This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft File: 0Yx5_S1sxF7htYD5OgUFxZffbYk.mft (raw, json) Hash identifier: fW6FIYN2cGltI47GQr7tw6UCB0sOTpG3DrNa5OwKhh8= Subject key identifier: 7C:41:45:EF:41:37:D8:50:C9:3A:83:8C:91:3E:5D:BE:BA:E8:C6:0B Authority key identifier: D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89 Certificate issuer: /CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89 Certificate serial: 019C41A167C72B966F6595BBE05E62486D16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft Manifest number: 0721 Signing time: Mon 09 Feb 2026 09:00:22 +0000 Manifest this update: Mon 09 Feb 2026 09:00:22 +0000 Manifest next update: Tue 10 Feb 2026 09:00:22 +0000 Files and hashes: 1: 0Yx5_S1sxF7htYD5OgUFxZffbYk.crl (hash: mSBflky+jHED86WlQ7X+h4UfQitHYWrdO5Y5jWdOqzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:67:c7:2b:96:6f:65:95:bb:e0:5e:62:48:6d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89 Validity Not Before: Feb 9 09:00:22 2026 GMT Not After : Feb 10 09:00:22 2026 GMT Subject: CN=7c4145ef4137d850c93a838c913e5dbebae8c60b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:8d:02:8e:84:73:6c:f8:16:c2:fc:41:bd: 49:cb:2c:54:37:d9:12:d2:e9:e7:16:aa:61:db:9a: a3:fe:3d:b0:bb:ca:ed:1f:f6:85:03:bc:7f:88:34: 02:84:25:bd:e0:42:c5:1f:90:b4:30:53:32:45:1d: 45:39:ec:27:03:e4:41:a4:47:21:90:cc:09:69:27: 39:f1:42:21:cd:d6:f1:4a:e9:13:5b:26:33:4a:52: fb:22:af:9b:9b:e1:0f:ce:47:0b:19:05:4f:43:42: 9f:0f:2a:8b:1e:e2:b3:36:ea:40:21:03:72:f4:72: b0:00:da:a6:6e:e2:a4:eb:d0:e8:c9:42:e6:55:33: 4c:bb:57:16:69:37:cb:57:66:92:d4:8e:fc:52:fc: 85:9c:9b:ff:cb:66:90:3a:27:c1:c4:8c:34:56:cb: 82:b1:ba:11:f2:a5:0f:1a:69:fd:34:a2:14:04:1f: 8f:df:ee:b5:23:13:a5:bb:34:4b:9a:86:72:b2:23: 52:62:d1:ff:d6:5b:20:67:dc:21:aa:a2:5d:3e:5b: 7d:d7:84:1d:9e:aa:23:2d:a6:87:bb:99:6a:49:59: a9:68:b5:81:23:f5:00:79:02:b4:34:1d:3c:aa:65: 3b:00:e5:5f:64:95:92:ed:cd:e5:12:00:9c:b9:f3: 62:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:41:45:EF:41:37:D8:50:C9:3A:83:8C:91:3E:5D:BE:BA:E8:C6:0B X509v3 Authority Key Identifier: keyid:D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:76:14:83:8c:2c:59:f2:17:c3:6e:e1:45:14:e9:9a:45:c7: a2:a5:58:24:a1:e6:a5:eb:49:c0:c4:53:1a:f0:be:d7:c1:45: 6c:17:fe:14:bf:8c:c9:d1:50:43:85:70:0e:0c:f9:77:19:d4: c8:a9:9d:01:d9:38:61:67:eb:70:fc:2e:67:a6:75:1b:38:03: 63:e3:bf:e6:1a:f5:88:76:f6:32:b8:33:bc:05:c7:2b:91:66: 59:bd:4b:81:29:c5:b2:e5:71:5b:b3:17:f7:fb:89:29:a1:b6: ce:f2:f5:7e:5c:22:b6:98:2e:3c:68:36:91:af:7f:ad:14:0d: c9:96:10:4b:ee:ea:7b:08:e1:60:d7:04:69:3d:1f:5b:f4:c1: 40:c6:42:33:fd:91:ab:d3:d1:2f:5c:82:3b:c1:9e:0d:73:a1: 31:2b:f5:8f:63:c1:82:86:e3:fb:ca:fe:65:9f:27:c7:26:0f: f7:81:33:9c:8d:61:5f:2f:5e:2c:7e:ae:79:7e:fc:4a:17:9e: fc:ec:b9:1b:37:48:a2:21:66:81:eb:f5:b1:a1:7f:84:37:1d: 6c:74:c5:bc:be:60:66:e6:af:56:6e:f0:38:ee:a1:08:ac:f2: f9:04:3d:85:a2:48:c3:19:d4:d0:02:76:89:25:bd:88:9b:15: 5e:1d:f5:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoWfHK5ZvZZW74F5iSG0WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOGM3OWZkMmQ2Y2M0NWVlMWI1ODBmOTNhMDUwNWM1OTdk ZjZkODkwHhcNMjYwMjA5MDkwMDIyWhcNMjYwMjEwMDkwMDIyWjAzMTEwLwYDVQQD Eyg3YzQxNDVlZjQxMzdkODUwYzkzYTgzOGM5MTNlNWRiZWJhZThjNjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbCNAo6Ec2z4FsL8Qb1JyyxUN9kS 0unnFqph25qj/j2wu8rtH/aFA7x/iDQChCW94ELFH5C0MFMyRR1FOewnA+RBpEch kMwJaSc58UIhzdbxSukTWyYzSlL7Iq+bm+EPzkcLGQVPQ0KfDyqLHuKzNupAIQNy 9HKwANqmbuKk69DoyULmVTNMu1cWaTfLV2aS1I78UvyFnJv/y2aQOifBxIw0VsuC sboR8qUPGmn9NKIUBB+P3+61IxOluzRLmoZysiNSYtH/1lsgZ9whqqJdPlt914Qd nqojLaaHu5lqSVmpaLWBI/UAeQK0NB08qmU7AOVfZJWS7c3lEgCcufNiiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxBRe9BN9hQyTqDjJE+Xb666MYLMB8GA1UdIwQY MBaAFNGMef0tbMRe4bWA+ToFBcWX322JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFl4NV9TMXN4RjdodFlENU9nVUZ4WmZmYllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wMjY2OWQtOWY2Yy00YmMxLWFlNGIt OWExMWMzNGMyZmUyLzEvMFl4NV9TMXN4RjdodFlENU9nVUZ4WmZmYllrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wMjY2OWQtOWY2Yy00YmMxLWFlNGItOWExMWMzNGMyZmUy LzEvMFl4NV9TMXN4RjdodFlENU9nVUZ4WmZmYllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXYUg4ws WfIXw27hRRTpmkXHoqVYJKHmpetJwMRTGvC+18FFbBf+FL+MydFQQ4VwDgz5dxnU yKmdAdk4YWfrcPwuZ6Z1GzgDY+O/5hr1iHb2MrgzvAXHK5FmWb1LgSnFsuVxW7MX 9/uJKaG2zvL1flwitpguPGg2ka9/rRQNyZYQS+7qewjhYNcEaT0fW/TBQMZCM/2R q9PRL1yCO8GeDXOhMSv1j2PBgobj+8r+ZZ8nxyYP94EznI1hXy9eLH6ueX78Shee /Oy5GzdIoiFmgev1saF/hDcdbHTFvL5gZuavVm7wOO6hCKzy+QQ9haJIwxnU0AJ2 iSW9iJsVXh31GQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:44 2026 by rpki-client