This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft File: 1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft (raw, json) Hash identifier: OFbaL6cYIx4IMKS/6BpGP5OtgQlFQj+TqCTfktmXNYk= Subject key identifier: 6D:CE:86:84:E3:7E:01:9C:AE:56:E4:80:AF:06:7D:3C:30:48:A0:77 Authority key identifier: F9:80:BC:0B:4E:28:09:1C:F9:FB:28:A2:8F:5A:FA:5A:9A:7D:44:03 Certificate issuer: /CN=f980bc0b4e28091cf9fb28a28f5afa5a9a7d4403 Certificate serial: 019C41A15A7EF6D803F0B09E0BDEAA7E8865 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YC8C04oCRz5-yiij1r6Wpp9RAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft Manifest number: 0691 Signing time: Mon 09 Feb 2026 09:00:19 +0000 Manifest this update: Mon 09 Feb 2026 09:00:19 +0000 Manifest next update: Tue 10 Feb 2026 09:00:19 +0000 Files and hashes: 1: 1-YC8C04oCRz5-yiij1r6Wpp9RAM.crl (hash: ardTOz0oDaD6vm1Q4aiWmnw0axNpOo135EQNeCBKG34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-YC8C04oCRz5-yiij1r6Wpp9RAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:5a:7e:f6:d8:03:f0:b0:9e:0b:de:aa:7e:88:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f980bc0b4e28091cf9fb28a28f5afa5a9a7d4403 Validity Not Before: Feb 9 09:00:19 2026 GMT Not After : Feb 10 09:00:19 2026 GMT Subject: CN=6dce8684e37e019cae56e480af067d3c3048a077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c5:7f:65:7d:c8:d7:1e:06:f6:b1:cb:c0:d3: 10:37:ef:fa:d0:9e:17:13:f3:78:44:66:f1:e9:08: 2b:ed:4c:85:3a:38:d7:e4:9e:55:d5:e7:cc:3d:9e: 78:59:e0:a1:44:ae:70:82:7e:9e:2a:7d:5a:37:dc: 57:4b:e9:d3:18:09:19:34:fa:0c:61:29:10:fe:2a: d0:49:56:2b:ea:fb:b3:68:ed:8c:4a:07:ab:d7:a9: 04:62:c4:ea:b4:45:89:16:68:5d:30:6a:10:87:08: 2e:a0:97:66:b5:90:61:e7:9e:b0:61:57:0d:89:ca: c6:17:77:c8:7b:6c:54:72:98:98:f5:68:97:0b:ef: 9f:75:a3:55:bc:1d:5a:81:50:8e:e6:d3:cc:d1:1b: 6d:9d:88:12:78:1b:88:af:ad:d6:3e:78:df:3b:f2: 32:0f:ba:b3:f6:7b:73:be:45:05:2b:65:89:94:6e: 8a:1e:d6:8f:a7:8d:59:af:56:92:18:29:12:85:55: 6d:b5:37:24:10:45:32:0c:30:f1:2e:96:f0:15:6f: 6d:86:d1:3e:72:71:d8:63:76:2a:53:6a:cf:4c:9c: a5:8e:e9:16:4c:69:d0:22:35:5a:8a:4f:4f:5b:85: 6e:32:a9:88:77:e8:5d:f9:21:c4:4f:e4:64:3f:c3: cf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:CE:86:84:E3:7E:01:9C:AE:56:E4:80:AF:06:7D:3C:30:48:A0:77 X509v3 Authority Key Identifier: keyid:F9:80:BC:0B:4E:28:09:1C:F9:FB:28:A2:8F:5A:FA:5A:9A:7D:44:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YC8C04oCRz5-yiij1r6Wpp9RAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e8:1b:48:3c:7a:03:bb:c1:70:e2:f2:61:ef:e2:de:ec:2e: 