This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft File: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft (raw, json) Hash identifier: 9JZJu7i2F02DpYrs6fF6Yq4fzwVNSdQGGV1IQqm5T/8= Subject key identifier: 8E:2A:6D:06:8C:CA:F8:05:C8:AD:5A:7C:9C:A8:10:7C:6B:72:9A:BB Authority key identifier: 62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49 Certificate issuer: /CN=620dd5186de65a646dda4b89dd48ed44873af149 Certificate serial: 019C43C6D76B4C465BF20001B0CF3C04FC03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft Manifest number: 0EDA Signing time: Mon 09 Feb 2026 19:00:30 +0000 Manifest this update: Mon 09 Feb 2026 19:00:30 +0000 Manifest next update: Tue 10 Feb 2026 19:00:30 +0000 Files and hashes: 1: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl (hash: gihxIY/rm1hR8BWVUxKw+E/9Kke3CejT3zS0rabjelo=) 2: _ab5WyJA5yqOk-0Js4gZuGEa-fM.roa (hash: FHDO4ipYFvqzvb+xj5a1Mq5hKmAgkterhZxgIwP7S34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:d7:6b:4c:46:5b:f2:00:01:b0:cf:3c:04:fc:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=620dd5186de65a646dda4b89dd48ed44873af149 Validity Not Before: Feb 9 19:00:30 2026 GMT Not After : Feb 10 19:00:30 2026 GMT Subject: CN=8e2a6d068ccaf805c8ad5a7c9ca8107c6b729abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:aa:8c:f5:e4:68:a8:43:be:e9:99:f6:86:bf: 10:82:d8:db:ea:c9:ce:f9:a7:60:1b:f3:ef:6c:83: 51:57:8b:5b:52:48:49:61:5a:6b:16:f3:23:cd:55: 1b:57:d3:44:d1:ef:52:f1:ed:37:c3:dd:3b:2a:64: d4:64:b1:02:cc:ee:6a:ae:8b:e4:aa:db:c7:b7:3c: 3d:09:ef:64:f4:99:f1:f6:42:6d:f3:21:c6:38:84: 06:c2:35:0e:36:df:56:d9:38:4f:da:36:fc:b3:e8: 6f:ec:08:d0:e1:e1:dd:6e:7c:83:9a:f6:7e:c1:77: 7c:d2:36:a8:c1:f6:4f:3c:c3:14:2b:05:74:cb:5a: 42:bc:3d:db:d5:36:0f:5d:6c:c0:ed:57:71:da:e6: 94:48:c5:8c:c0:d4:6b:12:17:ca:48:9e:9b:26:ed: 39:2c:94:cb:ab:33:c6:da:b2:f6:18:73:a2:f9:9e: 21:8c:b4:c7:e9:c6:1e:07:e4:1d:c3:a9:db:1b:45: 12:65:43:92:33:9f:be:ae:78:63:2f:a6:70:40:55: d8:07:21:29:a5:7b:05:e0:de:e9:82:fd:2a:4a:3f: 4b:3a:4a:81:ce:46:0c:34:9b:38:b4:5b:dd:fb:5a: 77:b3:33:32:20:a0:1f:9a:bb:bb:8a:9e:ec:64:da: 1e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2A:6D:06:8C:CA:F8:05:C8:AD:5A:7C:9C:A8:10:7C:6B:72:9A:BB X509v3 Authority Key Identifier: keyid:62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:69:f5:e2:ab:5f:d7:3e:d2:85:dc:bb:12:21:da:8c:4b:94: 