This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft File: mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft (raw, json) Hash identifier: lhIw6YE2LP+I/KeymhbV53SRyTpN2c1x//cxBmLovAY= Subject key identifier: 72:02:57:C8:87:77:B3:EF:87:69:70:85:C1:CA:E2:70:F0:18:19:CB Authority key identifier: 99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6 Certificate issuer: /CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6 Certificate serial: 019C41D8C54C6F63706A1A2B39771C18818A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft Manifest number: 0EF1 Signing time: Mon 09 Feb 2026 10:00:51 +0000 Manifest this update: Mon 09 Feb 2026 10:00:51 +0000 Manifest next update: Tue 10 Feb 2026 10:00:51 +0000 Files and hashes: 1: mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl (hash: FX9Ve4L1ZKjK4+teetdVZgJDedYnj3lgUEgt6nGCHhI=) 2: wBSqoLFJ8ghdrJRBL3vMWYtDQ7Y.roa (hash: NXyL8CpxXnA8Of0Eq4HRkrn4hYLRn+YBP9JG8zmPi+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:c5:4c:6f:63:70:6a:1a:2b:39:77:1c:18:81:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6 Validity Not Before: Feb 9 10:00:51 2026 GMT Not After : Feb 10 10:00:51 2026 GMT Subject: CN=720257c88777b3ef87697085c1cae270f01819cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:12:43:d7:59:27:9b:7c:a3:90:94:1b:03:b6: c4:01:71:01:a2:e9:03:df:76:a8:14:bc:d6:8b:1f: 72:54:2d:60:ce:d2:71:0d:24:84:9d:4b:f5:f0:40: 07:d8:9b:65:09:f4:20:e7:64:46:93:a6:4f:9e:37: 95:49:6d:dd:5c:9d:ed:ef:9d:4d:53:85:64:b4:60: 60:e3:a9:9b:6e:fd:38:2c:c6:03:c3:f2:3f:1c:18: f1:ab:ca:0c:4c:55:eb:5d:a8:06:d6:31:0a:87:f8: 6a:3b:76:cf:18:96:e1:ab:c9:14:2e:dc:d3:94:e7: 36:6a:0a:e8:b1:b7:14:78:8e:22:18:c2:a2:38:4f: 15:46:33:c2:09:8f:c3:2d:55:3a:e6:0d:c4:dc:42: 30:f0:19:e4:8a:3d:cf:1d:de:d8:9a:43:fd:43:63: 4f:92:11:ad:7a:2b:55:a8:25:b9:c6:a8:7d:20:81: be:31:ed:b0:6f:01:c5:77:52:52:64:4f:a8:c8:69: 0a:92:0f:d2:26:7b:6e:1e:a2:af:32:e0:70:c3:92: 76:3f:ac:8c:34:8a:4d:ea:6e:b1:a1:b4:f4:ed:d4: 6b:fd:34:f3:c4:d9:45:a5:7f:d8:1f:e4:cc:5f:07: a9:1b:55:0d:cd:15:ec:52:f9:a2:0f:8f:f8:e3:ba: 50:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:02:57:C8:87:77:B3:EF:87:69:70:85:C1:CA:E2:70:F0:18:19:CB X509v3 Authority Key Identifier: keyid:99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b1:d4:46:4c:85:8d:0d:d5:68:d3:59:94:f0:7a:1d:e0:c3: 8a:24:0f:a9:d4:52:7d:3e:1b:e1:3b:89:c3:a5:48:5d:cc:a9: 75:7f:8e:7b:a2:df:aa:fe:c2:50:ab:74:e0:fb:47:35:ca:d2: f9:36:64:c5:c6:64:78:d8:c2:65:39:46:88:d1:2e:56:a3:a5: bf:dd:7f:1e:c2:4b:a9:4e:31:2e:c6:2e:60:a6:6b:3a:29:bd: 36:83:6d:0a:17:28:03:df:00:2a:04:7b:47:21:bf:51:dc:cc: 8d:cd:0c:cb:87:0a:63:1c:21:a7:a4:3f:6f:c1:4d:05:51:9c: ea:b4:40:db:9f:41:5b:a7:83:e3:e5:be:3d:35:1c:4f:3c:20: ea:5d:ab:55:a4:95:5b:55:0a:e8:1b:96:73:21:b9:51:34:65: 75:b8:89:32:08:5a:b0:0d:56:22:96:43:30:37:dd:ce:0b:48: 2e:42:d0:97:6f:0d:83:f1:f7:82:69:d7:32:96:72:00:3b:d2: 85:fd:09:d1:98:8f:1b:46:ad:e1:ce:d3:b0:2d:21:43:a3:da: e2:c0:bb:af:76:5a:c5:b4:7a:3a:22:31:98:af:51:18:df:73: 43:65:f0:a7:72:49:4c:ec:73:cc:25:5c:99:84:cf:1b:85:ca: 6e:50:b5:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2MVMb2NwahorOXccGIGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ODBjNzBmNzZmMGI1ZjVjODQ1N2EwMzM3YWQ1ZDYzMTIy Y2Y3ZTYwHhcNMjYwMjA5MTAwMDUxWhcNMjYwMjEwMTAwMDUxWjAzMTEwLwYDVQQD Eyg3MjAyNTdjODg3NzdiM2VmODc2OTcwODVjMWNhZTI3MGYwMTgxOWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxJD11knm3yjkJQbA7bEAXEBoukD 33aoFLzWix9yVC1gztJxDSSEnUv18EAH2JtlCfQg52RGk6ZPnjeVSW3dXJ3t751N U4VktGBg46mbbv04LMYDw/I/HBjxq8oMTFXrXagG1jEKh/hqO3bPGJbhq8kULtzT lOc2agrosbcUeI4iGMKiOE8VRjPCCY/DLVU65g3E3EIw8Bnkij3PHd7YmkP9Q2NP khGteitVqCW5xqh9IIG+Me2wbwHFd1JSZE+oyGkKkg/SJntuHqKvMuBww5J2P6yM NIpN6m6xobT07dRr/TTzxNlFpX/YH+TMXwepG1UNzRXsUvmiD4/447pQlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHICV8iHd7Pvh2lwhcHK4nDwGBnLMB8GA1UdIwQY MBaAFJmAxw928LX1yEV6AzetXWMSLPfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVlESEQzYnd0ZlhJUlhvRE42MWRZeElzOS1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80MmVjNjgtZDQzMy00MDAwLTkwNmMt YzNlYWU2YjBmYjljLzEvbVlESEQzYnd0ZlhJUlhvRE42MWRZeElzOS1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC80MmVjNjgtZDQzMy00MDAwLTkwNmMtYzNlYWU2YjBmYjlj LzEvbVlESEQzYnd0ZlhJUlhvRE42MWRZeElzOS1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrHURkyF jQ3VaNNZlPB6HeDDiiQPqdRSfT4b4TuJw6VIXcypdX+Oe6Lfqv7CUKt04PtHNcrS +TZkxcZkeNjCZTlGiNEuVqOlv91/HsJLqU4xLsYuYKZrOim9NoNtChcoA98AKgR7 RyG/UdzMjc0My4cKYxwhp6Q/b8FNBVGc6rRA259BW6eD4+W+PTUcTzwg6l2rVaSV W1UK6BuWcyG5UTRldbiJMghasA1WIpZDMDfdzgtILkLQl28Ng/H3gmnXMpZyADvS hf0J0ZiPG0at4c7TsC0hQ6Pa4sC7r3ZaxbR6OiIxmK9RGN9zQ2Xwp3JJTOxzzCVc mYTPG4XKblC1eA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:38 2026 by rpki-client