This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft File: YAJlJf1EpPx1siRPgNAiY09fdjU.mft (raw, json) Hash identifier: RD/4spugmvOzeh0hd8uTY21MfDFAbQ1fnB5PWIgkgVY= Subject key identifier: E3:73:2F:CD:76:9D:B6:79:B3:AC:F4:F2:82:F1:F4:80:E0:51:79:88 Authority key identifier: 60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35 Certificate issuer: /CN=60026525fd44a4fc75b2244f80d022634f5f7635 Certificate serial: 019C4434C975BEEB58F12F846B34FBF16AF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft Manifest number: 0209 Signing time: Mon 09 Feb 2026 21:00:35 +0000 Manifest this update: Mon 09 Feb 2026 21:00:35 +0000 Manifest next update: Tue 10 Feb 2026 21:00:35 +0000 Files and hashes: 1: 1sBpsAgGmSmkI2DNNDGh5oQcGy8.roa (hash: hMp3WaNL7UAirQa4ZKu/uxZXkQM56eznsw/jc56uSx4=) 2: YAJlJf1EpPx1siRPgNAiY09fdjU.crl (hash: AJojD8v1wE5HTM8giH8T/pHtEEOQaxlHheE9Xkf60pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:c9:75:be:eb:58:f1:2f:84:6b:34:fb:f1:6a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60026525fd44a4fc75b2244f80d022634f5f7635 Validity Not Before: Feb 9 21:00:35 2026 GMT Not After : Feb 10 21:00:35 2026 GMT Subject: CN=e3732fcd769db679b3acf4f282f1f480e0517988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:f9:85:36:8f:5f:2e:35:3d:ca:5d:1a:cd: 78:fa:83:5f:d6:dd:c7:ac:9e:be:fc:ac:7f:26:58: 60:6e:1b:0d:f8:8e:8d:aa:9a:5e:27:19:50:31:f0: 8d:4c:51:68:c3:ea:4e:21:7b:2c:fd:ed:70:fb:99: 8f:d5:fc:f0:8b:2a:49:b4:b1:32:0c:e5:32:56:75: 73:26:fd:db:c3:c3:bc:24:a9:d8:22:69:a6:21:9e: b4:f0:ea:97:b8:04:b8:1b:ff:f7:71:31:78:79:81: 8f:52:41:f6:0d:52:01:b7:0a:87:64:cc:9b:33:a6: e7:f5:0e:df:6f:a3:65:81:ef:63:93:b9:5d:5a:ea: fe:28:8c:64:6b:44:5a:4b:93:a4:04:a3:6c:67:a2: 3b:99:f5:58:6d:bb:28:72:29:89:5b:9a:fa:13:67: 17:65:1d:c5:5c:2f:68:86:d7:1d:2f:dc:d0:5b:ad: 5c:ab:86:e2:39:c1:1c:b5:bc:4c:05:1b:6e:aa:c0: 58:c3:62:dc:bc:ad:a9:92:d3:8b:ce:41:f7:99:71: 77:20:14:a5:d5:9e:30:12:83:47:03:85:7a:4d:b6: fb:21:96:e6:2d:1e:fc:9b:d1:1f:ed:11:df:27:35: 7b:cc:96:42:60:72:46:20:d0:0d:e1:43:45:52:03: 2b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:73:2F:CD:76:9D:B6:79:B3:AC:F4:F2:82:F1:F4:80:E0:51:79:88 X509v3 Authority Key Identifier: keyid:60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:15:4a:ff:40:aa:de:42:49:36:f4:87:80:22:c7:84:e7:8d: 43:cf:57:8c:46:8b:2f:1a:a2:52:ba:ee:e9:4b:ce:f4:09:e4: 