This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ymnh5T2MLzz_f3lLIPYwx4Hw27I.mft File: ymnh5T2MLzz_f3lLIPYwx4Hw27I.mft (raw, json) Hash identifier: qrKI+T9pcXx+7snM8s8/Ft4P5Jh8WzAfyRgMS5OdoEU= Subject key identifier: 06:C8:53:11:F3:2C:94:4C:00:25:0A:89:DE:F9:55:7B:0A:04:F1:56 Authority key identifier: CA:69:E1:E5:3D:8C:2F:3C:FF:7F:79:4B:20:F6:30:C7:81:F0:DB:B2 Certificate issuer: /CN=ca69e1e53d8c2f3cff7f794b20f630c781f0dbb2 Certificate serial: 019C43228D539BCBCB879AA5643B9DE98CE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymnh5T2MLzz_f3lLIPYwx4Hw27I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ymnh5T2MLzz_f3lLIPYwx4Hw27I.mft Manifest number: 21 Signing time: Mon 09 Feb 2026 16:01:03 +0000 Manifest this update: Mon 09 Feb 2026 16:01:03 +0000 Manifest next update: Tue 10 Feb 2026 16:01:03 +0000 Files and hashes: 1: ymnh5T2MLzz_f3lLIPYwx4Hw27I.crl (hash: jcZKevsl4fErUxk+J5R2wX7jlLfkbZCkfoTJn+Zuzb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ymnh5T2MLzz_f3lLIPYwx4Hw27I.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ymnh5T2MLzz_f3lLIPYwx4Hw27I.mft rsync://rpki.ripe.net/repository/DEFAULT/ymnh5T2MLzz_f3lLIPYwx4Hw27I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:8d:53:9b:cb:cb:87:9a:a5:64:3b:9d:e9:8c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca69e1e53d8c2f3cff7f794b20f630c781f0dbb2 Validity Not Before: Feb 9 16:01:03 2026 GMT Not After : Feb 10 16:01:03 2026 GMT Subject: CN=06c85311f32c944c00250a89def9557b0a04f156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:3a:ce:38:11:90:1f:82:09:07:1d:53:91: 64:ee:e9:87:07:e7:fa:bd:bb:d0:2f:02:0c:c0:4f: 92:b0:03:17:13:96:34:3f:e9:ac:d9:85:e8:24:aa: 33:63:ce:f4:68:61:83:87:58:32:b9:c2:8f:b6:5d: 78:d9:2a:62:08:7d:a3:ee:05:1e:6a:59:29:cd:10: 92:dc:d7:3f:de:b8:db:1c:85:93:f4:d5:17:85:10: 83:b3:7e:51:08:e3:76:ac:54:57:d7:17:c6:64:8b: 0f:a5:26:db:5a:e7:3a:d3:1a:c7:bf:28:57:fe:86: 19:06:c2:f0:3b:44:0c:c0:d9:87:20:26:00:54:47: fc:69:57:13:6b:5d:c5:76:36:4f:ab:0b:54:99:6d: 2b:20:5e:44:84:50:39:4b:62:e6:1a:e6:3f:f6:f7: d7:67:50:e3:a9:67:d4:68:26:18:21:d6:b9:34:10: 82:c7:50:c0:98:6c:d1:e0:ae:e7:4d:48:0a:0f:43: 77:3c:1b:af:82:0c:c3:0d:f7:94:f4:37:df:12:79: 53:56:c2:f8:33:a2:a6:a4:d7:0c:fa:b4:56:dc:94: ee:ca:c7:e2:ac:2a:07:a7:7c:74:2a:e1:de:b7:59: bb:cb:af:b4:b1:ca:99:a2:08:ee:e5:0d:a8:1d:30: ca:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C8:53:11:F3:2C:94:4C:00:25:0A:89:DE:F9:55:7B:0A:04:F1:56 X509v3 Authority Key Identifier: