This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft File: YKJkfN14VQ6ywqe6QpLadGnwr7E.mft (raw, json) Hash identifier: QJvi77eJ2rcUBR86R9oMcu7R1cHVhiwF5drfZTMOZDE= Subject key identifier: C2:F9:70:7F:CC:63:59:AE:41:5E:A8:7B:9E:CB:4E:57:0B:CB:E0:AA Authority key identifier: 60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1 Certificate issuer: /CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1 Certificate serial: 019C413410FBCB4C450237C67B4BC61311C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft Manifest number: 0FE5 Signing time: Mon 09 Feb 2026 07:00:56 +0000 Manifest this update: Mon 09 Feb 2026 07:00:56 +0000 Manifest next update: Tue 10 Feb 2026 07:00:56 +0000 Files and hashes: 1: YKJkfN14VQ6ywqe6QpLadGnwr7E.crl (hash: tgPqz8MIJMXU39VsKo3P8/edT/c5jHy+8LRxdjMeGdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:10:fb:cb:4c:45:02:37:c6:7b:4b:c6:13:11:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1 Validity Not Before: Feb 9 07:00:56 2026 GMT Not After : Feb 10 07:00:56 2026 GMT Subject: CN=c2f9707fcc6359ae415ea87b9ecb4e570bcbe0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1d:8f:38:1a:04:e4:b7:c6:0f:28:fe:21:eb: 72:00:b7:b0:8c:b8:1d:eb:b4:6c:c1:7d:59:7e:63: 95:5c:dd:1e:48:67:8e:5d:c1:4d:e1:52:10:c1:29: f9:63:84:ea:9c:ac:c6:ab:fa:c0:b1:14:1c:de:c0: 2d:16:38:47:c6:b2:4f:e3:78:ac:47:df:fa:1c:4f: ca:f7:79:8e:a8:b4:0b:1e:72:bb:b7:5c:57:2b:c9: 51:5d:0f:53:b1:3b:f9:f7:af:e8:25:02:a9:e3:d9: 84:6b:24:d0:4e:24:b5:32:cd:f2:76:dc:fe:85:0f: b1:c4:ac:d6:df:7b:15:b8:06:31:75:fb:12:d1:a8: 90:40:3d:11:84:c9:66:95:4e:4b:04:e8:96:ec:a8: 32:5f:e7:bc:ed:65:9c:2c:f2:1f:0a:a3:45:5a:1d: 63:4e:7e:ef:97:62:85:f4:ff:60:7a:d7:d5:e9:03: 59:89:79:ec:33:2a:d7:d3:aa:6f:b5:8a:55:2d:c4: 11:fb:84:d0:a4:93:f5:79:1c:55:65:81:90:12:73: 48:b7:59:bf:80:d9:80:ea:a1:f8:a7:79:3e:7e:9c: f1:a1:05:96:f8:2d:10:9a:bb:d9:8f:8e:ee:8b:43: e3:56:53:87:87:c9:45:b6:c5:71:57:f9:3b:b0:90: 30:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F9:70:7F:CC:63:59:AE:41:5E:A8:7B:9E:CB:4E:57:0B:CB:E0:AA X509v3 Authority Key Identifier: keyid:60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:5f:0f:5c:f7:95:83:97:cb:31:e9:5f:45:d6:1c:ac:0e:bc: 98:f7:48:70:16:9f:bb:4a:5b:fd:18:6e:14:e3:b1:68:f0:62: fd:41:e0:ce:7a:6e:05:36:18:4f:65:60:8e:e4:27:7e:ad:9e: 