This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft File: YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft (raw, json) Hash identifier: 97dMXoP8IQ3FhsprA6AnWWOmVLzW+P3RU1DgrlVSbUM= Subject key identifier: A9:FA:13:0D:90:FF:9E:D0:E7:50:6A:ED:53:35:17:A5:19:4C:5F:4F Authority key identifier: 62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58 Certificate issuer: /CN=626752d870c6696f012b2f465d549f4000fe1858 Certificate serial: 019C420F4DEE07B1F81383DAE8E04BFA1B1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft Manifest number: 03FB Signing time: Mon 09 Feb 2026 11:00:25 +0000 Manifest this update: Mon 09 Feb 2026 11:00:25 +0000 Manifest next update: Tue 10 Feb 2026 11:00:25 +0000 Files and hashes: 1: YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl (hash: 9H/t8Tz6HNIujbsqmilFpxmM4sLVA+vjYTspxIOqnZg=) 2: z2OIhNN84i4dGWK3beXp8BZpG1o.roa (hash: z387A8a/HVWQyo8KVhUtKf/mlVGmnDZ8KotNU7wN1AQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:4d:ee:07:b1:f8:13:83:da:e8:e0:4b:fa:1b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626752d870c6696f012b2f465d549f4000fe1858 Validity Not Before: Feb 9 11:00:25 2026 GMT Not After : Feb 10 11:00:25 2026 GMT Subject: CN=a9fa130d90ff9ed0e7506aed533517a5194c5f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:42:ee:36:74:ce:f9:ba:92:5c:e8:3d:8e:ee: 81:6e:e2:10:0f:70:e0:ac:b0:63:c1:94:f3:b7:ff: 32:29:07:d6:7e:c9:7e:3c:7f:7f:c5:eb:6b:76:8a: 9c:0f:a6:0c:b2:80:67:04:32:b8:33:4f:63:46:90: d6:18:61:14:cb:df:01:4b:4e:f8:5b:5a:77:e2:75: 63:94:9c:c8:45:05:ac:b9:9a:0d:d8:f7:22:50:5b: 65:f7:97:84:62:11:6e:e9:fb:72:c7:4e:45:bc:f1: be:fd:2a:7e:d5:3f:9b:d7:8b:e5:e3:e8:46:e0:47: d9:b0:33:ee:6a:d1:f5:cf:e9:ff:85:2c:b4:89:77: 87:a9:2a:bf:cb:f9:29:c4:98:8d:ae:39:04:a5:a5: 98:7a:d8:54:98:1d:8c:50:41:b5:5a:ae:ba:e1:69: 64:de:97:bf:f1:65:8a:2d:df:1c:89:c3:06:98:7c: a6:cf:ee:57:8b:f2:ab:da:91:29:d7:28:5c:1e:40: be:1a:13:fc:3b:c4:f6:5f:f9:78:b7:cd:37:ef:6f: a3:91:4c:97:35:62:04:9d:31:86:f6:f9:69:9f:d0: fb:f7:19:5d:d3:d0:6a:1c:d6:65:9d:32:a1:4d:30: 63:e4:31:5d:bf:a4:a8:f0:db:09:10:4b:06:d5:ff: 28:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FA:13:0D:90:FF:9E:D0:E7:50:6A:ED:53:35:17:A5:19:4C:5F:4F X509v3 Authority Key Identifier: keyid:62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:78:43:d3:fe:9f:9a:56:7d:15:df:dd:b8:03:c5:1b:25:3f: 