This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft File: yQs5SsYzN2B_obsOq6EUU6gx85g.mft (raw, json) Hash identifier: hH/zrHfuusv3y0FKL8KbpGQcRVcQOL/Gz3rt6MB+Hk8= Subject key identifier: 59:1E:14:D6:16:2C:A9:3A:75:7F:9A:B5:1F:F3:CE:88:A7:25:B1:A2 Authority key identifier: C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98 Certificate issuer: /CN=c90b394ac63337607fa1bb0eaba11453a831f398 Certificate serial: 019C4246BA4A5C3CDBBFFD33363C38242B2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft Manifest number: 0EAE Signing time: Mon 09 Feb 2026 12:00:57 +0000 Manifest this update: Mon 09 Feb 2026 12:00:57 +0000 Manifest next update: Tue 10 Feb 2026 12:00:57 +0000 Files and hashes: 1: XsUKN2cOhLRHhR3AtKfxWQhi9jo.roa (hash: 6oB/bvwt2D2mFpVBEQFtPNnqH7Wf192r6bul35x6h9A=) 2: yQs5SsYzN2B_obsOq6EUU6gx85g.crl (hash: rnlk9q9s93i4Jy7Ob1K+harzBZQg8LKjJUIvZM0Psgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:ba:4a:5c:3c:db:bf:fd:33:36:3c:38:24:2b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c90b394ac63337607fa1bb0eaba11453a831f398 Validity Not Before: Feb 9 12:00:57 2026 GMT Not After : Feb 10 12:00:57 2026 GMT Subject: CN=591e14d6162ca93a757f9ab51ff3ce88a725b1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d0:28:e6:20:ce:43:02:ef:a6:a9:8f:3a:19: da:ce:6f:23:cd:a8:70:58:3c:91:75:94:46:32:c9: ec:58:c3:36:f0:ff:60:4a:aa:c5:d5:e4:61:9e:c3: c4:10:37:0a:cb:fc:9a:6c:d5:ae:c2:da:b2:dd:99: d7:a6:58:03:81:3d:7c:50:52:75:fc:c8:43:a0:1c: 3f:93:d5:e9:06:27:41:c1:52:8a:40:a8:2e:87:f6: 31:dd:9a:f8:01:a6:b3:8a:8d:59:9e:a3:c5:d3:03: 70:72:64:5e:8f:23:7c:8b:9f:77:8d:79:c6:df:8f: e2:7a:62:97:a2:e7:ec:5b:69:63:bb:9d:8e:e7:72: 1f:14:ad:9e:16:89:4c:ca:34:59:4a:f3:88:72:ad: db:e7:d9:73:54:51:fb:a2:85:02:65:38:04:22:85: 5e:d0:21:ef:e6:ed:40:ef:e8:b1:a4:94:60:f3:88: a6:de:7f:49:9e:6f:7d:e4:f6:a4:12:79:68:5f:63: 57:4a:87:2b:d2:c9:9d:89:6f:f9:ed:f3:fe:bf:d0: ca:d1:7c:9d:64:2a:eb:05:53:78:c2:6a:02:ff:7f: 08:40:7e:1a:3a:8e:da:c1:8c:e7:1a:07:95:c8:53: 26:e6:85:9d:98:69:4b:9b:27:8c:cd:a7:cf:5a:64: 79:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1E:14:D6:16:2C:A9:3A:75:7F:9A:B5:1F:F3:CE:88:A7:25:B1:A2 X509v3 Authority Key Identifier: keyid:C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:de:cc:8a:b9:ab:74:59:b6:fc:7b:76:75:d3:59:4b:07:d5: 46:10:98:28:61:40:f6:f6:5c:92:b7:6e:4c:d4:13:74:18:85: 