This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft File: yAp-jsR8rdhlNy3lA_h5DvYscUE.mft (raw, json) Hash identifier: M6Bm2Exn9dHVDxvQBkeoKHJJGQIjjOMfF9+KgHIvEW8= Subject key identifier: 05:55:EC:7F:E7:08:33:7F:83:5C:91:EE:B5:60:C3:94:2E:BC:FF:E0 Authority key identifier: C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41 Certificate issuer: /CN=c80a7e8ec47cadd865372de503f8790ef62c7141 Certificate serial: 019C43C710886EC40B7CCE7BC4F384821DD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft Manifest number: 0F04 Signing time: Mon 09 Feb 2026 19:00:45 +0000 Manifest this update: Mon 09 Feb 2026 19:00:45 +0000 Manifest next update: Tue 10 Feb 2026 19:00:45 +0000 Files and hashes: 1: yAp-jsR8rdhlNy3lA_h5DvYscUE.crl (hash: pe/oDwxG8cZmcWdl75dpXlnqBdqde9mXhIsm1inqFGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:10:88:6e:c4:0b:7c:ce:7b:c4:f3:84:82:1d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c80a7e8ec47cadd865372de503f8790ef62c7141 Validity Not Before: Feb 9 19:00:45 2026 GMT Not After : Feb 10 19:00:45 2026 GMT Subject: CN=0555ec7fe708337f835c91eeb560c3942ebcffe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:ae:eb:5f:53:ad:e6:df:1f:f4:3e:3a:f4: 63:55:91:03:f6:04:6e:68:d7:ee:8c:0f:2a:eb:2a: d5:95:f3:c2:19:ba:51:33:e3:64:25:1b:89:d8:dc: 4c:94:b7:3a:7e:81:85:c1:dd:32:32:98:24:6f:16: 8d:a0:f8:ae:6e:c9:e8:d4:e5:5e:f8:92:ea:09:00: 17:c4:2f:51:d8:36:dd:60:27:0c:c3:c1:a1:9e:48: 01:1f:e8:39:de:d3:ac:27:66:97:f7:72:86:bd:e4: 06:3b:e3:68:7e:ec:38:c6:85:86:80:5f:be:d4:0f: da:7d:71:bd:9b:a4:cb:50:02:22:1a:9b:a2:0d:58: 26:14:6a:d5:a8:64:c4:b5:10:41:ea:27:0f:0a:57: b7:7a:91:0b:c8:f1:79:49:73:31:ea:c1:f5:ff:1d: fa:f0:9e:02:05:6b:1f:db:8f:c5:c1:f0:75:f4:bf: 60:b3:a9:9e:5b:e2:c7:52:fa:ee:1f:d6:9a:71:38: 7e:ab:90:92:05:53:92:00:ac:f2:f3:4b:42:31:c4: 31:24:79:75:e0:9d:e2:39:dc:a8:9c:bc:d7:36:2b: 1d:b8:9c:2f:b4:44:27:e4:61:fc:d8:d0:c0:22:b3: f4:b1:85:de:52:50:7b:3d:03:16:f1:59:e3:cb:5f: 95:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:55:EC:7F:E7:08:33:7F:83:5C:91:EE:B5:60:C3:94:2E:BC:FF:E0 X509v3 Authority Key Identifier: keyid:C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:bb:35:e4:c9:7f:57:a0:89:7e:94:84:46:f7:20:90:b9:ad: af:91:ee:e6:f3:d0:15:b1:89:60:80:56:d2:09:6b:66:02:68: d0:92:56:67:e2:df:b4:b3:13:f2:d5:da:e6:18:fd:8f:6f:44: 