This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft File: y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft (raw, json) Hash identifier: iaxHsjQjmxayoqgAwTE5nK97qId4s0CQHCHIEu6X0c0= Subject key identifier: E3:72:E7:4C:BC:CD:E0:54:AE:41:C2:63:E8:5E:39:14:F8:E7:30:7F Authority key identifier: CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D Certificate issuer: /CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d Certificate serial: 019C43FDC0A82D139333F339809DCCFFD6C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft Manifest number: 0639 Signing time: Mon 09 Feb 2026 20:00:29 +0000 Manifest this update: Mon 09 Feb 2026 20:00:29 +0000 Manifest next update: Tue 10 Feb 2026 20:00:29 +0000 Files and hashes: 1: 1-wZ-dGJD7TkcwZp0aHH7GFaEZLg.roa (hash: mvCPOF4PLAlLp3trYs0EdaoYFPkfsfUwTcZFYIhMgoo=) 2: y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl (hash: Ebni86mBm1Xxb2P3/bAtLORCkSZ78mhrV9F8uAUgD0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:c0:a8:2d:13:93:33:f3:39:80:9d:cc:ff:d6:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d Validity Not Before: Feb 9 20:00:29 2026 GMT Not After : Feb 10 20:00:29 2026 GMT Subject: CN=e372e74cbccde054ae41c263e85e3914f8e7307f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8e:81:5a:1e:37:2e:fa:3e:4c:ae:9e:64:3f: 3a:92:40:b1:e7:04:4d:8e:b6:50:85:3f:d5:c0:05: 37:71:76:2a:7d:5f:93:63:f2:3f:e7:1d:d3:fc:50: 6e:25:64:09:79:b1:7d:f4:62:a8:5a:b9:92:26:a7: 71:16:41:10:9a:77:ab:b9:60:8c:ce:49:e7:f2:a7: 95:08:22:11:9c:6a:26:22:06:87:96:4a:41:f0:02: 59:ee:d1:44:31:e6:73:fb:bb:4d:12:31:96:73:31: e1:0f:9b:07:4e:71:5c:21:e0:92:a0:63:1c:c7:c1: 2b:31:eb:bb:b7:79:02:a6:58:16:0f:90:dc:71:3c: 84:4a:cc:52:31:28:15:9c:0d:54:ee:10:61:07:66: 04:c1:f9:40:12:de:6e:31:e0:5f:4f:40:53:b1:85: e3:23:8d:d3:3c:07:49:f6:62:35:da:89:e7:73:ee: 90:0e:32:20:0d:3d:bf:87:d7:b5:3d:d9:eb:89:16: 68:16:43:7b:57:3f:7e:40:53:7c:28:dc:3d:7b:86: 0e:03:af:0c:d2:a9:c0:1d:04:ae:4c:eb:27:00:46: de:d7:b5:35:c1:38:31:bd:28:a6:49:e8:60:cd:09: 91:34:4d:43:93:e4:fd:db:99:c7:b7:00:fc:5b:4c: ba:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:72:E7:4C:BC:CD:E0:54:AE:41:C2:63:E8:5E:39:14:F8:E7:30:7F X509v3 Authority Key Identifier: keyid:CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c0:17:3a:87:e1:89:d8:63:7d:24:7b:5c:1d:6b:5f:4f:a0: f5:51:52:da:cd:12:fd:c6:c0:f4:5e:b8:d9:63:1b:c9:64:28: 5b:86:f4:9f:0e:ad:5a:8f:42:7f:e4:1f:d9:ef:83:63:e1:6c: f5:27:48:b6:5d:3d:75:1b:d7:e7:3a:63:e4:f4:31:3b:68:21: 75:78:c0:a7:5b:b4:84:09:ce:4c:4d:11:08:dc:04:a5:f8:19: 07:3c:d5:b4:2e:df:a0:32:2b:f8:5e:28:5f:c6:f0:6f:68:4a: 61:e2:0c:72:a2:00:ae:25:a1:38:7e:0d:99:c8:72:6c:62:1f: bb:01:1d:b8:14:b0:9a:e9:86:88:76:ad:75:d6:7a:10:69:9f: 6e:96:d4:8b:84:2a:2b:48:55:82:be:e8:2b:33:4e:6c:32:95: 5a:bf:d0:c0:a5:e3:9e:54:85:7a:c1:37:35:ad:78:a8:a9:a2: f6:8a:ca:f0:76:ef:8e:bf:66:38:15:5f:cc:46:d6:01:c1:63: 58:0e:b3:54:ff:b1:8d:83:48:40:60:5f:a9:d1:15:12:f1:8f: 37:ae:4a:10:7e:e7:f4:c2:96:b4:d0:dd:87:a8:05:9f:a6:c2: 00:65:3e:1b:de:ec:de:e6:b1:c0:c8:2b:2c:bd:27:e3:2d:1d: 90:d5:5a:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/cCoLROTM/M5gJ3M/9bFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNGVkODhjNWJmYmMyYjk1NmZjYmIzMGQxNGU4MzJiZGJi OTYxMGQwHhcNMjYwMjA5MjAwMDI5WhcNMjYwMjEwMjAwMDI5WjAzMTEwLwYDVQQD EyhlMzcyZTc0Y2JjY2RlMDU0YWU0MWMyNjNlODVlMzkxNGY4ZTczMDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY6BWh43Lvo+TK6eZD86kkCx5wRN jrZQhT/VwAU3cXYqfV+TY/I/5x3T/FBuJWQJebF99GKoWrmSJqdxFkEQmneruWCM zknn8qeVCCIRnGomIgaHlkpB8AJZ7tFEMeZz+7tNEjGWczHhD5sHTnFcIeCSoGMc x8ErMeu7t3kCplgWD5DccTyESsxSMSgVnA1U7hBhB2YEwflAEt5uMeBfT0BTsYXj I43TPAdJ9mI12onnc+6QDjIgDT2/h9e1PdnriRZoFkN7Vz9+QFN8KNw9e4YOA68M 0qnAHQSuTOsnAEbe17U1wTgxvSimSehgzQmRNE1Dk+T925nHtwD8W0y68QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONy50y8zeBUrkHCY+heORT45zB/MB8GA1UdIwQY MBaAFMtO2Ixb+8K5Vvy7MNFOgyvbuWENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTA3WWpGdjd3cmxXX0xzdzBVNkRLOXU1WVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9iMzA5MTYtMjEyNS00YTRmLTlhMzYt MjY0MTk3NTQ0M2ZmLzEveTA3WWpGdjd3cmxXX0xzdzBVNkRLOXU1WVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9iMzA5MTYtMjEyNS00YTRmLTlhMzYtMjY0MTk3NTQ0M2Zm LzEveTA3WWpGdjd3cmxXX0xzdzBVNkRLOXU1WVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsAXOofh idhjfSR7XB1rX0+g9VFS2s0S/cbA9F642WMbyWQoW4b0nw6tWo9Cf+Qf2e+DY+Fs 9SdItl09dRvX5zpj5PQxO2ghdXjAp1u0hAnOTE0RCNwEpfgZBzzVtC7foDIr+F4o X8bwb2hKYeIMcqIAriWhOH4NmchybGIfuwEduBSwmumGiHatddZ6EGmfbpbUi4Qq K0hVgr7oKzNObDKVWr/QwKXjnlSFesE3Na14qKmi9orK8Hbvjr9mOBVfzEbWAcFj WA6zVP+xjYNIQGBfqdEVEvGPN65KEH7n9MKWtNDdh6gFn6bCAGU+G97s3uaxwMgr LL0n4y0dkNVazQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:46:48 2026 by rpki-client