56:ff:ed:f2:33:11:c3:d2:d8:58:9a:92:0b:31:89:0a:34:e2: fd:80:73:88:77:f7:b6:2d:b4:03:86:00:47:20:c5:98:6d:a9: 73:b7:23:c7:7e:51:28:67:1b:3f:50:76:a2:e2:69:dc:a3:e9: 84:d1:dd:e9:73:33:58:49:16:d8:d4:c7:37:61:c7:25:9f:04: 01:9e:e1:bf:b5:36:27:3e:31:bb:89:5d:83:1e:3f:7a:fe:5c: 4b:25:e1:7e:f6:ba:e7:07:b8:5d:e9:18:8e:96:98:30:34:c9: 39:68:53:10:b0:23:63:a7:60:04:45:cc:1b:9a:b1:6b:0c:e8: ae:95:bb:24:0d:85:ec:5e:19:02:44:e2:27:27:bc:c0:76:71: e6:7f:b0:8b:b9:49:bf:f5:f5:10:42:9b:a9:ba:58:43:a4:56: a4:e1:1f:c4:03:66:57:0e:fa:08:7e:d2:1f:c2:78:21:43:6c: b4:ba:6d:3d:b5:54:ff:e5:92:d7:39:21:df:53:86:eb:92:10: ef:9f:a1:bc:33:41:de:45:29:ca:25:41:5b:ad:dd:16:7a:e4: 61:7a:c7:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENMl1vutY8S+EazT78Wr5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMDI2NTI1ZmQ0NGE0ZmM3NWIyMjQ0ZjgwZDAyMjYzNGY1 Zjc2MzUwHhcNMjYwMjA5MjEwMDM1WhcNMjYwMjEwMjEwMDM1WjAzMTEwLwYDVQQD EyhlMzczMmZjZDc2OWRiNjc5YjNhY2Y0ZjI4MmYxZjQ4MGUwNTE3OTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRj5hTaPXy41PcpdGs14+oNf1t3H rJ6+/Kx/JlhgbhsN+I6NqppeJxlQMfCNTFFow+pOIXss/e1w+5mP1fzwiypJtLEy DOUyVnVzJv3bw8O8JKnYImmmIZ608OqXuAS4G//3cTF4eYGPUkH2DVIBtwqHZMyb M6bn9Q7fb6Nlge9jk7ldWur+KIxka0RaS5OkBKNsZ6I7mfVYbbsocimJW5r6E2cX ZR3FXC9ohtcdL9zQW61cq4biOcEctbxMBRtuqsBYw2LcvK2pktOLzkH3mXF3IBSl 1Z4wEoNHA4V6Tbb7IZbmLR78m9Ef7RHfJzV7zJZCYHJGINAN4UNFUgMr0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONzL812nbZ5s6z08oLx9IDgUXmIMB8GA1UdIwQY MBaAFGACZSX9RKT8dbIkT4DQImNPX3Y1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUFKbEpmMUVwUHgxc2lSUGdOQWlZMDlmZGpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83YWZiNmQtYTg5OS00YmQzLThlMmMt ZmE5MjMzNTM1ZmYxLzEvWUFKbEpmMUVwUHgxc2lSUGdOQWlZMDlmZGpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi83YWZiNmQtYTg5OS00YmQzLThlMmMtZmE5MjMzNTM1ZmYx LzEvWUFKbEpmMUVwUHgxc2lSUGdOQWlZMDlmZGpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBVK/0Cq 3kJJNvSHgCLHhOeNQ89XjEaLLxqiUrru6UvO9AnkVv/t8jMRw9LYWJqSCzGJCjTi /YBziHf3ti20A4YARyDFmG2pc7cjx35RKGcbP1B2ouJp3KPphNHd6XMzWEkW2NTH N2HHJZ8EAZ7hv7U2Jz4xu4ldgx4/ev5cSyXhfva65we4XekYjpaYMDTJOWhTELAj Y6dgBEXMG5qxawzorpW7JA2F7F4ZAkTiJye8wHZx5n+wi7lJv/X1EEKbqbpYQ6RW pOEfxANmVw76CH7SH8J4IUNstLptPbVU/+WS1zkh31OG65IQ75+hvDNB3kUpyiVB W63dFnrkYXrHbQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:21:38 2026 by rpki-client