This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft File: yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft (raw, json) Hash identifier: ign7q2tdRYEyAlA6lmThV565+O7753BV/81Da/QeQf4= Subject key identifier: 11:84:5E:12:F6:47:5E:65:0C:29:BD:12:16:35:C5:CC:BE:FD:4F:4B Authority key identifier: C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7 Certificate issuer: /CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7 Certificate serial: 019C43223321764CC8BEBCB858EC11AFA70E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft Manifest number: 038B Signing time: Mon 09 Feb 2026 16:00:40 +0000 Manifest this update: Mon 09 Feb 2026 16:00:40 +0000 Manifest next update: Tue 10 Feb 2026 16:00:40 +0000 Files and hashes: 1: Yqw8nqYWjqFUz5Vz5_cXTd2EZJE.roa (hash: c6hadjikHVcvC+Q5pJmMMnFQCoRVJRf9GgAQl95ZwLY=) 2: yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl (hash: fyZygAe4JeP9//EvTsvRa9zDc8mGwGKo0dgvXgs8Z6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:33:21:76:4c:c8:be:bc:b8:58:ec:11:af:a7:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7 Validity Not Before: Feb 9 16:00:40 2026 GMT Not After : Feb 10 16:00:40 2026 GMT Subject: CN=11845e12f6475e650c29bd121635c5ccbefd4f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:10:d9:55:73:85:aa:5d:3c:1e:76:45:21:72: d5:db:74:e5:1b:09:e7:48:dd:58:0b:08:24:a4:08: 53:ef:64:cc:52:38:1d:12:07:a1:6f:07:70:24:3a: 54:40:c3:68:02:0f:2a:29:06:0f:6a:46:c3:81:f8: 54:2a:a3:ab:81:3b:90:7e:3a:4b:c5:9a:db:3b:19: 62:29:5d:c0:58:c5:27:98:98:12:81:5b:12:7a:71: 0f:a4:d3:19:ef:fb:ef:09:3d:ab:92:01:8f:21:59: df:6e:3f:15:28:c2:cb:0e:10:8c:13:e0:4f:71:f4: 49:45:df:8d:a4:bf:17:db:b5:b9:a7:87:75:2a:48: cd:12:8b:c8:50:20:86:49:f6:2e:43:66:c3:b9:75: 9b:6f:d6:28:5e:ec:45:9a:61:82:8b:9e:e5:48:fd: 8e:d9:56:5e:fc:4e:d5:c7:9b:43:50:4e:af:06:95: 12:62:4d:c6:1d:ef:33:9d:84:fa:f3:f9:df:c1:f3: 87:d1:59:1b:79:35:96:cb:fe:bd:f2:7b:9e:ed:09: 0d:6b:52:4d:2f:3c:43:d9:c4:e4:cd:1a:b1:0b:ed: 04:b6:88:33:26:1b:43:da:19:b0:dd:0e:1b:3f:d3: f6:8a:26:b3:96:b8:1e:15:ff:20:57:ab:46:74:80: 17:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:84:5E:12:F6:47:5E:65:0C:29:BD:12:16:35:C5:CC:BE:FD:4F:4B X509v3 Authority Key Identifier: keyid:C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:34:07:52:ff:fa:c7:35:a1:1a:77:9d:17:5d:9d:1e:81:90: 40:01:40:2b:4e:0a:86:9e:06:48:04:a4:6c:dd:c9:cf:2c:09: 86:b0:b8:79:22:07:c9:96:9e:84:d7:d6:b7:ae:f3:a3:e2:af: 5f:8c:32:61:b9:a7:8c:68:64:ce:33:d0:cc:4a:cc:17:ac:ae: a3:0a:a7:18:7b:35:81:f6:73:f4:80:50:20:5c:f5:b6:ad:69: ce:7c:22:7f:e5:0a:95:de:52:d1:72:b2:85:e6:83:5f:b9:da: 88:9f:c2:45:82:77:35:40:3a:82:5a:e5:7a:5b:59:77:9a:96: 48:75:b1:37:3c:36:e8:ed:d5:be:a2:bb:a0:99:ee:df:5a:51: 04:64:88:89:e9:54:ca:a1:50:8a:c9:86:fe:4e:af:59:0a:c0: 89:13:10:f4:e5:48:65:ac:19:e8:e1:ac:2a:84:ed:96:b4:06: bd:3d:18:32:7c:cc:39:07:ea:44:82:94:14:d0:ae:5e:fc:62: e0:35:42:6e:9c:19:f8:9d:03:9f:be:7c:92:9e:56:55:ab:67: 77:ec:3f:87:3e:d9:1a:d0:8a:ee:e7:65:9a:fa:f0:69:3e:76: 67:b5:4f:b3:fa:90:8f:98:41:c4:83:1c:07:4d:0b:40:ff:c2: f6:24:cb:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIjMhdkzIvry4WOwRr6cOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4Mjk0YTJjMGM0OWRjOTM2Y2I5ODhiNjg1YjNhN2Q5NWM4 ZmUwYjcwHhcNMjYwMjA5MTYwMDQwWhcNMjYwMjEwMTYwMDQwWjAzMTEwLwYDVQQD EygxMTg0NWUxMmY2NDc1ZTY1MGMyOWJkMTIxNjM1YzVjY2JlZmQ0ZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRDZVXOFql08HnZFIXLV23TlGwnn SN1YCwgkpAhT72TMUjgdEgehbwdwJDpUQMNoAg8qKQYPakbDgfhUKqOrgTuQfjpL xZrbOxliKV3AWMUnmJgSgVsSenEPpNMZ7/vvCT2rkgGPIVnfbj8VKMLLDhCME+BP cfRJRd+NpL8X27W5p4d1KkjNEovIUCCGSfYuQ2bDuXWbb9YoXuxFmmGCi57lSP2O 2VZe/E7Vx5tDUE6vBpUSYk3GHe8znYT68/nfwfOH0VkbeTWWy/698nue7QkNa1JN LzxD2cTkzRqxC+0EtogzJhtD2hmw3Q4bP9P2iiazlrgeFf8gV6tGdIAXzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGEXhL2R15lDCm9EhY1xcy+/U9LMB8GA1UdIwQY MBaAFMgpSiwMSdyTbLmItoWzp9lcj+C3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUNsS0xBeEozSk5zdVlpMmhiT24yVnlQNExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80Nzg5NzctMDViYi00M2ZlLTllYWQt OWNlZjc5MmE1ZjZiLzEveUNsS0xBeEozSk5zdVlpMmhiT24yVnlQNExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC80Nzg5NzctMDViYi00M2ZlLTllYWQtOWNlZjc5MmE1ZjZi LzEveUNsS0xBeEozSk5zdVlpMmhiT24yVnlQNExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljQHUv/6 xzWhGnedF12dHoGQQAFAK04Khp4GSASkbN3JzywJhrC4eSIHyZaehNfWt67zo+Kv X4wyYbmnjGhkzjPQzErMF6yuowqnGHs1gfZz9IBQIFz1tq1pznwif+UKld5S0XKy heaDX7naiJ/CRYJ3NUA6glrleltZd5qWSHWxNzw26O3VvqK7oJnu31pRBGSIielU yqFQismG/k6vWQrAiRMQ9OVIZawZ6OGsKoTtlrQGvT0YMnzMOQfqRIKUFNCuXvxi 4DVCbpwZ+J0Dn758kp5WVatnd+w/hz7ZGtCK7udlmvrwaT52Z7VPs/qQj5hBxIMc B00LQP/C9iTLJw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:25 2026 by rpki-client