This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft File: yvIzYtwacUU22LXhQ_edraACcT0.mft (raw, json) Hash identifier: 36zomahkh8Gx/c2873rXGY7vB5bCl+LRIWaUiWSqLMg= Subject key identifier: A1:04:38:E5:33:08:84:09:92:06:F7:CA:CD:54:68:83:0E:A7:DE:FE Authority key identifier: CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D Certificate issuer: /CN=caf23362dc1a714536d8b5e143f79dada002713d Certificate serial: 019C420F64C0E64530A25798F1E88DC25092 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft Manifest number: 08F4 Signing time: Mon 09 Feb 2026 11:00:30 +0000 Manifest this update: Mon 09 Feb 2026 11:00:30 +0000 Manifest next update: Tue 10 Feb 2026 11:00:30 +0000 Files and hashes: 1: yvIzYtwacUU22LXhQ_edraACcT0.crl (hash: YvDYEHPsTai+wWp+HHO6oegkXeY3Ux1sHw83b4GXRFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:64:c0:e6:45:30:a2:57:98:f1:e8:8d:c2:50:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf23362dc1a714536d8b5e143f79dada002713d Validity Not Before: Feb 9 11:00:30 2026 GMT Not After : Feb 10 11:00:30 2026 GMT Subject: CN=a10438e5330884099206f7cacd5468830ea7defe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1a:0b:9b:c9:4d:3d:c8:14:81:10:69:d7:65: 2f:25:5a:07:e2:af:0d:9f:af:a8:70:29:b0:d7:ef: be:fc:68:f9:31:7a:d3:13:f3:47:31:29:98:ba:1a: a2:bb:7c:d3:b6:e9:b8:c2:9c:7e:7f:d8:a4:ea:1c: 34:de:a3:98:94:e2:b6:47:eb:75:20:25:9f:80:d7: 39:23:d7:9a:5b:b1:53:f1:ff:cc:be:67:79:05:5d: 6d:c9:c6:35:50:2a:0f:01:ca:1c:e8:ad:90:c1:77: 76:f8:38:5a:d1:d9:ae:f4:6f:2f:a9:f2:53:9d:58: 0d:47:fa:b9:50:b1:14:50:d8:33:b6:4d:29:1d:87: 86:9f:22:ed:ba:18:52:bd:75:6b:5b:b6:aa:1d:0f: 0d:13:76:99:2f:cb:51:09:2b:af:d4:a2:4c:3d:9b: 5c:e6:58:6b:3f:86:fd:c7:4b:85:96:4d:21:95:42: 2b:e9:fe:51:ae:47:49:9f:38:71:6c:74:b3:42:8e: ba:8c:98:57:0e:fd:7a:9d:fc:d6:6d:aa:74:75:84: 56:db:6f:1a:91:6e:bc:5d:d9:7f:ce:3a:07:f4:03: 0d:ca:b8:8c:fd:71:de:3d:64:e2:cc:fd:6f:29:d7: b0:df:d6:ba:7c:51:6e:af:45:1c:18:64:2e:37:45: f8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:04:38:E5:33:08:84:09:92:06:F7:CA:CD:54:68:83:0E:A7:DE:FE X509v3 Authority Key Identifier: keyid:CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:9e:6a:d9:34:39:af:c4:40:6e:29:d3:a9:9e:fd:2a:07:de: 35:2d:03:ec:d8:d3:40:6b:ba:19:99:2a:db:68:24:0b:7a:c9: b0:9b:18:f9:d1:35:4f:f2:9b:ea:2e:c0:94:b5:30:34:8f:b5: bd:c0:e5:9a:fe:43:b2:dc:98:cc:e6:a5:d6:cf:a4:0a:0d:9b: 5f:f8:72:28:ac:40:de:4b:2f:aa:78:85:04:42:38:13:4a:36: 32:e5:55:b3:05:af:ff:50:1f:7f:d6:78:b0:5c:cf:c3:4f:a6: 16:be:bc:d4:b6:f3:86:f4:46:7b:53:45:ba:60:e2:3d:d3:b4: 06:6f:60:3f:06:1e:46:41:04:67:4f:49:eb:0d:f0:e2:12:0f: c8:18:71:2c:35:5c:3e:65:e9:12:7e:e4:37:cf:5d:35:b7:08: 65:63:97:21:19:2a:8e:a5:ce:06:c8:9d:64:c7:d6:b6:8d:5b: c7:1d:cf:63:8d:10:59:3a:3f:9c:ee:7a:60:70:90:62:af:d6: 3a:3a:30:78:9a:f2:eb:93:72:a1:ae:a4:f8:da:b9:83:02:5b: 8d:e5:16:e1:15:bf:c4:59:45:08:1e:04:49:a8:37:99:27:e5: d1:79:20:af:f5:d1:6c:95:1c:ac:9a:37:88:ce:3b:61:46:9e: fe:6b:a4:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD2TA5kUwoleY8eiNwlCSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZjIzMzYyZGMxYTcxNDUzNmQ4YjVlMTQzZjc5ZGFkYTAw MjcxM2QwHhcNMjYwMjA5MTEwMDMwWhcNMjYwMjEwMTEwMDMwWjAzMTEwLwYDVQQD EyhhMTA0MzhlNTMzMDg4NDA5OTIwNmY3Y2FjZDU0Njg4MzBlYTdkZWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BoLm8lNPcgUgRBp12UvJVoH4q8N n6+ocCmw1+++/Gj5MXrTE/NHMSmYuhqiu3zTtum4wpx+f9ik6hw03qOYlOK2R+t1 ICWfgNc5I9eaW7FT8f/Mvmd5BV1tycY1UCoPAcoc6K2QwXd2+Dha0dmu9G8vqfJT nVgNR/q5ULEUUNgztk0pHYeGnyLtuhhSvXVrW7aqHQ8NE3aZL8tRCSuv1KJMPZtc 5lhrP4b9x0uFlk0hlUIr6f5RrkdJnzhxbHSzQo66jJhXDv16nfzWbap0dYRW228a kW68Xdl/zjoH9AMNyriM/XHePWTizP1vKdew39a6fFFur0UcGGQuN0X4JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEEOOUzCIQJkgb3ys1UaIMOp97+MB8GA1UdIwQY MBaAFMryM2LcGnFFNti14UP3na2gAnE9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9hOTBiYzQtMGIzYi00YjFiLTk5OTYt MDdhYmU4MzY5NDI4LzEveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9hOTBiYzQtMGIzYi00YjFiLTk5OTYtMDdhYmU4MzY5NDI4 LzEveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZ5q2TQ5 r8RAbinTqZ79KgfeNS0D7NjTQGu6GZkq22gkC3rJsJsY+dE1T/Kb6i7AlLUwNI+1 vcDlmv5DstyYzOal1s+kCg2bX/hyKKxA3ksvqniFBEI4E0o2MuVVswWv/1Aff9Z4 sFzPw0+mFr681LbzhvRGe1NFumDiPdO0Bm9gPwYeRkEEZ09J6w3w4hIPyBhxLDVc PmXpEn7kN89dNbcIZWOXIRkqjqXOBsidZMfWto1bxx3PY40QWTo/nO56YHCQYq/W OjoweJry65Nyoa6k+Nq5gwJbjeUW4RW/xFlFCB4ESag3mSfl0Xkgr/XRbJUcrJo3 iM47YUae/mukfA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:26 2026 by rpki-client