This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft File: yVcXmb2ok6GGC0phbFYnivXsksU.mft (raw, json) Hash identifier: MmH1rPa82TUZ2uHVnw80xfRoRn+PhTvpQM1uCOAR+qI= Subject key identifier: 76:D7:6E:FB:2A:53:67:E8:28:DB:8C:FF:5F:32:EA:4E:6F:38:28:86 Authority key identifier: C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5 Certificate issuer: /CN=c9571799bda893a1860b4a616c56278af5ec92c5 Certificate serial: 019C427D7D2608BE699057861C0F647DC1CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft Manifest number: 0D14 Signing time: Mon 09 Feb 2026 13:00:46 +0000 Manifest this update: Mon 09 Feb 2026 13:00:46 +0000 Manifest next update: Tue 10 Feb 2026 13:00:46 +0000 Files and hashes: 1: yVcXmb2ok6GGC0phbFYnivXsksU.crl (hash: 1EYO9wJkeNWsKRZhLuADyOC4O/3qzm7vy8kOYc+fexc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:7d:26:08:be:69:90:57:86:1c:0f:64:7d:c1:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9571799bda893a1860b4a616c56278af5ec92c5 Validity Not Before: Feb 9 13:00:46 2026 GMT Not After : Feb 10 13:00:46 2026 GMT Subject: CN=76d76efb2a5367e828db8cff5f32ea4e6f382886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:da:37:fa:e9:cb:7a:27:5f:21:44:f7:ad:35: 72:24:42:0d:d8:df:d7:e8:61:ed:d8:8d:41:0d:63: 51:95:8f:d5:23:3f:86:a0:ea:84:8d:6f:00:03:42: f7:61:da:e6:d7:9f:22:11:a7:5b:f9:47:77:a5:1a: c7:ae:09:34:2e:ec:87:ab:db:a1:f8:eb:40:97:9d: ef:45:3a:88:e1:80:12:b4:c7:1f:e2:84:63:22:ab: d3:40:8f:77:6e:5c:40:62:06:e0:4b:e2:9d:b2:48: ab:a5:05:12:a4:36:86:eb:cc:21:b4:ba:7b:6a:d6: 92:59:8e:66:9b:37:98:c9:1f:dd:23:d8:f1:3a:f4: 11:4f:4e:a9:af:6c:a4:d6:18:c0:12:1c:f9:b4:6d: db:14:67:04:04:ab:68:fa:e1:1d:0f:2a:b1:c6:79: 8c:ef:e4:81:43:87:33:5d:d7:af:3f:f2:25:dc:3c: fb:b7:44:c7:2a:15:9e:a5:27:58:26:c3:f2:c8:8e: e7:93:8d:6d:39:2b:e3:08:54:b3:19:82:e2:91:bd: 77:4f:98:21:64:d5:2b:7f:92:47:4b:8f:02:d4:5b: ba:ec:ee:9b:9e:b5:52:c1:ba:b2:89:68:44:af:29: d9:38:05:55:6b:7f:b6:cd:60:91:d7:a3:43:bc:30: 03:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D7:6E:FB:2A:53:67:E8:28:DB:8C:FF:5F:32:EA:4E:6F:38:28:86 X509v3 Authority Key Identifier: keyid:C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b3:7c:6f:ff:ff:f5:a0:0e:cf:c2:32:f2:be:37:25:ab:d2: 90:7c:12:dc:a0:e1:74:63:14:70:c3:06:2e:7b:78:48:f9:4c: cc:4d:b9:7c:5a:1f:a5:d4:6c:89:80:6f:b3:b4:90:5c:ea:a5: b4:83:d9:c5:b0:be:b2:9f:35:fa:9a:71:e6:68:8b:fa:6c:f1: 60:15:36:f1:29:55:9a:3d:81:58:7e:af:da:7f:3e:f3:48:f9: ca:f1:11:57:68:2e:6f:c0:ac:bd:40:8a:a5:c7:e9:61:bc:fe: 73:bd:bd:5f:d2:47:1d:a9:f1:3e:89:92:7c:91:47:72:81:03: 7d:f0:d9:9d:38:f0:be:4e:7a:70:a7:ce:5f:1f:ce:16:1d:58: 32:89:f1:28:44:c9:8f:28:da:4f:c3:ba:7a:3b:fb:47:83:ef: d6:24:96:79:9c:ab:68:eb:39:06:fe:da:d8:01:27:21:e4:dd: 06:92:0d:46:8d:fd:1e:ed:14:8e:5a:19:8c:7a:30:c9:c0:ad: 9f:b9:17:b5:aa:51:8c:4d:a6:df:42:b0:8f:06:e8:8a:5b:6f: 7c:7b:f4:f0:cf:70:bc:3a:34:36:20:d1:59:21:19:0c:d8:c7: 4b:11:7c:fc:c7:39:b2:b8:9b:b7:49:7e:21:f0:b8:e8:89:35: de:a7:78:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfX0mCL5pkFeGHA9kfcHOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NTcxNzk5YmRhODkzYTE4NjBiNGE2MTZjNTYyNzhhZjVl YzkyYzUwHhcNMjYwMjA5MTMwMDQ2WhcNMjYwMjEwMTMwMDQ2WjAzMTEwLwYDVQQD Eyg3NmQ3NmVmYjJhNTM2N2U4MjhkYjhjZmY1ZjMyZWE0ZTZmMzgyODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9o3+unLeidfIUT3rTVyJEIN2N/X 6GHt2I1BDWNRlY/VIz+GoOqEjW8AA0L3Ydrm158iEadb+Ud3pRrHrgk0LuyHq9uh +OtAl53vRTqI4YAStMcf4oRjIqvTQI93blxAYgbgS+KdskirpQUSpDaG68whtLp7 ataSWY5mmzeYyR/dI9jxOvQRT06pr2yk1hjAEhz5tG3bFGcEBKto+uEdDyqxxnmM 7+SBQ4czXdevP/Il3Dz7t0THKhWepSdYJsPyyI7nk41tOSvjCFSzGYLikb13T5gh ZNUrf5JHS48C1Fu67O6bnrVSwbqyiWhErynZOAVVa3+2zWCR16NDvDADKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbXbvsqU2foKNuM/18y6k5vOCiGMB8GA1UdIwQY MBaAFMlXF5m9qJOhhgtKYWxWJ4r17JLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVZjWG1iMm9rNkdHQzBwaGJGWW5pdlhza3NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wOGVmODctY2Y1NS00YjVkLTk4MjEt MDM3NDZkN2JkMjk0LzEveVZjWG1iMm9rNkdHQzBwaGJGWW5pdlhza3NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8wOGVmODctY2Y1NS00YjVkLTk4MjEtMDM3NDZkN2JkMjk0 LzEveVZjWG1iMm9rNkdHQzBwaGJGWW5pdlhza3NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrN8b/// 9aAOz8Iy8r43JavSkHwS3KDhdGMUcMMGLnt4SPlMzE25fFofpdRsiYBvs7SQXOql tIPZxbC+sp81+ppx5miL+mzxYBU28SlVmj2BWH6v2n8+80j5yvERV2gub8CsvUCK pcfpYbz+c729X9JHHanxPomSfJFHcoEDffDZnTjwvk56cKfOXx/OFh1YMonxKETJ jyjaT8O6ejv7R4Pv1iSWeZyraOs5Bv7a2AEnIeTdBpINRo39Hu0UjloZjHowycCt n7kXtapRjE2m30KwjwboiltvfHv08M9wvDo0NiDRWSEZDNjHSxF8/Mc5sribt0l+ IfC46Ik13qd47A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:36 2026 by rpki-client