keyid:CA:69:E1:E5:3D:8C:2F:3C:FF:7F:79:4B:20:F6:30:C7:81:F0:DB:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymnh5T2MLzz_f3lLIPYwx4Hw27I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ymnh5T2MLzz_f3lLIPYwx4Hw27I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ymnh5T2MLzz_f3lLIPYwx4Hw27I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c8:e1:eb:28:c8:09:f1:33:7f:a1:97:39:d2:29:14:c6:52: c2:3d:d3:49:46:89:36:b0:03:fe:2d:83:0b:eb:fc:81:54:c4: 8a:13:48:38:6f:ce:67:60:3b:5b:98:11:85:b4:88:09:ce:0c: ee:8b:11:e9:76:4a:cb:67:7f:40:19:63:32:95:be:3f:2d:76: bb:f9:7f:6c:f8:66:53:2a:5b:e3:bf:2e:7e:aa:38:8c:d2:99: 50:76:14:9a:ac:dc:e1:34:29:c0:93:ad:9a:14:ad:10:16:54: d0:f4:ce:b9:42:72:d0:e6:49:0c:a8:35:44:09:3c:48:95:d0: 98:a5:cf:6b:8a:7c:8f:5c:3d:79:c3:ef:81:55:2e:28:f6:e8: d6:a9:4a:0f:91:eb:9f:b5:e3:89:11:fe:8b:47:9c:5b:4c:16: 20:10:94:00:66:d9:dd:f9:0f:df:68:e6:2c:ab:dd:9a:b8:cc: 44:d4:36:e6:0e:93:46:a3:93:cd:67:8d:97:80:b3:d8:71:5f: 61:e6:7e:29:0b:f3:56:35:ae:57:f7:8c:fc:a4:a1:65:7f:62: 4e:c0:04:37:d4:12:85:66:88:4b:3a:23:1f:38:77:c8:0e:38: 21:bf:cf:f6:85:da:70:23:9c:71:b8:ad:3d:e6:7e:61:f2:d5: bd:12:ef:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIo1Tm8vLh5qlZDud6YzkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNjllMWU1M2Q4YzJmM2NmZjdmNzk0YjIwZjYzMGM3ODFm MGRiYjIwHhcNMjYwMjA5MTYwMTAzWhcNMjYwMjEwMTYwMTAzWjAzMTEwLwYDVQQD EygwNmM4NTMxMWYzMmM5NDRjMDAyNTBhODlkZWY5NTU3YjBhMDRmMTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrQ6zjgRkB+CCQcdU5Fk7umHB+f6 vbvQLwIMwE+SsAMXE5Y0P+ms2YXoJKozY870aGGDh1gyucKPtl142SpiCH2j7gUe alkpzRCS3Nc/3rjbHIWT9NUXhRCDs35RCON2rFRX1xfGZIsPpSbbWuc60xrHvyhX /oYZBsLwO0QMwNmHICYAVEf8aVcTa13FdjZPqwtUmW0rIF5EhFA5S2LmGuY/9vfX Z1DjqWfUaCYYIda5NBCCx1DAmGzR4K7nTUgKD0N3PBuvggzDDfeU9DffEnlTVsL4 M6KmpNcM+rRW3JTuysfirCoHp3x0KuHet1m7y6+0scqZogju5Q2oHTDKKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbIUxHzLJRMACUKid75VXsKBPFWMB8GA1UdIwQY MBaAFMpp4eU9jC88/395SyD2MMeB8NuyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW1uaDVUMk1MenpfZjNsTElQWXd4NEh3MjdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi80NTU1NTUtYzY1MS00ZmUxLWEwYTYt MDk2ZmMzNzJkNTMxLzEveW1uaDVUMk1MenpfZjNsTElQWXd4NEh3MjdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi80NTU1NTUtYzY1MS00ZmUxLWEwYTYtMDk2ZmMzNzJkNTMx LzEveW1uaDVUMk1MenpfZjNsTElQWXd4NEh3MjdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8jh6yjI CfEzf6GXOdIpFMZSwj3TSUaJNrAD/i2DC+v8gVTEihNIOG/OZ2A7W5gRhbSICc4M 7osR6XZKy2d/QBljMpW+Py12u/l/bPhmUypb478ufqo4jNKZUHYUmqzc4TQpwJOt mhStEBZU0PTOuUJy0OZJDKg1RAk8SJXQmKXPa4p8j1w9ecPvgVUuKPbo1qlKD5Hr n7XjiRH+i0ecW0wWIBCUAGbZ3fkP32jmLKvdmrjMRNQ25g6TRqOTzWeNl4Cz2HFf YeZ+KQvzVjWuV/eM/KShZX9iTsAEN9QShWaISzojHzh3yA44Ib/P9oXacCOccbit PeZ+YfLVvRLvTA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:11 2026 by rpki-client