This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft File: YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft (raw, json) Hash identifier: uvaOjszRHrUMtnk2xZ//2DDZtvve60uxG5WP46gChNM= Subject key identifier: 01:36:A5:F4:C3:13:9E:79:6B:B8:E4:F9:45:88:D7:1C:64:11:B7:AE Authority key identifier: 61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA Certificate issuer: /CN=61340818a8633908cf37ea145d66d92452fb73aa Certificate serial: 019C41A1AE270C64FD877C3586C54ACD3A1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft Manifest number: 0C71 Signing time: Mon 09 Feb 2026 09:00:40 +0000 Manifest this update: Mon 09 Feb 2026 09:00:40 +0000 Manifest next update: Tue 10 Feb 2026 09:00:40 +0000 Files and hashes: 1: WLy09eFH3uc2aH0cddH4hg2SKEE.roa (hash: yx78w/OQnOQhJ5Wl9aNR6GNjQgIHzbW+TJH/0ydI0BE=) 2: YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl (hash: G/npDfAv0okcjfzUI21qYU6X/4fFaoNbtNQ/YMJE88o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:ae:27:0c:64:fd:87:7c:35:86:c5:4a:cd:3a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61340818a8633908cf37ea145d66d92452fb73aa Validity Not Before: Feb 9 09:00:40 2026 GMT Not After : Feb 10 09:00:40 2026 GMT Subject: CN=0136a5f4c3139e796bb8e4f94588d71c6411b7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bf:3d:30:2f:8d:3c:be:1a:9d:0e:89:5c:8c: 89:cf:f7:fb:7f:5c:79:43:cc:5f:b4:37:1b:1a:52: 76:9a:02:25:d9:33:0c:64:75:70:5f:38:24:30:67: 86:52:93:03:14:ce:c3:5d:84:1a:92:07:3f:6a:05: 57:fc:b6:ef:00:6b:2a:7d:55:0d:9a:e5:c9:b4:53: 1c:9e:84:c2:84:b1:d2:39:ce:c8:1a:e1:f7:6b:a1: f1:22:0a:fb:4c:59:f6:65:f7:cf:cb:2c:e4:20:25: cd:82:f5:e6:69:a4:1a:d7:3e:08:90:95:b1:19:d4: bd:a8:77:af:99:94:17:72:94:b8:f4:fe:30:66:46: c8:c0:b2:a8:e6:d6:10:b9:f4:15:1d:ad:6a:08:f8: 88:9d:da:7e:7c:31:62:12:8d:a9:5f:b0:e8:5d:60: ec:88:25:04:f2:5c:31:5b:fe:1b:e6:a6:b4:4f:26: c6:45:4f:72:95:97:38:36:4c:76:53:39:e8:86:43: 8a:9b:0d:01:01:68:3d:8a:df:00:c4:2d:a7:52:a1: 03:e9:46:02:29:fa:3d:d7:74:84:c6:2c:9c:89:2a: 39:5f:64:2f:ca:4a:6d:88:32:5f:ae:05:ad:3a:4c: f7:09:b0:f4:9e:55:ca:c0:5d:0f:e8:b7:5d:47:4e: fb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:36:A5:F4:C3:13:9E:79:6B:B8:E4:F9:45:88:D7:1C:64:11:B7:AE X509v3 Authority Key Identifier: keyid:61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:82:9f:b2:82:27:77:3a:9d:71:e1:f3:d0:4a:b7:70:9d:81: c2:2e:46:bb:ea:ac:fa:47:b1:3f:59:a3:a5:54:d8:a3:cf:84: 8a:91:b1:7a:23:67:8e:48:19:75:0d:5c:92:ce:22:10:c6:3c: 6c:90:ce:d1:1a:a8:59:1c:92:b7:9e:e6:56:9d:37:a9:71:52: e8:24:48:d2:d0:81:42:a0:56:65:ad:51:9d:0a:ab:a9:d0:e1: ed:87:17:4a:de:f7:25:2e:a6:2d:e7:f6:ab:f8:bd:20:45:d1: 5d:f6:ca:4d:78:e0:bf:f3:27:cf:1f:9e:a7:f2:be:f9:c3:cd: 94:f1:16:da:f1:84:6f:b5:71:2c:e6:97:b8:f6:88:21:a8:73: 73:72:0e:47:35:72:d8:a9:51:e2:ff:e6:4b:a2:32:11:11:88: a7:83:c6:82:b7:1e:5e:27:54:bd:f1:c4:9f:7a:1a:3e:63:1b: 97:d0:6c:ee:90:66:0b:10:82:e4:21:fd:86:0b:0c:4f:23:9b: 12:2c:26:50:9c:89:80:c4:b2:00:83:75:f3:33:0e:4b:8a:8b: 11:71:cf:13:ee:74:57:91:da:cb:44:c9:ad:79:57:b0:39:0b: 8f:eb:aa:ba:e1:8f:64:f5:f5:4a:37:62:70:df:e5:e0:ae:f0: 65:54:05:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoa4nDGT9h3w1hsVKzTofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMzQwODE4YTg2MzM5MDhjZjM3ZWExNDVkNjZkOTI0NTJm YjczYWEwHhcNMjYwMjA5MDkwMDQwWhcNMjYwMjEwMDkwMDQwWjAzMTEwLwYDVQQD EygwMTM2YTVmNGMzMTM5ZTc5NmJiOGU0Zjk0NTg4ZDcxYzY0MTFiN2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs789MC+NPL4anQ6JXIyJz/f7f1x5 Q8xftDcbGlJ2mgIl2TMMZHVwXzgkMGeGUpMDFM7DXYQakgc/agVX/LbvAGsqfVUN muXJtFMcnoTChLHSOc7IGuH3a6HxIgr7TFn2ZffPyyzkICXNgvXmaaQa1z4IkJWx GdS9qHevmZQXcpS49P4wZkbIwLKo5tYQufQVHa1qCPiIndp+fDFiEo2pX7DoXWDs iCUE8lwxW/4b5qa0TybGRU9ylZc4Nkx2UznohkOKmw0BAWg9it8AxC2nUqED6UYC Kfo913SExiyciSo5X2QvykptiDJfrgWtOkz3CbD0nlXKwF0P6LddR077gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAE2pfTDE555a7jk+UWI1xxkEbeuMB8GA1UdIwQY MBaAFGE0CBioYzkIzzfqFF1m2SRS+3OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVRRSUdLaGpPUWpQTi1vVVhXYlpKRkw3YzZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8zOTFkZDctNGI5Ni00NmE1LWFmYjQt NmI2MTViN2RiZmUwLzEvWVRRSUdLaGpPUWpQTi1vVVhXYlpKRkw3YzZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8zOTFkZDctNGI5Ni00NmE1LWFmYjQtNmI2MTViN2RiZmUw LzEvWVRRSUdLaGpPUWpQTi1vVVhXYlpKRkw3YzZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4KfsoIn dzqdceHz0Eq3cJ2Bwi5Gu+qs+kexP1mjpVTYo8+EipGxeiNnjkgZdQ1cks4iEMY8 bJDO0RqoWRySt57mVp03qXFS6CRI0tCBQqBWZa1RnQqrqdDh7YcXSt73JS6mLef2 q/i9IEXRXfbKTXjgv/Mnzx+ep/K++cPNlPEW2vGEb7VxLOaXuPaIIahzc3IORzVy 2KlR4v/mS6IyERGIp4PGgrceXidUvfHEn3oaPmMbl9Bs7pBmCxCC5CH9hgsMTyOb EiwmUJyJgMSyAIN18zMOS4qLEXHPE+50V5Hay0TJrXlXsDkLj+uquuGPZPX1Sjdi cN/l4K7wZVQFcw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:58 2026 by rpki-client