This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft File: YfTZxfoK42S02B7bxNGCAPAPvH8.mft (raw, json) Hash identifier: 5GgQ54CK8Jq0zUMdHyNKKVVq+Srj9tXht0rTnUqD3Gc= Subject key identifier: C5:E4:A3:7D:44:17:02:30:7E:EC:60:44:29:47:20:F6:35:F6:A5:D3 Authority key identifier: 61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F Certificate issuer: /CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f Certificate serial: 019C4246495E4DA357B0F5FC7DF6BC5AE4F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft Manifest number: 01C5 Signing time: Mon 09 Feb 2026 12:00:28 +0000 Manifest this update: Mon 09 Feb 2026 12:00:28 +0000 Manifest next update: Tue 10 Feb 2026 12:00:28 +0000 Files and hashes: 1: YfTZxfoK42S02B7bxNGCAPAPvH8.crl (hash: ifp0SQYjh3h6+4hWSYWB7LvazIDAKJf2sUSTXB4hY5w=) 2: i757eDGPyWXy1WJ59_NsKxP9nBk.roa (hash: aclUO+YpHA3b3E++8LC8TZOgc8p99LqEe7lxYmVbjYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:49:5e:4d:a3:57:b0:f5:fc:7d:f6:bc:5a:e4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f Validity Not Before: Feb 9 12:00:28 2026 GMT Not After : Feb 10 12:00:28 2026 GMT Subject: CN=c5e4a37d441702307eec6044294720f635f6a5d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:c8:67:66:2c:b1:8c:c6:ae:4f:0d:3d:88: 3c:b8:bb:f8:cb:5a:05:92:d9:26:dc:a6:f9:ed:8c: fa:c5:63:d4:c9:ab:9e:62:60:b0:e8:c8:d8:0c:a0: c2:de:61:6b:06:31:6c:8b:6b:0c:78:c9:78:8f:e5: e6:d1:cc:0a:41:19:06:e6:65:91:26:b9:2f:1a:4e: 5d:15:c0:7e:dc:8d:e0:6f:2d:fa:b1:8b:61:14:70: db:c5:f7:55:9c:22:4a:40:6c:7d:c1:ee:ac:b2:8d: 99:df:ab:fe:11:d2:2d:98:f6:8f:d2:66:d5:8c:0d: 3b:46:a2:bf:1c:3f:1f:89:8a:f6:63:d5:63:4d:e8: 1f:d8:ce:86:a4:fd:b2:70:64:28:96:3d:e4:a7:d7: 54:22:5f:5e:a0:db:2f:a8:d4:77:8c:1c:94:ad:51: 55:99:a1:aa:f3:50:17:2f:a3:40:88:18:bd:c3:4e: 53:00:7e:af:6a:f4:7f:4c:00:f0:a7:4f:f8:58:d5: f5:77:93:06:48:4b:5a:6e:1c:39:3f:9b:f8:d3:e1: 94:ad:c5:2c:7a:df:40:ed:aa:e3:d8:b2:64:4f:c3: d8:31:b6:07:13:98:87:be:4b:65:e0:a9:c1:d7:9d: 59:64:05:ef:fb:d1:bb:d5:20:33:30:31:c0:a8:76: ae:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E4:A3:7D:44:17:02:30:7E:EC:60:44:29:47:20:F6:35:F6:A5:D3 X509v3 Authority Key Identifier: keyid:61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b6:11:d2:0f:2d:7d:5f:e0:6d:79:f5:87:e5:99:e7:d8:d3: 3e:0d:bf:a8:9a:8f:14:71:cc:f2:82:b8:8f:b7:47:e6:52:7d: