This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft File: YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft (raw, json) Hash identifier: IqOtvasj3Xm5tQfblEdZx/RII0Le236Alyg46Y5Vonk= Subject key identifier: E6:8B:79:C5:9A:FA:51:00:E2:EA:1F:58:CF:34:11:78:88:F1:D4:18 Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6 Certificate issuer: /CN=6238410338e21e8eab94119d80e41a3958491de6 Certificate serial: 019C44D9B697FDAD66D1063F2E7F79ED8855 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft Manifest number: 0E0E Signing time: Tue 10 Feb 2026 00:00:44 +0000 Manifest this update: Tue 10 Feb 2026 00:00:44 +0000 Manifest next update: Wed 11 Feb 2026 00:00:44 +0000 Files and hashes: 1: YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl (hash: a+/cev/g5lmW/Wcc1HUA6C1YxD2pAQ1OhKLb70vQR/s=) 2: kN8hpyULYXpGgg0l4UycfzoLM_8.roa (hash: p1hs9U044hjwHEauuvzM9PUu0iEmpC7Sk80cjjzAgHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:b6:97:fd:ad:66:d1:06:3f:2e:7f:79:ed:88:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6 Validity Not Before: Feb 10 00:00:44 2026 GMT Not After : Feb 11 00:00:44 2026 GMT Subject: CN=e68b79c59afa5100e2ea1f58cf34117888f1d418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d4:0e:ba:70:7a:ce:c9:ab:89:9f:45:8e:cb: e2:81:b0:a9:48:f4:0c:32:cd:79:21:23:5e:1d:7d: 28:35:49:6e:95:d6:5c:d8:77:cd:b5:53:ad:54:68: 1b:b8:43:c9:86:07:c7:b4:1e:d4:83:48:9d:ce:da: af:93:35:9c:0e:78:be:d1:eb:b6:44:e2:77:e0:87: e5:4d:df:7d:b2:61:43:59:cb:ec:40:a7:e9:d0:ac: b9:26:7f:82:b1:e7:42:b4:66:3d:13:d6:4f:ba:0b: 2d:4d:31:c2:3f:af:56:78:52:74:ec:99:9e:60:5c: a8:c9:e8:37:ac:6e:22:bf:e1:38:bd:a2:7c:aa:b7: d2:4f:32:40:d3:00:86:ce:a7:e7:e2:14:49:f5:54: 6c:6c:b4:9b:40:95:1f:a8:b3:d9:7f:b7:dd:ef:e2: 71:5d:7d:ba:8e:29:02:a5:0a:a6:b8:f2:be:59:67: 2a:f4:26:16:db:b2:89:19:d2:80:29:f9:57:62:50: f1:49:5c:b7:38:c4:4d:b5:33:20:3d:d8:d1:7d:07: 33:00:af:17:55:f8:06:0a:3c:2b:c2:58:07:84:2d: fa:6c:51:33:00:16:74:dc:f7:84:cf:5a:3a:67:c5: 63:08:50:a6:1e:26:f4:1b:5e:71:a6:0e:e2:c7:84: b1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8B:79:C5:9A:FA:51:00:E2:EA:1F:58:CF:34:11:78:88:F1:D4:18 X509v3 Authority Key Identifier: keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6b:88:73:ee:7b:a6:82:74:90:4c:17:6f:61:f0:c8:c2:09: 0f:f2:c5:c7:09:e9:d8:fa:8d:db:5a:c4:50:8e:6e:a6:e7:51: 46:36:41:b0:03:84:c4:f8:a3:5b:af:38:5e:d9:b8:c4:4a:b5: 02:db:36:ab:00:3f:98:47:c9:40:d4:43:26:82:5d:a6:8d:d4: 08:09:7f:f6:cd:76:7f:95:da:eb:fa:67:ec:03:c1:ff:ea:60: de:e7:af:77:36:a8:6d:84:6f:1b:0d:2d:a9:ce:84:77:95:38: 64:ec:72:0c:f5:03:82:52:47:22:5b:6d:d6:15:84:15:56:09: 05:41:9e:ec:5f:6b:0a:c4:f2:0f:3b:2e:f8:eb:06:6d:99:69: be:b6:f7:c0:e2:3d:02:26:2b:77:32:8d:53:0d:67:6e:e2:73: e1:f3:a4:17:33:09:24:90:74:20:7d:88:fb:12:9d:af:37:27: 88:4f:03:14:30:62:f7:72:df:42:e7:ac:95:00:c8:68:8b:e7: 0a:92:e7:4f:a4:59:69:4c:d0:66:72:64:b0:e3:90:7d:5c:04: 04:bd:e1:df:bc:a4:cf:d3:b6:1a:36:d4:5b:25:b0:74:6e:87: 5b:3e:00:c5:d9:48:38:e9:3d:67:8f:c1:b6:7d:1a:c7:df:bc: f2:60:0e:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2baX/a1m0QY/Ln957YhVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMzg0MTAzMzhlMjFlOGVhYjk0MTE5ZDgwZTQxYTM5NTg0 OTFkZTYwHhcNMjYwMjEwMDAwMDQ0WhcNMjYwMjExMDAwMDQ0WjAzMTEwLwYDVQQD EyhlNjhiNzljNTlhZmE1MTAwZTJlYTFmNThjZjM0MTE3ODg4ZjFkNDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdQOunB6zsmriZ9FjsvigbCpSPQM Ms15ISNeHX0oNUluldZc2HfNtVOtVGgbuEPJhgfHtB7Ug0idztqvkzWcDni+0eu2 ROJ34IflTd99smFDWcvsQKfp0Ky5Jn+CsedCtGY9E9ZPugstTTHCP69WeFJ07Jme YFyoyeg3rG4iv+E4vaJ8qrfSTzJA0wCGzqfn4hRJ9VRsbLSbQJUfqLPZf7fd7+Jx XX26jikCpQqmuPK+WWcq9CYW27KJGdKAKflXYlDxSVy3OMRNtTMgPdjRfQczAK8X VfgGCjwrwlgHhC36bFEzABZ03PeEz1o6Z8VjCFCmHib0G15xpg7ix4SxuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaLecWa+lEA4uofWM80EXiI8dQYMB8GA1UdIwQY MBaAFGI4QQM44h6Oq5QRnYDkGjlYSR3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWpoQkF6amlIbzZybEJHZGdPUWFPVmhKSGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81YTQ1MjYtODlmYy00NjQwLTkwMWQt MTNhNThlYjlkOGY1LzEvWWpoQkF6amlIbzZybEJHZGdPUWFPVmhKSGVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS81YTQ1MjYtODlmYy00NjQwLTkwMWQtMTNhNThlYjlkOGY1 LzEvWWpoQkF6amlIbzZybEJHZGdPUWFPVmhKSGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmuIc+57 poJ0kEwXb2HwyMIJD/LFxwnp2PqN21rEUI5upudRRjZBsAOExPijW684Xtm4xEq1 Ats2qwA/mEfJQNRDJoJdpo3UCAl/9s12f5Xa6/pn7APB/+pg3uevdzaobYRvGw0t qc6Ed5U4ZOxyDPUDglJHIltt1hWEFVYJBUGe7F9rCsTyDzsu+OsGbZlpvrb3wOI9 AiYrdzKNUw1nbuJz4fOkFzMJJJB0IH2I+xKdrzcniE8DFDBi93LfQueslQDIaIvn CpLnT6RZaUzQZnJksOOQfVwEBL3h37ykz9O2GjbUWyWwdG6HWz4AxdlIOOk9Z4/B tn0ax9+88mAOBQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:07 2026 by rpki-client