This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft File: yTLAXdVS5YBU2FWljWFhlVP1HGM.mft (raw, json) Hash identifier: BJfoKUSQGEEoIl4+N34MmL3z2E01pvZCIubJmLrxQO8= Subject key identifier: 9F:39:C4:0E:8F:71:7A:4F:23:6E:C8:50:CD:2D:BA:E7:F9:E5:F3:7C Authority key identifier: C9:32:C0:5D:D5:52:E5:80:54:D8:55:A5:8D:61:61:95:53:F5:1C:63 Certificate issuer: /CN=c932c05dd552e58054d855a58d61619553f51c63 Certificate serial: 019C42B3F09849B79834978E4AE07C0BE5A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTLAXdVS5YBU2FWljWFhlVP1HGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft Manifest number: 0296 Signing time: Mon 09 Feb 2026 14:00:14 +0000 Manifest this update: Mon 09 Feb 2026 14:00:14 +0000 Manifest next update: Tue 10 Feb 2026 14:00:14 +0000 Files and hashes: 1: yTLAXdVS5YBU2FWljWFhlVP1HGM.crl (hash: BCr8VkoYjgOPEqPcmlh/9A1a8yoF/ZFMCLbZ0eZqVmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft rsync://rpki.ripe.net/repository/DEFAULT/yTLAXdVS5YBU2FWljWFhlVP1HGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b3:f0:98:49:b7:98:34:97:8e:4a:e0:7c:0b:e5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c932c05dd552e58054d855a58d61619553f51c63 Validity Not Before: Feb 9 14:00:14 2026 GMT Not After : Feb 10 14:00:14 2026 GMT Subject: CN=9f39c40e8f717a4f236ec850cd2dbae7f9e5f37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:db:06:73:3d:01:f8:50:36:03:0a:0e:d0:c3: ba:1d:8b:1a:a6:88:78:94:f8:cc:06:ee:7f:68:81: 41:89:ca:26:86:53:ba:51:25:c1:b6:08:21:0e:a9: 7e:14:30:0d:cf:89:85:04:6b:5e:1c:61:54:91:f4: 46:c0:f7:88:31:14:40:78:20:0e:30:15:44:3b:ab: 18:c8:67:70:bf:c0:e0:86:4b:ab:40:d9:e9:26:b0: 63:39:0d:f5:a9:52:f3:0a:72:4f:23:94:bc:47:4d: c7:4d:f0:25:e8:df:44:8b:27:ac:50:6d:01:ed:54: c4:07:79:66:b8:28:6d:a1:0e:b9:35:da:f5:e6:0f: ad:0b:f3:b8:9d:5d:f9:9c:f1:bd:b1:70:58:22:ff: c3:5d:a1:8d:a6:d7:97:c8:d4:8a:67:dd:ff:60:a3: 71:b5:fa:a3:72:1c:91:65:0f:cb:a6:c3:2e:c2:fe: 81:d8:dc:51:94:2f:75:04:9b:24:6a:13:3f:3b:cd: 3f:fd:85:8b:e4:f4:fe:28:3b:41:e3:b8:3d:c1:99: 5a:58:cb:da:97:87:cb:2b:fc:ba:c6:de:62:36:9a: e7:e5:b5:13:f5:95:26:d8:b8:de:ad:75:48:78:6c: c0:86:05:f7:3d:dd:11:5a:50:86:69:b3:6b:a6:63: ee:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:39:C4:0E:8F:71:7A:4F:23:6E:C8:50:CD:2D:BA:E7:F9:E5:F3:7C X509v3 Authority Key Identifier: keyid:C9:32:C0:5D:D5:52:E5:80:54:D8:55:A5:8D:61:61:95:53:F5:1C:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTLAXdVS5YBU2FWljWFhlVP1HGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:62:82:82:03:84:3e:c3:2b:66:e9:19:8b:e6:09:e4:f4:42: 