This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft File: yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft (raw, json) Hash identifier: +B91/0zzaLw0s3dNutJiFYMdCPAdFJCKwEOE9ngCHKM= Subject key identifier: C6:D6:77:FD:81:96:A1:9A:BD:9F:8C:EC:84:27:49:5C:28:C4:D0:A5 Authority key identifier: C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5 Certificate issuer: /CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5 Certificate serial: 019C4322B51AEB9388B4D5F72B8225B0807E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft Manifest number: 0414 Signing time: Mon 09 Feb 2026 16:01:13 +0000 Manifest this update: Mon 09 Feb 2026 16:01:13 +0000 Manifest next update: Tue 10 Feb 2026 16:01:13 +0000 Files and hashes: 1: s7yoUaWs_cdTcfxb23hHNbYxU34.roa (hash: HOPZhoocxgo394BFWR+fVdoYGl8HfSPhqPdNa7STymE=) 2: yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl (hash: tRxJ0PzZpgmRq2Dqbxkt/7dNtCxiq2MlLT7DR23f0sM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:b5:1a:eb:93:88:b4:d5:f7:2b:82:25:b0:80:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5 Validity Not Before: Feb 9 16:01:13 2026 GMT Not After : Feb 10 16:01:13 2026 GMT Subject: CN=c6d677fd8196a19abd9f8cec8427495c28c4d0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:00:45:2c:94:a2:bb:9b:3d:2a:23:d0:ad:4e: 4e:8d:60:34:a4:e2:02:cb:96:31:33:37:ca:ef:b5: 43:f7:58:44:fe:31:52:34:36:16:47:c9:87:14:44: 39:a5:6b:74:61:2e:25:9a:89:44:cd:55:14:38:df: 0c:10:ae:ae:ab:c6:c8:69:78:99:d6:e7:e2:f5:00: 30:59:3c:e9:9e:9e:8e:64:29:81:37:f8:2d:c9:0e: a0:cc:d5:58:29:e8:56:b4:74:9e:14:d9:8c:1f:52: cc:8b:cf:ff:90:1e:96:15:d3:fc:ed:d3:e5:20:10: 8c:9c:15:39:b1:21:7c:9c:84:8f:f9:4c:23:1a:3a: 50:b3:46:d5:64:b6:ad:34:e3:e1:8e:f4:d2:e8:c0: 5f:22:2d:6b:28:db:ff:15:2c:48:63:bc:87:75:a5: 78:62:a2:dd:cc:b3:a5:8e:07:a4:23:2c:98:2e:1b: 19:3d:a8:61:6d:6f:cd:66:1e:52:00:09:e9:76:e7: e2:78:3e:44:fe:74:95:38:6b:dd:fb:7d:bd:4b:ad: d8:73:96:98:1b:f8:56:29:ab:6c:99:87:5b:94:74: 58:7b:e4:c7:1a:8d:58:35:49:19:0b:1d:4f:2a:7d: 06:50:16:48:2b:d5:27:68:e4:42:30:20:dd:4d:11: 1e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D6:77:FD:81:96:A1:9A:BD:9F:8C:EC:84:27:49:5C:28:C4:D0:A5 X509v3 Authority Key Identifier: keyid:C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f5:70:c8:2f:7a:e7:a2:1e:17:20:61:65:d7:9f:10:c2:dc: 07:3f:06:ca:14:c9:28:db:f6:2a:2d:8c:c5:ae:cb:29:8e:39: ab:f2:00:90:7d:da:9c:c5:3d:77:5c:34:67:53:da:25:dc:7b: 41:83:05:91:b2:96:63:a0:75:3f:17:ec:59:4c:94:6a:c4:b8: 89:4d:bc:8f:7a:ca:f8:16:77:74:c4:6e:b9:a8:cd:d9:c2:5b: 17:13:fd:4e:7d:55:96:c8:5b:57:76:e6:97:21:a0:d3:78:0f: d6:db:4c:2e:b3:12:98:b8:2b:81:11:4f:81:93:1e:2c:bc:fc: 42:b6:7e:a9:a3:32:67:c6:2f:ac:98:49:8f:b3:e0:fc:73:f1: 90:6f:8a:cb:fb:9b:8a:17:26:97:06:da:23:d3:23:86:ec:ba: d5:d9:fd:3f:9e:ed:8e:ea:a3:01:e1:77:ac:02:02:5b:64:b1: 49:df:04:47:c3:08:34:89:37:54:02:35:66:0a:84:86:dd:d5: a0:78:98:56:7b:53:b0:0e:94:b3:1f:f5:cb:bb:a1:80:32:13: 9e:3e:66:c3:05:c4:54:c3:36:b8:95:b5:f4:ce:2a:c2:28:bb: 5f:c6:5c:86:ad:31:4d:5d:18:bb:d4:5f:ec:25:db:cc:b4:9d: 41:85:7f:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIrUa65OItNX3K4IlsIB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YzY4OTJhNjhjZTUwYTE4NmMwZDYwY2Q1YzllNGM5ODhj ZTE2YzUwHhcNMjYwMjA5MTYwMTEzWhcNMjYwMjEwMTYwMTEzWjAzMTEwLwYDVQQD EyhjNmQ2NzdmZDgxOTZhMTlhYmQ5ZjhjZWM4NDI3NDk1YzI4YzRkMGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QBFLJSiu5s9KiPQrU5OjWA0pOIC y5YxMzfK77VD91hE/jFSNDYWR8mHFEQ5pWt0YS4lmolEzVUUON8MEK6uq8bIaXiZ 1ufi9QAwWTzpnp6OZCmBN/gtyQ6gzNVYKehWtHSeFNmMH1LMi8//kB6WFdP87dPl IBCMnBU5sSF8nISP+UwjGjpQs0bVZLatNOPhjvTS6MBfIi1rKNv/FSxIY7yHdaV4 YqLdzLOljgekIyyYLhsZPahhbW/NZh5SAAnpdufieD5E/nSVOGvd+329S63Yc5aY G/hWKatsmYdblHRYe+THGo1YNUkZCx1PKn0GUBZIK9UnaORCMCDdTREerQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbWd/2BlqGavZ+M7IQnSVwoxNClMB8GA1UdIwQY MBaAFMjGiSpozlChhsDWDNXJ5MmIzhbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU1hSkttak9VS0dHd05ZTTFjbmt5WWpPRnNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mZjVmZmMtMjJmZi00NmExLThkMmIt ZDM0ZDEyMDI4N2QzLzEveU1hSkttak9VS0dHd05ZTTFjbmt5WWpPRnNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9mZjVmZmMtMjJmZi00NmExLThkMmItZDM0ZDEyMDI4N2Qz LzEveU1hSkttak9VS0dHd05ZTTFjbmt5WWpPRnNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/VwyC96 56IeFyBhZdefEMLcBz8GyhTJKNv2Ki2Mxa7LKY45q/IAkH3anMU9d1w0Z1PaJdx7 QYMFkbKWY6B1PxfsWUyUasS4iU28j3rK+BZ3dMRuuajN2cJbFxP9Tn1VlshbV3bm lyGg03gP1ttMLrMSmLgrgRFPgZMeLLz8QrZ+qaMyZ8YvrJhJj7Pg/HPxkG+Ky/ub ihcmlwbaI9Mjhuy61dn9P57tjuqjAeF3rAICW2SxSd8ER8MINIk3VAI1ZgqEht3V oHiYVntTsA6Usx/1y7uhgDITnj5mwwXEVMM2uJW19M4qwii7X8Zchq0xTV0Yu9Rf 7CXbzLSdQYV/+Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:22 2026 by rpki-client