9b:a9:f2:0e:60:bb:29:2c:7f:70:17:f4:15:0e:14:d4:37:46: 73:d0:85:d0:af:71:af:14:d2:6b:d0:e7:16:12:83:ec:6d:f8: 6e:76:66:05:b6:59:b7:06:89:59:2b:be:29:15:b2:9e:e5:d6: 17:f9:2f:4b:0d:8f:25:e4:8e:03:d5:41:1d:dc:96:6c:b3:bc: 24:e9:c9:85:40:b0:70:7a:99:75:94:42:d6:f0:ec:03:66:57: c8:dc:12:7f:25:75:91:95:3a:57:af:f4:98:27:d9:4b:74:c5: 55:cc:2d:6a:c9:26:7b:e6:ca:3a:0e:31:56:8f:4e:9c:0a:12: 47:78:0b:c5:ee:8c:a9:dd:9d:12:e9:ca:18:e9:a7:da:a7:0b: 05:26:c0:59:c3:fe:d0:98:5e:ea:7f:e3:ae:23:4a:f4:8d:70: 28:ea:38:57:02:01:7f:40:b1:48:5b:d1:a4:0f:a4:c6:44:a9: af:ab:92:37:37:3e:f8:c1:e3:43:15:2e:30:8c:f9:93:9a:a1: e4:a4:20:59:28:02:bd:59:e7:e2:65:a0:2b:59:dc:44:d1:0c: bb:03:fa:5c:81:ad:cd:da:40:ec:f4:43:68:96:1f:42:e9:a5: 44:55:5f:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxtdrTEZb8gABsM88BPwDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMGRkNTE4NmRlNjVhNjQ2ZGRhNGI4OWRkNDhlZDQ0ODcz YWYxNDkwHhcNMjYwMjA5MTkwMDMwWhcNMjYwMjEwMTkwMDMwWjAzMTEwLwYDVQQD Eyg4ZTJhNmQwNjhjY2FmODA1YzhhZDVhN2M5Y2E4MTA3YzZiNzI5YWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaqM9eRoqEO+6Zn2hr8Qgtjb6snO +adgG/PvbINRV4tbUkhJYVprFvMjzVUbV9NE0e9S8e03w907KmTUZLECzO5qrovk qtvHtzw9Ce9k9Jnx9kJt8yHGOIQGwjUONt9W2ThP2jb8s+hv7AjQ4eHdbnyDmvZ+ wXd80jaowfZPPMMUKwV0y1pCvD3b1TYPXWzA7Vdx2uaUSMWMwNRrEhfKSJ6bJu05 LJTLqzPG2rL2GHOi+Z4hjLTH6cYeB+Qdw6nbG0USZUOSM5++rnhjL6ZwQFXYByEp pXsF4N7pgv0qSj9LOkqBzkYMNJs4tFvd+1p3szMyIKAfmru7ip7sZNoe6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4qbQaMyvgFyK1afJyoEHxrcpq7MB8GA1UdIwQY MBaAFGIN1Rht5lpkbdpLid1I7USHOvFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWczVkdHM21XbVJ0Mmt1SjNVanRSSWM2OFVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lMmMzM2EtMjE0My00M2ZmLThmZDYt ZTZmM2VjYmY2NzQzLzEvWWczVkdHM21XbVJ0Mmt1SjNVanRSSWM2OFVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lMmMzM2EtMjE0My00M2ZmLThmZDYtZTZmM2VjYmY2NzQz LzEvWWczVkdHM21XbVJ0Mmt1SjNVanRSSWM2OFVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2n14qtf 1z7Shdy7EiHajEuUm6nyDmC7KSx/cBf0FQ4U1DdGc9CF0K9xrxTSa9DnFhKD7G34 bnZmBbZZtwaJWSu+KRWynuXWF/kvSw2PJeSOA9VBHdyWbLO8JOnJhUCwcHqZdZRC 1vDsA2ZXyNwSfyV1kZU6V6/0mCfZS3TFVcwtaskme+bKOg4xVo9OnAoSR3gLxe6M qd2dEunKGOmn2qcLBSbAWcP+0Jhe6n/jriNK9I1wKOo4VwIBf0CxSFvRpA+kxkSp r6uSNzc++MHjQxUuMIz5k5qh5KQgWSgCvVnn4mWgK1ncRNEMuwP6XIGtzdpA7PRD aJYfQumlRFVf8w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:02 2026 by rpki-client