This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft File: YgsENUY3RvXyN9k2h77C6s8iRVE.mft (raw, json) Hash identifier: FezRDbGJnJlel7Pu/akMN1Jfu7ed8/ZH1cjWMHULfeA= Subject key identifier: AC:90:9F:60:D3:62:49:B0:8C:89:11:C3:B8:78:0B:6D:20:CF:59:83 Authority key identifier: 62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51 Certificate issuer: /CN=620b0435463746f5f237d93687bec2eacf224551 Certificate serial: 019C40FD13DACA9F3C6E9A5AAAE0965A5C48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft Manifest number: 09F1 Signing time: Mon 09 Feb 2026 06:00:53 +0000 Manifest this update: Mon 09 Feb 2026 06:00:53 +0000 Manifest next update: Tue 10 Feb 2026 06:00:53 +0000 Files and hashes: 1: T9qIl1S9tQz4tEVjrSKAWFbOqcg.roa (hash: h4jSuRvvCuZIkrJ0uLJKVCyM1giPtJIbarHhGQfdVf0=) 2: YgsENUY3RvXyN9k2h77C6s8iRVE.crl (hash: vctLB+IMdOL14STBUAQH/ie/38IhxWfDOHJTb7Cvm7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:13:da:ca:9f:3c:6e:9a:5a:aa:e0:96:5a:5c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=620b0435463746f5f237d93687bec2eacf224551 Validity Not Before: Feb 9 06:00:53 2026 GMT Not After : Feb 10 06:00:53 2026 GMT Subject: CN=ac909f60d36249b08c8911c3b8780b6d20cf5983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:07:2d:7f:4a:dd:19:83:da:17:45:30:0f:b1: 78:38:67:eb:38:c2:72:be:4a:ad:09:06:5b:0e:2c: e1:cb:97:fb:25:e7:82:a9:47:93:4f:6c:ea:ef:71: 17:40:2b:e7:c5:d4:2b:fa:30:60:a3:64:e6:45:a1: fe:33:8d:a4:1d:88:e8:cc:51:21:d3:da:a1:d2:77: b2:24:15:e1:2f:aa:26:32:ec:01:4f:48:4a:d9:fe: 91:bb:52:77:d5:f1:7f:eb:5c:71:be:85:98:c4:72: 6a:e0:87:66:b3:e0:34:bb:19:57:4e:67:8d:ef:9c: 93:49:aa:21:55:4c:e1:89:06:ee:f7:f6:d8:90:06: 7f:d1:94:9d:94:e5:88:e9:ce:cc:7c:09:1b:0a:51: 44:5d:9b:0e:55:df:80:fc:36:dd:da:28:eb:13:9d: b9:49:ea:4c:39:c8:f7:a4:d2:48:ac:a5:94:51:5c: 7a:ed:9d:b6:e1:e6:b2:c4:ee:bb:78:79:20:46:82: e4:8b:b9:86:e4:27:37:3c:92:28:5d:d4:c6:75:7a: 07:cb:57:a0:a8:f7:a3:11:b3:1c:bd:d2:44:f4:94: 6d:51:ef:91:b2:e4:e2:1c:f9:11:b2:06:38:b6:be: 62:95:11:d3:14:eb:bf:d1:63:d4:53:a4:4b:82:e3: 39:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:90:9F:60:D3:62:49:B0:8C:89:11:C3:B8:78:0B:6D:20:CF:59:83 X509v3 Authority Key Identifier: keyid:62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:87:48:da:21:88:0f:5c:09:12:91:3a:32:7d:47:6e:a9:61: 3c:6e:dd:8b:80:75:c1:ea:e8:cd:95:ae:f4:d2:2a:01:67:31: 