This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft File: yh3yu8zALk5_Rk1p-q89bDcjSV4.mft (raw, json) Hash identifier: ZFKH6+qIcRGATePnayNBDdSQxW7kaQfNVePiQAW7t38= Subject key identifier: 28:62:6C:E6:15:08:A4:2F:71:B6:0B:9A:4F:B3:3C:24:60:FC:E4:FE Authority key identifier: CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E Certificate issuer: /CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e Certificate serial: 019C4358B637C9BEE2AD97A285C46E8B58C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft Manifest number: 0C82 Signing time: Mon 09 Feb 2026 17:00:12 +0000 Manifest this update: Mon 09 Feb 2026 17:00:12 +0000 Manifest next update: Tue 10 Feb 2026 17:00:12 +0000 Files and hashes: 1: 3PHsGvndvUMdTyhDtmVLlK99X2o.roa (hash: XXO+YxJiac8k9zXDW+uVmg5TKsFstSl40o0fTf5KuC4=) 2: yh3yu8zALk5_Rk1p-q89bDcjSV4.crl (hash: jqL1tenTf/OanCznkLRXWJ6pv6vZV1ofDGsy0EUgMkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:b6:37:c9:be:e2:ad:97:a2:85:c4:6e:8b:58:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e Validity Not Before: Feb 9 17:00:12 2026 GMT Not After : Feb 10 17:00:12 2026 GMT Subject: CN=28626ce61508a42f71b60b9a4fb33c2460fce4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:97:0e:67:50:83:50:a9:a3:d2:00:47:a5:49: 12:2e:76:e4:0e:63:c2:ff:dd:0d:33:6c:84:6d:79: 5b:52:08:bc:ae:5d:87:5e:d0:41:63:a0:9a:41:1e: cf:7a:f1:41:87:51:b5:ce:c6:f4:73:78:a8:0c:ce: 14:54:e4:0b:36:4b:84:8e:56:f5:78:12:6f:ba:e4: b8:8a:a4:24:c3:4d:a7:17:da:8e:94:5b:c7:4b:01: 8e:bb:37:2d:fe:52:d5:66:9b:6c:63:25:50:63:b6: 15:14:8c:32:39:f2:74:89:4b:0a:26:b0:86:83:5b: 17:9a:6a:53:06:9b:6f:55:63:17:d7:6f:3a:36:6d: e2:74:e6:38:65:0d:a8:44:f7:60:88:d8:d2:73:b4: 5f:54:64:85:35:f7:44:73:84:d8:df:d9:3c:79:55: fc:fa:06:54:e0:8a:aa:c9:b6:c7:4e:b3:31:b0:23: bd:c2:4f:1e:bf:ea:98:d6:ba:64:c1:56:f3:af:4b: 33:a3:87:a7:c0:42:b2:5c:2c:3b:b3:9f:8e:ea:77: c1:18:23:5e:c7:81:fc:29:1a:08:6e:23:8d:5e:2b: 97:24:c0:e2:ed:de:0d:5d:dc:5e:74:a9:72:06:d8: 6f:5d:f8:04:58:67:bf:13:32:4c:d2:67:ec:9a:e4: 4d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:62:6C:E6:15:08:A4:2F:71:B6:0B:9A:4F:B3:3C:24:60:FC:E4:FE X509v3 Authority Key Identifier: keyid:CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:de:3b:29:b7:b7:dc:44:7d:3f:84:2e:dd:dc:19:88:07:d7: 61:03:b2:22:7a:fe:0d:39:d3:67:3f:55:ca:21:6d:a5:27:ba: f2:fc:16:ad:3b:da:a6:32:9c:58:db:ee:6e:59:5a:1c:6e:17: b3:a0:ab:d0:9d:84:56:8e:cf:2c:16:2e:5d:d4:fc:4b:32:71: 88:a2:88:c8:d8:c3:cb:bb:49:a4:83:72:80:02:7f:a1:c7:22: 7a:d2:8c:61:fc:56:ec:7a:1f:d4:3a:bc:6d:ca:45:38:5b:2b: 10:07:19:0a:0d:db:1f:9b:02:72:ef:71:8e:85:09:10:10:cb: d6:f5:86:6e:1a:f8:1d:c9:2b:94:39:6f:5e:dd:f0:c8:86:80: 99:7f:db:dd:d9:23:62:a9:06:52:65:db:89:66:41:5f:55:c3: c8:69:75:4d:9d:09:cb:ec:ed:a8:0e:ae:8f:df:c5:ef:55:e2: bb:de:5c:8e:c7:e2:08:35:fd:38:7d:3f:06:25:78:a1:b9:9c: 70:b9:1b:4b:f2:37:42:93:b5:a0:8e:81:8f:4c:0f:b7:a0:ff: cf:10:01:94:d6:8c:1c:20:02:42:40:bf:72:f1:4d:de:22:5a: 7f:44:0f:4d:07:cd:95:75:34:1d:9c:b9:ab:90:23:bd:bd:07: bc:a9:8b:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWLY3yb7irZeihcRui1jEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMWRmMmJiY2NjMDJlNGU3ZjQ2NGQ2OWZhYWYzZDZjMzcy MzQ5NWUwHhcNMjYwMjA5MTcwMDEyWhcNMjYwMjEwMTcwMDEyWjAzMTEwLwYDVQQD EygyODYyNmNlNjE1MDhhNDJmNzFiNjBiOWE0ZmIzM2MyNDYwZmNlNGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZcOZ1CDUKmj0gBHpUkSLnbkDmPC /90NM2yEbXlbUgi8rl2HXtBBY6CaQR7PevFBh1G1zsb0c3ioDM4UVOQLNkuEjlb1 eBJvuuS4iqQkw02nF9qOlFvHSwGOuzct/lLVZptsYyVQY7YVFIwyOfJ0iUsKJrCG g1sXmmpTBptvVWMX1286Nm3idOY4ZQ2oRPdgiNjSc7RfVGSFNfdEc4TY39k8eVX8 +gZU4IqqybbHTrMxsCO9wk8ev+qY1rpkwVbzr0szo4enwEKyXCw7s5+O6nfBGCNe x4H8KRoIbiONXiuXJMDi7d4NXdxedKlyBthvXfgEWGe/EzJM0mfsmuRNmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChibOYVCKQvcbYLmk+zPCRg/OT+MB8GA1UdIwQY MBaAFMod8rvMwC5Of0ZNafqvPWw3I0leMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWgzeXU4ekFMazVfUmsxcC1xODliRGNqU1Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83YjdiZDYtYjUzOC00OTYwLTg1NTkt ZGQ0OWVjYzI2MDk1LzEveWgzeXU4ekFMazVfUmsxcC1xODliRGNqU1Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni83YjdiZDYtYjUzOC00OTYwLTg1NTktZGQ0OWVjYzI2MDk1 LzEveWgzeXU4ekFMazVfUmsxcC1xODliRGNqU1Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbt47Kbe3 3ER9P4Qu3dwZiAfXYQOyInr+DTnTZz9VyiFtpSe68vwWrTvapjKcWNvubllaHG4X s6Cr0J2EVo7PLBYuXdT8SzJxiKKIyNjDy7tJpINygAJ/occietKMYfxW7Hof1Dq8 bcpFOFsrEAcZCg3bH5sCcu9xjoUJEBDL1vWGbhr4HckrlDlvXt3wyIaAmX/b3dkj YqkGUmXbiWZBX1XDyGl1TZ0Jy+ztqA6uj9/F71Xiu95cjsfiCDX9OH0/BiV4obmc cLkbS/I3QpO1oI6Bj0wPt6D/zxABlNaMHCACQkC/cvFN3iJaf0QPTQfNlXU0HZy5 q5Ajvb0HvKmLMQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:07:25 2026 by rpki-client