This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft File: ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft (raw, json) Hash identifier: ifRoXPW2I092679T7i5OkSI+T8FtNOV7TcSaba5Li+M= Subject key identifier: E4:11:8A:16:0A:BF:47:C6:90:8A:B8:73:19:69:5D:FB:0F:CC:14:25 Authority key identifier: C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64 Certificate issuer: /CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164 Certificate serial: 019C427D73BF510314E384E534E78E5EEA35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft Manifest number: 0F7D Signing time: Mon 09 Feb 2026 13:00:43 +0000 Manifest this update: Mon 09 Feb 2026 13:00:43 +0000 Manifest next update: Tue 10 Feb 2026 13:00:43 +0000 Files and hashes: 1: ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl (hash: OX/zdIiYBEJRL7k65Fsu3BOIlII3r5zjZ/IC2A6dS68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:73:bf:51:03:14:e3:84:e5:34:e7:8e:5e:ea:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164 Validity Not Before: Feb 9 13:00:43 2026 GMT Not After : Feb 10 13:00:43 2026 GMT Subject: CN=e4118a160abf47c6908ab87319695dfb0fcc1425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3d:48:d5:1e:cd:1f:69:66:06:0c:c1:1c:95: 6a:25:4c:17:64:09:a1:f7:86:1a:38:9d:b4:10:5a: 8b:8f:ca:7e:15:d6:d6:82:bf:a6:58:16:18:34:41: 52:27:66:74:26:16:a3:67:57:66:97:33:22:a2:2a: 2d:bc:60:dc:8e:fb:7f:96:dc:e9:76:2f:b5:46:b5: 13:d3:df:cd:41:39:9e:00:33:f6:c0:23:a0:40:91: db:6c:ef:cf:be:d8:f3:5d:67:04:9f:27:ea:c3:32: 21:35:cb:fa:18:0b:1a:07:be:96:25:06:11:b7:8f: e9:7f:58:2f:35:e9:53:c3:d5:72:95:52:f5:59:3f: 06:b1:b6:20:72:f9:6a:bb:89:ca:0d:fe:8e:c9:46: b1:2e:7d:6a:94:b5:eb:f9:c5:e2:4f:09:1e:f6:d7: 74:21:c8:9d:e1:fd:9a:68:50:a3:3a:65:79:ab:a6: f5:39:78:a6:b8:97:d6:ad:0b:ae:c2:a3:c1:2e:bf: 2f:85:3d:94:b6:d4:08:a9:92:6e:3f:4d:63:80:19: 63:53:5d:7c:ec:b6:58:fd:9e:66:a9:c2:2d:e9:82: ba:85:59:8a:3e:31:b7:09:2d:db:af:a1:fb:b3:17: b8:ec:b8:72:ad:23:95:37:3e:c0:35:6b:6e:c9:9f: ea:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:11:8A:16:0A:BF:47:C6:90:8A:B8:73:19:69:5D:FB:0F:CC:14:25 X509v3 Authority Key Identifier: keyid:C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:fd:3f:43:32:65:00:8b:1e:cb:87:ef:e4:54:8e:7f:69:89: 6a:34:0d:ad:16:d7:f5:cc:f2:c3:cb:ba:5f:af:55:d8:ec:f2: cc:a9:cd:da:c7:5b:9a:c8:68:9d:72:6b:51:0c:1b:1f:59:e4: 01:ce:8c:91:c2:f4:50:0a:51:89:60:b4:68:ae:4f:f0:2b:77: 5f:47:0d:b5:56:b7:c7:0c:8a:23:9b:54:bc:1a:2c:54:8b:c3: 4c:98:2d:79:43:bc:b5:10:71:e9:9f:3d:38:37:09:9a:08:2c: 0e:24:22:dd:ef:c6:d2:d5:13:ed:d0:46:35:bb:b4:db:52:a4: cf:6c:af:69:2a:61:f2:82:1d:66:0a:fb:e0:f3:71:07:a2:00: 19:36:4d:de:fe:61:cd:e5:a7:97:6c:15:85:65:93:18:8b:37: 56:76:cf:f1:74:31:64:99:bd:e1:87:68:77:f0:16:8d:96:da: 96:09:0b:7d:41:b8:2e:6b:7b:4c:78:f2:b2:32:69:a8:da:4b: 3d:ef:b8:71:4d:2a:9f:a2:01:38:6d:93:0a:46:b2:4d:60:92: f8:a2:01:aa:6e:ad:2e:b3:2c:81:0f:d3:97:c3:77:25:98:f7: 78:e6:e5:2a:e4:02:e3:7c:62:6b:25:e8:14:e4:37:c5:a7:d4: b7:f2:43:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfXO/UQMU44TlNOeOXuo1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZGEyZmY1YTc3ZTc4ZWVjMzAzM2RkYTU3NDlhNGE4YzFl NTUxNjQwHhcNMjYwMjA5MTMwMDQzWhcNMjYwMjEwMTMwMDQzWjAzMTEwLwYDVQQD EyhlNDExOGExNjBhYmY0N2M2OTA4YWI4NzMxOTY5NWRmYjBmY2MxNDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz1I1R7NH2lmBgzBHJVqJUwXZAmh 94YaOJ20EFqLj8p+FdbWgr+mWBYYNEFSJ2Z0JhajZ1dmlzMioiotvGDcjvt/ltzp di+1RrUT09/NQTmeADP2wCOgQJHbbO/PvtjzXWcEnyfqwzIhNcv6GAsaB76WJQYR t4/pf1gvNelTw9VylVL1WT8GsbYgcvlqu4nKDf6OyUaxLn1qlLXr+cXiTwke9td0 Icid4f2aaFCjOmV5q6b1OXimuJfWrQuuwqPBLr8vhT2UttQIqZJuP01jgBljU118 7LZY/Z5mqcIt6YK6hVmKPjG3CS3br6H7sxe47LhyrSOVNz7ANWtuyZ/q2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQRihYKv0fGkIq4cxlpXfsPzBQlMB8GA1UdIwQY MBaAFMnaL/WnfnjuwwM92ldJpKjB5VFkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRvdjlhZC1lTzdEQXozYVYwbWtxTUhsVVdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zYzA4YWUtZWI2ZC00NjA4LTgyYzMt NmMwNGE2ZWQxM2M1LzEveWRvdjlhZC1lTzdEQXozYVYwbWtxTUhsVVdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8zYzA4YWUtZWI2ZC00NjA4LTgyYzMtNmMwNGE2ZWQxM2M1 LzEveWRvdjlhZC1lTzdEQXozYVYwbWtxTUhsVVdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVv0/QzJl AIsey4fv5FSOf2mJajQNrRbX9czyw8u6X69V2OzyzKnN2sdbmshonXJrUQwbH1nk Ac6MkcL0UApRiWC0aK5P8Ct3X0cNtVa3xwyKI5tUvBosVIvDTJgteUO8tRBx6Z89 ODcJmggsDiQi3e/G0tUT7dBGNbu021Kkz2yvaSph8oIdZgr74PNxB6IAGTZN3v5h zeWnl2wVhWWTGIs3VnbP8XQxZJm94Ydod/AWjZbalgkLfUG4Lmt7THjysjJpqNpL Pe+4cU0qn6IBOG2TCkayTWCS+KIBqm6tLrMsgQ/Tl8N3JZj3eOblKuQC43xiayXo FOQ3xafUt/JD+w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:02 2026 by rpki-client