This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.mft File: ymzuosMr4Dhs4Hrx_mPSJIXBLvE.mft (raw, json) Hash identifier: pKgGcJmS/33e6W5K8wK5znlx1pHVbIEaWgZJrxudUDA= Subject key identifier: DD:07:97:5B:DA:28:47:10:93:C6:59:C0:6E:0F:2E:81:23:6D:11:A1 Authority key identifier: CA:6C:EE:A2:C3:2B:E0:38:6C:E0:7A:F1:FE:63:D2:24:85:C1:2E:F1 Certificate issuer: /CN=ca6ceea2c32be0386ce07af1fe63d22485c12ef1 Certificate serial: 019C4322444DD2DD2A7EC853AB7B4DABF147 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.mft Manifest number: 02FC Signing time: Mon 09 Feb 2026 16:00:45 +0000 Manifest this update: Mon 09 Feb 2026 16:00:45 +0000 Manifest next update: Tue 10 Feb 2026 16:00:45 +0000 Files and hashes: 1: ymzuosMr4Dhs4Hrx_mPSJIXBLvE.crl (hash: 6kCIuRPIdKgks/ZrEHSAz2BSwh9WiA3aM98v9/CVVRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.crl rsync://rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.mft rsync://rpki.ripe.net/repository/DEFAULT/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:44:4d:d2:dd:2a:7e:c8:53:ab:7b:4d:ab:f1:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca6ceea2c32be0386ce07af1fe63d22485c12ef1 Validity Not Before: Feb 9 16:00:45 2026 GMT Not After : Feb 10 16:00:45 2026 GMT Subject: CN=dd07975bda28471093c659c06e0f2e81236d11a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:4b:24:85:a9:7d:f3:4c:42:4c:46:7f:a3: 49:24:aa:43:d9:32:3b:a7:43:b9:fe:c0:54:6f:72: f6:17:61:52:0d:25:0e:66:d2:35:67:25:a9:b7:89: c3:cb:a7:2a:80:4b:53:a0:bb:05:4f:72:2b:5b:27: e0:de:89:cd:0d:3f:cb:8b:82:04:c9:ff:43:d3:cc: ea:36:24:ff:8a:5f:61:c0:76:90:5d:e8:14:42:36: 28:00:d9:3a:e1:68:6c:d6:cc:63:56:c1:f3:0a:7f: af:33:c0:ab:5b:bb:77:f7:c9:60:1f:a4:97:4f:77: 7c:e1:ca:fc:bf:b5:5c:29:48:8f:c3:33:34:a8:bb: 6c:86:e5:84:f5:c3:23:97:9e:1f:56:c8:17:0d:35: 0f:fc:20:5e:89:f9:4d:a1:85:6a:c1:fc:19:5e:ea: 0e:bf:b3:92:91:dc:d5:64:8d:04:99:84:6d:70:85: bd:d6:c4:e4:81:cc:5e:45:08:dd:a2:e3:08:fd:31: 4e:c7:7a:4b:ec:05:95:99:6a:1d:2d:eb:7c:91:9c: cd:00:b1:0b:66:6d:b5:16:74:78:97:b1:86:c7:a7: 17:01:e7:6b:84:0b:58:ab:f1:1b:f1:50:59:ef:4c: 54:2b:32:6d:aa:1f:c4:8f:ca:5c:c7:0f:0b:6d:8d: 1b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:07:97:5B:DA:28:47:10:93:C6:59:C0:6E:0F:2E:81:23:6D:11:A1 X509v3 Authority Key Identifier: keyid:CA:6C:EE:A2:C3:2B:E0:38:6C:E0:7A:F1:FE:63:D2:24:85:C1:2E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:b4:2e:ae:79:dc:e0:af:fa:c6:72:8b:02:12:e6:5d:e6:58: