This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft File: _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json) Hash identifier: +hjdx7iKkhUojTeYJlTj9IOGAjYUod3V1f9mkgzjgQc= Subject key identifier: 8A:4D:4B:C6:10:A1:B2:F3:C9:27:5D:CE:E1:53:C0:31:95:4A:AE:0B Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de Certificate serial: 019C420FD5B30A50647FC4E1913CBF22FB85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft Manifest number: 061B Signing time: Mon 09 Feb 2026 11:00:59 +0000 Manifest this update: Mon 09 Feb 2026 11:00:59 +0000 Manifest next update: Tue 10 Feb 2026 11:00:59 +0000 Files and hashes: 1: 0nWWPWTzcFI4eXCWW9KNezctiis.roa (hash: pAWgyFDAcV7gKpwPZNLLbv0IAPB9JFrQF+fLymJ/cyQ=) 2: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: 7Mr6v79GYCRp/q4GzY2opTIw8s2uBteSOVpIaERxeCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:d5:b3:0a:50:64:7f:c4:e1:91:3c:bf:22:fb:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de Validity Not Before: Feb 9 11:00:59 2026 GMT Not After : Feb 10 11:00:59 2026 GMT Subject: CN=8a4d4bc610a1b2f3c9275dcee153c031954aae0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:62:9a:c2:62:2a:9a:b5:eb:45:e7:da:27:35: f1:b0:45:6a:4a:ab:ae:9f:c3:c5:46:b4:b6:97:eb: b5:4e:42:db:8b:8c:73:81:c5:a9:c5:68:96:6f:ad: 09:50:0c:63:60:20:08:81:00:f0:57:bb:7e:ee:97: 30:5f:7c:29:9c:5c:c8:41:c1:02:0f:a5:b6:d0:01: 92:7e:98:ef:a1:4b:d8:39:ca:75:fa:2d:b3:ac:e3: 94:f5:63:97:e3:3a:26:89:6f:3b:f2:1b:70:49:fa: e5:6a:a1:33:e2:13:44:20:22:aa:6a:e1:48:2e:da: 0c:1a:b8:15:fe:68:09:49:99:fb:7c:87:99:0f:a8: 98:90:09:eb:1b:ab:6e:97:03:fb:e0:13:19:d1:f8: 03:c5:c8:a6:de:c7:72:92:b5:53:58:0e:f1:5f:c9: 47:d7:8d:52:46:a7:93:4c:ae:12:d7:11:f8:b0:1f: a5:e6:a5:b6:6d:75:78:32:a0:d2:b2:c0:d6:41:28: d6:a2:d9:25:47:e9:f1:a3:87:9d:97:9b:ba:5f:90: 11:63:5e:4d:44:2d:b7:d1:7e:d7:b3:ad:b9:4b:83: c9:4e:bd:2e:e3:dd:b7:49:4b:4c:7c:81:43:25:ca: 38:a8:63:96:c5:84:04:b0:00:f6:52:f0:8a:5c:b2: 44:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4D:4B:C6:10:A1:B2:F3:C9:27:5D:CE:E1:53:C0:31:95:4A:AE:0B X509v3 Authority Key Identifier: keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:2f:91:1b:4b:be:ad:45:f9:24:4e:2c:05:34:f4:20:bb:75: a2:90:ac:b4:0c:3a:3c:4f:0e:a2:1c:81:2a:7b:fb:5e:33:14: ea:8c:ac:72:f3:e5:91:a0:f4:52:ad:59:b5:95:80:47:b4:23: b1:c5:3b:f0:a7:3c:c8:f3:ce:20:33:93:5c:62:dc:41:a8:3c: df:3f:f8:f2:9a:31:b2:45:c3:9c:15:73:1d:3e:26:e5:9c:93: 49:18:90:71:04:be:d4:56:3f:08:8f:35:71:0e:f2:49:0b:71: 82:fc:10:b6:c2:92:ef:5e:f6:bd:dc:13:81:73:8a:9e:30:75: 41:11:43:c3:30:d0:9e:60:2d:8d:09:19:54:87:ca:b7:35:5a: 1f:fb:61:77:7b:bc:30:e8:f4:f4:7d:4d:5c:83:7c:bb:bd:8c: 03:53:94:82:3c:3e:fa:6c:66:d1:26:5f:01:cd:a7:3a:ac:cd: 18:bc:f3:b3:1f:ff:90:f4:ac:75:2b:e9:df:45:3d:b9:ea:fe: 6b:64:0e:a3:9c:35:4d:b0:8b:9c:a4:b0:8b:46:57:84:20:24: 91:4f:0d:95:8e:ce:1e:ee:df:8a:26:f9:f4:2c:08:01:f5:c9: 11:45:a7:75:eb:ec:b0:ad:94:6f:89:af:96:67:f0:6f:2a:94: 3b:84:e3:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD9WzClBkf8ThkTy/IvuFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMjlhNGIzZjBhM2FmOGJiZWQ2MDI5YThiMjY1ZGM5MzIw NGU3ZGUwHhcNMjYwMjA5MTEwMDU5WhcNMjYwMjEwMTEwMDU5WjAzMTEwLwYDVQQD Eyg4YTRkNGJjNjEwYTFiMmYzYzkyNzVkY2VlMTUzYzAzMTk1NGFhZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mKawmIqmrXrRefaJzXxsEVqSquu n8PFRrS2l+u1TkLbi4xzgcWpxWiWb60JUAxjYCAIgQDwV7t+7pcwX3wpnFzIQcEC D6W20AGSfpjvoUvYOcp1+i2zrOOU9WOX4zomiW878htwSfrlaqEz4hNEICKqauFI LtoMGrgV/mgJSZn7fIeZD6iYkAnrG6tulwP74BMZ0fgDxcim3sdykrVTWA7xX8lH 141SRqeTTK4S1xH4sB+l5qW2bXV4MqDSssDWQSjWotklR+nxo4edl5u6X5ARY15N RC230X7Xs625S4PJTr0u4923SUtMfIFDJco4qGOWxYQEsAD2UvCKXLJEGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpNS8YQobLzySddzuFTwDGVSq4LMB8GA1UdIwQY MBaAFP8ppLPwo6+LvtYCmosmXckyBOfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kN2E0ODQtM2Q0YS00OGJmLWI1MTYt Y2FmMmY3YTViNWY0LzEvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9kN2E0ODQtM2Q0YS00OGJmLWI1MTYtY2FmMmY3YTViNWY0 LzEvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYi+RG0u+ rUX5JE4sBTT0ILt1opCstAw6PE8OohyBKnv7XjMU6oyscvPlkaD0Uq1ZtZWAR7Qj scU78Kc8yPPOIDOTXGLcQag83z/48poxskXDnBVzHT4m5ZyTSRiQcQS+1FY/CI81 cQ7ySQtxgvwQtsKS7172vdwTgXOKnjB1QRFDwzDQnmAtjQkZVIfKtzVaH/thd3u8 MOj09H1NXIN8u72MA1OUgjw++mxm0SZfAc2nOqzNGLzzsx//kPSsdSvp30U9uer+ a2QOo5w1TbCLnKSwi0ZXhCAkkU8NlY7OHu7fiib59CwIAfXJEUWndevssK2Ub4mv lmfwbyqUO4TjsA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:40:41 2026 by rpki-client