This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.mft File: yZjCo92k9OyII3In9dqlkw3uZ-U.mft (raw, json) Hash identifier: ubjeVU88zb/g8HL9cLsWl3ZfFUF8R28pOGUIM1aWWHo= Subject key identifier: B7:7E:8C:58:9B:90:1D:24:BD:6D:CD:C8:0D:30:66:35:12:C7:D6:26 Authority key identifier: C9:98:C2:A3:DD:A4:F4:EC:88:23:72:27:F5:DA:A5:93:0D:EE:67:E5 Certificate issuer: /CN=c998c2a3dda4f4ec88237227f5daa5930dee67e5 Certificate serial: 019C43227E4076D62D76E1ADFE799F1BE8D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZjCo92k9OyII3In9dqlkw3uZ-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.mft Manifest number: 0161 Signing time: Mon 09 Feb 2026 16:00:59 +0000 Manifest this update: Mon 09 Feb 2026 16:00:59 +0000 Manifest next update: Tue 10 Feb 2026 16:00:59 +0000 Files and hashes: 1: yZjCo92k9OyII3In9dqlkw3uZ-U.crl (hash: QknAYTlmm5R3EfKIZtmb4pwdahN2ecTNCHFMpSP8HRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.mft rsync://rpki.ripe.net/repository/DEFAULT/yZjCo92k9OyII3In9dqlkw3uZ-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:7e:40:76:d6:2d:76:e1:ad:fe:79:9f:1b:e8:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c998c2a3dda4f4ec88237227f5daa5930dee67e5 Validity Not Before: Feb 9 16:00:59 2026 GMT Not After : Feb 10 16:00:59 2026 GMT Subject: CN=b77e8c589b901d24bd6dcdc80d30663512c7d626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:70:29:f7:05:4f:bb:5e:22:58:54:ec:bf:e3: 98:68:4e:72:c8:d0:7d:c1:a8:0b:7e:23:3f:9e:fa: df:af:0c:97:71:a2:23:e3:bc:bc:31:a7:18:e3:77: ca:33:c9:74:b3:b6:5e:5d:43:6e:6a:4a:67:58:e2: a5:91:a3:a6:39:0d:54:da:29:05:47:b9:79:52:b9: b1:30:12:99:fa:d9:69:2a:d5:d9:48:0d:84:7b:f3: 45:1f:1b:c6:b1:ce:7b:24:50:24:c1:9a:84:82:b4: 90:ca:d2:26:e9:ec:9a:2c:aa:86:0d:8e:ce:d6:01: 56:a5:d3:ec:a4:f3:65:44:19:ee:57:3e:a6:ff:47: 33:ce:e4:d3:30:1c:b5:c3:cb:42:10:3d:9b:4e:da: 83:85:77:fb:3e:6f:12:de:c5:a0:8a:ec:b7:6b:97: 73:a2:1b:a6:a4:f4:65:7b:9e:7e:dd:39:fe:59:45: bb:ca:76:99:0e:2b:8f:e1:b4:7a:ad:d4:22:bf:57: 49:e8:3d:68:14:9f:d3:77:92:d7:c7:ed:df:65:99: 69:44:7b:78:bf:53:c5:01:69:d6:97:c4:ac:25:6b: bc:96:b8:3c:8e:08:23:e9:29:99:8c:11:f2:c5:f9: 9f:3e:21:a0:c0:dc:a4:20:bb:3f:3d:f5:18:80:34: 7e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7E:8C:58:9B:90:1D:24:BD:6D:CD:C8:0D:30:66:35:12:C7:D6:26 X509v3 Authority Key Identifier: keyid:C9:98:C2:A3:DD:A4:F4:EC:88:23:72:27:F5:DA:A5:93:0D:EE:67:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZjCo92k9OyII3In9dqlkw3uZ-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:35:8c:85:fa:3a:3e:dd:b6:ad:21:bf:31:a6:b4:34:f8:9d: dc:8b:b9:93:89:7d:5a:03:43:83:95:76:f3:7f:1f:00:07:44: d9:0e:65:25:98:ce:11:70:9e:80:05:e7:b3:a7:4d:0a:80:c6: 13:27:b2:ff:d9:9c:d4:86:35:29:07:35:de:7a:ef:11:e6:44: 16:ce:71:f2:7a:2e:00:dd:52:c8:fc:01:a6:98:0a:78:53:e3: af:22:b1:e1:43:23:43:1a:65:27:dc:86:dc:36:16:8b:51:c4: fa:c7:f9:0a:ca:d4:01:fc:03:8d:56:a4:d4:1a:29:34:34:89: 5f:0d:6e:b4:9d:32:b9:60:80:67:6b:52:ef:37:c2:7d:27:65: 9a:ab:15:47:e6:f4:f6:e3:40:f2:5b:7d:da:78:23:45:6f:a2: 34:7a:45:9f:af:ab:53:0d:34:aa:95:b5:0c:c1:a7:20:b6:5f: a0:68:7f:f6:83:d0:2f:17:8b:70:66:a5:78:0c:7d:2f:04:aa: c9:31:d4:c9:63:f0:a8:37:7d:1b:d1:a1:ea:d2:4c:f1:d8:bd: dd:5f:c4:13:99:de:2b:e7:31:c4:43:50:18:00:41:cd:7d:f6: 49:a1:eb:41:ed:48:71:b9:cf:ad:1a:66:b2:6c:1c:6a:9c:8a: 31:2b:25:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIn5AdtYtduGt/nmfG+jRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OThjMmEzZGRhNGY0ZWM4ODIzNzIyN2Y1ZGFhNTkzMGRl ZTY3ZTUwHhcNMjYwMjA5MTYwMDU5WhcNMjYwMjEwMTYwMDU5WjAzMTEwLwYDVQQD EyhiNzdlOGM1ODliOTAxZDI0YmQ2ZGNkYzgwZDMwNjYzNTEyYzdkNjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HAp9wVPu14iWFTsv+OYaE5yyNB9 wagLfiM/nvrfrwyXcaIj47y8MacY43fKM8l0s7ZeXUNuakpnWOKlkaOmOQ1U2ikF R7l5UrmxMBKZ+tlpKtXZSA2Ee/NFHxvGsc57JFAkwZqEgrSQytIm6eyaLKqGDY7O 1gFWpdPspPNlRBnuVz6m/0czzuTTMBy1w8tCED2bTtqDhXf7Pm8S3sWgiuy3a5dz ohumpPRle55+3Tn+WUW7ynaZDiuP4bR6rdQiv1dJ6D1oFJ/Td5LXx+3fZZlpRHt4 v1PFAWnWl8SsJWu8lrg8jggj6SmZjBHyxfmfPiGgwNykILs/PfUYgDR+lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLd+jFibkB0kvW3NyA0wZjUSx9YmMB8GA1UdIwQY MBaAFMmYwqPdpPTsiCNyJ/XapZMN7mflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVpqQ285Mms5T3lJSTNJbjlkcWxrdzN1Wi1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xMDhhZWYtMDliZC00MjZhLTkyNjMt MWU0YmJjZmJhMjEwLzEveVpqQ285Mms5T3lJSTNJbjlkcWxrdzN1Wi1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8xMDhhZWYtMDliZC00MjZhLTkyNjMtMWU0YmJjZmJhMjEw LzEveVpqQ285Mms5T3lJSTNJbjlkcWxrdzN1Wi1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzWMhfo6 Pt22rSG/Maa0NPid3Iu5k4l9WgNDg5V2838fAAdE2Q5lJZjOEXCegAXns6dNCoDG Eyey/9mc1IY1KQc13nrvEeZEFs5x8nouAN1SyPwBppgKeFPjryKx4UMjQxplJ9yG 3DYWi1HE+sf5CsrUAfwDjVak1BopNDSJXw1utJ0yuWCAZ2tS7zfCfSdlmqsVR+b0 9uNA8lt92ngjRW+iNHpFn6+rUw00qpW1DMGnILZfoGh/9oPQLxeLcGaleAx9LwSq yTHUyWPwqDd9G9Gh6tJM8di93V/EE5neK+cxxENQGABBzX32SaHrQe1IcbnPrRpm smwcapyKMSslGA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:04 2026 by rpki-client