35:00:0e:ff:2e:ab:6e:b8:e6:b6:b8:f8:22:7b:63:c9:db:b9: b4:85:96:5e:1b:9b:37:4a:a0:d7:3e:90:39:c8:af:37:8f:c6: ca:38:f1:0f:d9:f3:9f:4c:e4:c5:7b:dc:02:7f:6d:6b:a2:6b: 0b:af:e8:f2:0e:4d:68:fb:ae:d2:a0:b3:19:88:e2:21:0e:ff: 5a:41:6c:7a:10:aa:a3:b6:4b:8c:d2:08:d0:73:6f:a9:8a:28: 8f:2f:ec:86:b5:68:0a:1b:d6:c0:3a:8f:40:9d:8d:aa:06:1d: 6d:54:3b:e6:b0:bd:ab:38:61:a3:1a:e0:38:fa:0d:f5:38:cb: 41:e2:41:b6:dc:5a:83:65:f6:79:3b:9d:b7:de:1a:31:48:c4: d7:54:d3:88:e2:59:43:44:b5:3c:1c:c2:05:eb:10:dd:82:7e: c6:3d:0f:85:c9:64:cc:dc:c5:38:5c:76:68:9f:72:78:75:6a: 08:93:66:c4:9e:87:ec:50:99:08:42:b7:3d:1b:29:00:9a:2a: 21:70:a1:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNBD7y0xFAjfGe0vGExHIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYTI2NDdjZGQ3ODU1MGViMmMyYTdiYTQyOTJkYTc0Njlm MGFmYjEwHhcNMjYwMjA5MDcwMDU2WhcNMjYwMjEwMDcwMDU2WjAzMTEwLwYDVQQD EyhjMmY5NzA3ZmNjNjM1OWFlNDE1ZWE4N2I5ZWNiNGU1NzBiY2JlMGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh2POBoE5LfGDyj+IetyALewjLgd 67RswX1ZfmOVXN0eSGeOXcFN4VIQwSn5Y4TqnKzGq/rAsRQc3sAtFjhHxrJP43is R9/6HE/K93mOqLQLHnK7t1xXK8lRXQ9TsTv596/oJQKp49mEayTQTiS1Ms3ydtz+ hQ+xxKzW33sVuAYxdfsS0aiQQD0RhMlmlU5LBOiW7KgyX+e87WWcLPIfCqNFWh1j Tn7vl2KF9P9getfV6QNZiXnsMyrX06pvtYpVLcQR+4TQpJP1eRxVZYGQEnNIt1m/ gNmA6qH4p3k+fpzxoQWW+C0QmrvZj47ui0PjVlOHh8lFtsVxV/k7sJAw4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFML5cH/MY1muQV6oe57LTlcLy+CqMB8GA1UdIwQY MBaAFGCiZHzdeFUOssKnukKS2nRp8K+xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUtKa2ZOMTRWUTZ5d3FlNlFwTGFkR253cjdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85MDQ4ZTItNWYwMy00NjExLTg2ZDYt MTBjZTdlYjFmZGZhLzEvWUtKa2ZOMTRWUTZ5d3FlNlFwTGFkR253cjdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS85MDQ4ZTItNWYwMy00NjExLTg2ZDYtMTBjZTdlYjFmZGZh LzEvWUtKa2ZOMTRWUTZ5d3FlNlFwTGFkR253cjdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASF8PXPeV g5fLMelfRdYcrA68mPdIcBafu0pb/RhuFOOxaPBi/UHgznpuBTYYT2VgjuQnfq2e NQAO/y6rbrjmtrj4Intjydu5tIWWXhubN0qg1z6QOcivN4/GyjjxD9nzn0zkxXvc An9ta6JrC6/o8g5NaPuu0qCzGYjiIQ7/WkFsehCqo7ZLjNII0HNvqYoojy/shrVo ChvWwDqPQJ2NqgYdbVQ75rC9qzhhoxrgOPoN9TjLQeJBttxag2X2eTudt94aMUjE 11TTiOJZQ0S1PBzCBesQ3YJ+xj0PhclkzNzFOFx2aJ9yeHVqCJNmxJ6H7FCZCEK3 PRspAJoqIXChHA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:04 2026 by rpki-client