ed:de:f0:b9:1f:d8:68:7d:65:77:87:b1:de:b9:7a:60:12:64: 21:d7:00:5e:a8:37:76:3b:64:05:38:cc:04:3d:0a:70:8e:e0: a2:a5:24:f6:51:9a:81:d8:dc:89:04:6d:f0:76:e0:dd:61:97: 4d:4a:b4:b7:99:62:09:9d:49:1a:79:98:6a:d3:f0:db:26:33: dd:09:ff:eb:3d:38:0e:0d:07:77:f2:1a:eb:a6:1c:01:55:26: 5d:64:17:96:38:b8:b8:1d:9b:34:44:c8:24:1c:3c:76:ba:11: aa:45:d8:96:d7:05:3c:12:75:b9:fd:43:2f:24:ea:de:c3:37: 48:42:ba:2c:b6:ec:e8:11:0f:45:74:47:15:56:b9:48:19:6d: c7:8b:70:ac:12:6f:e2:14:76:42:6b:75:91:63:42:b3:59:08: 9c:90:be:e9:e7:8e:52:58:37:28:c5:f5:18:6b:aa:69:f0:38: d2:7c:b0:8a:02:dc:a9:c3:8f:f0:5e:b1:83:d8:33:e9:18:d6: f9:44:fd:46:c4:7d:56:9e:2c:c9:2f:14:93:9d:f6:c4:85:a9: f1:39:e4:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRkleTaNXsPX8ffa8WuT4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZjRkOWM1ZmEwYWUzNjRiNGQ4MWVkYmM0ZDE4MjAwZjAw ZmJjN2YwHhcNMjYwMjA5MTIwMDI4WhcNMjYwMjEwMTIwMDI4WjAzMTEwLwYDVQQD EyhjNWU0YTM3ZDQ0MTcwMjMwN2VlYzYwNDQyOTQ3MjBmNjM1ZjZhNWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhvIZ2YssYzGrk8NPYg8uLv4y1oF ktkm3Kb57Yz6xWPUyaueYmCw6MjYDKDC3mFrBjFsi2sMeMl4j+Xm0cwKQRkG5mWR JrkvGk5dFcB+3I3gby36sYthFHDbxfdVnCJKQGx9we6sso2Z36v+EdItmPaP0mbV jA07RqK/HD8fiYr2Y9VjTegf2M6GpP2ycGQolj3kp9dUIl9eoNsvqNR3jByUrVFV maGq81AXL6NAiBi9w05TAH6vavR/TADwp0/4WNX1d5MGSEtabhw5P5v40+GUrcUs et9A7arj2LJkT8PYMbYHE5iHvktl4KnB151ZZAXv+9G71SAzMDHAqHauRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXko31EFwIwfuxgRClHIPY19qXTMB8GA1UdIwQY MBaAFGH02cX6CuNktNge28TRggDwD7x/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWZUWnhmb0s0MlMwMkI3YnhOR0NBUEFQdkg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NTE4MmEtYTYyZi00MDQyLThhOWIt N2VlNTMxMWEyYTNjLzEvWWZUWnhmb0s0MlMwMkI3YnhOR0NBUEFQdkg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NTE4MmEtYTYyZi00MDQyLThhOWItN2VlNTMxMWEyYTNj LzEvWWZUWnhmb0s0MlMwMkI3YnhOR0NBUEFQdkg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7YR0g8t fV/gbXn1h+WZ59jTPg2/qJqPFHHM8oK4j7dH5lJ97d7wuR/YaH1ld4ex3rl6YBJk IdcAXqg3djtkBTjMBD0KcI7goqUk9lGagdjciQRt8Hbg3WGXTUq0t5liCZ1JGnmY atPw2yYz3Qn/6z04Dg0Hd/Ia66YcAVUmXWQXlji4uB2bNETIJBw8droRqkXYltcF PBJ1uf1DLyTq3sM3SEK6LLbs6BEPRXRHFVa5SBltx4twrBJv4hR2Qmt1kWNCs1kI nJC+6eeOUlg3KMX1GGuqafA40nywigLcqcOP8F6xg9gz6RjW+UT9RsR9Vp4syS8U k532xIWp8Tnk2w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:00 2026 by rpki-client