This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft File: Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft (raw, json) Hash identifier: BBd99t/0YLWJ5g+g889UvMffaPSEbbMnQgrdA/V2U70= Subject key identifier: 9B:C1:A3:68:7B:73:10:BF:6C:F4:3C:29:84:29:8D:D2:6D:2B:A7:16 Authority key identifier: 63:8E:0F:D1:88:32:47:56:95:99:5F:45:07:F8:FC:FD:AF:1C:1C:E5 Certificate issuer: /CN=638e0fd18832475695995f4507f8fcfdaf1c1ce5 Certificate serial: 019C43224C1865BD5EE34ABBB6E31D8EFA9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft Manifest number: 0D03 Signing time: Mon 09 Feb 2026 16:00:47 +0000 Manifest this update: Mon 09 Feb 2026 16:00:47 +0000 Manifest next update: Tue 10 Feb 2026 16:00:47 +0000 Files and hashes: 1: Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl (hash: /U0ADenWcwMiHolyf5bTTZkacRmYZabXYP47t5oTL1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:4c:18:65:bd:5e:e3:4a:bb:b6:e3:1d:8e:fa:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=638e0fd18832475695995f4507f8fcfdaf1c1ce5 Validity Not Before: Feb 9 16:00:47 2026 GMT Not After : Feb 10 16:00:47 2026 GMT Subject: CN=9bc1a3687b7310bf6cf43c2984298dd26d2ba716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:40:7b:c4:df:56:f0:af:ff:8c:38:80:94:52: bd:fe:f6:3b:c9:90:d1:e4:59:6c:59:4c:31:22:1d: 05:2b:ec:f2:bb:33:d8:68:8c:ac:e7:53:df:e9:7f: 6c:23:11:d1:dd:7f:81:22:81:48:ee:eb:c1:c9:07: c5:a9:98:80:ad:5b:93:4a:15:ac:d4:d0:db:ed:5b: f2:b8:94:54:13:88:34:21:c1:dd:b3:d6:8b:fa:b2: b8:e5:80:39:3b:f0:41:1e:3e:b9:28:d0:02:0d:b8: 3a:cc:38:78:06:03:87:e9:3d:db:4f:c0:c5:4b:7f: 0d:df:7c:cb:53:ad:e8:92:fb:df:6f:30:98:3b:b6: 52:d7:2e:73:88:73:0d:20:5c:29:14:db:13:9b:48: 53:4e:cd:bc:8c:e0:78:44:84:9c:ea:82:69:4d:5d: 30:60:36:84:8d:da:c0:04:72:3d:25:e8:ec:49:4e: 5f:cf:53:f1:77:c5:d6:42:1a:41:10:05:b4:c3:1d: 2b:27:a7:1c:0c:dd:b7:18:6c:3b:5b:3b:7d:3e:39: d2:14:68:a2:ca:be:80:5f:83:e7:b6:ff:da:87:70: e5:64:b2:bd:6f:44:d0:45:2e:6e:4e:26:46:9b:ce: 4a:5a:32:68:ee:fe:cc:97:8c:89:50:20:f1:02:2d: 17:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C1:A3:68:7B:73:10:BF:6C:F4:3C:29:84:29:8D:D2:6D:2B:A7:16 X509v3 Authority Key Identifier: keyid:63:8E:0F:D1:88:32:47:56:95:99:5F:45:07:F8:FC:FD:AF:1C:1C:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:3a:27:2c:64:75:92:bc:f1:89:9c:49:1d:9c:0f:02:63:f9: 22:1d:1a:28:8d:94:2f:7e:fe:76:2f:ce:f6:d7:57:66:af:f0: bc:2a:b7:0a:7b:1d:b0:c3:f7:e3:0f:d4:bc:a2:dd:bb:e7:04: 31:88:61:2b:1e:67:2c:d3:61:b3:78:be:e0:06:c5:94:19:16: 50:5f:f2:e0:7d:9e:f9:d2:4a:05:fe:ee:cf:04:c6:ef:b9:8e: 66:6f:63:c1:35:fb:f0:57:0a:2e:0a:f4:6d:24:62:60:98:3b: b1:a5:18:68:54:d7:35:c4:bc:59:a8:b6:d8:fe:3f:ff:58:31: 99:01:7b:7b:38:6e:09:a9:29:aa:76:9c:c6:29:24:28:90:35: 16:d0:f8:d3:0a:f6:6e:ed:3a:02:ba:06:bb:9b:ac:a2:50:83: 97:29:b8:5e:fc:23:ea:fb:2b:54:62:29:8e:c0:97:46:3e:0d: b4:4c:5c:8b:62:32:81:da:29:38:7a:70:b9:40:9c:cc:7a:11: 53:d0:24:0a:1f:0c:35:b5:99:e9:f7:c9:f6:0b:4e:19:9a:97: ac:72:08:ee:87:25:b7:76:b8:55:d8:7a:0d:20:73:1e:bb:b9: d0:74:e3:c9:51:68:7d:22:e5:5d:a0:07:27:42:f1:e5:c4:cc: 3c:ee:a7:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIkwYZb1e40q7tuMdjvqbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzOGUwZmQxODgzMjQ3NTY5NTk5NWY0NTA3ZjhmY2ZkYWYx YzFjZTUwHhcNMjYwMjA5MTYwMDQ3WhcNMjYwMjEwMTYwMDQ3WjAzMTEwLwYDVQQD Eyg5YmMxYTM2ODdiNzMxMGJmNmNmNDNjMjk4NDI5OGRkMjZkMmJhNzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEB7xN9W8K//jDiAlFK9/vY7yZDR 5FlsWUwxIh0FK+zyuzPYaIys51Pf6X9sIxHR3X+BIoFI7uvByQfFqZiArVuTShWs 1NDb7VvyuJRUE4g0IcHds9aL+rK45YA5O/BBHj65KNACDbg6zDh4BgOH6T3bT8DF S38N33zLU63okvvfbzCYO7ZS1y5ziHMNIFwpFNsTm0hTTs28jOB4RISc6oJpTV0w YDaEjdrABHI9JejsSU5fz1Pxd8XWQhpBEAW0wx0rJ6ccDN23GGw7Wzt9PjnSFGii yr6AX4Pntv/ah3DlZLK9b0TQRS5uTiZGm85KWjJo7v7Ml4yJUCDxAi0XFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvBo2h7cxC/bPQ8KYQpjdJtK6cWMB8GA1UdIwQY MBaAFGOOD9GIMkdWlZlfRQf4/P2vHBzlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTQ0UDBZZ3lSMWFWbVY5RkJfajhfYThjSE9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8yNjZlOTgtNDU3Ni00NDdhLTk4MjUt YjRlMjVkNDBhMzgzLzEvWTQ0UDBZZ3lSMWFWbVY5RkJfajhfYThjSE9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8yNjZlOTgtNDU3Ni00NDdhLTk4MjUtYjRlMjVkNDBhMzgz LzEvWTQ0UDBZZ3lSMWFWbVY5RkJfajhfYThjSE9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTonLGR1 krzxiZxJHZwPAmP5Ih0aKI2UL37+di/O9tdXZq/wvCq3CnsdsMP34w/UvKLdu+cE MYhhKx5nLNNhs3i+4AbFlBkWUF/y4H2e+dJKBf7uzwTG77mOZm9jwTX78FcKLgr0 bSRiYJg7saUYaFTXNcS8Wai22P4//1gxmQF7ezhuCakpqnacxikkKJA1FtD40wr2 bu06AroGu5usolCDlym4Xvwj6vsrVGIpjsCXRj4NtExci2IygdopOHpwuUCczHoR U9AkCh8MNbWZ6ffJ9gtOGZqXrHII7oclt3a4Vdh6DSBzHru50HTjyVFofSLlXaAH J0Lx5cTMPO6nKA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:57 2026 by rpki-client