This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.mft File: Yonrndlo7aSnlWTC4GpoOEIpegQ.mft (raw, json) Hash identifier: LyYnuAo9WObIDfbIcmkV1D9J36eKTdNeXTxVda2yhqo= Subject key identifier: 10:29:31:49:DF:69:D0:08:E6:AA:AD:99:E0:5C:58:99:D3:A6:52:67 Authority key identifier: 62:89:EB:9D:D9:68:ED:A4:A7:95:64:C2:E0:6A:68:38:42:29:7A:04 Certificate issuer: /CN=6289eb9dd968eda4a79564c2e06a683842297a04 Certificate serial: 019C416B0B74F5930575C516DCBAA323CF44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yonrndlo7aSnlWTC4GpoOEIpegQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.mft Manifest number: 052E Signing time: Mon 09 Feb 2026 08:01:00 +0000 Manifest this update: Mon 09 Feb 2026 08:01:00 +0000 Manifest next update: Tue 10 Feb 2026 08:01:00 +0000 Files and hashes: 1: Yonrndlo7aSnlWTC4GpoOEIpegQ.crl (hash: Pik319LZ0n6LonKm7WjNLele1VJT4iiEYdYoO5Obyyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yonrndlo7aSnlWTC4GpoOEIpegQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6b:0b:74:f5:93:05:75:c5:16:dc:ba:a3:23:cf:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6289eb9dd968eda4a79564c2e06a683842297a04 Validity Not Before: Feb 9 08:01:00 2026 GMT Not After : Feb 10 08:01:00 2026 GMT Subject: CN=10293149df69d008e6aaad99e05c5899d3a65267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d9:e7:17:13:b0:51:74:ed:7a:81:8b:01:a7: 10:e2:6a:52:9f:b0:14:ca:a1:1e:ea:4c:80:38:80: bd:22:ca:97:68:d3:ad:64:4c:f5:53:1b:9c:8b:49: 68:30:8c:ad:09:9d:95:0e:bb:50:3b:39:f0:ae:8f: 3e:4a:da:8f:91:10:20:ef:90:59:13:bb:26:ce:f4: 33:a9:18:09:02:37:81:cd:29:a1:35:15:4c:da:21: d5:db:27:7d:1e:98:df:95:7b:e2:cd:a0:2e:f0:b7: 84:d2:b3:19:b7:db:85:d0:86:e0:4f:d3:a0:cb:11: 84:e4:d7:9a:30:63:98:cd:25:df:85:3a:dd:ea:32: 93:2c:e8:1d:80:28:f5:79:76:9a:00:18:95:49:c7: 4e:4e:c6:a0:4f:a1:19:d6:3f:8a:87:08:2e:bb:9a: d7:f8:21:9a:1a:43:82:42:ab:d9:b2:94:82:49:26: 3e:3a:6e:71:31:e8:80:11:7b:9c:8f:1a:b7:da:ae: aa:8c:51:bf:2b:ea:81:37:0f:2a:45:f8:26:42:af: 9c:8e:b8:6a:6f:d8:43:90:39:e3:7a:5d:20:af:f1: c2:7c:80:02:bd:51:d6:0a:a2:0a:d6:1d:7a:9d:d8: 7a:6e:91:71:32:72:e3:70:ec:0a:b4:12:7e:bc:98: c2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:29:31:49:DF:69:D0:08:E6:AA:AD:99:E0:5C:58:99:D3:A6:52:67 X509v3 Authority Key Identifier: keyid:62:89:EB:9D:D9:68:ED:A4:A7:95:64:C2:E0:6A:68:38:42:29:7A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yonrndlo7aSnlWTC4GpoOEIpegQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:15:22:a4:e6:b7:d4:da:e4:14:09:a1:fd:f3:90:39:59:bb: b1:b2:d8:93:31:b5:bf:2c:7d:81:c6:8e:f9:63:16:d2:3d:1f: 8e:93:c6:01:39:95:2e:84:5c:d0:13:94:39:6c:7b:24:b1:96: f6:c0:16:ef:bf:63:b9:62:e4:6f:d5:50:01:98:4c:65:0c:95: 0e:1a:a0:27:47:10:f9:7b:dc:59:75:96:d9:b6:99:2e:d1:5d: 46:41:1e:a7:3d:02:fe:75:80:fb:ab:65:49:fc:d5:7f:f6:bc: 10:f9:7c:5f:36:ad:c9:ca:0e:94:40:ed:d6:f9:02:82:f0:e5: 81:bd:b3:dc:13:a7:11:5c:3c:8d:bd:91:2c:9e:32:74:3e:36: e4:fb:ad:8f:27:45:f1:49:57:6f:97:57:9a:c1:a2:cd:14:09: 44:63:b4:af:7b:ad:82:b0:89:85:60:9f:29:83:0f:d4:68:ba: e7:68:5d:81:a2:02:ba:02:73:cb:85:0f:d5:9c:af:46:98:42: 10:d8:5c:f9:36:ee:76:cb:1c:81:80:46:ac:d5:f7:d8:40:7b: dc:59:61:b5:0f:dd:5b:cb:f3:a6:1d:c9:cd:f2:25:63:09:19: ab:04:42:3a:d2:06:6e:e8:ee:e6:b7:01:8a:cb:dd:09:a2:a1: 01:ef:d0:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBawt09ZMFdcUW3LqjI89EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyODllYjlkZDk2OGVkYTRhNzk1NjRjMmUwNmE2ODM4NDIy OTdhMDQwHhcNMjYwMjA5MDgwMTAwWhcNMjYwMjEwMDgwMTAwWjAzMTEwLwYDVQQD EygxMDI5MzE0OWRmNjlkMDA4ZTZhYWFkOTllMDVjNTg5OWQzYTY1MjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dnnFxOwUXTteoGLAacQ4mpSn7AU yqEe6kyAOIC9IsqXaNOtZEz1Uxuci0loMIytCZ2VDrtQOznwro8+StqPkRAg75BZ E7smzvQzqRgJAjeBzSmhNRVM2iHV2yd9HpjflXvizaAu8LeE0rMZt9uF0IbgT9Og yxGE5NeaMGOYzSXfhTrd6jKTLOgdgCj1eXaaABiVScdOTsagT6EZ1j+Khwguu5rX +CGaGkOCQqvZspSCSSY+Om5xMeiAEXucjxq32q6qjFG/K+qBNw8qRfgmQq+cjrhq b9hDkDnjel0gr/HCfIACvVHWCqIK1h16ndh6bpFxMnLjcOwKtBJ+vJjCFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBApMUnfadAI5qqtmeBcWJnTplJnMB8GA1UdIwQY MBaAFGKJ653ZaO2kp5VkwuBqaDhCKXoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW9ucm5kbG83YVNubFdUQzRHcG9PRUlwZWdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi81ZTdkYzgtN2JmNS00MDMzLTkwOTIt ZmM3ZWI5OTFkYjQwLzEvWW9ucm5kbG83YVNubFdUQzRHcG9PRUlwZWdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi81ZTdkYzgtN2JmNS00MDMzLTkwOTItZmM3ZWI5OTFkYjQw LzEvWW9ucm5kbG83YVNubFdUQzRHcG9PRUlwZWdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRUipOa3 1NrkFAmh/fOQOVm7sbLYkzG1vyx9gcaO+WMW0j0fjpPGATmVLoRc0BOUOWx7JLGW 9sAW779juWLkb9VQAZhMZQyVDhqgJ0cQ+XvcWXWW2baZLtFdRkEepz0C/nWA+6tl SfzVf/a8EPl8XzatycoOlEDt1vkCgvDlgb2z3BOnEVw8jb2RLJ4ydD425PutjydF 8UlXb5dXmsGizRQJRGO0r3utgrCJhWCfKYMP1Gi652hdgaICugJzy4UP1ZyvRphC ENhc+TbudsscgYBGrNX32EB73FlhtQ/dW8vzph3JzfIlYwkZqwRCOtIGbuju5rcB isvdCaKhAe/Qog== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:31 2026 by rpki-client