This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft File: YPhMundKnCGimGbUjl3PB1nNSqk.mft (raw, json) Hash identifier: FbXS56zc/VGct0PLDNmJ1DvDa4SFZKQlfTikKDhk4aU= Subject key identifier: 40:24:18:E6:DB:DD:AB:D7:F9:83:3E:9B:E3:C5:38:71:90:72:48:52 Authority key identifier: 60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9 Certificate issuer: /CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9 Certificate serial: 019C4322B3B2F4DF806250C9E3E6B5C8FB47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft Manifest number: 1250 Signing time: Mon 09 Feb 2026 16:01:13 +0000 Manifest this update: Mon 09 Feb 2026 16:01:13 +0000 Manifest next update: Tue 10 Feb 2026 16:01:13 +0000 Files and hashes: 1: YPhMundKnCGimGbUjl3PB1nNSqk.crl (hash: FOxorkTJpRpx+/olyDCTt01Hhd/b69hv+LVimKiOXEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:b3:b2:f4:df:80:62:50:c9:e3:e6:b5:c8:fb:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9 Validity Not Before: Feb 9 16:01:13 2026 GMT Not After : Feb 10 16:01:13 2026 GMT Subject: CN=402418e6dbddabd7f9833e9be3c5387190724852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c5:c7:2c:a4:c8:95:45:da:3a:ee:fe:1b:ee: 34:af:d0:ea:6d:b8:39:e7:df:59:1b:d2:93:cc:d8: 1b:61:82:12:1d:f4:12:ca:a9:e3:69:bb:e6:da:7a: 11:0c:8b:5d:dc:7d:0c:97:2c:99:ec:e7:a4:98:c3: 64:e4:5e:e6:ce:ac:28:0a:4a:f4:80:47:02:85:be: 16:1d:66:39:01:16:95:ff:01:e6:d1:e9:e4:89:a5: 3b:f3:15:0f:01:5d:05:0f:5e:7c:ea:b8:50:39:ee: e8:be:a4:1d:72:39:d9:c0:81:e7:de:99:93:90:4f: 7e:02:f1:b4:e3:a2:f2:86:0c:e5:48:9b:dd:9f:12: d6:a3:8c:f9:ca:9e:18:5c:7c:22:4d:be:6e:f7:86: a1:b8:40:ac:a6:cb:9b:36:3f:15:84:ef:9b:3d:ee: 36:df:f5:7c:6b:82:96:d2:64:b1:e4:f5:2b:93:b9: 48:ea:ec:d9:8c:6e:ac:61:81:9b:58:07:17:05:15: 28:eb:84:8a:1e:d3:e1:93:fe:42:b1:28:e6:c2:bb: e9:e6:71:77:f3:cb:cf:77:74:0a:e4:d8:1f:7f:64: fe:08:07:18:b3:31:15:dd:dc:b4:3e:4d:f2:6e:7d: 2b:63:d3:44:f1:72:a4:06:50:ff:5d:43:3f:84:17: bc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:24:18:E6:DB:DD:AB:D7:F9:83:3E:9B:E3:C5:38:71:90:72:48:52 X509v3 Authority Key Identifier: keyid:60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:70:1b:0d:25:92:be:f9:26:58:ee:1e:69:6a:fb:83:1b:51: 51:6a:24:7e:18:4f:bd:c2:1a:3a:33:ae:6b:a9:2c:d6:fe:e2: bd:d4:f5:79:06:b2:30:3b:8d:11:62:b5:98:f6:10:ed:b8:06: 68:a1:f5:87:e8:fb:17:84:cc:ec:ef:1d:b1:70:45:59:17:86: d4:18:37:25:e6:da:a5:4b:28:95:9d:76:28:48:32:51:b6:ad: e4:81:47:e1:d7:e8:c0:3f:fc:9b:fb:f1:49:1a:af:bb:4c:45: 93:bf:ac:16:7b:10:72:e8:af:6e:66:64:41:0e:98:59:e8:50: 65:18:9f:04:cd:29:28:de:8e:b8:1c:90:54:8b:7e:c2:c2:49: b6:89:fa:9c:94:cf:63:2a:03:3f:2e:80:1a:ca:84:06:24:12: fe:0b:ef:11:70:62:9f:c3:de:3e:fa:ce:4b:28:ed:0a:8c:c1: 94:bc:1c:b4:0c:b4:9f:e2:a4:0b:04:d3:d8:1e:e5:b8:4d:aa: a9:3b:8f:fd:5d:33:d1:0c:94:e8:3d:ca:a4:62:03:ff:5b:3d: af:fd:9c:42:fd:c7:ce:13:f2:cf:52:45:12:75:1a:b0:0a:54: 47:57:eb:7c:88:0c:47:9b:aa:a4:96:8d:2f:99:e0:42:d9:6d: fb:d8:74:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIrOy9N+AYlDJ4+a1yPtHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZjg0Y2JhNzc0YTljMjFhMjk4NjZkNDhlNWRjZjA3NTlj ZDRhYTkwHhcNMjYwMjA5MTYwMTEzWhcNMjYwMjEwMTYwMTEzWjAzMTEwLwYDVQQD Eyg0MDI0MThlNmRiZGRhYmQ3Zjk4MzNlOWJlM2M1Mzg3MTkwNzI0ODUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMXHLKTIlUXaOu7+G+40r9Dqbbg5 599ZG9KTzNgbYYISHfQSyqnjabvm2noRDItd3H0MlyyZ7OekmMNk5F7mzqwoCkr0 gEcChb4WHWY5ARaV/wHm0enkiaU78xUPAV0FD1586rhQOe7ovqQdcjnZwIHn3pmT kE9+AvG046LyhgzlSJvdnxLWo4z5yp4YXHwiTb5u94ahuECspsubNj8VhO+bPe42 3/V8a4KW0mSx5PUrk7lI6uzZjG6sYYGbWAcXBRUo64SKHtPhk/5CsSjmwrvp5nF3 88vPd3QK5Ngff2T+CAcYszEV3dy0Pk3ybn0rY9NE8XKkBlD/XUM/hBe85wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAkGObb3avX+YM+m+PFOHGQckhSMB8GA1UdIwQY MBaAFGD4TLp3Spwhophm1I5dzwdZzUqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wMDAzZjctYjE0YS00ODhlLThhMGYt ZWI3YWE2MmYzNTZiLzEvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8wMDAzZjctYjE0YS00ODhlLThhMGYtZWI3YWE2MmYzNTZi LzEvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXAbDSWS vvkmWO4eaWr7gxtRUWokfhhPvcIaOjOua6ks1v7ivdT1eQayMDuNEWK1mPYQ7bgG aKH1h+j7F4TM7O8dsXBFWReG1Bg3JebapUsolZ12KEgyUbat5IFH4dfowD/8m/vx SRqvu0xFk7+sFnsQcuivbmZkQQ6YWehQZRifBM0pKN6OuByQVIt+wsJJton6nJTP YyoDPy6AGsqEBiQS/gvvEXBin8PePvrOSyjtCozBlLwctAy0n+KkCwTT2B7luE2q qTuP/V0z0QyU6D3KpGID/1s9r/2cQv3HzhPyz1JFEnUasApUR1frfIgMR5uqpJaN L5ngQtlt+9h0Gg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:36 2026 by rpki-client