This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft File: Ywmu_236ieZ1g35FRSEjXJmxvi8.mft (raw, json) Hash identifier: Ym25Q9HD0LVGkoIr1FSTX2FeMxL4N1ZowmpXpzNxvkA= Subject key identifier: 77:5C:1E:19:5D:6A:9D:C5:8E:EE:57:75:07:33:85:EC:BD:D3:7E:67 Authority key identifier: 63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F Certificate issuer: /CN=6309aeff6dfa89e675837e454521235c99b1be2f Certificate serial: 019C42B459A0880E51273071A38C931BFC77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft Manifest number: 043B Signing time: Mon 09 Feb 2026 14:00:41 +0000 Manifest this update: Mon 09 Feb 2026 14:00:41 +0000 Manifest next update: Tue 10 Feb 2026 14:00:41 +0000 Files and hashes: 1: Ywmu_236ieZ1g35FRSEjXJmxvi8.crl (hash: l93WsIOjtcuXNRGruMqsIuuMkGwDFoZhz6KSsp8gW7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:59:a0:88:0e:51:27:30:71:a3:8c:93:1b:fc:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6309aeff6dfa89e675837e454521235c99b1be2f Validity Not Before: Feb 9 14:00:41 2026 GMT Not After : Feb 10 14:00:41 2026 GMT Subject: CN=775c1e195d6a9dc58eee5775073385ecbdd37e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8e:9e:08:00:c1:ce:ad:06:b5:56:8f:df:76: 24:b1:95:42:58:80:06:5b:ff:1c:36:9a:33:e8:4a: ba:55:ac:61:eb:b5:18:0d:5c:49:f0:af:59:a2:63: 71:88:2e:ae:ad:e3:7b:81:06:77:4c:c7:df:d4:46: 95:d1:85:35:2f:a8:e4:d9:17:2f:63:e4:47:53:3b: 0a:1b:da:c2:f1:4f:72:97:f9:3b:44:6f:86:d0:91: 68:fb:d9:6d:50:6f:8d:8b:af:d4:d6:09:a3:4f:4c: 26:8f:ee:e0:df:e6:8a:7e:f5:31:fd:8c:bf:5a:26: 86:b6:aa:ae:3e:51:67:53:aa:7e:7c:2d:a7:14:98: a4:3f:64:e5:0e:99:74:34:95:68:84:04:ce:d8:e5: 18:a3:db:f6:d6:b8:70:71:24:84:e2:86:b9:1e:71: cf:92:84:3e:02:47:c6:d0:de:d5:09:52:81:7a:0a: 11:19:ed:71:e5:a2:14:16:f9:69:83:56:0d:77:02: 75:c7:5a:e3:03:4a:d1:b8:fa:a0:9e:8b:d1:05:89: a7:51:c8:18:c0:0b:e5:c6:f7:93:75:e9:ec:1c:4a: 0c:a1:a1:1b:71:14:4a:77:d4:b4:e2:f3:c7:ef:f4: 64:57:d0:c6:da:36:45:2a:d3:49:c1:c1:ef:3c:47: fe:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5C:1E:19:5D:6A:9D:C5:8E:EE:57:75:07:33:85:EC:BD:D3:7E:67 X509v3 Authority Key Identifier: keyid:63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:93:3e:f6:ab:26:a2:ab:d0:a4:75:7e:d9:47:06:f6:ae:7b: 70:13:5e:7b:41:91:c1:b0:eb:14:82:18:1f:30:4f:f1:ff:55: 66:fd:0d:d3:a7:e4:da:0f:65:8d:4f:d9:67:6d:9c:19:03:a8: 