42:67:41:bd:21:03:61:93:3b:e4:cf:d4:6d:69:c1:d9:1d:03: 43:1c:f7:7b:1e:76:b8:a9:67:76:04:bd:09:07:79:9e:81:4c: e5:5a:19:30:b8:48:1a:31:19:e1:07:32:ec:4d:cb:7b:a5:d7: 22:7b:fc:d5:8e:84:fd:72:80:85:15:e5:42:60:23:c1:dc:31: 0d:42:59:b6:bc:85:30:73:31:7e:80:0d:0b:4a:b8:e6:ae:43: 0e:6a:c7:b2:37:a8:86:15:f2:0c:bf:d8:7b:29:7f:a6:f6:1f: a8:79:e3:90:43:a7:2d:70:e2:96:f6:0d:4e:12:a1:76:93:51: 47:e0:3d:bf:98:6f:2f:04:88:b9:42:d6:f7:ce:2d:08:43:60: 92:a6:f1:7f:d6:b3:35:50:d7:54:60:5a:18:c1:77:16:ff:f6: 9d:a6:b9:be:a7:85:6c:b9:83:f3:7b:16:76:46:a1:2c:27:46: b4:29:d3:64:b4:89:e2:64:b5:67:5c:43:c3:12:e4:8b:17:00: 65:84:8b:ed:97:ac:6f:80:2e:61:95:aa:38:8f:63:8b:7b:7d: f6:a1:ae:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/RPayp88bppaquCWWlxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMGIwNDM1NDYzNzQ2ZjVmMjM3ZDkzNjg3YmVjMmVhY2Yy MjQ1NTEwHhcNMjYwMjA5MDYwMDUzWhcNMjYwMjEwMDYwMDUzWjAzMTEwLwYDVQQD EyhhYzkwOWY2MGQzNjI0OWIwOGM4OTExYzNiODc4MGI2ZDIwY2Y1OTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwctf0rdGYPaF0UwD7F4OGfrOMJy vkqtCQZbDizhy5f7JeeCqUeTT2zq73EXQCvnxdQr+jBgo2TmRaH+M42kHYjozFEh 09qh0neyJBXhL6omMuwBT0hK2f6Ru1J31fF/61xxvoWYxHJq4Idms+A0uxlXTmeN 75yTSaohVUzhiQbu9/bYkAZ/0ZSdlOWI6c7MfAkbClFEXZsOVd+A/Dbd2ijrE525 SepMOcj3pNJIrKWUUVx67Z224eayxO67eHkgRoLki7mG5Cc3PJIoXdTGdXoHy1eg qPejEbMcvdJE9JRtUe+RsuTiHPkRsgY4tr5ilRHTFOu/0WPUU6RLguM5UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyQn2DTYkmwjIkRw7h4C20gz1mDMB8GA1UdIwQY MBaAFGILBDVGN0b18jfZNoe+wurPIkVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWdzRU5VWTNSdlh5TjlrMmg3N0M2czhpUlZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80YmIyYWEtNDRjZC00M2I2LWE3NmYt NjhjNTljMTliOTM1LzEvWWdzRU5VWTNSdlh5TjlrMmg3N0M2czhpUlZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi80YmIyYWEtNDRjZC00M2I2LWE3NmYtNjhjNTljMTliOTM1 LzEvWWdzRU5VWTNSdlh5TjlrMmg3N0M2czhpUlZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYdI2iGI D1wJEpE6Mn1HbqlhPG7di4B1werozZWu9NIqAWcxQmdBvSEDYZM75M/UbWnB2R0D Qxz3ex52uKlndgS9CQd5noFM5VoZMLhIGjEZ4Qcy7E3Le6XXInv81Y6E/XKAhRXl QmAjwdwxDUJZtryFMHMxfoANC0q45q5DDmrHsjeohhXyDL/Yeyl/pvYfqHnjkEOn LXDilvYNThKhdpNRR+A9v5hvLwSIuULW984tCENgkqbxf9azNVDXVGBaGMF3Fv/2 naa5vqeFbLmD83sWdkahLCdGtCnTZLSJ4mS1Z1xDwxLkixcAZYSL7Zesb4AuYZWq OI9ji3t99qGu6A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:39 2026 by rpki-client