This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json) Hash identifier: QtzoH1VOYhBzeQ4YFR80aJQtaUQbElqvezA00/frK4c= Subject key identifier: 25:D0:FA:AB:E5:7B:63:B9:2A:D3:83:54:FC:DB:DF:BF:35:CC:E8:87 Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18 Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918 Certificate serial: 019C41A24B85A26B3580A49F1B3426B7B8E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft Manifest number: 0EF2 Signing time: Mon 09 Feb 2026 09:01:20 +0000 Manifest this update: Mon 09 Feb 2026 09:01:20 +0000 Manifest next update: Tue 10 Feb 2026 09:01:20 +0000 Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: 2sBB+wSTJuu42g9USU513SLsKZgSF1UWl9D3SJN0BPs=) 2: nd54JNe4vIZ_-Gecq7CuS7z9ouE.roa (hash: uDzn2UrQJ/gWE6VmVbdTq4BSTBqexLqsyHgtdAqNXeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:4b:85:a2:6b:35:80:a4:9f:1b:34:26:b7:b8:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918 Validity Not Before: Feb 9 09:01:20 2026 GMT Not After : Feb 10 09:01:20 2026 GMT Subject: CN=25d0faabe57b63b92ad38354fcdbdfbf35cce887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:63:e7:64:47:70:e1:7c:7c:fb:77:be:b1:90: ea:f7:a8:fc:6f:3f:57:fc:5c:f3:4e:a4:6f:fe:e0: ba:38:a4:36:11:4e:fe:fc:79:25:28:87:b2:ed:f5: 24:3b:35:59:9c:f3:13:1f:9f:04:6a:e1:dc:b7:d0: d6:70:87:c9:da:79:1e:82:c6:6d:1a:c5:f5:3b:9b: 67:e7:fa:8f:fc:d6:70:4a:40:f5:7c:f7:7a:c8:7e: a2:9e:63:81:f9:c1:c6:5a:de:eb:95:f1:48:61:bf: 20:04:eb:2e:42:eb:87:96:4b:b5:4c:38:52:09:c9: fa:eb:a1:75:75:f0:6f:64:80:60:10:3c:2e:5b:fa: fe:2f:a9:ab:51:ee:4e:a2:00:84:39:98:57:69:c3: 3c:bb:6d:17:82:22:da:a3:fa:67:6b:41:63:76:07: cc:11:0a:62:7d:ea:c2:42:4b:fb:b7:c4:ab:fd:d8: c4:d6:be:8d:a9:ea:ec:b4:7b:c0:6b:3e:bc:f5:d7: d8:5f:a7:af:71:2a:da:ba:67:73:49:24:41:c8:f7: e6:d6:10:9c:4a:36:0a:72:8c:93:72:87:a9:51:46: ad:aa:0d:14:b7:e8:c0:67:6b:f6:3d:35:f2:41:4b: 08:37:05:75:18:55:b0:c4:7c:bb:b0:41:d0:74:56: 31:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D0:FA:AB:E5:7B:63:B9:2A:D3:83:54:FC:DB:DF:BF:35:CC:E8:87 X509v3 Authority Key Identifier: keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:5e:15:da:41:b3:f6:6f:cf:25:f6:c1:c2:de:82:dc:28:a9: 3d:4c:42:21:77:f3:7b:70:3c:69:d4:49:05:27:02:41:b4:3a: 98:9d:34:7c:64:4e:0f:e9:41:70:3e:75:0e:a4:d1:2f:1e:96: 54:8d:80:da:1b:a0:53:0b:b0:2c:69:5e:bb:e9:b8:9d:09:f1: 87:5c:82:72:20:80:aa:4b:70:71:db:67:70:15:a5:d2:7d:86: 2c:11:7f:32:c8:f7:fc:05:72:a1:12:62:cb:98:14:6a:4e:7b: 49:f4:a9:0d:dd:2d:c3:3f:ab:86:1d:fa:34:bd:51:0e:08:c4: 13:d1:64:88:23:85:81:e8:49:ec:c2:e8:b8:b7:41:98:6c:8b: 56:22:4d:02:b3:1d:56:ff:2c:c5:7d:35:d8:95:07:2a:74:eb: 48:c6:a3:8c:f4:2b:8d:56:94:f3:c1:d6:c9:05:4b:09:9c:84: 97:d8:66:4b:c6:9f:47:e8:77:a1:4f:2b:65:19:c8:c9:74:b8: 5c:b3:01:70:09:c3:e9:6a:00:a0:11:e4:d0:ac:ec:41:75:9a: d2:9a:0d:78:0e:b7:42:25:5b:36:b3:24:53:51:0b:f6:c6:2a: c6:38:d6:63:54:66:46:f1:5d:0a:6b:c0:a6:58:e0:d9:fd:9e: 48:7f:a1:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBokuFoms1gKSfGzQmt7jpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMzMzY2Q2ZjFiNTljMGI2ODJlMWRhMzg5MjM3ZWRhM2U5 ZGE5MTgwHhcNMjYwMjA5MDkwMTIwWhcNMjYwMjEwMDkwMTIwWjAzMTEwLwYDVQQD EygyNWQwZmFhYmU1N2I2M2I5MmFkMzgzNTRmY2RiZGZiZjM1Y2NlODg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWPnZEdw4Xx8+3e+sZDq96j8bz9X /FzzTqRv/uC6OKQ2EU7+/HklKIey7fUkOzVZnPMTH58EauHct9DWcIfJ2nkegsZt GsX1O5tn5/qP/NZwSkD1fPd6yH6inmOB+cHGWt7rlfFIYb8gBOsuQuuHlku1TDhS Ccn666F1dfBvZIBgEDwuW/r+L6mrUe5OogCEOZhXacM8u20XgiLao/pna0FjdgfM EQpiferCQkv7t8Sr/djE1r6NqerstHvAaz689dfYX6evcSraumdzSSRByPfm1hCc SjYKcoyTcoepUUatqg0Ut+jAZ2v2PTXyQUsINwV1GFWwxHy7sEHQdFYx4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXQ+qvle2O5KtODVPzb3781zOiHMB8GA1UdIwQY MBaAFGAzPNbxtZwLaC4do4kjfto+nakYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80MjIyYjItYzc5Yy00ZDVlLTk5ZDct Y2RiMjgxYTJiM2E4LzEvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC80MjIyYjItYzc5Yy00ZDVlLTk5ZDctY2RiMjgxYTJiM2E4 LzEvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUl4V2kGz 9m/PJfbBwt6C3CipPUxCIXfze3A8adRJBScCQbQ6mJ00fGROD+lBcD51DqTRLx6W VI2A2hugUwuwLGleu+m4nQnxh1yCciCAqktwcdtncBWl0n2GLBF/Msj3/AVyoRJi y5gUak57SfSpDd0twz+rhh36NL1RDgjEE9FkiCOFgehJ7MLouLdBmGyLViJNArMd Vv8sxX012JUHKnTrSMajjPQrjVaU88HWyQVLCZyEl9hmS8afR+h3oU8rZRnIyXS4 XLMBcAnD6WoAoBHk0KzsQXWa0poNeA63QiVbNrMkU1EL9sYqxjjWY1RmRvFdCmvA pljg2f2eSH+hYw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:27 2026 by rpki-client