74:6c:40:a3:97:60:a1:ca:01:ea:97:aa:c2:99:b9:1e:a1:e5: 54:45:94:04:c3:81:84:36:33:6d:96:63:2c:f3:ee:44:7a:af: d5:06:27:5c:b6:3c:ab:08:7d:bf:76:bb:30:dd:25:2a:5b:28: ee:a1:38:fb:0f:c2:83:89:9a:7e:49:b9:8c:1d:bd:37:dc:a6: 0b:7d:60:9d:5a:f5:00:85:f4:fe:df:f7:6c:c0:a7:29:4a:00: d8:53:ed:a1:9d:06:03:36:ce:0c:62:af:93:f5:7c:e7:db:31: 8f:98:f3:9b:ed:a9:bb:74:aa:65:fd:19:8e:17:01:d4:71:dd: 3e:85:4a:12:e9:1c:5e:d0:89:ee:f7:83:0a:14:07:70:ad:b8: 77:ea:bb:c4:b9:fe:a8:0f:cf:7d:2c:c3:44:01:27:9e:1a:b9: 55:f5:a5:a3:ee:e3:30:d5:8a:b1:57:1e:8a:56:94:55:a4:19: bc:75:b4:53:1c:b2:07:0b:27:b1:ee:40:6f:2f:fe:28:85:f9: 83:62:b9:02:17:a3:ef:e0:b6:60:66:04:f5:11:5a:d6:09:aa: ab:91:38:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRrpKXDzbv/0zNjw4JCstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MGIzOTRhYzYzMzM3NjA3ZmExYmIwZWFiYTExNDUzYTgz MWYzOTgwHhcNMjYwMjA5MTIwMDU3WhcNMjYwMjEwMTIwMDU3WjAzMTEwLwYDVQQD Eyg1OTFlMTRkNjE2MmNhOTNhNzU3ZjlhYjUxZmYzY2U4OGE3MjViMWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9Ao5iDOQwLvpqmPOhnazm8jzahw WDyRdZRGMsnsWMM28P9gSqrF1eRhnsPEEDcKy/yabNWuwtqy3ZnXplgDgT18UFJ1 /MhDoBw/k9XpBidBwVKKQKguh/Yx3Zr4Aaazio1ZnqPF0wNwcmRejyN8i593jXnG 34/iemKXoufsW2lju52O53IfFK2eFolMyjRZSvOIcq3b59lzVFH7ooUCZTgEIoVe 0CHv5u1A7+ixpJRg84im3n9Jnm995PakEnloX2NXSocr0smdiW/57fP+v9DK0Xyd ZCrrBVN4wmoC/38IQH4aOo7awYznGgeVyFMm5oWdmGlLmyeMzafPWmR5JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkeFNYWLKk6dX+atR/zzoinJbGiMB8GA1UdIwQY MBaAFMkLOUrGMzdgf6G7DquhFFOoMfOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVFzNVNzWXpOMkJfb2JzT3E2RVVVNmd4ODVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83ZDc4NGItNjYzOS00YmMwLTlhYjkt MWEyMDBlNDFiMDA2LzEveVFzNVNzWXpOMkJfb2JzT3E2RVVVNmd4ODVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni83ZDc4NGItNjYzOS00YmMwLTlhYjktMWEyMDBlNDFiMDA2 LzEveVFzNVNzWXpOMkJfb2JzT3E2RVVVNmd4ODVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgd7Mirmr dFm2/Ht2ddNZSwfVRhCYKGFA9vZckrduTNQTdBiFdGxAo5dgocoB6peqwpm5HqHl VEWUBMOBhDYzbZZjLPPuRHqv1QYnXLY8qwh9v3a7MN0lKlso7qE4+w/Cg4mafkm5 jB29N9ymC31gnVr1AIX0/t/3bMCnKUoA2FPtoZ0GAzbODGKvk/V859sxj5jzm+2p u3SqZf0ZjhcB1HHdPoVKEukcXtCJ7veDChQHcK24d+q7xLn+qA/PfSzDRAEnnhq5 VfWlo+7jMNWKsVceilaUVaQZvHW0UxyyBwsnse5Aby/+KIX5g2K5Ahej7+C2YGYE 9RFa1gmqq5E45A== -----END CERTIFICATE-----Generated at Mon Feb 9 20:06:28 2026 by rpki-client