This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft File: y1VBA5WqtJkUDDplzh90DvBw0-Y.mft (raw, json) Hash identifier: X3IqFH6by4TWDVFZQnh9CRAXoIALuwL5dphf6igp9ZQ= Subject key identifier: 28:AB:6D:D9:66:20:FF:B8:0C:54:3C:79:98:ED:95:67:05:A2:63:50 Authority key identifier: CB:55:41:03:95:AA:B4:99:14:0C:3A:65:CE:1F:74:0E:F0:70:D3:E6 Certificate issuer: /CN=cb55410395aab499140c3a65ce1f740ef070d3e6 Certificate serial: 019C42EB0882FDE591D8EFE49A97C225D4DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft Manifest number: 0193 Signing time: Mon 09 Feb 2026 15:00:25 +0000 Manifest this update: Mon 09 Feb 2026 15:00:25 +0000 Manifest next update: Tue 10 Feb 2026 15:00:25 +0000 Files and hashes: 1: wlqAOJ8h8eRiXMkjxv6Jaoq6YkU.roa (hash: 0xU2M591t0tt0HcAOUX7ifjkri7E09ptWBOocOdK4g4=) 2: y1VBA5WqtJkUDDplzh90DvBw0-Y.crl (hash: sHwiIPOe892a0n9d7B1G5ikLYqzOGGlOHn5jCXTd8pA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:08:82:fd:e5:91:d8:ef:e4:9a:97:c2:25:d4:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb55410395aab499140c3a65ce1f740ef070d3e6 Validity Not Before: Feb 9 15:00:25 2026 GMT Not After : Feb 10 15:00:25 2026 GMT Subject: CN=28ab6dd96620ffb80c543c7998ed956705a26350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:58:73:99:b5:de:1b:4b:0d:da:b9:dd:e0:89: 45:95:fe:bb:37:01:d7:80:65:26:92:98:87:71:f1: 14:ee:13:f0:f9:d4:c0:6f:f0:bf:84:c3:04:bf:02: 9e:02:4f:d7:e0:3d:dd:7e:1e:1a:ca:a9:ed:0b:c8: 56:3b:2f:a4:f4:01:52:a6:f9:59:79:9e:54:19:48: 79:e8:5e:36:d7:a6:56:47:df:f8:53:d6:7a:e0:9b: 34:cb:1f:ca:a4:ab:80:3c:9b:65:eb:48:15:96:a9: 80:2e:52:fa:69:10:0a:13:7d:ac:5a:00:1f:99:09: 7f:07:31:9e:06:10:ad:b0:2d:62:06:70:dd:ed:08: 7e:22:9f:a1:75:25:4f:3d:b2:4a:26:31:bf:42:90: a1:c5:75:13:ac:8d:40:01:0d:85:99:39:49:5c:9f: d2:e1:f9:e7:7c:ae:ec:9d:89:e3:ea:4a:bb:05:18: 4c:91:61:5f:39:23:a4:c2:24:e2:51:70:85:ec:95: 4c:61:d2:83:50:4b:c1:fe:c3:d8:4d:f4:f8:16:9d: 4d:84:ad:b6:5b:b7:c2:15:27:bb:92:16:15:3f:54: 32:07:ac:a6:87:85:c7:9b:70:28:ed:bb:65:19:58: 6a:5f:66:4c:db:e8:d2:94:6d:c4:35:9d:da:9d:9e: c8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AB:6D:D9:66:20:FF:B8:0C:54:3C:79:98:ED:95:67:05:A2:63:50 X509v3 Authority Key Identifier: keyid:CB:55:41:03:95:AA:B4:99:14:0C:3A:65:CE:1F:74:0E:F0:70:D3:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:0c:c3:f4:16:94:94:6d:3c:ef:f9:b9:af:fd:18:24:ef:f4: f4:4c:c7:2c:22:3a:97:9e:11:8d:b1:2c:8f:63:63:b7:53:17: 3c:ec:d5:ca:fd:0d:a0:e9:6b:0a:3c:56:4d:a3:77:bf:43:ed: 75:0b:5d:7f:9d:75:5b:dc:09:12:12:79:de:ed:d7:8b:66:03: 4e:40:1c:62:8b:97:d1:18:67:56:9f:ea:91:44:6c:1c:8b:54: 09:51:fb:9d:90:c2:f2:ef:fc:ed:59:0b:db:3b:5c:81:f3:28: 88:63:ac:dc:ae:b5:74:59:fa:1e:88:e4:bf:89:00:26:01:3d: 9f:38:93:e6:a9:64:f7:f0:e6:8d:f8:c5:77:d4:cf:33:cc:24: 42:27:79:b9:31:14:9d:43:a4:df:79:00:78:d1:16:ac:40:de: 78:c2:33:81:ab:3c:d6:4f:66:3b:ca:78:81:4b:92:26:5b:68: 67:21:93:22:a2:ae:c9:d0:52:d1:43:d0:85:5b:60:28:a9:68: 0d:24:6f:d7:1f:d6:74:0d:c5:a4:30:aa:15:21:b1:18:2b:ae: 4a:1d:71:56:21:c5:a4:1b:47:9c:75:d6:ac:8b:d6:f9:3a:12: 23:b7:6a:ef:48:40:a5:ee:d9:06:a0:e4:13:58:9a:86:3c:f4: 5a:50:22:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6wiC/eWR2O/kmpfCJdTfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNTU0MTAzOTVhYWI0OTkxNDBjM2E2NWNlMWY3NDBlZjA3 MGQzZTYwHhcNMjYwMjA5MTUwMDI1WhcNMjYwMjEwMTUwMDI1WjAzMTEwLwYDVQQD EygyOGFiNmRkOTY2MjBmZmI4MGM1NDNjNzk5OGVkOTU2NzA1YTI2MzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1hzmbXeG0sN2rnd4IlFlf67NwHX gGUmkpiHcfEU7hPw+dTAb/C/hMMEvwKeAk/X4D3dfh4ayqntC8hWOy+k9AFSpvlZ eZ5UGUh56F4216ZWR9/4U9Z64Js0yx/KpKuAPJtl60gVlqmALlL6aRAKE32sWgAf mQl/BzGeBhCtsC1iBnDd7Qh+Ip+hdSVPPbJKJjG/QpChxXUTrI1AAQ2FmTlJXJ/S 4fnnfK7snYnj6kq7BRhMkWFfOSOkwiTiUXCF7JVMYdKDUEvB/sPYTfT4Fp1NhK22 W7fCFSe7khYVP1QyB6ymh4XHm3Ao7btlGVhqX2ZM2+jSlG3ENZ3anZ7IcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCirbdlmIP+4DFQ8eZjtlWcFomNQMB8GA1UdIwQY MBaAFMtVQQOVqrSZFAw6Zc4fdA7wcNPmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTFWQkE1V3F0SmtVRERwbHpoOTBEdkJ3MC1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xMjdmMjktYzFkNi00Y2UxLTlhNzQt NjJjNzY5NGI1N2VlLzEveTFWQkE1V3F0SmtVRERwbHpoOTBEdkJ3MC1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xMjdmMjktYzFkNi00Y2UxLTlhNzQtNjJjNzY5NGI1N2Vl LzEveTFWQkE1V3F0SmtVRERwbHpoOTBEdkJ3MC1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgzD9BaU lG087/m5r/0YJO/09EzHLCI6l54RjbEsj2Njt1MXPOzVyv0NoOlrCjxWTaN3v0Pt dQtdf511W9wJEhJ53u3Xi2YDTkAcYouX0RhnVp/qkURsHItUCVH7nZDC8u/87VkL 2ztcgfMoiGOs3K61dFn6Hojkv4kAJgE9nziT5qlk9/DmjfjFd9TPM8wkQid5uTEU nUOk33kAeNEWrEDeeMIzgas81k9mO8p4gUuSJltoZyGTIqKuydBS0UPQhVtgKKlo DSRv1x/WdA3FpDCqFSGxGCuuSh1xViHFpBtHnHXWrIvW+ToSI7dq70hApe7ZBqDk E1iahjz0WlAi7Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:25 2026 by rpki-client