This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft File: CYYD8NRKkgRDOKLK3xiegQHDv18.mft (raw, json) Hash identifier: KNGCsXoo3d2m7po9sIRAUE9X09plLYIO+Lm6P/SMuGc= Subject key identifier: 10:E0:C5:05:66:FF:A9:1E:E9:2B:28:41:34:4C:C1:DB:D4:18:0D:4A Authority key identifier: 09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F Certificate issuer: /CN=098603f0d44a92044338a2cadf189e8101c3bf5f Certificate serial: 019C40FD13BC0057BFAEDCFA16633EE69FDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft Manifest number: 0EDA Signing time: Mon 09 Feb 2026 06:00:53 +0000 Manifest this update: Mon 09 Feb 2026 06:00:53 +0000 Manifest next update: Tue 10 Feb 2026 06:00:53 +0000 Files and hashes: 1: CYYD8NRKkgRDOKLK3xiegQHDv18.crl (hash: tq6IJEDFU5ryOplGZx1NexrjH8353vdGS/R8wS+ZcVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:13:bc:00:57:bf:ae:dc:fa:16:63:3e:e6:9f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098603f0d44a92044338a2cadf189e8101c3bf5f Validity Not Before: Feb 9 06:00:53 2026 GMT Not After : Feb 10 06:00:53 2026 GMT Subject: CN=10e0c50566ffa91ee92b2841344cc1dbd4180d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0c:8a:67:a6:21:44:cb:7f:b1:60:8b:46:91: 38:55:a7:4b:78:43:af:c8:15:ac:7f:68:13:a4:57: 21:84:7c:52:5e:31:de:38:45:c6:06:75:11:f6:e4: 7c:30:98:43:33:47:ff:b3:b0:91:d1:df:a6:6c:4c: 71:ae:55:dc:80:86:a0:1c:06:56:9b:be:7e:40:a8: 16:6f:8c:4c:5f:9d:f5:fa:0d:87:2e:00:3a:1a:d3: e9:83:92:a9:8d:a5:18:71:ef:26:03:cc:64:06:fa: 4c:b5:a2:d6:63:b3:e6:ae:c9:80:91:7b:ab:12:f1: 87:99:90:f4:f8:0c:93:2a:7c:5d:05:04:3e:89:bf: 36:e9:51:54:cb:a3:24:1d:86:5a:75:59:d7:f6:81: 1a:12:e9:a4:67:89:7c:c9:d4:ff:0e:fd:f3:f8:ef: f2:f4:e4:e1:27:b5:34:c9:41:c0:25:fd:26:66:a0: 67:a3:5f:84:83:cb:6a:4f:e2:68:44:7b:a0:d9:bb: fb:a1:df:90:c3:03:98:d0:41:4f:91:4d:be:a2:bc: 89:9b:a3:2b:a4:ec:86:58:a7:8b:6e:59:f1:91:88: 66:d5:74:33:80:96:45:1c:a8:e3:d1:ba:45:01:82: 79:da:29:2d:a9:03:c6:64:41:87:9e:a8:2a:f7:b0: 19:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E0:C5:05:66:FF:A9:1E:E9:2B:28:41:34:4C:C1:DB:D4:18:0D:4A X509v3 Authority Key Identifier: keyid:09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:07:de:a0:33:94:f7:aa:51:0c:30:ee:d0:c0:69:bd:7b:52: 54:e0:4f:c2:1d:db:7f:6f:e4:95:09:28:73:fd:b6:b8:11:83: 21:6e:36:68:a2:7c:3d:72:11:ba:92:c1:8b:67:e0:b1:fd:5d: 