This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft File: yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft (raw, json) Hash identifier: M4qYiq/i2xhE9Dpqola8JBd8qB/6maanyCcI7fTIWy8= Subject key identifier: 15:FD:F7:41:A2:B3:46:2D:1D:A1:46:B1:75:57:E5:BF:9A:52:11:65 Authority key identifier: C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6 Certificate issuer: /CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6 Certificate serial: 019C446BB339B3A3CE3C1BA2240CC4380966 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft Manifest number: 0EC9 Signing time: Mon 09 Feb 2026 22:00:34 +0000 Manifest this update: Mon 09 Feb 2026 22:00:34 +0000 Manifest next update: Tue 10 Feb 2026 22:00:34 +0000 Files and hashes: 1: yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl (hash: DdMxiJcqjPOElGhfpD4DXMrzKMUPfWTaCF44UWL5Qa4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:b3:39:b3:a3:ce:3c:1b:a2:24:0c:c4:38:09:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6 Validity Not Before: Feb 9 22:00:34 2026 GMT Not After : Feb 10 22:00:34 2026 GMT Subject: CN=15fdf741a2b3462d1da146b17557e5bf9a521165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4f:ff:bb:8d:2d:c1:16:44:d1:87:c1:32:0d: ed:31:af:1a:fd:2c:e4:4d:9f:05:e4:da:9c:97:12: 11:5b:3a:05:84:c9:6d:12:c4:83:77:a5:a8:c2:52: d0:aa:f6:e1:02:ac:7a:3f:1d:41:f4:fd:88:81:4e: b4:75:2c:61:52:a8:01:ab:b7:af:15:d3:5e:d0:3c: a1:3f:9e:12:b5:e5:76:4a:3d:51:a8:7a:9d:56:10: a7:31:e7:7a:ef:fe:ce:21:f9:6a:45:f5:09:ed:d2: 33:0b:65:bd:27:08:db:f4:07:b9:5e:9f:d0:08:d4: 37:d5:5f:b2:2c:a5:a3:ac:f4:ce:3a:a4:f3:b4:51: 40:f7:0f:04:2a:37:cd:ec:fe:9f:ad:1b:1d:8f:b1: 85:49:fa:87:82:1f:b9:11:b9:09:2a:6f:f0:61:0d: 00:02:c1:a5:f4:e3:db:5b:f7:b4:be:05:99:ec:41: d5:02:3f:ab:67:6d:35:69:c1:fe:df:e6:d6:5a:4b: 10:29:b7:07:8d:4a:a3:44:20:b6:a4:f6:3c:1b:7c: cb:3b:6d:71:81:93:da:f5:cc:6d:7a:11:cc:53:05: e5:20:e1:b9:31:bd:66:d9:28:32:69:40:c3:0b:f4: ce:8c:79:6e:6f:e3:72:0e:c0:43:89:7c:89:1d:34: a2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FD:F7:41:A2:B3:46:2D:1D:A1:46:B1:75:57:E5:BF:9A:52:11:65 X509v3 Authority Key Identifier: keyid:C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:86:ab:ec:4a:e4:bd:8b:0c:99:b8:6e:21:45:f7:cc:9e:80: d0:73:fc:27:02:29:4e:95:84:1f:91:35:a8:08:a8:1b:58:87: 8d:00:e7:9d:18:20:b0:96:64:42:d0:61:b6:42:70:b8:97:c8: 20:20:39:ba:0f:d2:aa:ae:58:02:a5:4b:f4:e5:ef:55:e9:d2: 28:7d:62:02:89:5b:a7:3a:f9:32:7d:de:76:b5:d4:20:a3:ba: af:0a:c1:13:c7:30:cf:9a:94:dc:3a:96:92:fb:45:97:9a:f7: 8e:93:02:93:f0:aa:dc:0d:c7:15:73:ec:3c:d0:86:2e:32:c7: 93:29:29:60:ac:1d:b3:a4:2c:17:21:65:7f:e3:97:c1:12:0f: b9:fe:14:0a:f4:90:a4:6e:19:6c:c2:f2:7e:ec:d5:a9:4b:98: b4:c4:0d:8a:06:90:f2:b5:bf:38:51:e3:fa:ed:c8:0c:37:3b: f0:69:1d:cc:7f:76:5f:b9:fe:54:91:bb:b9:6b:39:86:9c:3f: 08:21:f7:79:a7:76:ee:59:07:01:25:45:d5:09:78:88:8f:b0: 58:a2:8a:39:a7:1b:21:08:dc:58:f5:9d:bc:68:73:4d:a8:0d: 5f:02:9b:8a:3b:c9:55:28:45:76:49:3b:4c:57:c9:9c:32:04: 11:c7:9e:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa7M5s6POPBuiJAzEOAlmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4Njc2ZmZkZTMxN2YyZWMxYjgxMDBkMmQ5ZDQ0YTNlN2Q4 Zjc4ZDYwHhcNMjYwMjA5MjIwMDM0WhcNMjYwMjEwMjIwMDM0WjAzMTEwLwYDVQQD EygxNWZkZjc0MWEyYjM0NjJkMWRhMTQ2YjE3NTU3ZTViZjlhNTIxMTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE//u40twRZE0YfBMg3tMa8a/Szk TZ8F5NqclxIRWzoFhMltEsSDd6WowlLQqvbhAqx6Px1B9P2IgU60dSxhUqgBq7ev FdNe0DyhP54SteV2Sj1RqHqdVhCnMed67/7OIflqRfUJ7dIzC2W9Jwjb9Ae5Xp/Q CNQ31V+yLKWjrPTOOqTztFFA9w8EKjfN7P6frRsdj7GFSfqHgh+5EbkJKm/wYQ0A AsGl9OPbW/e0vgWZ7EHVAj+rZ201acH+3+bWWksQKbcHjUqjRCC2pPY8G3zLO21x gZPa9cxtehHMUwXlIOG5Mb1m2SgyaUDDC/TOjHlub+NyDsBDiXyJHTSi4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBX990Gis0YtHaFGsXVX5b+aUhFlMB8GA1UdIwQY MBaAFMhnb/3jF/LsG4EA0tnUSj59j3jWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUdkdl9lTVg4dXdiZ1FEUzJkUktQbjJQZU5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS80OWIzMDctZmRjYS00YzU3LWFmZGYt NzA5NzkzY2QwMTIzLzEveUdkdl9lTVg4dXdiZ1FEUzJkUktQbjJQZU5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS80OWIzMDctZmRjYS00YzU3LWFmZGYtNzA5NzkzY2QwMTIz LzEveUdkdl9lTVg4dXdiZ1FEUzJkUktQbjJQZU5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYar7Erk vYsMmbhuIUX3zJ6A0HP8JwIpTpWEH5E1qAioG1iHjQDnnRggsJZkQtBhtkJwuJfI ICA5ug/Sqq5YAqVL9OXvVenSKH1iAolbpzr5Mn3edrXUIKO6rwrBE8cwz5qU3DqW kvtFl5r3jpMCk/Cq3A3HFXPsPNCGLjLHkykpYKwds6QsFyFlf+OXwRIPuf4UCvSQ pG4ZbMLyfuzVqUuYtMQNigaQ8rW/OFHj+u3IDDc78GkdzH92X7n+VJG7uWs5hpw/ CCH3ead27lkHASVF1Ql4iI+wWKKKOacbIQjcWPWdvGhzTagNXwKbijvJVShFdkk7 TFfJnDIEEceeCA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:56 2026 by rpki-client