This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft File: yOx8SlcVXOjexbHNYv-oQBexb1g.mft (raw, json) Hash identifier: K3XJ7k4P8hixf654EUFvnqgVB3HePcKY+lOwArWKx8Y= Subject key identifier: 5C:4E:C0:E7:D4:3D:2D:4D:93:67:B5:C0:A6:49:E5:60:A0:F2:AA:D4 Authority key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58 Certificate issuer: /CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58 Certificate serial: 019C446BE9F16B7B38555398FEEC26887E6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft Manifest number: 0734 Signing time: Mon 09 Feb 2026 22:00:48 +0000 Manifest this update: Mon 09 Feb 2026 22:00:48 +0000 Manifest next update: Tue 10 Feb 2026 22:00:48 +0000 Files and hashes: 1: LA3jFcuaqgILmHo9nTpg4K4H2wU.roa (hash: kxF22odJcoiHzXYLzYGjkdPZsm3zZB8qlfFcOiIEMd0=) 2: yOx8SlcVXOjexbHNYv-oQBexb1g.crl (hash: /ae91MT3PJfkCbt1hJHai3kC5T+tGDahUUG362Wi9Tc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:e9:f1:6b:7b:38:55:53:98:fe:ec:26:88:7e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58 Validity Not Before: Feb 9 22:00:48 2026 GMT Not After : Feb 10 22:00:48 2026 GMT Subject: CN=5c4ec0e7d43d2d4d9367b5c0a649e560a0f2aad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8b:b3:be:7c:dd:33:be:49:20:e8:70:25:67: ff:03:66:8d:e0:8c:e8:be:68:9b:13:aa:99:b1:ff: 64:d5:24:30:bc:6d:16:ac:8e:cd:57:54:c6:ec:5c: c2:21:d4:e4:5e:d8:26:0b:82:64:d5:b6:fe:56:e2: 11:fc:dc:24:1d:40:46:3b:c6:b0:7d:ae:07:27:1b: 44:78:2b:29:83:be:d8:3c:0b:a6:b5:59:e7:58:a0: f6:75:dd:66:b3:f6:68:39:e0:3f:72:a4:89:b9:8b: d5:51:eb:38:8d:c3:bc:50:05:60:1d:69:11:5a:59: a6:76:c7:6f:a9:92:e3:40:04:b0:03:a7:d7:04:b4: c2:33:f9:d1:5f:7c:8a:86:86:7d:0b:e7:24:b5:84: e2:02:ed:b8:28:82:74:98:6d:dc:39:10:2c:e4:f3: fa:a7:3a:fb:bc:ed:1a:53:49:fb:44:d0:b2:60:ce: 57:f2:3b:7d:ff:6c:89:ab:09:e5:81:f1:fc:6a:47: a6:09:51:81:03:46:07:b5:33:aa:cd:f6:00:e0:79: ea:ae:f5:67:5b:64:42:a5:a7:26:d8:5c:4a:cc:6a: e7:aa:21:d9:94:44:f3:95:55:0e:1e:89:37:e6:0d: e3:d9:e4:c4:b2:41:30:f3:45:f6:68:0c:5c:35:dd: 06:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4E:C0:E7:D4:3D:2D:4D:93:67:B5:C0:A6:49:E5:60:A0:F2:AA:D4 X509v3 Authority Key Identifier: keyid:C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:3e:f2:72:fa:76:8e:51:7e:2a:2c:fa:8d:fd:b7:19:6a:1d: 09:56:89:be:45:c2:63:3c:66:4b:9c:4c:a6:4a:d6:e4:06:f1: 