This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft File: 0YwgMKWXHEpUCWqO27ISEeVCFqc.mft (raw, json) Hash identifier: YaZzdsZGLgV02D0o4HRJDtzVt78O0Gz5aYuYi1jM7Xc= Subject key identifier: B8:B1:3B:6D:5A:AD:96:F8:9F:54:AA:AB:62:28:7A:71:01:9B:62:BC Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7 Certificate issuer: /CN=d18c2030a5971c4a54096a8edbb21211e54216a7 Certificate serial: 019C427DC44FD5141A0547C2A7601C9B15B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft Manifest number: 12FA Signing time: Mon 09 Feb 2026 13:01:04 +0000 Manifest this update: Mon 09 Feb 2026 13:01:04 +0000 Manifest next update: Tue 10 Feb 2026 13:01:04 +0000 Files and hashes: 1: 0YwgMKWXHEpUCWqO27ISEeVCFqc.crl (hash: U72v5iHxsf/OenoOtw8t/5MbSoxJiyYbXrnSlbDFO0s=) 2: lf7LSKbMZbGm86tBlbPIL648oFo.roa (hash: /K9bAYZ5YiuaJN+PfS4nniv3V/XkGZzBzxnTsucRsCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:c4:4f:d5:14:1a:05:47:c2:a7:60:1c:9b:15:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7 Validity Not Before: Feb 9 13:01:04 2026 GMT Not After : Feb 10 13:01:04 2026 GMT Subject: CN=b8b13b6d5aad96f89f54aaab62287a71019b62bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d1:d6:16:f1:30:62:91:c8:e3:62:b2:e2:56: c0:0b:0e:42:68:76:2d:97:2b:b8:be:95:dd:7a:db: 0c:4c:53:e7:d0:27:67:8e:c8:79:37:5d:e7:74:3c: 65:90:d0:87:54:30:ee:2b:23:05:17:da:d9:76:49: d0:6b:a4:e9:d0:c6:25:b4:d0:61:c0:b8:d1:d1:40: cf:70:94:25:69:f7:da:a0:8c:1c:2e:fc:7d:71:1b: 74:e8:b0:76:51:5e:b1:87:33:2e:7f:33:75:5f:6a: 85:d4:f5:5b:6e:14:5c:dd:6e:26:79:13:57:eb:9b: 0b:23:a6:f2:9a:c8:4c:83:be:6a:b7:20:6a:9b:e8: b1:89:a6:b1:52:ec:f0:11:4c:ca:49:d3:ec:32:2d: c6:bf:23:3c:5c:64:28:6f:3a:47:50:09:e8:60:79: 8f:76:9b:8b:ac:5b:34:50:3f:d2:80:e9:8e:9a:88: 3a:b5:c1:ed:f4:bc:a4:d2:9b:08:fb:be:80:fc:4a: fc:e1:d1:a3:78:fb:d9:81:96:41:1d:6b:af:0c:9f: f6:a4:47:ef:fa:29:19:37:c4:84:98:49:b4:60:b4: 9f:86:f5:50:11:87:c7:37:69:73:0f:a8:56:17:93: 4d:57:01:17:69:c3:0e:1c:e6:c9:b7:d7:45:ba:44: a8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B1:3B:6D:5A:AD:96:F8:9F:54:AA:AB:62:28:7A:71:01:9B:62:BC X509v3 Authority Key Identifier: keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:8d:a3:e9:ce:a7:18:06:b7:49:86:7f:67:86:dd:f2:d8:b7: 8d:54:94:dd:43:cf:64:a0:db:74:eb:4d:a1:35:ef:9d:85:7e: 4a:bc:70:59:27:ad:44:0b:35:08:08:89:2d:a0:06:85:ed:99: b6:2b:18:4f:53:25:b1:3d:37:85:d1:40:67:ca:2f:83:b6:2b: f2:c3:ce:35:e1:48:bb:4f:76:96:55:ea:5c:0c:ab:a9:f7:6f: 3f:94:67:b7:84:29:ca:8f:c7:8a:19:9d:a6:12:5f:f4:1a:6f: 8b:09:b9:c2:21:81:68:e1:2a:39:56:b5:07:32:bf:0b:68:27: 93:87:59:95:0a:32:6c:17:a0:a2:2f:d3:47:39:53:53:78:8a: 39:af:3c:16:bf:0d:49:2c:50:a4:85:12:e7:5b:e7:2d:35:23: 26:44:fb:df:84:be:8c:70:55:67:d3:f6:8d:74:64:66:c5:2e: fc:f2:ff:77:1a:7a:96:61:0d:95:6e:ce:61:cf:36:53:23:7b: 5d:9a:07:dd:f9:ec:fa:59:93:70:5d:4a:08:01:d0:f3:2b:02: dd:a7:21:b4:66:1e:ea:3a:47:cf:d8:1e:d8:19:bc:24:1e:d7: 39:42:2c:d6:d6:c1:4d:07:a8:11:98:27:ee:73:aa:82:df:7b: 25:26:9b:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfcRP1RQaBUfCp2AcmxW3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOGMyMDMwYTU5NzFjNGE1NDA5NmE4ZWRiYjIxMjExZTU0 MjE2YTcwHhcNMjYwMjA5MTMwMTA0WhcNMjYwMjEwMTMwMTA0WjAzMTEwLwYDVQQD EyhiOGIxM2I2ZDVhYWQ5NmY4OWY1NGFhYWI2MjI4N2E3MTAxOWI2MmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dHWFvEwYpHI42Ky4lbACw5CaHYt lyu4vpXdetsMTFPn0Cdnjsh5N13ndDxlkNCHVDDuKyMFF9rZdknQa6Tp0MYltNBh wLjR0UDPcJQlaffaoIwcLvx9cRt06LB2UV6xhzMufzN1X2qF1PVbbhRc3W4meRNX 65sLI6bymshMg75qtyBqm+ixiaaxUuzwEUzKSdPsMi3GvyM8XGQobzpHUAnoYHmP dpuLrFs0UD/SgOmOmog6tcHt9Lyk0psI+76A/Er84dGjePvZgZZBHWuvDJ/2pEfv +ikZN8SEmEm0YLSfhvVQEYfHN2lzD6hWF5NNVwEXacMOHObJt9dFukSoWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLixO21arZb4n1Sqq2IoenEBm2K8MB8GA1UdIwQY MBaAFNGMIDCllxxKVAlqjtuyEhHlQhanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jNGYxNDQtNmU2OC00NmI4LTg1OGQt NTNhNjcyZDE0YjdhLzEvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9jNGYxNDQtNmU2OC00NmI4LTg1OGQtNTNhNjcyZDE0Yjdh LzEvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASI2j6c6n GAa3SYZ/Z4bd8ti3jVSU3UPPZKDbdOtNoTXvnYV+SrxwWSetRAs1CAiJLaAGhe2Z tisYT1MlsT03hdFAZ8ovg7Yr8sPONeFIu092llXqXAyrqfdvP5Rnt4Qpyo/Hihmd phJf9Bpviwm5wiGBaOEqOVa1BzK/C2gnk4dZlQoybBegoi/TRzlTU3iKOa88Fr8N SSxQpIUS51vnLTUjJkT734S+jHBVZ9P2jXRkZsUu/PL/dxp6lmENlW7OYc82UyN7 XZoH3fns+lmTcF1KCAHQ8ysC3achtGYe6jpHz9ge2Bm8JB7XOUIs1tbBTQeoEZgn 7nOqgt97JSabDg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:42 2026 by rpki-client