This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json) Hash identifier: 3Bh+Nza+JEWhfHN3ljJKj9jyKiXzT+GAIrJ9SpjHQQQ= Subject key identifier: 29:9A:32:FB:1E:98:88:F5:AC:23:F6:DF:3E:87:03:28:F6:71:50:8F Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e Certificate serial: 019C42460EFF08A14F295E3D61DE87831550 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft Manifest number: 0EF8 Signing time: Mon 09 Feb 2026 12:00:13 +0000 Manifest this update: Mon 09 Feb 2026 12:00:13 +0000 Manifest next update: Tue 10 Feb 2026 12:00:13 +0000 Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: Kh4rMm4YUtE5doW1e8G6b2y5bHnDxYcygUdz42ns+k0=) 2: XpDHF6qNAfRig2NmPZIIBwNiNAU.roa (hash: 9bFU4KF8zp5CMrxC2WFBFW2SFIScv756NVWyJZFeI1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:0e:ff:08:a1:4f:29:5e:3d:61:de:87:83:15:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e Validity Not Before: Feb 9 12:00:13 2026 GMT Not After : Feb 10 12:00:13 2026 GMT Subject: CN=299a32fb1e9888f5ac23f6df3e870328f671508f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:50:43:b5:31:1c:e8:bb:53:04:00:57:81: fb:ed:32:fe:b5:a4:e0:9f:1f:e8:4d:da:e6:87:b7: ae:86:f2:6c:94:07:88:87:03:a9:d8:68:61:7b:2a: 86:f8:fe:5d:55:dd:ea:65:02:4e:07:dd:08:46:dd: d2:9a:06:52:63:c6:6a:33:89:5d:dd:ca:a2:d7:71: e4:50:18:ec:65:d2:22:63:2b:23:2f:a3:af:61:d3: 69:0e:13:6f:a6:ca:9f:5e:56:ec:d6:b6:d8:54:4c: a7:8d:d4:0a:62:f7:4a:f5:69:ec:c7:1a:81:e6:d1: 6c:d3:2f:36:74:52:25:c0:89:71:31:3c:11:20:73: bc:20:0a:3b:96:15:10:4b:66:34:8c:4a:72:a1:7c: e3:ee:37:a6:e8:57:c3:34:02:0d:97:0d:e1:60:76: 4f:fb:56:3e:b0:41:86:07:ec:28:95:8f:b1:43:26: 68:12:90:25:46:e4:5d:b1:4f:31:9c:5d:56:7b:2a: 33:64:35:4b:14:6d:bd:2a:52:f7:ea:8b:f6:86:a7: ee:d9:1c:ac:3e:39:d3:2b:0e:8e:af:3d:3f:fd:6e: 8a:81:65:e6:0e:92:f7:07:ec:b1:56:bc:6c:ea:c3: 84:a8:f7:6b:c8:ba:d8:ff:e2:44:ae:f9:17:2f:e9: d7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9A:32:FB:1E:98:88:F5:AC:23:F6:DF:3E:87:03:28:F6:71:50:8F X509v3 Authority Key Identifier: keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:3a:c3:ad:70:d4:b0:e7:d8:57:ee:c7:aa:12:10:a1:25:60: 0b:29:9e:c1:61:d5:ed:a2:6d:60:0c:9c:bd:ce:ab:5f:da:e2: bf:85:c8:5b:b3:24:00:17:cc:d0:b6:94:a9:f3:a4:fa:dd:9e: ce:4e:52:0c:5a:0c:df:ac:59:a4:30:f8:83:c7:e1:bc:81:cf: 21:9e:b5:c8:d5:b3:43:cf:fd:16:ad:b5:3c:99:52:27:fd:85: c7:a1:f2:51:7d:ec:82:de:24:03:b6:29:c1:4f:69:02:a3:20: ca:55:f6:4d:fb:7e:a2:32:3c:dd:4b:5a:35:39:4e:e1:a1:84: 72:38:19:4f:9f:44:00:c8:a8:4b:c4:e9:da:51:24:69:d2:4a: 9b:03:77:7d:9c:b8:d2:ff:99:b6:ad:e2:7d:65:3d:3e:62:b9: a0:53:19:26:24:b6:e5:89:45:65:82:28:32:60:b5:4c:a0:ae: d7:a2:16:bc:7a:73:7b:53:08:0f:a7:d4:ee:75:c9:de:d4:af: 84:fe:78:e8:d5:09:da:2d:34:82:5d:6d:a1:dc:14:2c:86:49: 4b:ba:7c:1b:06:4e:55:7b:09:f0:98:fa:dd:b2:1f:76:86:98: 9b:26:9e:28:ca:40:03:74:00:93:2a:f8:d0:9b:05:e2:8d:93: f7:02:9c:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRg7/CKFPKV49Yd6HgxVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkODg5ZmFkYWU3YmYyMTA3MmZhZGIzMmUxZWE3NjNiMGMy OTk0OGUwHhcNMjYwMjA5MTIwMDEzWhcNMjYwMjEwMTIwMDEzWjAzMTEwLwYDVQQD EygyOTlhMzJmYjFlOTg4OGY1YWMyM2Y2ZGYzZTg3MDMyOGY2NzE1MDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAtQQ7UxHOi7UwQAV4H77TL+taTg nx/oTdrmh7euhvJslAeIhwOp2GhheyqG+P5dVd3qZQJOB90IRt3SmgZSY8ZqM4ld 3cqi13HkUBjsZdIiYysjL6OvYdNpDhNvpsqfXlbs1rbYVEynjdQKYvdK9WnsxxqB 5tFs0y82dFIlwIlxMTwRIHO8IAo7lhUQS2Y0jEpyoXzj7jem6FfDNAINlw3hYHZP +1Y+sEGGB+wolY+xQyZoEpAlRuRdsU8xnF1WeyozZDVLFG29KlL36ov2hqfu2Rys PjnTKw6Orz0//W6KgWXmDpL3B+yxVrxs6sOEqPdryLrY/+JErvkXL+nXdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmaMvsemIj1rCP23z6HAyj2cVCPMB8GA1UdIwQY MBaAFA2In62ue/IQcvrbMuHqdjsMKZSOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZTRiNzgtYWI5NC00NDljLWE0ZDUt YWJkYjYzYWNlN2U3LzEvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82ZTRiNzgtYWI5NC00NDljLWE0ZDUtYWJkYjYzYWNlN2U3 LzEvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTrDrXDU sOfYV+7HqhIQoSVgCymewWHV7aJtYAycvc6rX9riv4XIW7MkABfM0LaUqfOk+t2e zk5SDFoM36xZpDD4g8fhvIHPIZ61yNWzQ8/9Fq21PJlSJ/2Fx6HyUX3sgt4kA7Yp wU9pAqMgylX2Tft+ojI83UtaNTlO4aGEcjgZT59EAMioS8Tp2lEkadJKmwN3fZy4 0v+Ztq3ifWU9PmK5oFMZJiS25YlFZYIoMmC1TKCu16IWvHpze1MID6fU7nXJ3tSv hP546NUJ2i00gl1todwULIZJS7p8GwZOVXsJ8Jj63bIfdoaYmyaeKMpAA3QAkyr4 0JsF4o2T9wKcEA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:45:00 2026 by rpki-client