This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft File: yErFLitXLMKpmnQSV-VpqjceNWg.mft (raw, json) Hash identifier: 6e5MpXK7EsBcus8rafF4/qW35tt70mR7rMLP+1znIXQ= Subject key identifier: 78:06:EC:A1:52:49:0E:16:E2:4C:E3:36:FB:6F:EB:A2:F6:90:02:6F Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68 Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568 Certificate serial: 019C4390AE5F726BEFD1AEAAC51CEC385349 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft Manifest number: 109A Signing time: Mon 09 Feb 2026 18:01:21 +0000 Manifest this update: Mon 09 Feb 2026 18:01:21 +0000 Manifest next update: Tue 10 Feb 2026 18:01:21 +0000 Files and hashes: 1: JqbX_PTUjq28Lqi1j_knCVS0A90.roa (hash: iCvt3eLQurCsmS7VrC6JLl3/RIGkqIASrCrA/w60LJs=) 2: yErFLitXLMKpmnQSV-VpqjceNWg.crl (hash: cfW3R8uLOFGRSxIbKesafehPNBywCZvB+VOujPZZPWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:ae:5f:72:6b:ef:d1:ae:aa:c5:1c:ec:38:53:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568 Validity Not Before: Feb 9 18:01:21 2026 GMT Not After : Feb 10 18:01:21 2026 GMT Subject: CN=7806eca152490e16e24ce336fb6feba2f690026f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:51:69:f0:8f:1f:53:21:e8:c8:98:9b:2f:e5: 7f:9d:88:49:a2:cc:af:3b:1c:33:09:72:6f:08:6a: 64:fd:3c:ea:4d:2a:10:9f:b2:13:01:2c:8c:91:da: c8:cb:4b:d6:c0:2e:cb:31:e2:70:23:d2:30:92:d7: 2d:da:b7:7e:a2:10:b4:dd:1f:fb:e9:4b:91:0e:f0: 4d:92:8b:01:1b:66:45:0c:bc:f1:4c:95:87:c0:8d: 67:97:29:cf:3e:3b:02:73:2f:78:ad:b0:cc:37:fd: c9:13:0d:a6:60:80:ac:69:31:97:d3:8a:a0:29:5a: 45:a1:ac:66:da:de:67:3c:d8:22:a1:a8:e7:d7:ea: 76:9c:2b:61:eb:63:29:16:82:21:d4:56:57:c0:0f: 84:6d:89:ea:4d:aa:ac:d7:f0:25:bd:87:25:39:66: aa:3f:ef:3a:a2:b9:e3:ab:d6:f7:23:1b:58:b9:9c: bc:de:73:2a:19:73:b3:7d:3c:bd:ca:0d:53:0e:a7: 49:75:63:41:5e:cd:19:11:17:bf:06:9e:2c:7e:d8: 3a:b6:85:0b:da:6d:2d:ad:fa:58:43:ad:a4:21:99: 99:04:85:d6:38:73:9c:c6:49:ae:35:27:50:b1:91: aa:c4:ed:aa:9b:92:16:c3:03:69:1a:8a:95:65:60: 7a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:06:EC:A1:52:49:0E:16:E2:4C:E3:36:FB:6F:EB:A2:F6:90:02:6F X509v3 Authority Key Identifier: keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:17:6e:a1:7e:42:f3:fe:67:24:36:56:46:48:2b:91:8c:0b: da:e2:e3:38:46:65:d5:23:4a:41:1d:9e:f4:d9:a8:d2:f7:d7: b2:bf:ec:1e:4d:ed:75:99:67:de:1f:ed:4e:ad:53:c6:43:b6: 9f:23:fa:80:50:73:2f:08:fd:06:20:b4:76:6f:a1:cd:0d:8f: 4e:46:e2:e0:df:ba:61:67:14:8e:33:4f:6f:c8:5d:27:52:16: 55:68:26:6c:ff:db:85:98:55:76:a1:7d:64:20:2f:36:30:50: 95:b1:c4:5e:d9:03:dd:86:02:55:54:3c:33:ef:b7:4e:70:4c: 91:33:85:f4:47:a4:20:83:7c:f0:99:4e:1a:a4:c7:e1:1c:a9: bd:6e:72:3f:04:64:ae:9e:6b:e8:b7:a0:0f:5e:84:5f:1c:79: 99:b3:3f:ce:5e:c9:fa:77:2d:d5:fd:81:d2:e5:e2:6e:5e:ba: db:63:cc:a7:3d:c4:a0:f3:24:81:b2:2d:80:c6:81:bf:6e:bf: 9c:ca:53:d5:95:08:b5:9f:6a:b7:15:5a:4b:1d:71:76:d6:3d: 3a:61:29:04:8e:55:52:ee:98:5f:75:79:98:1a:eb:c5:cb:a9: 7a:13:b6:71:27:06:a5:78:55:27:fa:ab:ad:12:c4:34:55:9e: d9:ab:7b:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkK5fcmvv0a6qxRzsOFNJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NGFjNTJlMmI1NzJjYzJhOTlhNzQxMjU3ZTU2OWFhMzcx ZTM1NjgwHhcNMjYwMjA5MTgwMTIxWhcNMjYwMjEwMTgwMTIxWjAzMTEwLwYDVQQD Eyg3ODA2ZWNhMTUyNDkwZTE2ZTI0Y2UzMzZmYjZmZWJhMmY2OTAwMjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFFp8I8fUyHoyJibL+V/nYhJosyv OxwzCXJvCGpk/TzqTSoQn7ITASyMkdrIy0vWwC7LMeJwI9Iwktct2rd+ohC03R/7 6UuRDvBNkosBG2ZFDLzxTJWHwI1nlynPPjsCcy94rbDMN/3JEw2mYICsaTGX04qg KVpFoaxm2t5nPNgioajn1+p2nCth62MpFoIh1FZXwA+EbYnqTaqs1/AlvYclOWaq P+86ornjq9b3IxtYuZy83nMqGXOzfTy9yg1TDqdJdWNBXs0ZERe/Bp4sftg6toUL 2m0trfpYQ62kIZmZBIXWOHOcxkmuNSdQsZGqxO2qm5IWwwNpGoqVZWB6wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgG7KFSSQ4W4kzjNvtv66L2kAJvMB8GA1UdIwQY MBaAFMhKxS4rVyzCqZp0Elflaao3HjVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUVyRkxpdFhMTUtwbW5RU1YtVnBxamNlTldnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hYmRhZmMtYjM4OS00NTE4LWIxMmQt MmNjMzQyYjAwNTE5LzEveUVyRkxpdFhMTUtwbW5RU1YtVnBxamNlTldnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hYmRhZmMtYjM4OS00NTE4LWIxMmQtMmNjMzQyYjAwNTE5 LzEveUVyRkxpdFhMTUtwbW5RU1YtVnBxamNlTldnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRduoX5C 8/5nJDZWRkgrkYwL2uLjOEZl1SNKQR2e9Nmo0vfXsr/sHk3tdZln3h/tTq1TxkO2 nyP6gFBzLwj9BiC0dm+hzQ2PTkbi4N+6YWcUjjNPb8hdJ1IWVWgmbP/bhZhVdqF9 ZCAvNjBQlbHEXtkD3YYCVVQ8M++3TnBMkTOF9EekIIN88JlOGqTH4RypvW5yPwRk rp5r6LegD16EXxx5mbM/zl7J+nct1f2B0uXibl6622PMpz3EoPMkgbItgMaBv26/ nMpT1ZUItZ9qtxVaSx1xdtY9OmEpBI5VUu6YX3V5mBrrxcupehO2cScGpXhVJ/qr rRLENFWe2at7qQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:53 2026 by rpki-client