This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft File: yZdYjBhO3XIdCQotqVwm4aKMBRE.mft (raw, json) Hash identifier: wvDr23gJW7U7BlVnVbWb9uG8V6MnUJQNIDCz0PsYtCw= Subject key identifier: B5:D7:2E:7C:84:77:AE:96:73:E8:DC:E1:21:B0:57:40:82:8A:66:FC Authority key identifier: C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11 Certificate issuer: /CN=c997588c184edd721d090a2da95c26e1a28c0511 Certificate serial: 019C42468AC795AE41C2ED488ADDA6E0BEF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft Manifest number: 031F Signing time: Mon 09 Feb 2026 12:00:45 +0000 Manifest this update: Mon 09 Feb 2026 12:00:45 +0000 Manifest next update: Tue 10 Feb 2026 12:00:45 +0000 Files and hashes: 1: yZdYjBhO3XIdCQotqVwm4aKMBRE.crl (hash: VqggOlqGYdsRkCDELuWNk2vohH4GRGjx3tb9PiQtnWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:8a:c7:95:ae:41:c2:ed:48:8a:dd:a6:e0:be:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c997588c184edd721d090a2da95c26e1a28c0511 Validity Not Before: Feb 9 12:00:45 2026 GMT Not After : Feb 10 12:00:45 2026 GMT Subject: CN=b5d72e7c8477ae9673e8dce121b05740828a66fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:da:75:3a:dc:16:61:a8:4d:0a:25:09:5a:df: a1:ac:86:d7:53:02:37:9e:e7:ed:9a:36:8e:24:29: a6:90:f7:01:aa:ea:39:d2:d3:df:d7:05:9c:bc:c6: 7d:da:48:28:45:72:5e:07:f2:4f:bb:e1:5e:0a:9f: 2b:59:df:5e:c5:36:39:a9:b3:3a:8f:fd:d7:88:bc: f0:3f:42:5a:5d:78:55:73:4c:86:8b:60:3d:d0:70: 12:9f:87:f4:83:92:3c:8e:fe:1b:59:c7:a6:81:6e: 6d:d8:b7:84:9d:50:c7:dd:39:37:7b:7e:a8:56:e7: 4c:9a:e2:f8:77:16:7b:c5:70:31:5a:73:d9:25:a7: 8a:75:36:d3:a8:85:e1:90:18:82:b3:ed:00:c3:32: 12:7f:b2:05:c2:b5:1f:a0:69:77:ae:4b:5c:3b:95: 47:ab:18:f6:83:38:45:d2:74:52:45:2b:4b:03:f6: 3f:ba:3c:c7:05:7e:f9:85:2a:91:3b:ae:d8:1a:be: 48:f9:fc:9d:b9:52:18:fb:4b:25:ec:99:15:f8:6c: 06:24:1e:e6:62:71:4b:87:c5:d4:5b:c3:0a:ba:c1: e2:22:e2:f8:23:e0:19:b3:20:49:ad:f6:3c:99:02: b7:6a:06:d4:5a:a9:59:35:f6:84:1b:74:ac:85:a8: 80:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D7:2E:7C:84:77:AE:96:73:E8:DC:E1:21:B0:57:40:82:8A:66:FC X509v3 Authority Key Identifier: keyid:C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:6c:10:4c:2e:00:ae:4c:20:88:9a:9a:9b:bc:50:de:7d:31: ce:b4:e0:3d:c8:eb:6c:50:85:5d:06:46:77:32:77:97:02:42: 4d:8a:e3:b3:a6:19:45:5b:5a:40:da:08:b0:3e:6e:0f:6f:e7: 