This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft File: yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json) Hash identifier: 5L1xcTozKVKnh5TZKFWk0z5mwns1Eib7r143ABVHDik= Subject key identifier: 0E:8B:04:8B:87:3F:71:8E:30:31:DD:6E:80:7C:81:61:F2:FA:08:23 Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c Certificate serial: 019C41D8C7015F175BA5C857723CCD39A74F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft Manifest number: 0866 Signing time: Mon 09 Feb 2026 10:00:51 +0000 Manifest this update: Mon 09 Feb 2026 10:00:51 +0000 Manifest next update: Tue 10 Feb 2026 10:00:51 +0000 Files and hashes: 1: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: 3DJfNR5qWiirjB4VIANFhLxGw5F/nRDrZ9Oq/6AFIk8=) 2: ykn6ra4wP0urmcyUyxV1FWZ2Kp0.roa (hash: IJ1D7ZuY9/uNKyGnyBgDEp0dSpIFh5mPiRSScoZkO+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:c7:01:5f:17:5b:a5:c8:57:72:3c:cd:39:a7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c Validity Not Before: Feb 9 10:00:51 2026 GMT Not After : Feb 10 10:00:51 2026 GMT Subject: CN=0e8b048b873f718e3031dd6e807c8161f2fa0823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:f5:1d:d6:31:6d:f7:89:60:b5:6d:1f:81: 26:0f:88:7c:ad:82:86:3e:2c:e1:19:25:86:7a:c7: 77:30:af:b8:51:d7:4d:99:c4:ea:7d:da:00:33:b7: fa:2f:80:ce:83:05:64:d6:9d:ef:36:7e:32:75:da: bc:ca:1c:b7:08:7f:f0:10:07:7f:5f:08:12:b4:4c: 31:e8:8f:65:c6:2d:62:b9:f9:77:30:ce:1b:79:13: f1:86:b8:b2:b3:2e:7f:67:d5:58:c8:ec:33:d3:1c: fb:8f:02:4b:43:4f:dc:ef:fa:a0:89:95:8b:04:c3: 6d:f4:32:ce:7c:60:c5:ab:cb:24:c0:f5:79:10:a3: 76:dd:1a:21:0f:f7:f9:95:71:a3:74:d3:39:3f:06: 65:6f:60:e5:38:99:70:22:90:cf:ef:0f:b0:9c:f5: d4:70:79:17:e0:3b:2b:b1:0b:78:9d:a7:e9:3a:ba: 14:4c:7e:83:ea:27:7b:54:ea:2b:5f:da:0d:28:7c: 5d:3c:6d:9f:62:e8:f3:57:fa:fa:36:23:4e:cc:03: ca:f2:e5:a9:6e:e1:ee:b4:eb:62:53:92:a6:30:9a: c8:f4:a8:4a:0c:d6:3d:5e:d6:91:14:0d:bc:fb:9a: 66:4b:e9:f6:b7:a7:6e:61:b6:90:97:a4:ac:6b:1f: f7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8B:04:8B:87:3F:71:8E:30:31:DD:6E:80:7C:81:61:F2:FA:08:23 X509v3 Authority Key Identifier: keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:da:c5:d6:70:df:e3:1e:2c:6a:0f:af:2e:34:3a:4b:55:9e: 58:1c:a2:97:27:03:c1:a5:ae:6b:55:b2:ac:7e:6b:60:9e:d4: 35:58:66:56:c3:b6:51:7a:f4:6f:30:50:8c:e1:07:ba:45:b1: fe:e5:b5:1b:f9:6e:6a:41:59:a0:62:1b:b1:0a:d1:09:60:8f: 3e:5a:40:ae:82:a7:40:5b:89:6a:75:5f:17:15:c4:04:d5:1e: 80:a3:c3:08:4d:7f:5c:82:5f:af:d7:9b:88:8e:98:7f:74:8c: 8b:fb:a2:4a:f5:24:2c:ba:cd:66:45:dc:fa:0d:94:94:cf:4f: b6:e4:9e:bb:57:ba:c9:58:5f:c3:08:1f:4a:d8:a5:2e:f8:c2: 69:04:ca:bb:79:34:33:92:39:77:3c:cb:4b:80:c2:d6:bb:75: de:14:85:59:b9:aa:fe:b0:50:8a:e2:67:a7:7f:0c:d5:e5:2d: d6:dc:89:73:00:65:c6:3e:dc:3e:77:76:67:01:6b:4a:40:42: c7:0c:6e:88:a3:6c:df:e8:06:84:b0:3a:05:36:3c:26:28:13: a0:cb:1c:61:a9:d8:1e:dd:ee:8a:a6:35:67:14:4f:f5:38:02: 8c:1d:81:21:fc:49:78:77:08:2e:41:38:68:74:6e:31:8c:de: db:5a:bd:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2McBXxdbpchXcjzNOadPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YTRiYmQ3OGFmMzYzZmE1YmVlZTYzMmU4YmRjNDhiNjI5 NzM0M2MwHhcNMjYwMjA5MTAwMDUxWhcNMjYwMjEwMTAwMDUxWjAzMTEwLwYDVQQD EygwZThiMDQ4Yjg3M2Y3MThlMzAzMWRkNmU4MDdjODE2MWYyZmEwODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysz1HdYxbfeJYLVtH4EmD4h8rYKG PizhGSWGesd3MK+4UddNmcTqfdoAM7f6L4DOgwVk1p3vNn4yddq8yhy3CH/wEAd/ XwgStEwx6I9lxi1iufl3MM4beRPxhriysy5/Z9VYyOwz0xz7jwJLQ0/c7/qgiZWL BMNt9DLOfGDFq8skwPV5EKN23RohD/f5lXGjdNM5PwZlb2DlOJlwIpDP7w+wnPXU cHkX4DsrsQt4nafpOroUTH6D6id7VOorX9oNKHxdPG2fYujzV/r6NiNOzAPK8uWp buHutOtiU5KmMJrI9KhKDNY9XtaRFA28+5pmS+n2t6duYbaQl6Ssax/3mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6LBIuHP3GOMDHdboB8gWHy+ggjMB8GA1UdIwQY MBaAFMiku9eK82P6W+7mMui9xItilzQ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8yNDZiNGQtNGQzZS00ZTAyLThjMDct YWM2OGE1MGQwYzk5LzEveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8yNDZiNGQtNGQzZS00ZTAyLThjMDctYWM2OGE1MGQwYzk5 LzEveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNrF1nDf 4x4sag+vLjQ6S1WeWByilycDwaWua1WyrH5rYJ7UNVhmVsO2UXr0bzBQjOEHukWx /uW1G/luakFZoGIbsQrRCWCPPlpAroKnQFuJanVfFxXEBNUegKPDCE1/XIJfr9eb iI6Yf3SMi/uiSvUkLLrNZkXc+g2UlM9PtuSeu1e6yVhfwwgfStilLvjCaQTKu3k0 M5I5dzzLS4DC1rt13hSFWbmq/rBQiuJnp38M1eUt1tyJcwBlxj7cPnd2ZwFrSkBC xwxuiKNs3+gGhLA6BTY8JigToMscYanYHt3uiqY1ZxRP9TgCjB2BIfxJeHcILkE4 aHRuMYze21q9kQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:40:35 2026 by rpki-client