93:56:e1:d6:5b:43:8a:c8:58:7f:19:c2:f7:4d:63:a2:30:25: 15:7b:fa:e4:51:d9:57:91:4e:eb:3e:95:65:51:f5:1c:14:be: a8:16:ef:64:f1:7d:ff:10:4b:5c:cf:fc:42:22:2e:bf:bb:88: d5:3a:25:2d:ac:8e:16:76:1e:bd:af:99:72:36:fb:61:0f:02: 57:7a:99:b3:c6:4a:b5:db:fb:3a:27:11:a0:5e:5d:c2:ca:2e: 68:5c:94:e4:28:a1:ee:3a:01:67:73:40:3a:b1:a8:54:bf:9d: 35:49:78:6f:55:c9:d6:5c:28:c2:8b:f8:42:f0:eb:f4:18:07: 5b:e0:9d:b1:bc:79:ba:85:9e:cb:01:46:82:79:c3:c7:45:45: 6d:5d:f9:fc:aa:49:96:e3:be:41:08:94:e6:2b:6d:f1:c3:0d: 09:c3:73:f3:42:09:48:e2:88:48:84:89:ab:bc:a1:b7:75:86: c5:c0:95:8b:ea:53:d4:e1:f3:6b:99:e1:ff:cd:2d:6e:8b:22: d1:83:94:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/RO8AFe/rtz6FmM+5p/eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ODYwM2YwZDQ0YTkyMDQ0MzM4YTJjYWRmMTg5ZTgxMDFj M2JmNWYwHhcNMjYwMjA5MDYwMDUzWhcNMjYwMjEwMDYwMDUzWjAzMTEwLwYDVQQD EygxMGUwYzUwNTY2ZmZhOTFlZTkyYjI4NDEzNDRjYzFkYmQ0MTgwZDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQyKZ6YhRMt/sWCLRpE4VadLeEOv yBWsf2gTpFchhHxSXjHeOEXGBnUR9uR8MJhDM0f/s7CR0d+mbExxrlXcgIagHAZW m75+QKgWb4xMX531+g2HLgA6GtPpg5KpjaUYce8mA8xkBvpMtaLWY7PmrsmAkXur EvGHmZD0+AyTKnxdBQQ+ib826VFUy6MkHYZadVnX9oEaEumkZ4l8ydT/Dv3z+O/y 9OThJ7U0yUHAJf0mZqBno1+Eg8tqT+JoRHug2bv7od+QwwOY0EFPkU2+oryJm6Mr pOyGWKeLblnxkYhm1XQzgJZFHKjj0bpFAYJ52iktqQPGZEGHnqgq97AZSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDgxQVm/6ke6SsoQTRMwdvUGA1KMB8GA1UdIwQY MBaAFAmGA/DUSpIEQziiyt8YnoEBw79fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1lZRDhOUktrZ1JET0tMSzN4aWVnUUhEdjE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82OGIzNTMtY2MyYi00MmUwLTgwYWYt YjczNjg2NDI3OTQyLzEvQ1lZRDhOUktrZ1JET0tMSzN4aWVnUUhEdjE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC82OGIzNTMtY2MyYi00MmUwLTgwYWYtYjczNjg2NDI3OTQy LzEvQ1lZRDhOUktrZ1JET0tMSzN4aWVnUUhEdjE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwfeoDOU 96pRDDDu0MBpvXtSVOBPwh3bf2/klQkoc/22uBGDIW42aKJ8PXIRupLBi2fgsf1d k1bh1ltDishYfxnC901jojAlFXv65FHZV5FO6z6VZVH1HBS+qBbvZPF9/xBLXM/8 QiIuv7uI1TolLayOFnYeva+Zcjb7YQ8CV3qZs8ZKtdv7OicRoF5dwsouaFyU5Cih 7joBZ3NAOrGoVL+dNUl4b1XJ1lwowov4QvDr9BgHW+Cdsbx5uoWeywFGgnnDx0VF bV35/KpJluO+QQiU5itt8cMNCcNz80IJSOKISISJq7yht3WGxcCVi+pT1OHza5nh /80tbosi0YOUkA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:46 2026 by rpki-client