This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft File: mY3mCoZ7SdsppifG99IjomajIqk.mft (raw, json) Hash identifier: Ko2vJMdL1ADoITgtktji4bDvbYVbDX/80MTSNWo6bis= Subject key identifier: E8:EF:A0:2A:01:8A:23:23:94:81:C4:BE:25:6F:28:1D:87:D0:4B:A4 Authority key identifier: 99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9 Certificate issuer: /CN=998de60a867b49db29a627c6f7d223a266a322a9 Certificate serial: 019C424647B8149AA2715080A254E2C79D78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft Manifest number: CA Signing time: Mon 09 Feb 2026 12:00:27 +0000 Manifest this update: Mon 09 Feb 2026 12:00:27 +0000 Manifest next update: Tue 10 Feb 2026 12:00:27 +0000 Files and hashes: 1: UXW4TwBbqAg2KVwromTqDGJrE20.roa (hash: iC2l8xQ6yq60AZmCDOxhtpG1B+XfVb2gALUB/AI2BAQ=) 2: mY3mCoZ7SdsppifG99IjomajIqk.crl (hash: TEIOKDyz3OcZQQm9S3mEN8mKJ23s9YHX4S680DbCUJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:47:b8:14:9a:a2:71:50:80:a2:54:e2:c7:9d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=998de60a867b49db29a627c6f7d223a266a322a9 Validity Not Before: Feb 9 12:00:27 2026 GMT Not After : Feb 10 12:00:27 2026 GMT Subject: CN=e8efa02a018a23239481c4be256f281d87d04ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:55:89:f0:72:4b:b9:ad:37:44:75:d1:cf:fc: 93:c0:57:0a:0e:7b:99:72:ee:01:c1:64:21:93:7e: ad:1c:13:54:6b:32:9a:c5:d5:32:5c:2b:64:ba:fa: 8d:ec:9b:ee:db:98:4e:96:a4:58:b3:a7:1a:65:25: 8d:df:62:50:6b:06:db:18:ac:52:bd:36:9d:09:a4: fa:5b:2e:11:d2:ba:72:42:06:f6:69:0f:5d:71:49: ee:87:40:fb:d5:88:4b:f2:9e:a8:e4:83:d5:d9:41: 0f:0e:8b:f5:f4:8f:f1:1b:89:5a:e2:ea:37:de:64: 1f:87:db:cd:94:ee:23:6b:f7:48:df:60:7a:75:fd: ad:99:79:cb:f5:9c:b2:c4:31:14:5e:3b:bc:d5:3b: 9a:a7:41:6a:be:f7:88:a4:05:e5:43:7d:f5:e0:2e: 16:78:c7:2b:9f:5a:4d:55:2d:36:f0:94:a3:89:c7: a3:32:64:72:b0:4c:57:8d:56:ed:2c:f2:1c:c7:cb: d2:5e:0c:c2:d7:51:51:b5:ca:56:a7:59:8b:b2:ad: 59:6b:0a:0b:31:43:6f:d0:fa:d0:15:61:f5:0b:14: 83:22:9d:49:96:8a:43:69:24:cb:4a:0d:4f:9a:81: cc:ba:36:9b:fc:c1:44:e2:ce:92:b1:66:80:25:11: 0e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:EF:A0:2A:01:8A:23:23:94:81:C4:BE:25:6F:28:1D:87:D0:4B:A4 X509v3 Authority Key Identifier: keyid:99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:07:7b:49:d9:21:98:9a:df:7e:fe:77:4c:b7:21:df:d4:3e: dd:95:ec:4d:f7:7a:e5:c2:1d:32:cd:58:40:47:64:7f:01:09: 