This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft File: _YmzSchPx7NBKlLWX_Jg0swomrk.mft (raw, json) Hash identifier: lDXmhcA9D3uGOXuWFYHhR8zWdLOmSEMbmBwf3SkoKI8= Subject key identifier: 02:FC:7F:F2:8B:C9:BB:91:AD:CF:3F:2F:45:E9:56:BA:0A:6C:B5:53 Authority key identifier: FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9 Certificate issuer: /CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9 Certificate serial: 019C443528682B818F37BF05E062E7100443 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft Manifest number: 0EA1 Signing time: Mon 09 Feb 2026 21:01:00 +0000 Manifest this update: Mon 09 Feb 2026 21:01:00 +0000 Manifest next update: Tue 10 Feb 2026 21:01:00 +0000 Files and hashes: 1: 7B9W0clLzsK4p1pr53bEH61EQBg.roa (hash: g9Qq+800T4dGI74x3Nt1LLvxWvY9mzvmzZ74GSFdjw0=) 2: _YmzSchPx7NBKlLWX_Jg0swomrk.crl (hash: 4fsYhGXIA6+YnBPXBZuZhQZMaFKccjWv8CsK551dIMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:35:28:68:2b:81:8f:37:bf:05:e0:62:e7:10:04:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9 Validity Not Before: Feb 9 21:01:00 2026 GMT Not After : Feb 10 21:01:00 2026 GMT Subject: CN=02fc7ff28bc9bb91adcf3f2f45e956ba0a6cb553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cd:28:72:02:e3:98:92:0e:e2:cf:df:87:65: 75:77:73:ec:72:3b:99:95:28:60:4c:97:50:87:52: 77:bd:28:ee:0e:94:78:5f:5e:cb:46:c6:f3:8b:bc: 19:1f:8d:21:52:34:69:e7:24:9e:3c:43:08:66:c0: bd:bc:d6:e3:18:f8:29:06:2c:02:1c:ed:d5:a3:5e: af:8f:70:0b:7f:7e:94:05:75:0b:44:8c:db:24:e5: 59:da:17:c1:77:5a:47:41:b1:16:ca:fe:61:13:45: f9:7b:fd:5d:5a:76:25:4a:40:78:55:5e:a9:83:b1: a0:28:75:0e:4a:1e:42:0e:e8:b4:67:29:64:ec:a5: e0:41:4a:2a:eb:86:85:70:b8:16:6a:8c:29:f8:b1: ca:86:c9:34:df:47:82:b8:b9:e2:31:45:89:2d:ed: e3:f8:14:27:56:0c:4b:b1:92:1c:1a:d0:ad:4a:d6: ab:4c:bf:f5:3f:87:e5:be:0d:68:8c:3e:4a:1f:e7: af:1b:fc:e2:75:35:dc:8a:ce:57:80:e7:20:4f:8e: 0d:9e:45:02:48:42:d1:70:4a:96:f3:2c:63:0b:3f: 9d:d0:24:08:16:ee:00:7d:37:a8:ae:99:1a:80:59: b5:ca:c4:d6:65:6a:67:66:10:b0:5e:22:a6:c4:be: 76:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FC:7F:F2:8B:C9:BB:91:AD:CF:3F:2F:45:E9:56:BA:0A:6C:B5:53 X509v3 Authority Key Identifier: keyid:FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:8e:ce:8f:0b:6d:2b:59:a4:dc:d4:ca:c9:02:4a:50:e7:b0: b0:1a:01:a0:b9:52:36:e7:17:f9:f7:ec:1b:00:ad:e3:19:1a: 