7bt88AE+7B4rZb9V5rHIsNDigJvA0JXjZuvZWsMicyP5m3ZD3JGvfWa jvv6rJy1JNWEVBkF9cQUCKrLJ7MMDO4Lbw1Sk6IvnX3kaAt/YV2j+NvNkyyxpqrF EYO9kOnujjYTQw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:37:35 2026 by rpki-client