bf:03:63:6c:e1:02:f8:f2:c4:95:2e:e0:97:0b:11:6a:af:00: 9d:58:6e:42:7b:20:c1:5d:02:c2:58:97:ab:50:6f:5e:30:ec: 2a:ef:aa:42:81:0e:3c:5d:d8:b5:d7:7d:e5:3d:1c:2a:15:43: 00:cc:c9:4f:6f:30:53:99:8f:da:b3:8f:9a:5f:d9:eb:94:fc: d1:12:d4:f5:6b:91:24:6f:7c:64:17:18:08:1e:44:8d:2b:bf: 11:20:cb:58:04:87:50:7e:df:15:d1:34:e4:5c:61:fa:1d:63: 3e:ad:c0:6b:0f:47:1c:2c:d3:1c:99:a6:21:f0:b9:c0:00:73: f6:3c:9f:5a:b2:6e:06:8a:90:2f:57:2f:25:e6:6e:ba:f8:14: 17:74:d5:73:9d:8e:7c:c4:38:04:15:38:59:53:83:fb:11:4b: 3d:43:8d:e7:4e:df:09:ce:93:f0:f8:98:bc:1a:29:ad:df:02: 86:ea:04:9b:de:6c:d1:12:04:ce:b5:b0:dd:ce:30:14:13:f3: 6a:7a:ac:c2:26:da:e6:95:10:5e:11:fe:57:a9:81:7a:26:87: 53:37:77:b4:a5:76:3c:92:8a:c0:88:4a:87:65:c9:11:23:58: 7f:68:34:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIkRN0t0qfshTq3tNq/FHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNmNlZWEyYzMyYmUwMzg2Y2UwN2FmMWZlNjNkMjI0ODVj MTJlZjEwHhcNMjYwMjA5MTYwMDQ1WhcNMjYwMjEwMTYwMDQ1WjAzMTEwLwYDVQQD EyhkZDA3OTc1YmRhMjg0NzEwOTNjNjU5YzA2ZTBmMmU4MTIzNmQxMWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHJLJIWpffNMQkxGf6NJJKpD2TI7 p0O5/sBUb3L2F2FSDSUOZtI1ZyWpt4nDy6cqgEtToLsFT3IrWyfg3onNDT/Li4IE yf9D08zqNiT/il9hwHaQXegUQjYoANk64Whs1sxjVsHzCn+vM8CrW7t398lgH6SX T3d84cr8v7VcKUiPwzM0qLtshuWE9cMjl54fVsgXDTUP/CBeiflNoYVqwfwZXuoO v7OSkdzVZI0EmYRtcIW91sTkgcxeRQjdouMI/TFOx3pL7AWVmWodLet8kZzNALEL Zm21FnR4l7GGx6cXAedrhAtYq/Eb8VBZ70xUKzJtqh/Ej8pcxw8LbY0b4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0Hl1vaKEcQk8ZZwG4PLoEjbRGhMB8GA1UdIwQY MBaAFMps7qLDK+A4bOB68f5j0iSFwS7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW16dW9zTXI0RGhzNEhyeF9tUFNKSVhCTHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lZDA2ZjMtYjFkYy00ZjhlLWI4NGQt ZTEwOWFhOTUyZjZjLzEveW16dW9zTXI0RGhzNEhyeF9tUFNKSVhCTHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9lZDA2ZjMtYjFkYy00ZjhlLWI4NGQtZTEwOWFhOTUyZjZj LzEveW16dW9zTXI0RGhzNEhyeF9tUFNKSVhCTHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrQurnnc 4K/6xnKLAhLmXeZYvwNjbOEC+PLElS7glwsRaq8AnVhuQnsgwV0CwliXq1BvXjDs Ku+qQoEOPF3Ytdd95T0cKhVDAMzJT28wU5mP2rOPml/Z65T80RLU9WuRJG98ZBcY CB5EjSu/ESDLWASHUH7fFdE05Fxh+h1jPq3Aaw9HHCzTHJmmIfC5wABz9jyfWrJu BoqQL1cvJeZuuvgUF3TVc52OfMQ4BBU4WVOD+xFLPUON507fCc6T8PiYvBoprd8C huoEm95s0RIEzrWw3c4wFBPzanqswiba5pUQXhH+V6mBeiaHUzd3tKV2PJKKwIhK h2XJESNYf2g0CQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:56 2026 by rpki-client