72:53:51:92:c2:6e:19:a6:b9:6b:22:9e:5d:40:54:53:fe:ac: 36:79:09:3b:9c:1e:31:65:75:bf:29:7c:71:05:16:99:a9:30: 55:89:cf:17:79:6b:c3:8a:72:d6:00:c0:d1:02:24:21:42:c6: 04:a5:1d:7c:6b:8d:6f:0f:b1:c8:59:27:a6:67:e8:79:06:9d: f9:55:6e:6e:19:01:8e:d5:82:8f:9f:3e:7b:0f:ae:91:ce:34: d3:2e:c0:22:b2:e7:1b:1f:0c:d6:91:59:b4:a4:cb:cf:95:60: 73:35:9f:41:19:83:e6:b3:99:ff:50:86:8f:3e:05:c3:1a:47: 3c:38:91:34:8c:d2:0e:05:c8:fe:c0:32:2e:2c:7c:2e:ef:88: 76:2b:dc:aa:ea:51:89:11:d9:82:6d:46:f9:35:ae:0a:b0:ca: cc:e9:66:b7:0b:e1:1a:4a:7d:b9:b6:67:5b:7d:ef:85:35:4e: 5c:00:9d:1c:8f:18:a2:cf:a3:60:ed:51:3f:92:9a:7e:82:25: fc:54:16:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxxCIbsQLfM57xPOEgh3TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MGE3ZThlYzQ3Y2FkZDg2NTM3MmRlNTAzZjg3OTBlZjYy YzcxNDEwHhcNMjYwMjA5MTkwMDQ1WhcNMjYwMjEwMTkwMDQ1WjAzMTEwLwYDVQQD EygwNTU1ZWM3ZmU3MDgzMzdmODM1YzkxZWViNTYwYzM5NDJlYmNmZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8+u619TrebfH/Q+OvRjVZED9gRu aNfujA8q6yrVlfPCGbpRM+NkJRuJ2NxMlLc6foGFwd0yMpgkbxaNoPiubsno1OVe +JLqCQAXxC9R2DbdYCcMw8GhnkgBH+g53tOsJ2aX93KGveQGO+Nofuw4xoWGgF++ 1A/afXG9m6TLUAIiGpuiDVgmFGrVqGTEtRBB6icPCle3epELyPF5SXMx6sH1/x36 8J4CBWsf24/FwfB19L9gs6meW+LHUvruH9aacTh+q5CSBVOSAKzy80tCMcQxJHl1 4J3iOdyonLzXNisduJwvtEQn5GH82NDAIrP0sYXeUlB7PQMW8Vnjy1+VbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVV7H/nCDN/g1yR7rVgw5QuvP/gMB8GA1UdIwQY MBaAFMgKfo7EfK3YZTct5QP4eQ72LHFBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUFwLWpzUjhyZGhsTnkzbEFfaDVEdllzY1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9jYjViZWYtN2U4YS00MzkyLWE5YzYt ZTEyZmFiMTg1NTQwLzEveUFwLWpzUjhyZGhsTnkzbEFfaDVEdllzY1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9jYjViZWYtN2U4YS00MzkyLWE5YzYtZTEyZmFiMTg1NTQw LzEveUFwLWpzUjhyZGhsTnkzbEFfaDVEdllzY1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrs15Ml/ V6CJfpSERvcgkLmtr5Hu5vPQFbGJYIBW0glrZgJo0JJWZ+LftLMT8tXa5hj9j29E clNRksJuGaa5ayKeXUBUU/6sNnkJO5weMWV1vyl8cQUWmakwVYnPF3lrw4py1gDA 0QIkIULGBKUdfGuNbw+xyFknpmfoeQad+VVubhkBjtWCj58+ew+ukc400y7AIrLn Gx8M1pFZtKTLz5VgczWfQRmD5rOZ/1CGjz4FwxpHPDiRNIzSDgXI/sAyLix8Lu+I divcqupRiRHZgm1G+TWuCrDKzOlmtwvhGkp9ubZnW33vhTVOXACdHI8Yos+jYO1R P5KafoIl/FQWQg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:27 2026 by rpki-client