20:b3:d5:fc:cc:f8:fa:65:a3:54:60:04:f7:a3:86:74:66:f4: f7:f7:46:fd:ac:8b:b4:cb:60:f7:b2:90:58:ed:db:6a:9d:2f: 83:bc:ca:e6:a8:e6:38:df:48:86:ef:5e:4a:8d:7a:53:c3:df: 48:8d:c0:9a:c6:f4:36:e0:1c:0f:ce:d5:dc:06:d1:2d:4c:15: 27:c4:c1:f7:72:af:8a:59:30:79:41:51:a4:69:11:f1:7c:66: a0:38:b8:bd:e3:8e:b6:6f:f5:06:57:b3:d2:aa:aa:d0:65:40: e5:70:1e:21:a9:b9:85:c4:03:8d:7c:db:2d:f2:2a:d1:2a:e4: 7d:ca:bf:e4:e6:8b:7b:eb:95:29:7c:46:61:63:2d:39:74:6c: ce:1f:2a:24:17:60:9f:dd:23:8c:2b:eb:f7:1e:84:66:04:bb: a2:ea:8e:e1:04:cf:45:e7:c8:54:ad:77:3a:83:bc:7e:b2:bb: a3:20:d6:af:1c:85:28:62:91:24:e1:bc:4c:39:18:d6:85:cf: f2:0c:a1:68:8b:2c:28:08:59:a7:c7:f9:40:6a:d8:21:30:47: e3:49:c1:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRke4FJqicVCAolTix514MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OGRlNjBhODY3YjQ5ZGIyOWE2MjdjNmY3ZDIyM2EyNjZh MzIyYTkwHhcNMjYwMjA5MTIwMDI3WhcNMjYwMjEwMTIwMDI3WjAzMTEwLwYDVQQD EyhlOGVmYTAyYTAxOGEyMzIzOTQ4MWM0YmUyNTZmMjgxZDg3ZDA0YmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lWJ8HJLua03RHXRz/yTwFcKDnuZ cu4BwWQhk36tHBNUazKaxdUyXCtkuvqN7Jvu25hOlqRYs6caZSWN32JQawbbGKxS vTadCaT6Wy4R0rpyQgb2aQ9dcUnuh0D71YhL8p6o5IPV2UEPDov19I/xG4la4uo3 3mQfh9vNlO4ja/dI32B6df2tmXnL9ZyyxDEUXju81Tuap0FqvveIpAXlQ3314C4W eMcrn1pNVS028JSjicejMmRysExXjVbtLPIcx8vSXgzC11FRtcpWp1mLsq1ZawoL MUNv0PrQFWH1CxSDIp1JlopDaSTLSg1PmoHMujab/MFE4s6SsWaAJREOLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjvoCoBiiMjlIHEviVvKB2H0EukMB8GA1UdIwQY MBaAFJmN5gqGe0nbKaYnxvfSI6JmoyKpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVkzbUNvWjdTZHNwcGlmRzk5SWpvbWFqSXFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kZTE3MWItNWIzYy00Yjc2LWIwNjUt MjBkMzRlMThlMjcwLzEvbVkzbUNvWjdTZHNwcGlmRzk5SWpvbWFqSXFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kZTE3MWItNWIzYy00Yjc2LWIwNjUtMjBkMzRlMThlMjcw LzEvbVkzbUNvWjdTZHNwcGlmRzk5SWpvbWFqSXFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAd7Sdkh mJrffv53TLch39Q+3ZXsTfd65cIdMs1YQEdkfwEJILPV/Mz4+mWjVGAE96OGdGb0 9/dG/ayLtMtg97KQWO3bap0vg7zK5qjmON9Ihu9eSo16U8PfSI3Amsb0NuAcD87V 3AbRLUwVJ8TB93KvilkweUFRpGkR8XxmoDi4veOOtm/1Blez0qqq0GVA5XAeIam5 hcQDjXzbLfIq0Srkfcq/5OaLe+uVKXxGYWMtOXRszh8qJBdgn90jjCvr9x6EZgS7 ouqO4QTPRefIVK13OoO8frK7oyDWrxyFKGKRJOG8TDkY1oXP8gyhaIssKAhZp8f5 QGrYITBH40nBPw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:28 2026 by rpki-client