This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft File: Y2-s66M0MntpXrOwyV6yMJL5PgE.mft (raw, json) Hash identifier: 3ARxmMy/xgmd7TAfPOCC6UQ1vSoZWWPrxi+QBaB1hK4= Subject key identifier: 98:E8:5F:87:CF:6C:D8:06:0A:C7:70:93:9E:70:F4:34:CD:B7:B9:55 Authority key identifier: 63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01 Certificate issuer: /CN=636faceba334327b695eb3b0c95eb23092f93e01 Certificate serial: 019C4322B6B4B04F82B3E41674A293526E7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft Manifest number: 12FD Signing time: Mon 09 Feb 2026 16:01:14 +0000 Manifest this update: Mon 09 Feb 2026 16:01:14 +0000 Manifest next update: Tue 10 Feb 2026 16:01:14 +0000 Files and hashes: 1: Y2-s66M0MntpXrOwyV6yMJL5PgE.crl (hash: cfg22/7adIIwrFmDVZTLQzBTZV72YmbLzw7gpsEN5M4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:b6:b4:b0:4f:82:b3:e4:16:74:a2:93:52:6e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=636faceba334327b695eb3b0c95eb23092f93e01 Validity Not Before: Feb 9 16:01:14 2026 GMT Not After : Feb 10 16:01:14 2026 GMT Subject: CN=98e85f87cf6cd8060ac770939e70f434cdb7b955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2a:85:92:10:ce:26:0c:74:b6:59:11:09:45: e1:49:58:dd:1a:7e:d7:70:30:3f:3b:95:32:f5:fe: 8b:2d:66:21:86:78:9c:9e:5e:ad:0a:a7:71:49:11: 89:c4:13:12:0f:de:d2:43:5a:54:f1:d4:f2:2b:10: a1:2c:36:a6:30:44:b0:ac:6e:63:c0:d2:7e:dc:d0: 14:0a:b7:69:ff:5d:76:41:6a:4c:d5:3f:eb:20:7c: 15:6e:02:6a:73:55:16:04:ed:01:eb:e8:1c:01:e2: 16:6d:6f:8e:74:9f:a8:19:e1:d7:d2:9c:45:12:6a: 4e:2a:d1:d7:15:3b:5d:77:6d:35:24:1c:07:5f:85: f2:64:e7:4d:ec:e8:a7:05:72:c8:16:cc:d5:43:80: 11:77:01:b4:9b:29:a6:f6:8b:db:5a:2f:72:a3:7e: 41:51:6e:11:9c:4e:d2:3e:06:28:3a:d7:9b:6a:0c: 57:95:c2:f1:cf:66:6f:86:23:24:b0:a5:81:aa:ea: 13:c3:c8:4c:29:06:38:41:0f:60:7d:16:8d:b8:0a: 42:f6:32:0a:1f:2a:96:cc:d3:ae:fc:cf:36:9b:75: 90:38:19:56:d2:ae:c4:ed:df:dd:e0:61:af:76:b0: 05:c2:5d:ee:46:ff:7d:4f:e7:13:21:87:77:72:98: b1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E8:5F:87:CF:6C:D8:06:0A:C7:70:93:9E:70:F4:34:CD:B7:B9:55 X509v3 Authority Key Identifier: keyid:63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:27:46:6a:f5:96:7c:b0:2e:42:9e:9e:40:ac:7b:72:5d:50: 21:0b:a6:7f:90:51:fb:16:cb:1a:e2:4e:bb:64:d5:39:fd:6f: ad:01:95:85:4d:47:1d:85:46:89:2f:ed:f6:00:09:36:3c:70: ea:9b:57:97:34:51:0c:64:19:1b:b7:a3:5f:3d:2d:4c:1c:95: ec:50:95:d3:ab:6b:56:c3:81:74:77:ef:1a:d1:74:e1:77:bb: e9:7e:4a:7a:7f:fa:f2:26:8d:8c:a8:be:1c:fa:bd:5b:83:33: 3b:92:90:fc:a5:c0:f6:10:bc:a4:6e:53:b4:83:bc:1f:41:1d: 70:3b:3a:f9:b2:ee:1d:e9:f8:f0:a5:d6:38:ad:80:25:a7:c9: 18:27:4f:e3:01:33:3c:8e:e0:8f:f3:e8:c2:f9:4a:57:5e:c5: 8b:b3:42:74:04:55:9e:45:b1:b5:b6:bc:0d:cf:44:aa:69:f7: ac:d6:06:35:a6:19:c2:48:fb:e4:20:87:7e:5d:a3:1d:a6:79: 38:db:68:c4:50:00:3b:5e:78:62:65:86:d8:03:6d:d1:d7:f8: 40:e8:53:ca:71:b5:fe:88:b4:9d:55:5f:bf:3c:7c:b5:d6:56: 59:74:df:4b:a3:41:f7:ff:8a:4d:6e:df:81:31:70:d6:ed:37: 98:f5:c3:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIra0sE+Cs+QWdKKTUm5+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNmZhY2ViYTMzNDMyN2I2OTVlYjNiMGM5NWViMjMwOTJm OTNlMDEwHhcNMjYwMjA5MTYwMTE0WhcNMjYwMjEwMTYwMTE0WjAzMTEwLwYDVQQD Eyg5OGU4NWY4N2NmNmNkODA2MGFjNzcwOTM5ZTcwZjQzNGNkYjdiOTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SqFkhDOJgx0tlkRCUXhSVjdGn7X cDA/O5Uy9f6LLWYhhnicnl6tCqdxSRGJxBMSD97SQ1pU8dTyKxChLDamMESwrG5j wNJ+3NAUCrdp/112QWpM1T/rIHwVbgJqc1UWBO0B6+gcAeIWbW+OdJ+oGeHX0pxF EmpOKtHXFTtdd201JBwHX4XyZOdN7OinBXLIFszVQ4ARdwG0mymm9ovbWi9yo35B UW4RnE7SPgYoOtebagxXlcLxz2ZvhiMksKWBquoTw8hMKQY4QQ9gfRaNuApC9jIK HyqWzNOu/M82m3WQOBlW0q7E7d/d4GGvdrAFwl3uRv99T+cTIYd3cpixQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjoX4fPbNgGCsdwk55w9DTNt7lVMB8GA1UdIwQY MBaAFGNvrOujNDJ7aV6zsMlesjCS+T4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTItczY2TTBNbnRwWHJPd3lWNnlNSkw1UGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy83NTc3ODYtY2VhNS00OWJhLThlZjMt YWMzOGQ1YTIwYWZlLzEvWTItczY2TTBNbnRwWHJPd3lWNnlNSkw1UGdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy83NTc3ODYtY2VhNS00OWJhLThlZjMtYWMzOGQ1YTIwYWZl LzEvWTItczY2TTBNbnRwWHJPd3lWNnlNSkw1UGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCdGavWW fLAuQp6eQKx7cl1QIQumf5BR+xbLGuJOu2TVOf1vrQGVhU1HHYVGiS/t9gAJNjxw 6ptXlzRRDGQZG7ejXz0tTByV7FCV06trVsOBdHfvGtF04Xe76X5Ken/68iaNjKi+ HPq9W4MzO5KQ/KXA9hC8pG5TtIO8H0EdcDs6+bLuHen48KXWOK2AJafJGCdP4wEz PI7gj/PowvlKV17Fi7NCdARVnkWxtba8Dc9Eqmn3rNYGNaYZwkj75CCHfl2jHaZ5 ONtoxFAAO154YmWG2ANt0df4QOhTynG1/oi0nVVfvzx8tdZWWXTfS6NB9/+KTW7f gTFw1u03mPXD0Q== -----END CERTIFICATE-----Generated at Tue Feb 10 01:26:38 2026 by rpki-client