This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json) Hash identifier: yTdbAqhrg29nEVnjjvAOVJ6mPcmsaEDE4HJ9JEYt31s= Subject key identifier: 34:AE:D0:C3:A3:67:B5:CD:F7:9A:53:6E:7C:B1:2D:08:B1:F1:01:F1 Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd Certificate serial: 019C41D8758B5BCD9101CC65782BFFF2F94A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft Manifest number: 0763 Signing time: Mon 09 Feb 2026 10:00:30 +0000 Manifest this update: Mon 09 Feb 2026 10:00:30 +0000 Manifest next update: Tue 10 Feb 2026 10:00:30 +0000 Files and hashes: 1: Ewfu9z930MhyPX8313muaLXe2oM.roa (hash: xaNiT68XuLXKua+vW1yOiyZ2EeD/WOwvk5iab3yyEqE=) 2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: HUNkL4O3y5BWpJt6rBMMJ7q6AGpgzlDF/Od+WPVXXMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:75:8b:5b:cd:91:01:cc:65:78:2b:ff:f2:f9:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd Validity Not Before: Feb 9 10:00:30 2026 GMT Not After : Feb 10 10:00:30 2026 GMT Subject: CN=34aed0c3a367b5cdf79a536e7cb12d08b1f101f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2e:74:7c:c8:d1:5b:63:ec:8f:18:fe:ef:26: 64:2a:0a:3c:1f:9e:b4:24:b7:52:a6:40:6c:7c:76: ce:80:41:61:39:d6:ab:e9:d8:03:fa:f4:1c:78:f9: 57:fe:09:d3:04:5b:72:0a:63:df:21:e6:2d:d1:33: 19:45:12:4e:65:40:d9:1c:ae:c0:e7:c0:f8:c2:6d: 40:d6:ff:3c:e9:12:d3:ac:e9:89:b4:e0:1a:10:f9: 9c:87:94:a2:b4:4a:09:9a:5a:86:9e:92:34:8e:3e: 22:de:a1:6b:f5:4a:14:a1:43:19:bf:50:89:38:1a: 10:d2:d3:ee:f1:a3:a0:6e:37:e5:8e:4b:24:58:d3: 05:e4:c8:9b:2b:74:c9:c0:cc:3c:cc:57:23:07:21: 97:ff:d9:22:f0:1a:fe:a9:ff:e9:2f:a1:b8:eb:3a: 01:4f:51:95:f8:a0:36:75:ac:2e:eb:9a:36:36:d8: cb:99:26:14:02:23:8b:0a:39:f0:d7:6e:ef:d7:80: 94:11:6f:8f:87:f8:c2:5e:d1:28:c2:72:fc:3d:a2: b7:d2:ba:58:ff:d9:4c:ce:2a:69:82:23:ed:ac:b3: b7:9f:82:8f:f1:29:2c:ad:75:24:04:e9:c6:da:51: d5:a8:f7:a6:80:e1:f2:41:58:61:b8:cf:3a:ea:dc: e9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AE:D0:C3:A3:67:B5:CD:F7:9A:53:6E:7C:B1:2D:08:B1:F1:01:F1 X509v3 Authority Key Identifier: keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:49:16:c1:12:83:86:41:e1:ae:8c:b2:f3:a3:ba:cb:e2:e8: c2:20:d1:bc:d2:c3:40:72:75:54:35:2e:34:d5:4c:3e:b6:29: 07:c0:9f:57:76:f7:30:9f:22:75:77:55:6d:36:af:1b:41:0f: 1c:e7:fd:7a:ef:c1:68:25:a7:14:b4:01:30:ca:2a:a6:96:24: 4f:96:dd:e6:73:36:59:96:4b:5b:a5:4c:06:2f:ca:3b:75:12: 20:3b:ee:1e:a2:86:bc:9d:f2:69:45:81:f8:47:65:96:bf:85: ff:da:9c:4e:12:51:d5:89:88:cb:df:66:ce:f9:25:57:de:cf: ed:1a:cb:5a:af:b1:8f:3f:74:20:b6:0b:96:dc:79:cc:ba:d7: ba:a8:b8:55:89:31:54:96:f8:a5:5e:f4:82:ed:e2:0c:59:cf: 7e:82:7e:3f:61:63:f0:0b:e9:af:88:b6:65:d2:cf:f4:db:f0: eb:02:eb:67:c1:70:73:5a:b1:0a:94:76:31:1e:50:e0:5f:e9: 92:bc:35:d6:3d:ee:9f:45:5d:06:5b:e9:a0:8e:b0:6f:3c:31: 98:ad:a7:91:da:3d:ba:60:19:e4:60:68:35:76:be:e6:d1:db: e9:30:ec:5b:90:20:71:0f:3a:24:97:71:fe:c2:aa:80:18:96: 95:51:de:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2HWLW82RAcxleCv/8vlKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYWNkN2Q5NmI5NTZkZTVkYjAzNjczY2QxZDFlM2EzN2I4 ZGQ5ZGQwHhcNMjYwMjA5MTAwMDMwWhcNMjYwMjEwMTAwMDMwWjAzMTEwLwYDVQQD EygzNGFlZDBjM2EzNjdiNWNkZjc5YTUzNmU3Y2IxMmQwOGIxZjEwMWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny50fMjRW2Psjxj+7yZkKgo8H560 JLdSpkBsfHbOgEFhOdar6dgD+vQcePlX/gnTBFtyCmPfIeYt0TMZRRJOZUDZHK7A 58D4wm1A1v886RLTrOmJtOAaEPmch5SitEoJmlqGnpI0jj4i3qFr9UoUoUMZv1CJ OBoQ0tPu8aOgbjfljkskWNMF5MibK3TJwMw8zFcjByGX/9ki8Br+qf/pL6G46zoB T1GV+KA2dawu65o2NtjLmSYUAiOLCjnw127v14CUEW+Ph/jCXtEownL8PaK30rpY /9lMzippgiPtrLO3n4KP8SksrXUkBOnG2lHVqPemgOHyQVhhuM866tzpwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSu0MOjZ7XN95pTbnyxLQix8QHxMB8GA1UdIwQY MBaAFGCs19lrlW3l2wNnPNHR46N7jdndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMzc3YmQtOGU0Mi00ODc1LWExMjQt M2FiZmFmZTc0YWE5LzEvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mMzc3YmQtOGU0Mi00ODc1LWExMjQtM2FiZmFmZTc0YWE5 LzEvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzUkWwRKD hkHhroyy86O6y+LowiDRvNLDQHJ1VDUuNNVMPrYpB8CfV3b3MJ8idXdVbTavG0EP HOf9eu/BaCWnFLQBMMoqppYkT5bd5nM2WZZLW6VMBi/KO3USIDvuHqKGvJ3yaUWB +Edllr+F/9qcThJR1YmIy99mzvklV97P7RrLWq+xjz90ILYLltx5zLrXuqi4VYkx VJb4pV70gu3iDFnPfoJ+P2Fj8Avpr4i2ZdLP9Nvw6wLrZ8Fwc1qxCpR2MR5Q4F/p krw11j3un0VdBlvpoI6wbzwxmK2nkdo9umAZ5GBoNXa+5tHb6TDsW5AgcQ86JJdx /sKqgBiWlVHe5g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:55 2026 by rpki-client