This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft File: yd1CJDGXhku0gWRh1NBlOrC6Mro.mft (raw, json) Hash identifier: 61rq/vPjlxKaY0hJ/Ps6N1Koc7jlUlVzbQlIfjzxH2E= Subject key identifier: 40:67:9D:70:A3:24:2A:1B:4B:72:EF:E9:4E:52:F6:AF:D3:FC:F4:BE Authority key identifier: C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA Certificate issuer: /CN=c9dd42243197864bb4816461d4d0653ab0ba32ba Certificate serial: 019C44D9D2BA8CC47DB205E7B6E30AD3F69A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft Manifest number: 1812 Signing time: Tue 10 Feb 2026 00:00:51 +0000 Manifest this update: Tue 10 Feb 2026 00:00:51 +0000 Manifest next update: Wed 11 Feb 2026 00:00:51 +0000 Files and hashes: 1: 45j6eHYF_02muc8QdARO0K6hDmo.roa (hash: RBkJqhmrXlwPWTL2teXXxMSS7p2416ywX2dYxmAUw9s=) 2: yd1CJDGXhku0gWRh1NBlOrC6Mro.crl (hash: vXGHKjrnLf5R1nSS+lyDxkvwVrtJcYJv9HYJ11I5n1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:d2:ba:8c:c4:7d:b2:05:e7:b6:e3:0a:d3:f6:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9dd42243197864bb4816461d4d0653ab0ba32ba Validity Not Before: Feb 10 00:00:51 2026 GMT Not After : Feb 11 00:00:51 2026 GMT Subject: CN=40679d70a3242a1b4b72efe94e52f6afd3fcf4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:10:31:c7:2f:73:43:f2:44:18:dd:63:f7:2a: 27:1c:d8:f9:6c:b2:b6:dd:4a:8c:f9:3d:d2:0e:7f: 5b:d6:9a:e3:33:81:cb:b4:7e:f2:49:80:13:c1:c5: fe:cb:fd:c6:b1:60:d6:47:48:cd:61:5a:a1:17:31: cc:cb:a1:a8:df:bc:6c:ca:e4:76:5a:4e:74:85:8d: 39:fe:9d:6b:44:3d:65:3e:90:55:06:0b:27:3d:4c: 3d:c5:56:6a:35:de:f3:2e:91:56:f7:df:2c:da:56: 76:4b:fc:2e:f3:fd:3f:57:83:0d:41:c7:2a:82:78: 40:56:69:4a:a7:71:16:0e:05:e6:bd:21:a6:76:e4: 66:15:10:6a:f5:28:2b:c2:17:e0:4f:f0:79:3e:f0: 99:8a:67:e9:f8:92:f7:1f:60:27:1b:05:0f:0d:97: 35:e3:f3:9d:07:33:4f:48:81:65:33:56:11:a4:a7: 49:69:d9:7b:ca:e9:01:d0:b5:3a:e6:f9:2b:c1:74: 38:97:33:2a:1c:2a:fa:eb:f2:23:c3:29:23:84:1f: bf:78:6a:ba:02:ba:9c:2d:be:c5:71:1e:1b:fa:8d: bf:99:a9:42:21:56:09:4b:8f:4d:1a:39:bc:f7:e8: 3c:eb:0f:3c:87:1b:39:37:08:11:bd:4e:eb:dd:fe: a9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:67:9D:70:A3:24:2A:1B:4B:72:EF:E9:4E:52:F6:AF:D3:FC:F4:BE X509v3 Authority Key Identifier: keyid:C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:58:17:8d:f2:5b:33:a0:57:7a:82:64:bc:09:50:50:a1:fc: cd:b9:2a:bf:7c:bf:92:e8:2c:46:12:af:db:6c:3e:36:b1:cd: 