97:84:86:51:ca:ad:74:f5:ab:8c:ec:ab:6a:12:e4:b8:1c:9e: 26:03:45:0f:fd:32:d9:a7:fa:9e:f7:78:a5:5e:24:1d:0e:a1: d7:9e:9a:b5:45:09:0a:15:13:98:2b:22:5f:a9:28:05:de:f9: a7:49:bd:e8:05:12:a5:d8:9f:2c:04:f4:77:72:85:ce:f8:85: de:ec:32:2b:4b:d8:85:6a:d5:91:f5:93:a9:4a:69:41:e0:8c: 6c:05:5d:d5:aa:a0:f4:06:31:c4:0c:5c:7b:a9:72:99:1d:47: 91:b5:1b:05:c7:73:2a:7d:58:b6:a6:a5:c1:9d:32:5b:9b:41: b6:c9:1d:42:e5:66:23:7c:a6:1a:4c:7d:41:a9:00:fb:92:49: d1:b5:a2:c9:c6:60:11:97:cd:37:cc:e5:76:dd:a7:ae:71:84: 1d:05:56:58:b5:5d:21:dd:52:89:92:c8:1d:8f:5c:b6:68:10: 78:d2:c1:05:7b:21:a2:9c:2e:e4:a6:18:ae:3b:a4:7b:bd:89: e1:b0:3a:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtFmgiA5RJzBxo4yTG/x3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMDlhZWZmNmRmYTg5ZTY3NTgzN2U0NTQ1MjEyMzVjOTli MWJlMmYwHhcNMjYwMjA5MTQwMDQxWhcNMjYwMjEwMTQwMDQxWjAzMTEwLwYDVQQD Eyg3NzVjMWUxOTVkNmE5ZGM1OGVlZTU3NzUwNzMzODVlY2JkZDM3ZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio6eCADBzq0GtVaP33YksZVCWIAG W/8cNpoz6Eq6Vaxh67UYDVxJ8K9ZomNxiC6ureN7gQZ3TMff1EaV0YU1L6jk2Rcv Y+RHUzsKG9rC8U9yl/k7RG+G0JFo+9ltUG+Ni6/U1gmjT0wmj+7g3+aKfvUx/Yy/ WiaGtqquPlFnU6p+fC2nFJikP2TlDpl0NJVohATO2OUYo9v21rhwcSSE4oa5HnHP koQ+AkfG0N7VCVKBegoRGe1x5aIUFvlpg1YNdwJ1x1rjA0rRuPqgnovRBYmnUcgY wAvlxveTdensHEoMoaEbcRRKd9S04vPH7/RkV9DG2jZFKtNJwcHvPEf+9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdcHhldap3Fju5XdQczhey9035nMB8GA1UdIwQY MBaAFGMJrv9t+onmdYN+RUUhI1yZsb4vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXdtdV8yMzZpZVoxZzM1RlJTRWpYSm14dmk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi83OWM1OWQtZmRiMC00Yjc3LTlhNTEt YjhkYWIyOTA4ZmYxLzEvWXdtdV8yMzZpZVoxZzM1RlJTRWpYSm14dmk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi83OWM1OWQtZmRiMC00Yjc3LTlhNTEtYjhkYWIyOTA4ZmYx LzEvWXdtdV8yMzZpZVoxZzM1RlJTRWpYSm14dmk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5M+9qsm oqvQpHV+2UcG9q57cBNee0GRwbDrFIIYHzBP8f9VZv0N06fk2g9ljU/ZZ22cGQOo l4SGUcqtdPWrjOyrahLkuByeJgNFD/0y2af6nvd4pV4kHQ6h156atUUJChUTmCsi X6koBd75p0m96AUSpdifLAT0d3KFzviF3uwyK0vYhWrVkfWTqUppQeCMbAVd1aqg 9AYxxAxce6lymR1HkbUbBcdzKn1YtqalwZ0yW5tBtskdQuVmI3ymGkx9QakA+5JJ 0bWiycZgEZfNN8zldt2nrnGEHQVWWLVdId1SiZLIHY9ctmgQeNLBBXshopwu5KYY rjuke72J4bA6lA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:16 2026 by rpki-client