This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft File: YV3bd8eSb1d7AKvNPVL0LJICec0.mft (raw, json) Hash identifier: gwXJWAHv2cS2jXeCldVOG3haZiTThSzIAy+w60ax9Sw= Subject key identifier: C8:95:F7:9D:80:32:FA:B9:19:3E:E5:04:12:61:13:88:76:D4:03:A1 Authority key identifier: 61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD Certificate issuer: /CN=615ddb77c7926f577b00abcd3d52f42c920279cd Certificate serial: 019C4322B1149390084955E9D6B5E1CC16D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:01:12 +0000 Manifest this update: Mon 09 Feb 2026 16:01:12 +0000 Manifest next update: Tue 10 Feb 2026 16:01:12 +0000 Files and hashes: 1: YV3bd8eSb1d7AKvNPVL0LJICec0.crl (hash: zJNqNxBw/DArzcgLSZjQ8gDQPmUqxTI1V6+iVPetwj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:b1:14:93:90:08:49:55:e9:d6:b5:e1:cc:16:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615ddb77c7926f577b00abcd3d52f42c920279cd Validity Not Before: Feb 9 16:01:12 2026 GMT Not After : Feb 10 16:01:12 2026 GMT Subject: CN=c895f79d8032fab9193ee5041261138876d403a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d0:cb:6c:c7:78:12:0e:d7:99:13:a3:bc:ab: 91:19:57:c9:21:8a:6d:b9:59:65:11:7f:eb:5f:5f: 7d:dd:cf:33:85:56:57:6f:c6:da:94:19:c5:dc:d2: 8b:75:2b:b8:58:e0:ea:05:cb:e8:38:33:9e:fc:70: 55:13:46:96:9f:c0:b5:11:b3:7f:02:23:17:f0:41: 65:dd:7c:13:db:83:13:03:57:0d:54:51:9c:f5:f9: 0f:d5:72:29:62:e7:07:77:09:1b:3b:a3:2b:fe:8c: 37:66:dc:92:94:bf:ae:35:b9:e8:0d:a7:cd:f9:23: 20:c8:9c:7b:c0:23:e6:cb:f7:a1:32:20:cf:f1:55: f2:4a:f3:4a:91:8f:25:cf:fc:dd:1a:b0:2e:00:25: a8:79:5a:8f:44:2a:c9:8e:33:74:3d:12:ba:88:54: 49:5b:39:d1:f6:68:cb:98:70:61:ac:83:db:2f:9a: 86:bc:31:da:6b:d8:66:e6:a0:2f:5a:29:7a:9e:65: 3b:b7:ce:31:8b:9c:6a:76:d5:b7:56:4d:94:8d:b6: 4e:3e:76:d3:cd:8f:da:d2:5f:d6:f2:97:5f:7b:6b: bf:48:da:c9:d0:44:46:56:2d:9d:6b:e7:2e:04:b9: fd:63:bb:32:8a:b0:fb:fc:49:b4:ed:c8:96:8c:c0: 9b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:95:F7:9D:80:32:FA:B9:19:3E:E5:04:12:61:13:88:76:D4:03:A1 X509v3 Authority Key Identifier: keyid:61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:64:a3:75:70:50:32:c0:75:37:fa:89:8b:31:a5:25:79:b7: e3:84:79:93:35:5f:bc:a7:03:b0:89:d6:da:a4:c7:73:ef:96: e7:ae:c6:9b:fe:3b:3a:63:7e:50:91:59:a6:13:6e:1a:4f:62: 1e:e5:00:e3:76:1a:ac:62:47:3f:54:e5:3b:63:5d:1b:a0:46: ec:0e:96:c1:b6:7c:9b:23:03:69:22:72:1f:b2:b9:c1:e8:0f: 84:d0:58:6b:c5:60:ab:4b:7e:c7:b8:9c:06:39:6a:03:42:d6: 85:b2:47:3d:92:b4:50:8e:23:d5:cd:64:81:fd:02:6e:33:00: 5e:e7:b3:87:1c:a3:b3:fc:ee:c2:7e:cb:33:6b:14:25:a5:01: 5b:c5:4b:07:59:ca:47:d4:bb:13:d2:7b:a9:b7:5c:33:30:47: fb:94:26:92:a9:8d:9f:d6:5a:63:f2:c6:1b:38:a4:a0:b0:57: 5b:65:9b:cc:f5:7b:da:c7:9a:56:2f:a9:ed:4b:e3:08:30:8a: 9e:03:87:d5:e7:2f:dd:b4:60:87:14:f3:bd:18:3b:6c:d7:57: 91:4b:aa:d6:45:76:43:00:ca:74:8a:d2:d4:28:df:c5:d9:75: 24:3b:9c:47:67:f6:6f:f8:ec:62:f3:52:da:07:27:7a:58:4f: 02:61:13:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIrEUk5AISVXp1rXhzBbQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNWRkYjc3Yzc5MjZmNTc3YjAwYWJjZDNkNTJmNDJjOTIw Mjc5Y2QwHhcNMjYwMjA5MTYwMTEyWhcNMjYwMjEwMTYwMTEyWjAzMTEwLwYDVQQD EyhjODk1Zjc5ZDgwMzJmYWI5MTkzZWU1MDQxMjYxMTM4ODc2ZDQwM2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NDLbMd4Eg7XmROjvKuRGVfJIYpt uVllEX/rX1993c8zhVZXb8balBnF3NKLdSu4WODqBcvoODOe/HBVE0aWn8C1EbN/ AiMX8EFl3XwT24MTA1cNVFGc9fkP1XIpYucHdwkbO6Mr/ow3ZtySlL+uNbnoDafN +SMgyJx7wCPmy/ehMiDP8VXySvNKkY8lz/zdGrAuACWoeVqPRCrJjjN0PRK6iFRJ WznR9mjLmHBhrIPbL5qGvDHaa9hm5qAvWil6nmU7t84xi5xqdtW3Vk2UjbZOPnbT zY/a0l/W8pdfe2u/SNrJ0ERGVi2da+cuBLn9Y7syirD7/Em07ciWjMCbMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiV952AMvq5GT7lBBJhE4h21AOhMB8GA1UdIwQY MBaAFGFd23fHkm9XewCrzT1S9CySAnnNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVYzYmQ4ZVNiMWQ3QUt2TlBWTDBMSklDZWMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMDViOGEtMzU2OS00ZTMzLTk0MWYt YjBkYzJlMjIxMWViLzEvWVYzYmQ4ZVNiMWQ3QUt2TlBWTDBMSklDZWMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8xMDViOGEtMzU2OS00ZTMzLTk0MWYtYjBkYzJlMjIxMWVi LzEvWVYzYmQ4ZVNiMWQ3QUt2TlBWTDBMSklDZWMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGSjdXBQ MsB1N/qJizGlJXm344R5kzVfvKcDsInW2qTHc++W567Gm/47OmN+UJFZphNuGk9i HuUA43YarGJHP1TlO2NdG6BG7A6WwbZ8myMDaSJyH7K5wegPhNBYa8Vgq0t+x7ic BjlqA0LWhbJHPZK0UI4j1c1kgf0CbjMAXuezhxyjs/zuwn7LM2sUJaUBW8VLB1nK R9S7E9J7qbdcMzBH+5QmkqmNn9ZaY/LGGzikoLBXW2WbzPV72seaVi+p7UvjCDCK ngOH1ecv3bRghxTzvRg7bNdXkUuq1kV2QwDKdIrS1Cjfxdl1JDucR2f2b/jsYvNS 2gcnelhPAmETNg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:28 2026 by rpki-client