42:1b:ce:da:9f:92:ee:7c:91:1c:10:81:7c:59:46:5a:a5:13: 2a:22:e1:e5:82:6d:57:a6:8b:8b:ff:42:f3:6c:4d:0e:5a:db: fd:b3:31:75:30:b0:94:84:45:36:e9:c7:d2:dd:6d:d5:d6:0e: b3:65:1c:7d:91:43:59:cb:70:96:16:64:f1:9a:b8:71:cf:1c: 31:a4:3d:58:14:71:4e:7e:36:6e:4a:98:1c:e6:a3:d7:75:82: ca:a9:1b:ef:63:1e:51:0e:c0:68:85:4c:db:c8:88:fe:5f:74: c3:3e:a7:46:82:44:ed:94:93:b0:09:20:3b:66:03:1a:f3:d2: a3:ff:4d:7c:a0:a7:0d:c5:d6:74:68:07:64:3a:49:f3:e3:85: e2:a1:89:13:f9:dd:6e:38:08:c6:8b:2d:67:16:12:aa:9f:a5: fb:ed:39:e6:9d:c6:05:09:bf:15:10:99:d1:68:7a:2f:cf:b0: 03:d6:70:09:31:34:ca:6a:e6:ee:bb:a8:1c:83:4e:d2:4b:9b: 0f:ae:77:b3:0c:a7:e0:66:51:97:01:ed:6b:a9:bf:a1:1d:92: b6:69:58:9b:09:dd:e1:c7:95:7c:7e:b2:f4:82:96:a8:49:a7: 18:a9:f8:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD03uB7H4E4Pa6OBL+hsaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNjc1MmQ4NzBjNjY5NmYwMTJiMmY0NjVkNTQ5ZjQwMDBm ZTE4NTgwHhcNMjYwMjA5MTEwMDI1WhcNMjYwMjEwMTEwMDI1WjAzMTEwLwYDVQQD EyhhOWZhMTMwZDkwZmY5ZWQwZTc1MDZhZWQ1MzM1MTdhNTE5NGM1ZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiULuNnTO+bqSXOg9ju6BbuIQD3Dg rLBjwZTzt/8yKQfWfsl+PH9/xetrdoqcD6YMsoBnBDK4M09jRpDWGGEUy98BS074 W1p34nVjlJzIRQWsuZoN2PciUFtl95eEYhFu6ftyx05FvPG+/Sp+1T+b14vl4+hG 4EfZsDPuatH1z+n/hSy0iXeHqSq/y/kpxJiNrjkEpaWYethUmB2MUEG1Wq664Wlk 3pe/8WWKLd8cicMGmHymz+5Xi/Kr2pEp1yhcHkC+GhP8O8T2X/l4t80372+jkUyX NWIEnTGG9vlpn9D79xld09BqHNZlnTKhTTBj5DFdv6So8NsJEEsG1f8ohwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKn6Ew2Q/57Q51Bq7VM1F6UZTF9PMB8GA1UdIwQY MBaAFGJnUthwxmlvASsvRl1Un0AA/hhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1kUzJIREdhVzhCS3k5R1hWU2ZRQUQtR0ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9iZmJiMmYtYjY3MS00ODE0LTg2Mjct YmEyNjQ4ZjE1MWQzLzEvWW1kUzJIREdhVzhCS3k5R1hWU2ZRQUQtR0ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9iZmJiMmYtYjY3MS00ODE0LTg2MjctYmEyNjQ4ZjE1MWQz LzEvWW1kUzJIREdhVzhCS3k5R1hWU2ZRQUQtR0ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXhD0/6f mlZ9Fd/duAPFGyU/QhvO2p+S7nyRHBCBfFlGWqUTKiLh5YJtV6aLi/9C82xNDlrb /bMxdTCwlIRFNunH0t1t1dYOs2UcfZFDWctwlhZk8Zq4cc8cMaQ9WBRxTn42bkqY HOaj13WCyqkb72MeUQ7AaIVM28iI/l90wz6nRoJE7ZSTsAkgO2YDGvPSo/9NfKCn DcXWdGgHZDpJ8+OF4qGJE/ndbjgIxostZxYSqp+l++055p3GBQm/FRCZ0Wh6L8+w A9ZwCTE0ymrm7ruoHINO0kubD653swyn4GZRlwHta6m/oR2StmlYmwnd4ceVfH6y 9IKWqEmnGKn4Qw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:35 2026 by rpki-client