3a:ff:de:cd:c4:4c:87:92:fc:cc:00:c8:73:5d:1d:4a:ea:cc: 2a:40:b0:84:d0:f1:1c:17:ea:ac:7d:06:9c:20:d5:12:b2:d1: 82:25:7e:7b:df:5b:83:0b:82:bf:eb:86:82:ed:32:e7:69:12: 59:47:b4:e9:2b:ea:f4:43:f2:84:96:c9:59:c8:71:a3:f6:b4: 83:85:11:f7:54:d2:90:4a:1b:0f:7a:b3:4e:46:3a:39:7b:2c: 31:fb:70:a9:40:e6:c8:2e:fd:a3:00:eb:0b:08:c9:f1:02:5d: a1:18:96:ae:c7:cd:ee:30:99:0b:ba:a6:05:ad:dc:34:ee:9a: 22:fe:05:49:2d:c1:1a:25:88:39:7f:4a:cd:9b:fe:ee:aa:dd: 2b:fe:cf:ec:fc:08:9e:02:39:30:40:6a:4d:e2:d7:ba:39:d7: f9:3d:88:76:7d:81:aa:96:36:cf:3b:c7:e5:4d:df:11:ff:be: 97:d3:7e:7f:9d:33:63:62:47:0d:f2:3b:a0:15:75:ce:1a:7f: 39:9a:e1:5b:0c:28:95:c4:a0:67:97:1e:db:cf:82:7d:7c:da: e2:27:92:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENShoK4GPN78F4GLnEARDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkODliMzQ5Yzg0ZmM3YjM0MTJhNTJkNjVmZjI2MGQyY2My ODlhYjkwHhcNMjYwMjA5MjEwMTAwWhcNMjYwMjEwMjEwMTAwWjAzMTEwLwYDVQQD EygwMmZjN2ZmMjhiYzliYjkxYWRjZjNmMmY0NWU5NTZiYTBhNmNiNTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr80ocgLjmJIO4s/fh2V1d3PscjuZ lShgTJdQh1J3vSjuDpR4X17LRsbzi7wZH40hUjRp5ySePEMIZsC9vNbjGPgpBiwC HO3Vo16vj3ALf36UBXULRIzbJOVZ2hfBd1pHQbEWyv5hE0X5e/1dWnYlSkB4VV6p g7GgKHUOSh5CDui0Zylk7KXgQUoq64aFcLgWaowp+LHKhsk030eCuLniMUWJLe3j +BQnVgxLsZIcGtCtStarTL/1P4flvg1ojD5KH+evG/zidTXcis5XgOcgT44NnkUC SELRcEqW8yxjCz+d0CQIFu4AfTeorpkagFm1ysTWZWpnZhCwXiKmxL52jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAL8f/KLybuRrc8/L0XpVroKbLVTMB8GA1UdIwQY MBaAFP2Js0nIT8ezQSpS1l/yYNLMKJq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1ltelNjaFB4N05CS2xMV1hfSmcwc3dvbXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lZTcxNGEtMjFhYy00Mzg2LTgyZjUt ZTgxNzYxMDJjNWZmLzEvX1ltelNjaFB4N05CS2xMV1hfSmcwc3dvbXJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9lZTcxNGEtMjFhYy00Mzg2LTgyZjUtZTgxNzYxMDJjNWZm LzEvX1ltelNjaFB4N05CS2xMV1hfSmcwc3dvbXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuI7Ojwtt K1mk3NTKyQJKUOewsBoBoLlSNucX+ffsGwCt4xkaOv/ezcRMh5L8zADIc10dSurM KkCwhNDxHBfqrH0GnCDVErLRgiV+e99bgwuCv+uGgu0y52kSWUe06Svq9EPyhJbJ Wchxo/a0g4UR91TSkEobD3qzTkY6OXssMftwqUDmyC79owDrCwjJ8QJdoRiWrsfN 7jCZC7qmBa3cNO6aIv4FSS3BGiWIOX9KzZv+7qrdK/7P7PwIngI5MEBqTeLXujnX +T2Idn2BqpY2zzvH5U3fEf++l9N+f50zY2JHDfI7oBV1zhp/OZrhWwwolcSgZ5ce 28+CfXza4ieSHQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:51:27 2026 by rpki-client