This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ff88cb-0eeb-438d-826c-fa32c3665e71/1/YbpsRtyHsDEnih_K32Js1p32I9I.mft File: YbpsRtyHsDEnih_K32Js1p32I9I.mft (raw, json) Hash identifier: yqCjLQegFikKC3IPgLdKynxcYtreoYjZjbqj6f7WGVA= Subject key identifier: 10:5C:E8:5D:EA:A2:6D:03:8B:5E:3F:1A:ED:61:58:64:3F:AB:42:E0 Authority key identifier: 61:BA:6C:46:DC:87:B0:31:27:8A:1F:CA:DF:62:6C:D6:9D:F6:23:D2 Certificate issuer: /CN=61ba6c46dc87b031278a1fcadf626cd69df623d2 Certificate serial: 019C4246634939530C1207118DC7C2F8E22A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbpsRtyHsDEnih_K32Js1p32I9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ff88cb-0eeb-438d-826c-fa32c3665e71/1/YbpsRtyHsDEnih_K32Js1p32I9I.mft Manifest number: 31 Signing time: Mon 09 Feb 2026 12:00:34 +0000 Manifest this update: Mon 09 Feb 2026 12:00:34 +0000 Manifest next update: Tue 10 Feb 2026 12:00:34 +0000 Files and hashes: 1: YbpsRtyHsDEnih_K32Js1p32I9I.crl (hash: E8gR3f0C/FxVBhUeZTLib3xlC2FQn1QwKj/nSMyI/m8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ff88cb-0eeb-438d-826c-fa32c3665e71/1/YbpsRtyHsDEnih_K32Js1p32I9I.crl rsync://rpki.ripe.net/repository/DEFAULT/37/ff88cb-0eeb-438d-826c-fa32c3665e71/1/YbpsRtyHsDEnih_K32Js1p32I9I.mft rsync://rpki.ripe.net/repository/DEFAULT/YbpsRtyHsDEnih_K32Js1p32I9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:63:49:39:53:0c:12:07:11:8d:c7:c2:f8:e2:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61ba6c46dc87b031278a1fcadf626cd69df623d2 Validity Not Before: Feb 9 12:00:34 2026 GMT Not After : Feb 10 12:00:34 2026 GMT Subject: CN=105ce85deaa26d038b5e3f1aed6158643fab42e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4e:6a:8b:16:d7:ff:b5:6b:ed:7e:47:be:21: be:f8:f0:42:6a:c6:e4:eb:7e:92:3d:b5:c1:98:76: 40:91:57:db:34:0a:67:35:0d:bb:d2:0e:5a:1e:c4: d7:97:e2:04:a6:15:87:3b:2b:49:a6:a1:30:a2:8e: 67:88:24:39:83:1a:28:e5:3a:6b:fa:4e:5c:02:32: ab:e9:b0:81:47:56:64:aa:83:70:09:83:58:82:71: 6b:80:97:3f:04:8d:12:7a:6f:1d:7f:1c:57:05:f4: 50:50:93:32:8f:f6:b6:a5:ac:d2:84:eb:96:92:4c: 24:31:0b:e0:1c:23:e1:c1:3d:b1:8b:8c:b1:18:f2: 96:32:98:f3:49:27:9f:27:5b:8e:ac:5a:fe:74:af: e9:bf:36:7e:e7:92:a5:90:54:a5:f3:c4:97:59:17: 8c:6a:2d:d2:15:36:a2:84:1e:7d:6e:05:be:d7:75: 59:1e:5e:a8:4e:b7:bc:e0:41:53:6f:09:52:b2:27: 9b:7d:4a:80:55:b2:a3:ce:ca:6a:fa:28:ec:6e:fd: 58:cc:79:c0:82:0c:f3:13:d2:11:b4:54:27:1f:bf: c1:bc:d6:15:d1:b7:2c:86:d6:2b:df:85:c5:59:ea: 23:05:73:39:9f:92:66:ee:ff:67:80:6d:5e:20:3f: 45:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5C:E8:5D:EA:A2:6D:03:8B:5E:3F:1A:ED:61:58:64:3F:AB:42:E0 X509v3 Authority Key Identifier: keyid:61:BA:6C:46:DC:87:B0:31:27:8A:1F:CA:DF:62:6C:D6:9D:F6:23:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbpsRtyHsDEnih_K32Js1p32I9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ff88cb-0eeb-438d-826c-fa32c3665e71/1/YbpsRtyHsDEnih_K32Js1p32I9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ff88cb-0eeb-438d-826c-fa32c3665e71/1/YbpsRtyHsDEnih_K32Js1p32I9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:aa:09:b9:1e:e3:00:d8:67:49:7d:e9:02:f8:9a:e4:83:ca: c7:2c:b2:e1:10:2d:5e:6a:f9:2d:2f:8c:90:73:35:ad:97:da: 8a:f2:3c:18:40:82:1c:24:5c:44:32:6e:fb:db:23:6e:bf:a2: 7f:0b:b6:df:54:09:3c:ab:0f:4e:e6:9a:7a:76:68:ad:0e:0c: 11:42:e4:5d:34:e9:4d:49:50:ef:c8:81:60:80:ba:52:5b:3a: 59:b3:1a:e7:0b:c0:32:9b:65:f6:a8:7d:07:cd:1b:2c:31:83: b2:df:0c:3b:52:30:ca:86:a0:0d:92:48:1d:9e:f1:65:98:5c: be:12:18:7f:df:f7:cb:f7:35:2a:96:ec:5f:a3:4b:a2:7f:f5: b6:39:34:fd:d6:82:e4:af:9c:cb:6a:2f:82:25:52:c4:39:28: bd:61:2d:5c:b7:1d:8e:0f:4e:aa:6a:96:c1:ba:d8:42:4c:8e: 56:33:cd:65:55:4e:8b:32:25:b8:99:6b:f2:96:94:bb:b8:d2: aa:f8:77:6d:b9:0a:13:ae:37:c2:7c:4f:de:5b:79:df:e0:df: 47:ec:15:e1:35:e5:fb:5d:74:21:10:39:e2:9e:01:87:c9:9f: 5f:d2:5a:37:3f:b0:f7:8d:c8:28:70:42:9d:61:1a:45:c5:6d: e2:0c:5f:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRmNJOVMMEgcRjcfC+OIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYmE2YzQ2ZGM4N2IwMzEyNzhhMWZjYWRmNjI2Y2Q2OWRm NjIzZDIwHhcNMjYwMjA5MTIwMDM0WhcNMjYwMjEwMTIwMDM0WjAzMTEwLwYDVQQD EygxMDVjZTg1ZGVhYTI2ZDAzOGI1ZTNmMWFlZDYxNTg2NDNmYWI0MmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj05qixbX/7Vr7X5HviG++PBCasbk 636SPbXBmHZAkVfbNApnNQ270g5aHsTXl+IEphWHOytJpqEwoo5niCQ5gxoo5Tpr +k5cAjKr6bCBR1ZkqoNwCYNYgnFrgJc/BI0Sem8dfxxXBfRQUJMyj/a2pazShOuW kkwkMQvgHCPhwT2xi4yxGPKWMpjzSSefJ1uOrFr+dK/pvzZ+55KlkFSl88SXWReM ai3SFTaihB59bgW+13VZHl6oTre84EFTbwlSsiebfUqAVbKjzspq+ijsbv1YzHnA ggzzE9IRtFQnH7/BvNYV0bcshtYr34XFWeojBXM5n5Jm7v9ngG1eID9FWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBc6F3qom0Di14/Gu1hWGQ/q0LgMB8GA1UdIwQY MBaAFGG6bEbch7AxJ4ofyt9ibNad9iPSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJwc1J0eUhzREVuaWhfSzMySnMxcDMySTlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mZjg4Y2ItMGVlYi00MzhkLTgyNmMt ZmEzMmMzNjY1ZTcxLzEvWWJwc1J0eUhzREVuaWhfSzMySnMxcDMySTlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9mZjg4Y2ItMGVlYi00MzhkLTgyNmMtZmEzMmMzNjY1ZTcx LzEvWWJwc1J0eUhzREVuaWhfSzMySnMxcDMySTlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6oJuR7j ANhnSX3pAvia5IPKxyyy4RAtXmr5LS+MkHM1rZfaivI8GECCHCRcRDJu+9sjbr+i fwu231QJPKsPTuaaenZorQ4MEULkXTTpTUlQ78iBYIC6Uls6WbMa5wvAMptl9qh9 B80bLDGDst8MO1IwyoagDZJIHZ7xZZhcvhIYf9/3y/c1KpbsX6NLon/1tjk0/daC 5K+cy2ovgiVSxDkovWEtXLcdjg9OqmqWwbrYQkyOVjPNZVVOizIluJlr8paUu7jS qvh3bbkKE643wnxP3lt53+DfR+wV4TXl+110IRA54p4Bh8mfX9JaNz+w943IKHBC nWEaRcVt4gxfzg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:37:54 2026 by rpki-client