07:c5:47:dd:7b:cf:cc:47:c6:65:5d:8d:a1:09:eb:e3:25:89: 24:0b:cc:4c:3d:89:dd:dc:27:75:85:60:bb:b0:0b:6f:fa:be: 13:c3:45:fc:2e:ab:9b:b5:ae:e1:b3:56:5b:ed:8a:bb:8f:a3: b0:46:8d:29:85:8c:76:73:9e:b5:47:79:86:ec:27:c1:89:44: 73:2f:c5:be:6d:5f:84:31:16:ad:65:4a:6c:e3:fc:89:1c:d6: 12:71:ab:8e:b5:b2:41:85:3c:6c:e9:ec:5d:6e:b6:5a:28:43: 0a:a9:a5:16:40:f1:83:27:83:00:94:b9:6f:93:39:cc:9f:c9: 6f:0f:a0:6b:3c:08:69:46:47:ae:a6:11:de:ae:ca:8a:62:64: 87:1f:24:4b:8b:31:6a:76:b5:2a:74:31:e5:14:41:fd:9a:b1: 72:d5:5c:c3:25:78:04:82:60:6c:de:54:af:d7:b2:a1:86:a9: a3:78:bb:08:97:91:2c:3a:b3:65:d1:d2:be:1f:c1:1c:2d:56: 57:14:6b:8d:0c:fc:7b:2f:44:be:76:f0:73:93:cb:ed:c8:80: 6c:13:27:6a:af:ce:a3:14:25:0b:64:14:21:89:a8:4d:e7:21: 9b:26:f6:42 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxBoVp+9tgD8LCeC96qfohlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ODBiYzBiNGUyODA5MWNmOWZiMjhhMjhmNWFmYTVhOWE3 ZDQ0MDMwHhcNMjYwMjA5MDkwMDE5WhcNMjYwMjEwMDkwMDE5WjAzMTEwLwYDVQQD Eyg2ZGNlODY4NGUzN2UwMTljYWU1NmU0ODBhZjA2N2QzYzMwNDhhMDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMV/ZX3I1x4G9rHLwNMQN+/60J4X E/N4RGbx6Qgr7UyFOjjX5J5V1efMPZ54WeChRK5wgn6eKn1aN9xXS+nTGAkZNPoM YSkQ/irQSVYr6vuzaO2MSger16kEYsTqtEWJFmhdMGoQhwguoJdmtZBh556wYVcN icrGF3fIe2xUcpiY9WiXC++fdaNVvB1agVCO5tPM0RttnYgSeBuIr63WPnjfO/Iy D7qz9ntzvkUFK2WJlG6KHtaPp41Zr1aSGCkShVVttTckEEUyDDDxLpbwFW9thtE+ cnHYY3YqU2rPTJyljukWTGnQIjVaik9PW4VuMqmId+hd+SHET+RkP8PPkwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFG3OhoTjfgGcrlbkgK8GfTwwSKB3MB8GA1UdIwQY MBaAFPmAvAtOKAkc+fsooo9a+lqafUQDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ZQzhDMDRvQ1J6NS15aWlqMXI2V3BwOVJBTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvZDcyYzZlLTk5ZTktNDc5NC1hNjA5 LWI3MzNjNmNhMzM4ZC8xLzEtWUM4QzA0b0NSejUteWlpajFyNldwcDlSQU0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzZlL2Q3MmM2ZS05OWU5LTQ3OTQtYTYwOS1iNzMzYzZjYTMz OGQvMS8xLVlDOEMwNG9DUno1LXlpaWoxcjZXcHA5UkFNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+gb SDx6A7vBcOLyYe/i3uwuB8VH3XvPzEfGZV2NoQnr4yWJJAvMTD2J3dwndYVgu7AL b/q+E8NF/C6rm7Wu4bNWW+2Ku4+jsEaNKYWMdnOetUd5huwnwYlEcy/Fvm1fhDEW rWVKbOP8iRzWEnGrjrWyQYU8bOnsXW62WihDCqmlFkDxgyeDAJS5b5M5zJ/Jbw+g azwIaUZHrqYR3q7KimJkhx8kS4sxana1KnQx5RRB/ZqxctVcwyV4BIJgbN5Ur9ey oYapo3i7CJeRLDqzZdHSvh/BHC1WVxRrjQz8ey9Evnbwc5PL7ciAbBMnaq/OoxQl C2QUIYmoTechmyb2Qg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:33 2026 by rpki-client