This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft File: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft (raw, json) Hash identifier: dXYoHzXkCevL730RdMqLuqJLyLDCOqwz2wTU/8KjlNg= Subject key identifier: C7:A2:9A:3B:BA:E7:F9:0D:B2:6A:2C:E5:20:85:CD:93:FB:3A:CF:CC Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90 Certificate issuer: /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390 Certificate serial: 019C424628F1695E88A8A9059A8EAD475515 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft Manifest number: 1491 Signing time: Mon 09 Feb 2026 12:00:19 +0000 Manifest this update: Mon 09 Feb 2026 12:00:19 +0000 Manifest next update: Tue 10 Feb 2026 12:00:19 +0000 Files and hashes: 1: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl (hash: RIq5rDYZj3y0JiftoSC4vzyhhwHfX5mJfWR2KkabwjE=) 2: y72QXlfn1iGh89QO3R6WPZp7awU.roa (hash: O6eU6r5oRWPIVud9+sofhzvQc+xlO3/W5yzIFE7k+e4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:28:f1:69:5e:88:a8:a9:05:9a:8e:ad:47:55:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390 Validity Not Before: Feb 9 12:00:19 2026 GMT Not After : Feb 10 12:00:19 2026 GMT Subject: CN=c7a29a3bbae7f90db26a2ce52085cd93fb3acfcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3c:18:17:f8:98:e7:cd:d6:75:c4:1e:23:a6: 46:91:2a:78:78:a5:3e:a5:b8:ab:00:6e:6e:db:71: d5:cd:ce:6b:ae:00:83:c1:00:dc:57:ab:5b:b4:3e: df:db:20:a0:87:30:bd:20:a0:7b:d7:fa:1b:17:52: 89:5a:42:79:ca:a6:3d:45:c6:af:43:99:5a:d6:96: 61:7c:05:d6:81:98:d2:9b:11:d1:bb:50:2b:4a:3a: cc:a0:5c:bb:25:49:18:48:31:3d:20:09:4c:be:f9: 38:73:ef:88:91:05:2c:d6:f4:df:ac:8f:2f:11:80: 55:b4:db:08:26:61:91:0a:34:a5:f9:db:9a:9a:89: 04:fb:30:18:f2:16:ce:f5:f9:89:35:8c:ac:5f:3f: 55:bc:18:9f:f9:7b:20:5f:07:ff:8b:7f:61:54:38: 5f:6b:71:d6:93:ec:09:de:b9:3f:82:98:85:26:5b: d5:de:6b:12:e5:46:62:c6:54:05:a1:d1:db:6a:5f: e8:56:2b:14:8b:df:48:9c:37:84:60:7b:86:f1:2f: 3f:08:78:2d:5a:ea:ad:30:b8:45:0b:84:53:87:36: 5a:61:61:cd:6e:d8:4c:ab:d0:d0:98:27:4a:d0:8f: c9:d8:49:05:31:87:76:44:db:28:1e:d5:a4:ea:9e: 01:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A2:9A:3B:BA:E7:F9:0D:B2:6A:2C:E5:20:85:CD:93:FB:3A:CF:CC X509v3 Authority Key Identifier: keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:8c:b1:ac:80:c9:e5:76:a7:28:38:59:24:7d:1b:58:50:13: d4:34:48:4d:4f:3c:a6:36:bf:f7:b8:7a:50:7b:b9:08:9c:cc: 68:61:ba:11:60:4a:6c:46:8c:71:ee:53:05:ed:bc:19:6e:ae: 8b:52:a3:da:74:df:99:f4:ac:5c:35:d6:d0:b0:e6:dc:83:93: a4:ca:ac:33:3e:18:48:91:fd:36:ef:b4:f3:b6:12:07:7a:b9: e0:73:97:99:5f:e0:64:76:b5:77:fe:f8:49:91:01:f4:73:aa: 66:81:44:66:c2:2c:f0:5a:f6:8a:f3:c2:f1:a0:7d:fa:a5:7f: bd:2d:6d:25:94:b6:a5:5a:f9:d1:70:4a:cb:74:49:06:24:e4: eb:78:73:17:68:be:bc:13:89:63:13:df:83:b1:7e:5c:e7:ef: 9f:51:9a:6c:4c:21:60:62:5a:cf:5f:11:3f:83:d0:03:a1:6c: e2:c3:42:c5:86:db:02:79:6d:da:34:f0:cc:20:36:32:ba:9f: d8:53:d9:b5:d0:ab:91:05:9e:7b:51:be:90:c8:44:ab:69:93: ec:f3:3a:38:e2:dc:5e:01:21:79:df:ec:1e:3a:d7:a0:87:25: 06:c7:4e:2b:21:55:9f:80:25:21:4b:ea:08:85:d4:07:95:d7: 46:1f:d8:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRijxaV6IqKkFmo6tR1UVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOGVjMzQzNTM4MGU4YWUxNWZjODFjZGRjYzk0Y2VlNjdk NmIzOTAwHhcNMjYwMjA5MTIwMDE5WhcNMjYwMjEwMTIwMDE5WjAzMTEwLwYDVQQD EyhjN2EyOWEzYmJhZTdmOTBkYjI2YTJjZTUyMDg1Y2Q5M2ZiM2FjZmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijwYF/iY583WdcQeI6ZGkSp4eKU+ pbirAG5u23HVzc5rrgCDwQDcV6tbtD7f2yCghzC9IKB71/obF1KJWkJ5yqY9Rcav Q5la1pZhfAXWgZjSmxHRu1ArSjrMoFy7JUkYSDE9IAlMvvk4c++IkQUs1vTfrI8v EYBVtNsIJmGRCjSl+duamokE+zAY8hbO9fmJNYysXz9VvBif+XsgXwf/i39hVDhf a3HWk+wJ3rk/gpiFJlvV3msS5UZixlQFodHbal/oVisUi99InDeEYHuG8S8/CHgt WuqtMLhFC4RThzZaYWHNbthMq9DQmCdK0I/J2EkFMYd2RNsoHtWk6p4BqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeimju65/kNsmos5SCFzZP7Os/MMB8GA1UdIwQY MBaAFP2Ow0NTgOiuFfyBzdzJTO5n1rOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC83MGU2OWMtZGM0ZS00Yzk2LTg5ZGYt Zjc2MjUyNjMwN2U4LzEvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC83MGU2OWMtZGM0ZS00Yzk2LTg5ZGYtZjc2MjUyNjMwN2U4 LzEvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYyxrIDJ 5XanKDhZJH0bWFAT1DRITU88pja/97h6UHu5CJzMaGG6EWBKbEaMce5TBe28GW6u i1Kj2nTfmfSsXDXW0LDm3IOTpMqsMz4YSJH9Nu+087YSB3q54HOXmV/gZHa1d/74 SZEB9HOqZoFEZsIs8Fr2ivPC8aB9+qV/vS1tJZS2pVr50XBKy3RJBiTk63hzF2i+ vBOJYxPfg7F+XOfvn1GabEwhYGJaz18RP4PQA6Fs4sNCxYbbAnlt2jTwzCA2Mrqf 2FPZtdCrkQWee1G+kMhEq2mT7PM6OOLcXgEhed/sHjrXoIclBsdOKyFVn4AlIUvq CIXUB5XXRh/Yxw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:26 2026 by rpki-client