This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft File: YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json) Hash identifier: 8J3a0kBPiPFNbYl61qGypz/wf0HKFk8D9N1tBMwC/k8= Subject key identifier: 8E:7B:EA:87:54:39:19:6C:04:D0:65:34:CF:F7:5C:0B:F5:6E:E5:A3 Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24 Certificate issuer: /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224 Certificate serial: 019C42B45324A927D1242677772FE7677E2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft Manifest number: 13D3 Signing time: Mon 09 Feb 2026 14:00:39 +0000 Manifest this update: Mon 09 Feb 2026 14:00:39 +0000 Manifest next update: Tue 10 Feb 2026 14:00:39 +0000 Files and hashes: 1: ET5vMhLbSdWsUS7cNiMD0Da89x0.roa (hash: +AkKc2WCnmOlPOxnIiAKu7no0yZQrgr6+XgFHwBRgZU=) 2: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: 3djQIc2iEja7DXfq6nqOidOObdZwXd+R13XsZH7lHvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:53:24:a9:27:d1:24:26:77:77:2f:e7:67:7e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224 Validity Not Before: Feb 9 14:00:39 2026 GMT Not After : Feb 10 14:00:39 2026 GMT Subject: CN=8e7bea875439196c04d06534cff75c0bf56ee5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9e:a3:e6:39:73:ef:50:80:00:73:dd:40:eb: e9:9b:12:a9:a3:a8:c1:b0:16:75:f9:6f:c1:6c:c9: 72:e7:04:6b:cd:65:8d:21:3a:71:6f:0c:47:af:f7: 4e:db:8c:06:3f:25:91:1e:9a:a7:ab:35:d9:e9:b6: fe:7e:4d:c4:44:c9:02:5a:f2:49:d8:14:5b:ed:cc: 31:11:cc:de:b0:6d:23:35:8f:94:b8:15:b6:ff:2c: 46:69:72:12:d4:a9:f2:a8:ff:a4:14:ca:ca:cf:2f: a2:3f:bf:84:6a:9c:26:68:00:19:57:28:1a:e5:85: 52:f9:1c:6a:6b:ef:b2:f2:90:63:e8:8e:91:2e:85: 17:2b:19:aa:e7:76:ca:b2:d1:ec:05:2c:02:0c:e1: e5:3a:65:e3:95:18:68:a6:82:97:27:20:a6:bb:37: 25:d1:ec:1e:30:61:98:c1:a6:bc:d1:f7:bd:18:d1: 47:b0:ee:c5:dc:c7:b7:df:f7:2b:44:60:c8:c7:d0: d8:17:c4:1b:e1:97:8e:f1:4b:6f:ec:12:55:4c:77: 79:b9:16:ea:28:19:4e:18:80:56:19:f7:fb:b5:e0: bd:c4:3f:2e:f5:72:0b:50:6e:08:2d:77:55:73:f5: bb:1f:da:f0:79:6a:75:b6:cf:be:48:3b:ee:6d:b5: 08:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7B:EA:87:54:39:19:6C:04:D0:65:34:CF:F7:5C:0B:F5:6E:E5:A3 X509v3 Authority Key Identifier: keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:5a:56:fb:18:54:19:3c:27:76:0e:65:51:37:e2:ea:21:a3: 75:cc:8d:07:f8:b3:bd:9f:bb:d5:ab:1c:50:37:74:02:44:53: 99:7e:01:1f:dd:99:f4:61:d4:7c:09:fa:af:5a:47:61:f7:e7: 60:3f:fd:fe:49:a0:34:9d:b1:8c:ba:59:08:56:0a:79:d4:b3: 98:9b:e2:4c:9d:65:06:df:8b:0c:4e:7a:24:36:be:b7:37:8d: 6d:65:26:e1:6a:36:40:08:bf:df:9e:52:6d:2e:f2:f4:57:cb: fb:33:0d:18:e8:16:4e:89:ff:db:e2:be:4a:1e:fc:b2:79:47: 83:7d:5e:d7:19:f1:53:e6:1a:6b:15:72:72:05:00:86:fd:b3: f7:f9:76:d0:02:3e:f8:cd:e9:d2:e7:74:e9:3b:2f:3a:4b:bb: 59:1d:46:7b:7c:d0:2f:0c:1d:a4:82:4b:dd:7a:5d:e7:6e:77: b5:68:07:0b:a0:24:5e:38:57:fe:fb:48:7e:35:2f:29:ab:a1: 93:a2:43:86:07:eb:bb:b4:cc:c5:17:0c:18:5a:33:e8:e3:da: d8:7d:3c:e6:cd:42:cb:04:b7:2d:b4:65:95:c4:62:5c:99:7a: e6:5f:83:5e:bd:0d:8b:33:e2:ba:e1:9f:2f:7c:0a:53:9f:15: c4:f7:b7:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtFMkqSfRJCZ3dy/nZ34tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwN2Q3YjBlNWZlNmQ2OWI0ZDc5N2RlYzNkMTEyYzQ3Yjhh MTkyMjQwHhcNMjYwMjA5MTQwMDM5WhcNMjYwMjEwMTQwMDM5WjAzMTEwLwYDVQQD Eyg4ZTdiZWE4NzU0MzkxOTZjMDRkMDY1MzRjZmY3NWMwYmY1NmVlNWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ6j5jlz71CAAHPdQOvpmxKpo6jB sBZ1+W/BbMly5wRrzWWNITpxbwxHr/dO24wGPyWRHpqnqzXZ6bb+fk3ERMkCWvJJ 2BRb7cwxEczesG0jNY+UuBW2/yxGaXIS1KnyqP+kFMrKzy+iP7+EapwmaAAZVyga 5YVS+Rxqa++y8pBj6I6RLoUXKxmq53bKstHsBSwCDOHlOmXjlRhopoKXJyCmuzcl 0eweMGGYwaa80fe9GNFHsO7F3Me33/crRGDIx9DYF8Qb4ZeO8Utv7BJVTHd5uRbq KBlOGIBWGff7teC9xD8u9XILUG4ILXdVc/W7H9rweWp1ts++SDvubbUIHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI576odUORlsBNBlNM/3XAv1buWjMB8GA1UdIwQY MBaAFGB9ew5f5tabTXl97D0RLEe4oZIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZWM2MGItOWNjMS00ZTVlLTlmMmUt YWUwNWFlMTI5MWYyLzEvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ZWM2MGItOWNjMS00ZTVlLTlmMmUtYWUwNWFlMTI5MWYy LzEvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVpW+xhU GTwndg5lUTfi6iGjdcyNB/izvZ+71ascUDd0AkRTmX4BH92Z9GHUfAn6r1pHYffn YD/9/kmgNJ2xjLpZCFYKedSzmJviTJ1lBt+LDE56JDa+tzeNbWUm4Wo2QAi/355S bS7y9FfL+zMNGOgWTon/2+K+Sh78snlHg31e1xnxU+YaaxVycgUAhv2z9/l20AI+ +M3p0ud06TsvOku7WR1Ge3zQLwwdpIJL3Xpd5253tWgHC6AkXjhX/vtIfjUvKauh k6JDhgfru7TMxRcMGFoz6OPa2H085s1CywS3LbRllcRiXJl65l+DXr0NizPiuuGf L3wKU58VxPe3hg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:08 2026 by rpki-client