This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft File: y_sCefzSOo5YPzRauQRyjm0OTGI.mft (raw, json) Hash identifier: 5+ZFk94IUg2Fv6M7HQrmOTrr2FR5lx/6uoV3Vr3bgfI= Subject key identifier: 42:3B:90:5C:69:6F:6C:68:BF:08:B9:EA:D8:1C:37:1F:4F:67:38:33 Authority key identifier: CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62 Certificate issuer: /CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62 Certificate serial: 019C421017CB73A271BBF76DE808971247B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft Manifest number: 0839 Signing time: Mon 09 Feb 2026 11:01:16 +0000 Manifest this update: Mon 09 Feb 2026 11:01:16 +0000 Manifest next update: Tue 10 Feb 2026 11:01:16 +0000 Files and hashes: 1: y_sCefzSOo5YPzRauQRyjm0OTGI.crl (hash: ZY6y5P6LfQ8fj95GooaN67jBZSFPb5ZhxigzDqNPwuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:17:cb:73:a2:71:bb:f7:6d:e8:08:97:12:47:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62 Validity Not Before: Feb 9 11:01:16 2026 GMT Not After : Feb 10 11:01:16 2026 GMT Subject: CN=423b905c696f6c68bf08b9ead81c371f4f673833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fc:4e:c4:f9:cd:55:e2:bb:9a:7c:16:02:a1: 9f:ca:df:11:a7:2f:aa:dd:f4:3c:6a:cd:9b:20:1c: 45:c2:c2:87:e2:48:1c:e8:50:a3:07:23:35:85:3d: a6:33:72:5e:c1:a1:2c:83:40:5b:fe:f1:7c:65:58: a9:ee:2c:13:6a:b1:68:5c:12:bf:96:15:2b:8a:eb: 21:cc:c9:a9:32:7f:83:c0:a9:4e:83:66:2b:a5:c6: 82:c9:40:79:b9:aa:28:79:9c:57:88:12:4a:94:96: df:a0:97:ec:d9:f8:73:d9:80:f3:aa:d4:37:6d:0b: 58:0c:2b:67:58:c6:bb:bf:44:77:5a:47:c2:88:fe: 45:3a:ac:d0:ad:22:54:d3:5f:16:76:77:85:8c:5e: 5f:cf:51:42:6f:eb:51:4d:58:3b:1e:67:a7:65:cc: 14:36:7a:cb:09:41:80:a1:2d:23:fe:e5:6d:e1:a1: 07:e8:7b:9e:d0:f7:4c:70:43:8e:9c:af:2e:f1:d2: 58:5f:a0:b4:4d:ff:6f:68:cf:b0:19:8e:c6:ae:e0: 99:d9:9b:05:dc:60:d6:5b:ea:e5:c9:fc:49:c5:c4: 18:91:dc:76:2e:39:77:86:cc:17:c4:1c:2c:bc:b2: d9:1c:33:48:ad:5b:18:92:b2:39:6b:b2:8e:8c:dc: de:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3B:90:5C:69:6F:6C:68:BF:08:B9:EA:D8:1C:37:1F:4F:67:38:33 X509v3 Authority Key Identifier: keyid:CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:e9:c6:97:f0:eb:99:c8:ee:54:27:54:08:31:36:63:9a:21: c6:a5:87:b5:32:5d:fb:89:65:e9:03:00:65:f2:38:68:77:7b: 9f:cc:fc:6b:51:dc:9d:7a:ce:0b:e4:16:d3:51:10:00:7f:0a: e4:e5:81:f6:68:39:d8:61:9f:81:21:bf:7f:4c:d5:3b:07:ef: 63:32:6c:c7:2c:ad:86:28:58:61:db:b3:b0:6b:d2:fd:39:63: 3f:b4:85:39:ec:c5:ab:69:a8:24:a4:fe:0f:5c:21:7f:ea:3b: ac:21:1e:d1:dd:02:72:98:69:aa:9a:09:8f:02:d9:66:7b:27: 95:f0:fe:0b:83:6c:41:31:6d:ad:a7:5e:ca:b0:df:f8:79:7a: 94:02:06:da:d7:51:97:19:c1:07:11:c1:81:d2:9a:75:b7:51: 16:ac:ab:a4:9f:8a:27:4d:e0:73:4a:0a:5f:88:36:fa:38:97: 68:18:7e:13:c0:3c:f0:49:91:8a:f0:11:46:c1:e9:2c:63:88: 57:45:7a:5b:34:fe:4a:a3:a8:a7:86:83:3c:25:33:95:d5:0f: 2c:f6:f7:1e:7b:b6:07:4f:39:97:42:f0:50:b3:b7:28:ef:7e: 5f:68:d5:ed:1e:49:af:a1:4a:cb:aa:98:af:ba:22:1c:ee:f4: 51:c0:db:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEBfLc6Jxu/dt6AiXEke5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZmIwMjc5ZmNkMjNhOGU1ODNmMzQ1YWI5MDQ3MjhlNmQw ZTRjNjIwHhcNMjYwMjA5MTEwMTE2WhcNMjYwMjEwMTEwMTE2WjAzMTEwLwYDVQQD Eyg0MjNiOTA1YzY5NmY2YzY4YmYwOGI5ZWFkODFjMzcxZjRmNjczODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfxOxPnNVeK7mnwWAqGfyt8Rpy+q 3fQ8as2bIBxFwsKH4kgc6FCjByM1hT2mM3JewaEsg0Bb/vF8ZVip7iwTarFoXBK/ lhUriushzMmpMn+DwKlOg2YrpcaCyUB5uaooeZxXiBJKlJbfoJfs2fhz2YDzqtQ3 bQtYDCtnWMa7v0R3WkfCiP5FOqzQrSJU018WdneFjF5fz1FCb+tRTVg7HmenZcwU NnrLCUGAoS0j/uVt4aEH6Hue0PdMcEOOnK8u8dJYX6C0Tf9vaM+wGY7GruCZ2ZsF 3GDWW+rlyfxJxcQYkdx2Ljl3hswXxBwsvLLZHDNIrVsYkrI5a7KOjNzegwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEI7kFxpb2xovwi56tgcNx9PZzgzMB8GA1UdIwQY MBaAFMv7Ann80jqOWD80WrkEco5tDkxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveV9zQ2VmelNPbzVZUHpSYXVRUnlqbTBPVEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85Njc3YjEtZDQzZS00NjZlLTliZjgt ODBmODIwMjcxNGRhLzEveV9zQ2VmelNPbzVZUHpSYXVRUnlqbTBPVEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85Njc3YjEtZDQzZS00NjZlLTliZjgtODBmODIwMjcxNGRh LzEveV9zQ2VmelNPbzVZUHpSYXVRUnlqbTBPVEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOnGl/Dr mcjuVCdUCDE2Y5ohxqWHtTJd+4ll6QMAZfI4aHd7n8z8a1HcnXrOC+QW01EQAH8K 5OWB9mg52GGfgSG/f0zVOwfvYzJsxyythihYYduzsGvS/TljP7SFOezFq2moJKT+ D1whf+o7rCEe0d0CcphpqpoJjwLZZnsnlfD+C4NsQTFtradeyrDf+Hl6lAIG2tdR lxnBBxHBgdKadbdRFqyrpJ+KJ03gc0oKX4g2+jiXaBh+E8A88EmRivARRsHpLGOI V0V6WzT+SqOop4aDPCUzldUPLPb3Hnu2B085l0LwULO3KO9+X2jV7R5Jr6FKy6qY r7oiHO70UcDb3w== -----END CERTIFICATE-----Generated at Mon Feb 9 20:56:09 2026 by rpki-client