This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft File: ypQrJwZ2HCunUyiXg-35heM48Xc.mft (raw, json) Hash identifier: 5WptQwfK/rwpnAM9fY1fop6P3psawNcl6EMKABEKuMc= Subject key identifier: 25:16:E6:C7:4B:AD:5D:24:24:7F:F8:1A:CE:3B:BE:53:23:1B:70:11 Authority key identifier: CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77 Certificate issuer: /CN=ca942b2706761c2ba753289783edf985e338f177 Certificate serial: 019C43FE642E54B485CC4C28507D7A515C9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft Manifest number: 0D9E Signing time: Mon 09 Feb 2026 20:01:10 +0000 Manifest this update: Mon 09 Feb 2026 20:01:10 +0000 Manifest next update: Tue 10 Feb 2026 20:01:10 +0000 Files and hashes: 1: nEZjRqy_IwSXLZe3qFcr_H8crVs.roa (hash: HnhhwXUkjtked8MCegHmBPoKwaPIPxEWmVxgxvO0rNE=) 2: ypQrJwZ2HCunUyiXg-35heM48Xc.crl (hash: UyrFyTk/feDVLMjMR2dke9zsl1AxsmTJF98RPeZImRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:64:2e:54:b4:85:cc:4c:28:50:7d:7a:51:5c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca942b2706761c2ba753289783edf985e338f177 Validity Not Before: Feb 9 20:01:10 2026 GMT Not After : Feb 10 20:01:10 2026 GMT Subject: CN=2516e6c74bad5d24247ff81ace3bbe53231b7011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:94:21:89:04:da:57:70:ac:25:0a:47:98:ea: d6:47:ba:a2:ae:da:93:d1:62:db:29:bd:5f:fa:5e: f1:e4:09:3d:81:55:f5:be:05:d9:92:2b:3e:32:ec: ef:a0:9f:84:f2:f4:66:65:e8:07:c7:65:8b:b1:58: 58:0f:aa:a0:ca:c6:6c:6b:4c:e0:f4:46:d5:5b:7d: 02:74:f2:fb:42:53:b1:d3:02:22:86:84:bf:81:6b: 3b:6f:32:ce:f3:75:3f:72:df:b0:99:30:d4:a1:ec: 78:65:46:41:9c:b9:12:f4:13:31:e8:a6:79:6e:c1: a7:d6:40:16:f4:f8:b0:84:e3:eb:15:08:b6:07:26: 52:53:e9:63:13:9e:66:01:68:b4:bc:a0:f1:1d:28: 57:0c:4a:5d:d8:17:1f:6c:af:84:2a:f0:f8:07:51: dc:5a:b6:33:e8:11:9c:43:5e:8a:ff:1d:52:71:de: 22:8b:7f:dc:9a:07:b3:e0:6d:24:c4:b3:03:f7:75: 3c:fc:3e:a0:31:11:0a:a0:6e:4a:35:2b:7b:e4:ef: 1c:9d:c1:97:c5:2d:34:33:e2:a2:b6:87:8a:93:e4: 8d:bd:0c:c2:83:8f:16:d8:36:82:f9:10:ee:9f:8a: ad:a4:e3:f7:0c:94:7f:82:ff:cc:e3:66:ea:53:31: c8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:16:E6:C7:4B:AD:5D:24:24:7F:F8:1A:CE:3B:BE:53:23:1B:70:11 X509v3 Authority Key Identifier: keyid:CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:b7:50:67:62:bf:7e:d6:e7:f9:b4:5e:e6:ab:9e:e2:20:6f: 15:17:27:98:d8:4b:96:6f:b9:ef:df:eb:7a:8f:2e:e4:d4:39: 