This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft File: yBi6GFWxEQfs8LKzQ2B8y752o40.mft (raw, json) Hash identifier: 6U5dZVq7D02BZ6SVhJFWwdsjQJYFFJ5Hdn8mgUWaEi4= Subject key identifier: DC:FA:47:99:57:1D:57:B9:57:4D:7A:AD:E5:24:52:33:C9:AB:44:F1 Authority key identifier: C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D Certificate issuer: /CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d Certificate serial: 019C42EB8AD9D6F4BD3E6B6D35AF19EEC4F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft Manifest number: 0F45 Signing time: Mon 09 Feb 2026 15:00:58 +0000 Manifest this update: Mon 09 Feb 2026 15:00:58 +0000 Manifest next update: Tue 10 Feb 2026 15:00:58 +0000 Files and hashes: 1: yBi6GFWxEQfs8LKzQ2B8y752o40.crl (hash: ydcxyjThv3C7CFSpGZRBdRpR5JND8tIx/J9NyYuj7Ts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:8a:d9:d6:f4:bd:3e:6b:6d:35:af:19:ee:c4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d Validity Not Before: Feb 9 15:00:58 2026 GMT Not After : Feb 10 15:00:58 2026 GMT Subject: CN=dcfa4799571d57b9574d7aade5245233c9ab44f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f8:88:3a:7a:1a:78:3f:28:6e:eb:d8:13:e8: 06:71:7d:4a:54:5d:4e:87:28:fc:a1:d1:10:62:03: a4:d7:d1:f4:d4:1f:06:cc:47:69:db:54:7a:92:03: 20:0a:62:21:01:4a:9d:17:e6:1a:9c:ed:4d:9a:c4: 23:2e:02:fc:fa:d8:c6:72:f7:f7:34:d7:54:80:c9: f0:27:1e:4b:91:88:e8:0b:2a:d3:84:6a:f9:7c:22: 04:f6:f1:36:36:47:6a:44:b0:d4:0b:61:19:01:1e: e4:35:de:ae:5c:90:fb:55:85:76:7c:57:a6:5f:59: e1:4d:9b:94:92:41:9e:39:7f:3e:fe:aa:94:8e:ad: bd:67:2d:f1:81:40:18:4f:26:71:40:e3:26:01:bc: 45:17:6f:37:08:b9:16:f8:ba:ba:99:16:05:65:23: 52:54:0b:a9:bf:6b:fa:d1:b2:20:55:af:ca:ea:0f: 11:68:4f:e0:83:12:82:54:2f:57:96:5c:df:5d:60: 08:0d:f9:78:eb:fa:80:cb:ba:ba:ba:6e:cc:3b:7a: f4:c0:31:37:d0:83:41:0d:1e:36:4e:b8:85:a2:47: 99:65:ef:ce:b8:43:83:a5:27:12:f7:87:00:57:55: 61:42:d1:00:27:8d:da:b2:e7:85:9d:93:50:9d:ac: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FA:47:99:57:1D:57:B9:57:4D:7A:AD:E5:24:52:33:C9:AB:44:F1 X509v3 Authority Key Identifier: keyid:C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:34:9a:5f:4b:7d:11:ba:78:29:59:ef:02:50:b5:c2:8b:c4: 9c:ed:61:6a:9b:fc:b1:44:65:d3:08:e6:d4:2d:1c:e3:7a:4b: 04:26:76:76:aa:83:8f:a8:b0:d2:d1:68:44:be:3e:48:a3:5c: 62:bf:12:a6:2c:4b:a3:d9:1b:3d:10:47:23:a2:cf:0f:b3:7f: 71:a8:85:3b:f2:82:09:9e:f4:ca:19:08:d4:14:5a:59:44:a2: 4e:4e:fb:78:12:4e:8f:c8:30:23:9e:e3:19:6b:4a:1d:83:9f: d0:fa:bf:9e:ae:4c:d3:4b:68:01:56:c9:40:4d:52:91:88:f8: 5e:51:d8:54:cc:c5:e6:88:02:db:4b:7c:f7:95:92:36:88:3e: 67:6b:44:1d:a6:0c:b6:d4:26:90:2e:3a:96:c6:9f:35:56:38: 01:74:44:53:5f:6e:1a:b3:42:78:fe:9a:4c:4e:a9:8d:67:d9: 16:42:53:91:85:41:ce:b7:b3:6a:ab:2d:dd:cf:81:b6:ee:ea: 8d:e6:e0:6f:f3:ed:b9:66:61:85:10:d0:c7:d7:0b:b2:23:b6: 4b:2f:65:a4:4c:8a:04:a6:3b:c9:26:fb:ce:0c:bc:bf:0f:cf: ad:d2:a2:d3:63:83:e3:eb:7d:c9:d5:af:05:d5:26:1e:7c:66: db:47:a9:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC64rZ1vS9PmttNa8Z7sT2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MThiYTE4NTViMTExMDdlY2YwYjJiMzQzNjA3Y2NiYmU3 NmEzOGQwHhcNMjYwMjA5MTUwMDU4WhcNMjYwMjEwMTUwMDU4WjAzMTEwLwYDVQQD EyhkY2ZhNDc5OTU3MWQ1N2I5NTc0ZDdhYWRlNTI0NTIzM2M5YWI0NGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1viIOnoaeD8obuvYE+gGcX1KVF1O hyj8odEQYgOk19H01B8GzEdp21R6kgMgCmIhAUqdF+YanO1NmsQjLgL8+tjGcvf3 NNdUgMnwJx5LkYjoCyrThGr5fCIE9vE2NkdqRLDUC2EZAR7kNd6uXJD7VYV2fFem X1nhTZuUkkGeOX8+/qqUjq29Zy3xgUAYTyZxQOMmAbxFF283CLkW+Lq6mRYFZSNS VAupv2v60bIgVa/K6g8RaE/ggxKCVC9XllzfXWAIDfl46/qAy7q6um7MO3r0wDE3 0INBDR42TriFokeZZe/OuEODpScS94cAV1VhQtEAJ43asueFnZNQnaxRnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNz6R5lXHVe5V016reUkUjPJq0TxMB8GA1UdIwQY MBaAFMgYuhhVsREH7PCys0NgfMu+dqONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81M2ExYzMtNmI3Yi00Njk4LWIyNjMt OWZmNmUzN2FhM2M0LzEveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi81M2ExYzMtNmI3Yi00Njk4LWIyNjMtOWZmNmUzN2FhM2M0 LzEveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjSaX0t9 Ebp4KVnvAlC1wovEnO1hapv8sURl0wjm1C0c43pLBCZ2dqqDj6iw0tFoRL4+SKNc Yr8SpixLo9kbPRBHI6LPD7N/caiFO/KCCZ70yhkI1BRaWUSiTk77eBJOj8gwI57j GWtKHYOf0Pq/nq5M00toAVbJQE1SkYj4XlHYVMzF5ogC20t895WSNog+Z2tEHaYM ttQmkC46lsafNVY4AXREU19uGrNCeP6aTE6pjWfZFkJTkYVBzrezaqst3c+Btu7q jebgb/PtuWZhhRDQx9cLsiO2Sy9lpEyKBKY7ySb7zgy8vw/PrdKi02OD4+t9ydWv BdUmHnxm20epjw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:58 2026 by rpki-client