3b:4d:46:86:0d:e4:12:20:95:84:d2:24:a2:4d:c5:95:fe:16: a6:72:78:b4:c2:af:e6:4c:39:b1:85:4b:9e:c7:79:c4:f9:33: a8:db:f8:87:b6:f7:58:b1:15:35:ff:d4:21:93:7a:2b:e3:48: e0:c4:ec:17:3a:10:0c:04:25:49:98:91:a0:65:7c:da:45:d3: 79:5c:06:58:49:31:4a:14:2d:30:0c:9d:6a:03:6c:6c:4d:a4: c6:62:0a:f5:61:00:90:54:5c:51:f5:b7:80:f5:99:18:e3:6a: fd:19:bc:79:1e:28:0e:46:6f:cd:7b:04:ec:40:93:7e:31:1f: 0d:ee:85:fa:81:f9:c3:2b:d0:89:c7:90:f6:a6:d7:ee:59:93: a9:69:af:4d:5c:f0:45:1f:f5:84:8b:45:db:dc:7f:b8:c9:45: ea:30:93:3e:c7:e4:03:eb:1b:4c:50:bc:c0:56:5d:ee:79:9c: 27:35:23:72:71:96:08:ce:c3:c2:60:d3:64:89:9e:1d:3e:91: 3f:a6:9f:13:6f:b7:bb:1b:f5:07:f1:77:10:7e:96:c7:63:e4: b3:ad:2d:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2dK6jMR9sgXntuMK0/aaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZGQ0MjI0MzE5Nzg2NGJiNDgxNjQ2MWQ0ZDA2NTNhYjBi YTMyYmEwHhcNMjYwMjEwMDAwMDUxWhcNMjYwMjExMDAwMDUxWjAzMTEwLwYDVQQD Eyg0MDY3OWQ3MGEzMjQyYTFiNGI3MmVmZTk0ZTUyZjZhZmQzZmNmNGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhAxxy9zQ/JEGN1j9yonHNj5bLK2 3UqM+T3SDn9b1prjM4HLtH7ySYATwcX+y/3GsWDWR0jNYVqhFzHMy6Go37xsyuR2 Wk50hY05/p1rRD1lPpBVBgsnPUw9xVZqNd7zLpFW998s2lZ2S/wu8/0/V4MNQccq gnhAVmlKp3EWDgXmvSGmduRmFRBq9SgrwhfgT/B5PvCZimfp+JL3H2AnGwUPDZc1 4/OdBzNPSIFlM1YRpKdJadl7yukB0LU65vkrwXQ4lzMqHCr66/IjwykjhB+/eGq6 ArqcLb7FcR4b+o2/malCIVYJS49NGjm89+g86w88hxs5NwgRvU7r3f6pFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBnnXCjJCobS3Lv6U5S9q/T/PS+MB8GA1UdIwQY MBaAFMndQiQxl4ZLtIFkYdTQZTqwujK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWQxQ0pER1hoa3UwZ1dSaDFOQmxPckM2TXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81ZGExNWEtOTdhMC00YTc3LTliY2Et NjRhNzE1YTVmNjliLzEveWQxQ0pER1hoa3UwZ1dSaDFOQmxPckM2TXJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81ZGExNWEtOTdhMC00YTc3LTliY2EtNjRhNzE1YTVmNjli LzEveWQxQ0pER1hoa3UwZ1dSaDFOQmxPckM2TXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlgXjfJb M6BXeoJkvAlQUKH8zbkqv3y/kugsRhKv22w+NrHNO01Ghg3kEiCVhNIkok3Flf4W pnJ4tMKv5kw5sYVLnsd5xPkzqNv4h7b3WLEVNf/UIZN6K+NI4MTsFzoQDAQlSZiR oGV82kXTeVwGWEkxShQtMAydagNsbE2kxmIK9WEAkFRcUfW3gPWZGONq/Rm8eR4o DkZvzXsE7ECTfjEfDe6F+oH5wyvQiceQ9qbX7lmTqWmvTVzwRR/1hItF29x/uMlF 6jCTPsfkA+sbTFC8wFZd7nmcJzUjcnGWCM7DwmDTZImeHT6RP6afE2+3uxv1B/F3 EH6Wx2Pks60tFA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:49 2026 by rpki-client