20:d4:9a:d7:56:f2:98:b0:06:3c:95:92:16:85:d2:70:23:01: 75:d7:c7:93:d4:f6:fc:03:e4:09:10:5d:f3:29:9b:45:48:69: 79:eb:9f:66:73:c5:eb:31:77:9d:aa:3d:d3:f3:32:2d:79:bf: 43:2b:0a:17:ef:af:cc:3b:cb:6e:9a:ac:14:81:c6:00:a5:b7: 6b:99:7f:51:10:8a:9a:8e:a9:36:11:b5:f5:26:7c:bf:9f:8e: e0:6b:00:b7:76:b4:5d:4c:af:3e:91:57:83:87:48:5b:34:d4: 3c:85:32:2e:05:54:98:4c:e9:da:9e:4d:12:27:a4:28:2e:97: 97:1b:d0:fb:a0:dd:e6:10:47:09:f0:f1:17:eb:4d:ec:19:22: 97:69:0f:1e:0f:45:d8:af:58:fb:11:f3:df:9c:ab:16:44:44: 38:ee:4c:18:9f:55:3e:bc:6e:a8:1e:88:7b:2f:ce:ba:e2:7d: 15:aa:45:b2:06:d3:ef:d0:ff:b0:9b:2c:60:18:05:4d:04:90: 6c:7f:c8:fa:a4:56:ec:0a:28:ce:1b:48:2a:34:94:02:dc:98: c6:03:59:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/mQuVLSFzEwoUH16UVycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTQyYjI3MDY3NjFjMmJhNzUzMjg5NzgzZWRmOTg1ZTMz OGYxNzcwHhcNMjYwMjA5MjAwMTEwWhcNMjYwMjEwMjAwMTEwWjAzMTEwLwYDVQQD EygyNTE2ZTZjNzRiYWQ1ZDI0MjQ3ZmY4MWFjZTNiYmU1MzIzMWI3MDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pQhiQTaV3CsJQpHmOrWR7qirtqT 0WLbKb1f+l7x5Ak9gVX1vgXZkis+MuzvoJ+E8vRmZegHx2WLsVhYD6qgysZsa0zg 9EbVW30CdPL7QlOx0wIihoS/gWs7bzLO83U/ct+wmTDUoex4ZUZBnLkS9BMx6KZ5 bsGn1kAW9PiwhOPrFQi2ByZSU+ljE55mAWi0vKDxHShXDEpd2BcfbK+EKvD4B1Hc WrYz6BGcQ16K/x1Scd4ii3/cmgez4G0kxLMD93U8/D6gMREKoG5KNSt75O8cncGX xS00M+KitoeKk+SNvQzCg48W2DaC+RDun4qtpOP3DJR/gv/M42bqUzHIkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUW5sdLrV0kJH/4Gs47vlMjG3ARMB8GA1UdIwQY MBaAFMqUKycGdhwrp1Mol4Pt+YXjOPF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBRckp3WjJIQ3VuVXlpWGctMzVoZU00OFhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iOGMxM2QtZTdkMy00YWE5LWE5MTEt ZWQ2NDgwNTk3N2YwLzEveXBRckp3WjJIQ3VuVXlpWGctMzVoZU00OFhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9iOGMxM2QtZTdkMy00YWE5LWE5MTEtZWQ2NDgwNTk3N2Yw LzEveXBRckp3WjJIQ3VuVXlpWGctMzVoZU00OFhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrdQZ2K/ ftbn+bRe5que4iBvFRcnmNhLlm+579/reo8u5NQ5INSa11bymLAGPJWSFoXScCMB ddfHk9T2/APkCRBd8ymbRUhpeeufZnPF6zF3nao90/MyLXm/QysKF++vzDvLbpqs FIHGAKW3a5l/URCKmo6pNhG19SZ8v5+O4GsAt3a0XUyvPpFXg4dIWzTUPIUyLgVU mEzp2p5NEiekKC6XlxvQ+6Dd5hBHCfDxF+tN7Bkil2kPHg9F2K9Y+xHz35yrFkRE OO5MGJ9VPrxuqB6Iey/OuuJ9FapFsgbT79D/sJssYBgFTQSQbH/I+qRW7AoozhtI KjSUAtyYxgNZlg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:20 2026 by rpki-client