This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft File: yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft (raw, json) Hash identifier: EGLa5aNmTbfCQMOADrFZlaRpkOU6cQbQ0NrbVZMM9b4= Subject key identifier: 36:FC:67:C2:2B:01:29:F2:AC:C0:B9:B5:E8:30:E7:37:16:70:E3:B3 Authority key identifier: C9:59:98:98:9F:DB:5A:5F:93:21:47:AD:71:62:C6:30:04:E0:67:A4 Certificate issuer: /CN=c95998989fdb5a5f932147ad7162c63004e067a4 Certificate serial: 019C41D838163409A2A0574D68E587228A8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft Manifest number: 0CF2 Signing time: Mon 09 Feb 2026 10:00:15 +0000 Manifest this update: Mon 09 Feb 2026 10:00:15 +0000 Manifest next update: Tue 10 Feb 2026 10:00:15 +0000 Files and hashes: 1: yVmYmJ_bWl-TIUetcWLGMATgZ6Q.crl (hash: G3uHkrdX95G407sQkwk4B+s4UefL+wNhZ2JMpDgri2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:38:16:34:09:a2:a0:57:4d:68:e5:87:22:8a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c95998989fdb5a5f932147ad7162c63004e067a4 Validity Not Before: Feb 9 10:00:15 2026 GMT Not After : Feb 10 10:00:15 2026 GMT Subject: CN=36fc67c22b0129f2acc0b9b5e830e7371670e3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6d:d2:63:d2:6c:1f:bf:7d:27:e5:1e:3d:92: 74:2f:ec:7d:c0:aa:84:b8:06:9c:29:e1:14:3f:40: be:d6:b8:e4:53:ab:79:00:bd:ce:4b:7c:78:9e:ff: 46:67:02:2c:72:ca:53:f1:c4:b7:6a:3c:b5:4e:d6: b7:5e:7a:b6:d9:3c:25:e2:5d:d1:42:d3:5e:62:e7: a9:4b:c9:8a:c7:4d:27:07:89:df:6c:e7:2f:05:ec: d3:bf:28:57:b5:83:d4:46:a6:f0:a1:0c:d6:2a:f1: 6f:04:47:17:7d:8c:02:98:68:8a:0a:e4:11:82:7d: 8b:66:df:31:2a:d4:1c:9f:b3:f4:22:e8:f9:34:dc: 28:df:98:d6:71:91:dd:0a:65:d7:13:dc:3e:54:45: 5f:54:50:2a:6d:95:1f:d1:5a:ac:4e:00:c3:d9:d5: e8:a9:bd:0d:1a:e2:10:16:ea:ae:c8:e2:e7:51:5b: ef:01:47:ea:61:a6:a4:07:6e:30:12:27:e6:ab:50: 93:a3:bc:98:e2:2b:3c:08:5a:42:3d:76:97:8b:62: 68:e7:f7:8b:25:29:a2:a4:3b:be:3e:8a:c8:82:33: a0:75:a4:aa:52:3f:24:4b:e6:09:f9:b5:aa:45:09: 08:00:58:a7:85:c6:8b:9c:59:87:af:27:ab:13:5a: da:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FC:67:C2:2B:01:29:F2:AC:C0:B9:B5:E8:30:E7:37:16:70:E3:B3 X509v3 Authority Key Identifier: keyid:C9:59:98:98:9F:DB:5A:5F:93:21:47:AD:71:62:C6:30:04:E0:67:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:41:25:ef:ea:1d:af:2a:82:93:69:17:44:ca:7b:5d:52:07: 51:0d:d2:ff:a4:25:b0:14:c1:0e:c3:a1:57:a5:04:99:e1:25: f8:1b:72:52:a5:ba:3b:3f:57:0d:1f:03:19:d6:e2:6d:ad:24: b5:fe:c0:2b:03:7d:ec:58:b9:4d:89:7e:7f:f1:b7:36:bf:e5: 70:9b:3d:6e:f8:29:35:f1:30:62:c7:44:ea:ae:b0:42:04:16: eb:8b:c1:f9:7d:52:11:e1:8c:1b:88:e2:60:e4:e4:d8:1d:79: 93:a5:86:2c:3d:8e:7e:ca:94:b8:93:ca:50:5a:91:e5:dd:8f: 8f:ed:66:59:46:22:f9:cf:64:97:8e:27:f7:1f:c1:eb:64:fa: ed:c1:2f:8b:56:3d:c2:12:4f:02:1b:d1:e3:2e:8d:ff:1f:44: 3f:bb:6a:9a:3a:f8:65:ec:86:e1:7b:b1:14:06:a1:91:58:ff: cb:75:db:c2:ac:3c:9d:17:89:96:8c:a3:db:05:94:0e:cc:1b: eb:7d:4a:50:b8:ef:8e:5e:4a:6a:12:75:2f:9e:67:cf:2f:35: ba:47:e2:ca:f3:c5:6f:97:1c:f9:ac:1f:3c:a2:65:4c:6b:df: d4:fa:e7:9d:58:f2:30:ae:99:51:ce:a4:44:eb:5e:31:bb:82: 05:f1:36:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2DgWNAmioFdNaOWHIoqKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NTk5ODk4OWZkYjVhNWY5MzIxNDdhZDcxNjJjNjMwMDRl MDY3YTQwHhcNMjYwMjA5MTAwMDE1WhcNMjYwMjEwMTAwMDE1WjAzMTEwLwYDVQQD EygzNmZjNjdjMjJiMDEyOWYyYWNjMGI5YjVlODMwZTczNzE2NzBlM2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim3SY9JsH799J+UePZJ0L+x9wKqE uAacKeEUP0C+1rjkU6t5AL3OS3x4nv9GZwIscspT8cS3ajy1Tta3Xnq22Twl4l3R QtNeYuepS8mKx00nB4nfbOcvBezTvyhXtYPURqbwoQzWKvFvBEcXfYwCmGiKCuQR gn2LZt8xKtQcn7P0Iuj5NNwo35jWcZHdCmXXE9w+VEVfVFAqbZUf0VqsTgDD2dXo qb0NGuIQFuquyOLnUVvvAUfqYaakB24wEifmq1CTo7yY4is8CFpCPXaXi2Jo5/eL JSmipDu+PorIgjOgdaSqUj8kS+YJ+bWqRQkIAFinhcaLnFmHryerE1raJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDb8Z8IrASnyrMC5tegw5zcWcOOzMB8GA1UdIwQY MBaAFMlZmJif21pfkyFHrXFixjAE4GekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVZtWW1KX2JXbC1USVVldGNXTEdNQVRnWjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS83OGMzN2YtMmY2OS00ZmVjLWExOTgt Y2NmNTI4ZWI0ZGRhLzEveVZtWW1KX2JXbC1USVVldGNXTEdNQVRnWjZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS83OGMzN2YtMmY2OS00ZmVjLWExOTgtY2NmNTI4ZWI0ZGRh LzEveVZtWW1KX2JXbC1USVVldGNXTEdNQVRnWjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUEl7+od ryqCk2kXRMp7XVIHUQ3S/6QlsBTBDsOhV6UEmeEl+BtyUqW6Oz9XDR8DGdbiba0k tf7AKwN97Fi5TYl+f/G3Nr/lcJs9bvgpNfEwYsdE6q6wQgQW64vB+X1SEeGMG4ji YOTk2B15k6WGLD2OfsqUuJPKUFqR5d2Pj+1mWUYi+c9kl44n9x/B62T67cEvi1Y9 whJPAhvR4y6N/x9EP7tqmjr4ZeyG4XuxFAahkVj/y3Xbwqw8nReJloyj2wWUDswb 631KULjvjl5KahJ1L55nzy81ukfiyvPFb5cc+awfPKJlTGvf1PrnnVjyMK6ZUc6k ROteMbuCBfE2bQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:22 2026 by rpki-client