05:ba:a0:a6:f3:a6:98:5d:27:9b:9e:e9:34:ad:2e:2a:56:c5: 21:c4:94:11:f7:62:c7:fe:07:ac:8d:0e:67:56:e7:e6:38:87: a9:0b:a3:25:8b:93:59:dd:af:40:f4:86:15:06:a0:cc:8b:bd: 1e:5d:78:43:91:73:a8:d2:00:81:d5:1a:2f:31:4e:39:30:5b: 21:6d:b4:3d:53:0c:af:47:ab:04:9a:95:ac:ac:f0:65:be:6f: f0:b9:14:3c:ef:af:65:af:be:2e:4e:12:4f:d6:ab:ea:f7:07: fd:ee:2e:16:d9:bd:2f:03:9b:2a:f3:5a:d5:24:67:b8:a5:95: b5:e5:2f:68:74:5e:37:8c:22:27:f9:a5:76:02:ee:3a:f8:38: 0f:95:e4:f4:59:92:28:82:f9:fa:e5:00:a8:de:37:d1:e5:56: b4:e3:a4:ca:20:aa:93:57:ae:f4:cf:14:b9:67:3b:94:09:57: 6e:f4:bc:f7:ee:54:65:ca:9b:16:63:fd:1d:fa:28:0e:01:8a: 79:98:8c:77:81:00:c4:c2:5f:ff:9f:52:bd:72:0a:89:f8:64: 29:e6:25:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa+nxa3s4VVOY/uwmiH5uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZWM3YzRhNTcxNTVjZThkZWM1YjFjZDYyZmZhODQwMTdi MTZmNTgwHhcNMjYwMjA5MjIwMDQ4WhcNMjYwMjEwMjIwMDQ4WjAzMTEwLwYDVQQD Eyg1YzRlYzBlN2Q0M2QyZDRkOTM2N2I1YzBhNjQ5ZTU2MGEwZjJhYWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4uzvnzdM75JIOhwJWf/A2aN4Izo vmibE6qZsf9k1SQwvG0WrI7NV1TG7FzCIdTkXtgmC4Jk1bb+VuIR/NwkHUBGO8aw fa4HJxtEeCspg77YPAumtVnnWKD2dd1ms/ZoOeA/cqSJuYvVUes4jcO8UAVgHWkR WlmmdsdvqZLjQASwA6fXBLTCM/nRX3yKhoZ9C+cktYTiAu24KIJ0mG3cORAs5PP6 pzr7vO0aU0n7RNCyYM5X8jt9/2yJqwnlgfH8akemCVGBA0YHtTOqzfYA4HnqrvVn W2RCpacm2FxKzGrnqiHZlETzlVUOHok35g3j2eTEskEw80X2aAxcNd0GRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxOwOfUPS1Nk2e1wKZJ5WCg8qrUMB8GA1UdIwQY MBaAFMjsfEpXFVzo3sWxzWL/qEAXsW9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU94OFNsY1ZYT2pleGJITll2LW9RQmV4YjFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yZDk1ZTctYmExNy00NzdmLTg5Yjct ZGE1ZjZhNjU4ZjhiLzEveU94OFNsY1ZYT2pleGJITll2LW9RQmV4YjFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8yZDk1ZTctYmExNy00NzdmLTg5YjctZGE1ZjZhNjU4Zjhi LzEveU94OFNsY1ZYT2pleGJITll2LW9RQmV4YjFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYD7ycvp2 jlF+Kiz6jf23GWodCVaJvkXCYzxmS5xMpkrW5AbxBbqgpvOmmF0nm57pNK0uKlbF IcSUEfdix/4HrI0OZ1bn5jiHqQujJYuTWd2vQPSGFQagzIu9Hl14Q5FzqNIAgdUa LzFOOTBbIW20PVMMr0erBJqVrKzwZb5v8LkUPO+vZa++Lk4ST9ar6vcH/e4uFtm9 LwObKvNa1SRnuKWVteUvaHReN4wiJ/mldgLuOvg4D5Xk9FmSKIL5+uUAqN430eVW tOOkyiCqk1eu9M8UuWc7lAlXbvS89+5UZcqbFmP9HfooDgGKeZiMd4EAxMJf/59S vXIKifhkKeYlHQ== -----END CERTIFICATE-----Generated at Tue Feb 10 04:33:29 2026 by rpki-client