This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft File: 0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json) Hash identifier: 4z+gRo/LXRtEG/EMlj9XgLF9aMH4cRs9UmDl9iig3kQ= Subject key identifier: 51:D0:97:50:B6:09:69:1E:86:AD:07:2B:CB:AA:C6:D6:EC:F6:44:A8 Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55 Certificate issuer: /CN=d1822263a8707c76f3db3b6be7122269c827ae55 Certificate serial: 019C4134230EA1348BC273CEDF2BA16364C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft Manifest number: 0D93 Signing time: Mon 09 Feb 2026 07:01:01 +0000 Manifest this update: Mon 09 Feb 2026 07:01:01 +0000 Manifest next update: Tue 10 Feb 2026 07:01:01 +0000 Files and hashes: 1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: lknFjleu1lflKGkeyrtzaAkzUN5iGzktEE3aTtSQ1Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:23:0e:a1:34:8b:c2:73:ce:df:2b:a1:63:64:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55 Validity Not Before: Feb 9 07:01:01 2026 GMT Not After : Feb 10 07:01:01 2026 GMT Subject: CN=51d09750b609691e86ad072bcbaac6d6ecf644a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bc:95:50:cc:ce:b8:e2:dc:6d:20:f6:0d:e2: d8:82:b8:d3:00:26:16:40:b9:83:48:11:2c:3e:ca: 06:4b:3c:7d:14:02:e5:e6:a4:33:e5:d4:27:0f:39: c9:f6:75:ce:a0:ab:25:1d:f0:fd:bc:39:6d:00:48: d8:ed:fa:5c:89:7f:89:a5:3c:0f:2c:27:92:2c:5f: 77:20:17:ec:09:a2:57:10:66:eb:f6:fc:c1:7f:77: d1:b0:64:8f:53:2e:4f:93:a9:0b:d2:d8:1d:44:52: e4:51:ff:bf:52:49:97:b6:5f:e4:07:27:96:06:58: 80:04:36:c5:e8:39:5f:6b:8c:47:d7:e9:77:87:1e: f5:1f:e7:c2:c7:b8:1c:ac:d5:be:35:8e:32:4d:82: 24:4d:a3:83:8d:a9:9d:f4:63:15:98:94:37:96:90: f3:db:55:70:eb:23:1f:54:3b:09:e9:e4:45:57:5f: d2:dc:52:cd:c5:3b:01:9c:6b:d0:30:65:f6:45:ef: 41:1d:a3:fb:ba:7b:75:22:40:54:3b:b5:cf:2f:c8: 8b:43:51:a2:a7:0c:c3:19:3b:07:f5:e2:32:68:60: 73:e7:93:3c:dd:df:7c:8d:83:7a:df:c6:4e:90:d6: d8:fc:fd:4c:6e:ea:bf:d7:27:11:3e:67:b2:75:56: 95:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D0:97:50:B6:09:69:1E:86:AD:07:2B:CB:AA:C6:D6:EC:F6:44:A8 X509v3 Authority Key Identifier: keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:54:d3:b7:8b:ee:4a:9d:44:fb:0d:fd:32:bd:29:bb:b8:86: e7:75:c3:2b:b4:e0:e2:a1:4f:7b:71:1f:bf:6b:ca:a4:4d:90: a0:9a:68:89:12:64:97:5b:b7:db:4f:b4:91:bc:49:23:be:21: 4f:05:4d:f1:d3:21:a3:02:99:90:42:cf:6e:eb:80:d7:1f:27: e7:88:eb:52:01:c1:b9:c5:cc:3c:a9:9d:72:04:7b:36:91:c5: 39:ca:66:f8:97:d6:43:1c:3f:ca:79:92:3b:d9:3f:80:17:65: 40:c3:5b:63:9d:6b:cc:0c:d4:97:75:5f:d5:26:65:4c:29:37: 42:56:06:df:1d:f5:85:f9:72:d5:93:a7:2d:cf:d6:04:49:be: 3a:ca:d0:d0:61:ff:af:ba:a9:70:d5:09:e0:25:cb:18:0f:fd: f7:5d:8d:9e:28:2e:ed:96:c4:77:ee:4a:9a:7b:b5:b3:ff:f6: 87:99:6e:fa:fb:74:80:9e:33:be:6b:0d:ac:71:43:cc:2a:5e: b6:f6:01:e6:fd:eb:c0:84:bb:b9:b1:81:11:62:75:7d:e7:8a: 22:d4:d8:4b:e2:cc:d4:64:55:97:e3:9a:4b:4e:81:a7:8c:ba: ef:3e:0b:7e:33:8b:da:46:03:17:f7:be:87:1a:eb:58:3b:c3: d6:b5:c6:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNCMOoTSLwnPO3yuhY2TCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxODIyMjYzYTg3MDdjNzZmM2RiM2I2YmU3MTIyMjY5Yzgy N2FlNTUwHhcNMjYwMjA5MDcwMTAxWhcNMjYwMjEwMDcwMTAxWjAzMTEwLwYDVQQD Eyg1MWQwOTc1MGI2MDk2OTFlODZhZDA3MmJjYmFhYzZkNmVjZjY0NGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApryVUMzOuOLcbSD2DeLYgrjTACYW QLmDSBEsPsoGSzx9FALl5qQz5dQnDznJ9nXOoKslHfD9vDltAEjY7fpciX+JpTwP LCeSLF93IBfsCaJXEGbr9vzBf3fRsGSPUy5Pk6kL0tgdRFLkUf+/UkmXtl/kByeW BliABDbF6Dlfa4xH1+l3hx71H+fCx7gcrNW+NY4yTYIkTaODjamd9GMVmJQ3lpDz 21Vw6yMfVDsJ6eRFV1/S3FLNxTsBnGvQMGX2Re9BHaP7unt1IkBUO7XPL8iLQ1Gi pwzDGTsH9eIyaGBz55M83d98jYN638ZOkNbY/P1Mbuq/1ycRPmeydVaV0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHQl1C2CWkehq0HK8uqxtbs9kSoMB8GA1UdIwQY MBaAFNGCImOocHx289s7a+cSImnIJ65VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xNWYyNDctODI2Yi00M2E4LWE0MjIt NGE3OTA0MTA2ZTNiLzEvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xNWYyNDctODI2Yi00M2E4LWE0MjItNGE3OTA0MTA2ZTNi LzEvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFTTt4vu Sp1E+w39Mr0pu7iG53XDK7Tg4qFPe3Efv2vKpE2QoJpoiRJkl1u320+0kbxJI74h TwVN8dMhowKZkELPbuuA1x8n54jrUgHBucXMPKmdcgR7NpHFOcpm+JfWQxw/ynmS O9k/gBdlQMNbY51rzAzUl3Vf1SZlTCk3QlYG3x31hfly1ZOnLc/WBEm+OsrQ0GH/ r7qpcNUJ4CXLGA/9912Nnigu7ZbEd+5Kmnu1s//2h5lu+vt0gJ4zvmsNrHFDzCpe tvYB5v3rwIS7ubGBEWJ1feeKItTYS+LM1GRVl+OaS06Bp4y67z4LfjOL2kYDF/e+ hxrrWDvD1rXGMg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:04 2026 by rpki-client