3e:fc:df:23:d3:d7:38:b8:77:50:f8:f8:7a:8c:32:ce:60:a1: 2b:ab:3e:15:21:36:39:35:26:8f:a7:fe:06:31:98:38:91:fe: ab:22:f7:19:dc:aa:18:ba:d2:48:86:c5:fd:dc:9c:e0:33:12: 11:33:29:c9:69:ae:eb:c0:c7:6f:2e:03:54:db:5d:2f:1f:41: 53:0c:34:d9:45:3e:df:f1:91:7d:fc:d6:28:b5:b9:9b:4e:59: 4f:af:51:7b:7d:10:70:c0:36:a5:b8:61:13:54:92:f6:f0:c1: c0:b7:b2:10:af:1f:b2:b4:e6:ce:7b:8d:c6:8f:b1:f9:5e:ae: fe:db:23:ca:74:29:ea:d3:f2:b2:ff:0a:de:ee:b4:e5:80:f3: 7a:3b:7b:63:de:7f:b1:78:0a:54:b6:88:99:fe:1d:65:bc:d9: a6:00:66:a8:0d:3d:b3:65:bb:85:b2:eb:d0:9e:72:49:96:3d: 3d:8b:f8:2a:8c:58:c9:15:3d:c9:d1:63:22:85:90:cf:aa:0e: 3b:63:40:44:0c:1a:3d:b8:fa:5d:f2:44:40:3b:db:88:ad:00: ee:4c:df:e9:b6:b8:1e:b6:b5:04:17:83:cc:bc:6f:dd:f6:27: 3b:80:f8:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCs/CYSbeYNJeOSuB8C+WkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MzJjMDVkZDU1MmU1ODA1NGQ4NTVhNThkNjE2MTk1NTNm NTFjNjMwHhcNMjYwMjA5MTQwMDE0WhcNMjYwMjEwMTQwMDE0WjAzMTEwLwYDVQQD Eyg5ZjM5YzQwZThmNzE3YTRmMjM2ZWM4NTBjZDJkYmFlN2Y5ZTVmMzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltsGcz0B+FA2AwoO0MO6HYsapoh4 lPjMBu5/aIFBicomhlO6USXBtgghDql+FDANz4mFBGteHGFUkfRGwPeIMRRAeCAO MBVEO6sYyGdwv8DghkurQNnpJrBjOQ31qVLzCnJPI5S8R03HTfAl6N9EiyesUG0B 7VTEB3lmuChtoQ65Ndr15g+tC/O4nV35nPG9sXBYIv/DXaGNpteXyNSKZ93/YKNx tfqjchyRZQ/LpsMuwv6B2NxRlC91BJskahM/O80//YWL5PT+KDtB47g9wZlaWMva l4fLK/y6xt5iNprn5bUT9ZUm2LjerXVIeGzAhgX3Pd0RWlCGabNrpmPuWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ85xA6PcXpPI27IUM0tuuf55fN8MB8GA1UdIwQY MBaAFMkywF3VUuWAVNhVpY1hYZVT9RxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVRMQVhkVlM1WUJVMkZXbGpXRmhsVlAxSEdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85MTMzMmItMzQ1Ni00NjUxLTkzMDUt ZmE2Yjk4Zjg0NzBlLzEveVRMQVhkVlM1WUJVMkZXbGpXRmhsVlAxSEdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85MTMzMmItMzQ1Ni00NjUxLTkzMDUtZmE2Yjk4Zjg0NzBl LzEveVRMQVhkVlM1WUJVMkZXbGpXRmhsVlAxSEdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzGKCggOE PsMrZukZi+YJ5PRCPvzfI9PXOLh3UPj4eowyzmChK6s+FSE2OTUmj6f+BjGYOJH+ qyL3GdyqGLrSSIbF/dyc4DMSETMpyWmu68DHby4DVNtdLx9BUww02UU+3/GRffzW KLW5m05ZT69Re30QcMA2pbhhE1SS9vDBwLeyEK8fsrTmznuNxo+x+V6u/tsjynQp 6tPysv8K3u605YDzejt7Y95/sXgKVLaImf4dZbzZpgBmqA09s2W7hbLr0J5ySZY9 PYv4KoxYyRU9ydFjIoWQz6oOO2NARAwaPbj6XfJEQDvbiK0A7kzf6ba4Hra1BBeD zLxv3fYnO4D4oA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:36 2026 by rpki-client