This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft File: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft (raw, json) Hash identifier: IEV2plzawO4RLqkqRCkLMEOBo0r04x9u+2RE/Oy53ag= Subject key identifier: AF:E3:1F:5E:EA:45:31:86:C3:16:0F:5C:B8:6E:01:EE:0D:B6:2D:2A Authority key identifier: CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34 Certificate issuer: /CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34 Certificate serial: 019C4434E536CE6D0A7B8988D68672B0137B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft Manifest number: 0571 Signing time: Mon 09 Feb 2026 21:00:43 +0000 Manifest this update: Mon 09 Feb 2026 21:00:43 +0000 Manifest next update: Tue 10 Feb 2026 21:00:43 +0000 Files and hashes: 1: xAwC9v2pDzbNDsLMQHKskO70xoQ.roa (hash: pNouLSLbbOHtlI8iLu58m9dwfp4hUJRS+ezdGScljvg=) 2: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl (hash: EnhsXSENoR1UPDdgcWHBh9RhSofnJrVmb2DtYyUDK4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:e5:36:ce:6d:0a:7b:89:88:d6:86:72:b0:13:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34 Validity Not Before: Feb 9 21:00:43 2026 GMT Not After : Feb 10 21:00:43 2026 GMT Subject: CN=afe31f5eea453186c3160f5cb86e01ee0db62d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:08:55:ba:0e:4a:73:26:9e:56:46:71:19:7e: 49:1d:53:e0:3a:79:f3:7b:18:3a:48:36:2b:91:72: 95:90:74:d9:1a:d6:54:15:6b:2c:e7:83:e2:e4:f2: 6c:36:55:be:b9:ae:cb:36:3e:61:57:85:6c:48:c8: 54:24:59:aa:b5:2d:58:e1:3f:44:e3:18:be:a2:71: 9b:2b:74:c4:21:d2:c4:9a:c4:8c:a8:3e:c8:43:7a: 71:f9:bc:9f:e4:a5:82:b1:66:07:d3:aa:4d:f3:c5: 12:de:b3:3d:7b:37:aa:f1:bf:a7:26:3b:f5:d4:65: 65:21:32:5a:2e:55:df:c1:42:53:be:c6:4c:b6:15: 2f:bc:27:82:c4:a3:e5:25:ef:d0:bc:91:41:ea:f6: ec:fa:5e:b0:c9:79:c7:2d:52:95:1c:0f:4d:1e:f9: d8:4a:9a:e8:a0:c1:ee:88:96:73:79:74:06:f6:cc: 34:d5:97:2b:ad:fe:79:73:48:b9:98:4a:e2:da:bb: 62:4c:a9:23:d4:ca:9d:e0:0d:3c:79:b4:e0:66:d7: 73:b6:3d:24:32:14:65:7a:a1:e8:cf:f8:6e:32:a1: cb:61:0d:b0:e8:d5:36:64:4c:02:76:bb:68:2b:c6: f1:ca:d4:f7:94:04:76:aa:6b:d5:fe:1a:77:df:51: 2e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E3:1F:5E:EA:45:31:86:C3:16:0F:5C:B8:6E:01:EE:0D:B6:2D:2A X509v3 Authority Key Identifier: keyid:CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:9f:8b:f4:d5:29:6e:f5:04:cb:cc:1d:3b:b4:32:71:6a:e3: 5c:94:f6:9c:56:fd:34:b5:1f:43:c6:e4:95:1e:86:e2:07:fd: 97:2d:66:d7:3c:48:c5:c7:ec:02:ef:11:7e:a8:07:3f:c9:56: 20:87:d7:cc:94:3b:e7:28:18:39:fb:0e:db:c0:30:cf:ae:3a: 10:ec:39:95:ab:29:d6:9d:23:2c:a4:3e:46:6f:0a:71:bb:04: bd:71:b2:07:8f:1c:36:26:9c:47:70:3c:e9:37:28:24:da:fe: ad:92:29:af:e6:12:29:7c:fd:9e:f6:87:de:79:41:c7:f9:f4: fa:87:82:fa:e8:e8:32:85:ad:1e:b5:69:f3:5e:c1:42:55:0d: 83:cf:31:b7:c7:4c:3d:2d:fb:90:80:de:49:f3:f7:9c:93:6f: 34:78:f2:52:30:b0:62:df:eb:df:6c:a3:a2:14:93:7e:b4:6c: d2:87:db:43:56:ae:02:e7:65:20:7d:90:58:06:8a:4b:a2:41: 5e:dd:7f:75:aa:b2:11:4e:75:c6:05:56:5f:c7:be:92:08:09: 05:13:2f:8c:f8:57:36:09:ff:85:f8:28:13:57:fd:a0:b1:ed: 27:af:2e:0a:f8:13:91:88:99:af:e9:64:ca:24:e5:4a:62:64: 9d:a7:04:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENOU2zm0Ke4mI1oZysBN7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZTlmYzcyNWIwYzNlZjEwMzczNDYwZjliZjU5YmNlM2Vk NTBhMzQwHhcNMjYwMjA5MjEwMDQzWhcNMjYwMjEwMjEwMDQzWjAzMTEwLwYDVQQD EyhhZmUzMWY1ZWVhNDUzMTg2YzMxNjBmNWNiODZlMDFlZTBkYjYyZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoghVug5KcyaeVkZxGX5JHVPgOnnz exg6SDYrkXKVkHTZGtZUFWss54Pi5PJsNlW+ua7LNj5hV4VsSMhUJFmqtS1Y4T9E 4xi+onGbK3TEIdLEmsSMqD7IQ3px+byf5KWCsWYH06pN88US3rM9ezeq8b+nJjv1 1GVlITJaLlXfwUJTvsZMthUvvCeCxKPlJe/QvJFB6vbs+l6wyXnHLVKVHA9NHvnY SprooMHuiJZzeXQG9sw01Zcrrf55c0i5mEri2rtiTKkj1Mqd4A08ebTgZtdztj0k MhRleqHoz/huMqHLYQ2w6NU2ZEwCdrtoK8bxytT3lAR2qmvV/hp331EuAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/jH17qRTGGwxYPXLhuAe4Nti0qMB8GA1UdIwQY MBaAFMvp/HJbDD7xA3NGD5v1m84+1Qo0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lMmJiZjUtYjMzNi00YzA5LWJhNDIt NTVhNTRkZjE0MzRlLzEveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9lMmJiZjUtYjMzNi00YzA5LWJhNDItNTVhNTRkZjE0MzRl LzEveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZ+L9NUp bvUEy8wdO7QycWrjXJT2nFb9NLUfQ8bklR6G4gf9ly1m1zxIxcfsAu8RfqgHP8lW IIfXzJQ75ygYOfsO28Awz646EOw5lasp1p0jLKQ+Rm8KcbsEvXGyB48cNiacR3A8 6TcoJNr+rZIpr+YSKXz9nvaH3nlBx/n0+oeC+ujoMoWtHrVp817BQlUNg88xt8dM PS37kIDeSfP3nJNvNHjyUjCwYt/r32yjohSTfrRs0ofbQ1auAudlIH2QWAaKS6JB Xt1/daqyEU51xgVWX8e+kggJBRMvjPhXNgn/hfgoE1f9oLHtJ68uCvgTkYiZr+lk yiTlSmJknacELQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:47 2026 by rpki-client