64:e5:59:c8:6f:7b:63:6c:3a:a9:90:c6:d4:61:8b:bd:17:33: 3a:71:95:86:a4:fc:18:8a:ee:ba:f0:95:a3:f5:4b:14:02:2d: 59:1d:81:4c:62:9f:3e:f4:08:9d:64:13:2a:83:c8:ba:3a:b6: 6d:47:35:e7:d1:68:f9:75:ac:5a:fa:bc:1e:89:13:15:d7:71: 3e:48:ef:f4:94:53:4c:44:1b:9a:3b:f5:46:01:ca:b7:8e:71: 03:bc:f5:7c:9c:f5:7a:97:ad:bf:78:c8:61:2c:b1:dc:20:56: d2:82:3e:2d:6f:0a:71:4b:88:e9:41:b4:81:42:b1:29:90:05: c2:e3:9a:4b:d4:f3:a9:dc:82:3b:e6:03:de:73:bd:9a:ad:d8: 90:6f:f1:96:e3:c8:fd:70:af:17:76:59:f5:7f:91:90:5d:61: 74:4f:7b:97:df:72:a9:64:92:c1:a6:14:47:38:7b:b8:d5:d2: 1e:be:e1:ad:e6:c7:18:5a:0d:1b:27:f8:53:7d:14:38:55:d5: 08:75:c2:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRorHla5Bwu1Iit2m4L74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OTc1ODhjMTg0ZWRkNzIxZDA5MGEyZGE5NWMyNmUxYTI4 YzA1MTEwHhcNMjYwMjA5MTIwMDQ1WhcNMjYwMjEwMTIwMDQ1WjAzMTEwLwYDVQQD EyhiNWQ3MmU3Yzg0NzdhZTk2NzNlOGRjZTEyMWIwNTc0MDgyOGE2NmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9p1OtwWYahNCiUJWt+hrIbXUwI3 nuftmjaOJCmmkPcBquo50tPf1wWcvMZ92kgoRXJeB/JPu+FeCp8rWd9exTY5qbM6 j/3XiLzwP0JaXXhVc0yGi2A90HASn4f0g5I8jv4bWcemgW5t2LeEnVDH3Tk3e36o VudMmuL4dxZ7xXAxWnPZJaeKdTbTqIXhkBiCs+0AwzISf7IFwrUfoGl3rktcO5VH qxj2gzhF0nRSRStLA/Y/ujzHBX75hSqRO67YGr5I+fyduVIY+0sl7JkV+GwGJB7m YnFLh8XUW8MKusHiIuL4I+AZsyBJrfY8mQK3agbUWqlZNfaEG3SshaiAAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXXLnyEd66Wc+jc4SGwV0CCimb8MB8GA1UdIwQY MBaAFMmXWIwYTt1yHQkKLalcJuGijAURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVpkWWpCaE8zWElkQ1FvdHFWd200YUtNQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82MWNjNzgtMGQ0MC00MDRhLTlkMWQt YTBlOTQwZDI5OTFmLzEveVpkWWpCaE8zWElkQ1FvdHFWd200YUtNQlJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82MWNjNzgtMGQ0MC00MDRhLTlkMWQtYTBlOTQwZDI5OTFm LzEveVpkWWpCaE8zWElkQ1FvdHFWd200YUtNQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGwQTC4A rkwgiJqam7xQ3n0xzrTgPcjrbFCFXQZGdzJ3lwJCTYrjs6YZRVtaQNoIsD5uD2/n ZOVZyG97Y2w6qZDG1GGLvRczOnGVhqT8GIruuvCVo/VLFAItWR2BTGKfPvQInWQT KoPIujq2bUc159Fo+XWsWvq8HokTFddxPkjv9JRTTEQbmjv1RgHKt45xA7z1fJz1 epetv3jIYSyx3CBW0oI+LW8KcUuI6UG0gUKxKZAFwuOaS9TzqdyCO+YD3nO9mq3Y kG/xluPI/XCvF3ZZ9X+RkF1hdE97l99yqWSSwaYURzh7uNXSHr7hrebHGFoNGyf4 U30UOFXVCHXCNw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:55 2026 by rpki-client