This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft File: ypO97sfEJpjfaskM3cbAGzp_LEk.mft (raw, json) Hash identifier: /A9WhH4y12a+9b0kVL9DTPq7CSkgvdzXNro0zRCspCw= Subject key identifier: 81:2E:94:CA:B0:7F:06:00:EF:DD:B0:EA:4D:E6:F7:AF:99:D1:63:1F Authority key identifier: CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49 Certificate issuer: /CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49 Certificate serial: 019C413368FF025456F0158126292518831E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 07:00:14 +0000 Manifest this update: Mon 09 Feb 2026 07:00:14 +0000 Manifest next update: Tue 10 Feb 2026 07:00:14 +0000 Files and hashes: 1: ypO97sfEJpjfaskM3cbAGzp_LEk.crl (hash: 519AMLqeBPeVj7gpS3qQIU96it12WMyEYRIiiUNc7I8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:68:ff:02:54:56:f0:15:81:26:29:25:18:83:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49 Validity Not Before: Feb 9 07:00:14 2026 GMT Not After : Feb 10 07:00:14 2026 GMT Subject: CN=812e94cab07f0600efddb0ea4de6f7af99d1631f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c1:20:f4:11:5b:00:ff:bb:fa:b2:b5:e6:c0: 92:be:28:39:82:6a:bc:a0:79:56:84:03:61:11:aa: 71:a4:fd:e5:32:30:21:ab:80:05:1d:f9:3b:59:1b: d1:f8:6a:52:b4:bb:b3:5c:6f:e3:e1:3e:8f:17:4e: fe:e9:96:80:ea:88:aa:44:b4:ca:e1:dd:9a:c0:94: 50:9b:fa:75:3a:86:16:04:14:7b:9f:cc:a6:0d:7b: be:23:52:e3:12:14:64:fa:24:8b:de:e8:03:d0:fe: 5a:0a:85:16:1a:5d:89:0f:40:54:1e:76:e0:be:b7: c6:21:d4:4f:63:9a:11:57:55:a2:0a:53:95:fc:a7: 4a:ed:30:2c:a9:1b:a0:61:34:eb:f6:1c:0d:4b:36: 3f:46:a2:a0:d0:68:4e:7e:ec:8c:6d:8d:00:05:c6: 4e:cd:4e:a9:8f:c8:f4:e2:ee:15:73:03:a6:48:5a: 76:1a:0d:a1:ba:dc:5b:cc:eb:2b:7b:2e:2b:ea:9e: 4a:da:c9:fd:f8:97:ec:b0:15:8a:16:c2:98:b5:14: f5:34:8c:f8:13:78:d3:60:f5:9f:c1:35:d5:c8:b0: 5b:e8:ea:15:41:8d:ae:37:80:7d:24:72:4f:aa:a5: a5:56:c6:11:ab:5a:b7:3c:e0:ea:85:90:2d:cd:a3: ff:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2E:94:CA:B0:7F:06:00:EF:DD:B0:EA:4D:E6:F7:AF:99:D1:63:1F X509v3 Authority Key Identifier: keyid:CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a7:f9:83:2e:d2:0c:33:88:25:20:14:c7:f9:c3:9e:d2:13: 3a:a6:32:39:c3:9a:cd:b4:80:7c:29:25:36:8e:9d:ec:06:1b: b1:d4:15:f1:9d:b5:eb:47:d9:87:c2:f7:02:5e:de:29:25:15: bd:eb:66:41:6c:3e:74:b3:a8:80:76:76:8e:5c:8f:f2:1b:4b: ac:9c:6e:c1:fc:06:43:3f:56:29:71:7e:78:39:b5:5c:ad:8b: 2c:10:a7:04:f6:09:11:de:30:cb:57:34:91:55:0d:18:57:0a: d1:cc:a4:f2:38:11:de:b7:fe:4c:a4:9b:e7:d2:61:84:cc:85: f1:11:9c:00:eb:d7:73:d3:67:e2:b1:34:bc:5b:d0:9d:d8:60: e6:52:61:e9:50:40:67:6a:93:43:ae:48:db:ca:ec:e3:8c:2e: db:5b:04:06:bc:e2:7b:ae:c8:7e:92:b0:cd:da:12:ef:de:a1: 6e:cf:82:ca:08:23:6e:4c:b2:ad:8e:da:0b:bd:49:1f:fd:78: 95:d9:e7:5b:64:f2:39:66:6d:e2:2a:78:e2:08:68:1a:1a:70: 0e:eb:7b:a4:e8:e3:1d:0d:a4:f2:db:90:17:e6:59:6d:c3:7d: b2:92:c6:f3:8d:f7:ed:40:fd:a0:af:bd:07:f0:2f:0b:f6:1a: 63:76:9e:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM2j/AlRW8BWBJiklGIMeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTNiZGVlYzdjNDI2OThkZjZhYzkwY2RkYzZjMDFiM2E3 ZjJjNDkwHhcNMjYwMjA5MDcwMDE0WhcNMjYwMjEwMDcwMDE0WjAzMTEwLwYDVQQD Eyg4MTJlOTRjYWIwN2YwNjAwZWZkZGIwZWE0ZGU2ZjdhZjk5ZDE2MzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58Eg9BFbAP+7+rK15sCSvig5gmq8 oHlWhANhEapxpP3lMjAhq4AFHfk7WRvR+GpStLuzXG/j4T6PF07+6ZaA6oiqRLTK 4d2awJRQm/p1OoYWBBR7n8ymDXu+I1LjEhRk+iSL3ugD0P5aCoUWGl2JD0BUHnbg vrfGIdRPY5oRV1WiClOV/KdK7TAsqRugYTTr9hwNSzY/RqKg0GhOfuyMbY0ABcZO zU6pj8j04u4VcwOmSFp2Gg2hutxbzOsrey4r6p5K2sn9+JfssBWKFsKYtRT1NIz4 E3jTYPWfwTXVyLBb6OoVQY2uN4B9JHJPqqWlVsYRq1q3PODqhZAtzaP/1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEulMqwfwYA792w6k3m96+Z0WMfMB8GA1UdIwQY MBaAFMqTve7HxCaY32rJDN3GwBs6fyxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBPOTdzZkVKcGpmYXNrTTNjYkFHenBfTEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MDQ3NDYtYzFjMS00Y2I4LTgzZjEt ZmFmZTJkMjA2M2NhLzEveXBPOTdzZkVKcGpmYXNrTTNjYkFHenBfTEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83MDQ3NDYtYzFjMS00Y2I4LTgzZjEtZmFmZTJkMjA2M2Nh LzEveXBPOTdzZkVKcGpmYXNrTTNjYkFHenBfTEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQaf5gy7S DDOIJSAUx/nDntITOqYyOcOazbSAfCklNo6d7AYbsdQV8Z2160fZh8L3Al7eKSUV vetmQWw+dLOogHZ2jlyP8htLrJxuwfwGQz9WKXF+eDm1XK2LLBCnBPYJEd4wy1c0 kVUNGFcK0cyk8jgR3rf+TKSb59JhhMyF8RGcAOvXc9Nn4rE0vFvQndhg5lJh6VBA Z2qTQ65I28rs44wu21sEBrzie67IfpKwzdoS796hbs+CyggjbkyyrY7aC71JH/14 ldnnW2TyOWZt4ip44ghoGhpwDut7pOjjHQ2k8tuQF+ZZbcN9spLG84337UD9oK+9 B/AvC/YaY3aeyQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:41 2026 by rpki-client