This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft File: bZYBl_5YkhTCJZ9q6olsThAH6YY.mft (raw, json) Hash identifier: tj+Q67KmNwlUqThztWQns5hW4jqzDAfQrpXZDA0mBqM= Subject key identifier: A3:D5:4C:C6:90:91:8A:44:85:CF:7A:6E:4D:56:53:00:D4:DD:A4:AA Authority key identifier: 6D:96:01:97:FE:58:92:14:C2:25:9F:6A:EA:89:6C:4E:10:07:E9:86 Certificate issuer: /CN=6d960197fe589214c2259f6aea896c4e1007e986 Certificate serial: 019C43227C340FF817DC4E8DD13FECAFFC5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZYBl_5YkhTCJZ9q6olsThAH6YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft Manifest number: 0AAD Signing time: Mon 09 Feb 2026 16:00:59 +0000 Manifest this update: Mon 09 Feb 2026 16:00:59 +0000 Manifest next update: Tue 10 Feb 2026 16:00:59 +0000 Files and hashes: 1: bZYBl_5YkhTCJZ9q6olsThAH6YY.crl (hash: ll0EDeyhemaVSMMLggV7Bd13qg4Z9n4g+GPtkmOHOvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft rsync://rpki.ripe.net/repository/DEFAULT/bZYBl_5YkhTCJZ9q6olsThAH6YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:7c:34:0f:f8:17:dc:4e:8d:d1:3f:ec:af:fc:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d960197fe589214c2259f6aea896c4e1007e986 Validity Not Before: Feb 9 16:00:59 2026 GMT Not After : Feb 10 16:00:59 2026 GMT Subject: CN=a3d54cc690918a4485cf7a6e4d565300d4dda4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:74:fb:e5:38:bf:ee:2f:99:74:c4:1b:66:c7: 46:47:8d:67:b0:5a:89:6a:09:8d:48:7c:64:7f:0f: 4a:2b:50:69:0b:3b:26:11:ae:bc:0b:9d:d7:fd:4f: 57:01:cc:ea:65:1c:32:7d:c6:f5:35:16:fb:75:7d: bc:93:22:d7:02:79:f6:ed:81:2d:1e:c8:60:8c:a2: d4:fe:e8:58:2e:7a:e3:ed:e6:cf:d1:f9:0f:00:4a: da:cb:07:c3:48:de:12:bc:17:5f:66:50:32:1b:1b: ed:a7:35:fd:30:04:d0:0c:0d:03:69:87:3e:92:99: 8d:b8:fb:16:75:30:e8:1b:90:7c:bc:43:50:0b:5f: 45:02:ab:3d:1a:df:ca:7f:95:e6:03:2a:ef:04:cb: 76:5e:8c:56:25:ce:e7:14:79:ba:34:63:34:51:f3: ec:86:12:07:f8:ea:62:40:a7:ea:d8:67:7d:d2:a5: aa:24:0c:85:22:f7:4a:66:07:10:7a:c4:87:75:1b: c8:5f:dd:bf:38:64:10:a9:75:68:5b:67:a8:72:f6: 6d:7b:5c:63:fb:5a:32:07:0e:68:1e:40:6d:ff:36: 15:b2:61:35:41:4e:b6:ec:cf:17:22:d5:93:63:90: 70:95:3c:92:f9:e3:18:e3:36:c7:97:b7:9d:02:eb: e8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D5:4C:C6:90:91:8A:44:85:CF:7A:6E:4D:56:53:00:D4:DD:A4:AA X509v3 Authority Key Identifier: keyid:6D:96:01:97:FE:58:92:14:C2:25:9F:6A:EA:89:6C:4E:10:07:E9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZYBl_5YkhTCJZ9q6olsThAH6YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:b4:2e:69:c1:8b:19:16:8d:fe:30:72:14:32:b1:b8:85:b3: 8a:3c:31:ea:3a:e9:06:26:b6:31:99:1a:bd:84:e6:6f:18:73: 81:d9:1f:f5:88:ec:08:7f:9c:8e:88:47:c8:16:8f:f6:ba:01: 4e:ec:c9:87:42:7a:a9:de:99:2f:75:ee:78:cf:c4:c0:7a:97: 1f:b0:14:7b:f4:f1:5e:b1:1d:18:0f:7e:d0:81:33:8a:e8:ee: ae:9c:cb:0a:8d:55:31:c1:d7:5f:a0:47:69:09:e2:1d:23:39: af:e0:db:53:29:da:1c:03:d3:60:4c:d5:ec:aa:8d:95:0e:ff: 2d:f5:1e:dc:2b:fa:ab:95:20:51:4c:3f:12:95:8b:a3:c4:1d: fc:f3:91:b3:23:9e:c6:f9:e3:2c:e8:aa:2a:f5:6b:f9:db:78: c2:ef:9f:d5:f2:8e:3f:51:e4:b2:40:5e:49:e5:a1:e0:6a:3c: c9:e5:b5:02:c8:ba:cf:1f:8f:64:82:f7:64:99:1b:32:69:a5: 11:97:c0:ed:ed:18:b2:d0:eb:2a:01:e9:3c:00:13:e0:5d:2a: 60:34:98:d2:98:bc:da:4e:c9:f3:d3:c3:20:9f:23:30:ed:74: 96:87:14:75:b2:07:86:76:f3:7e:63:70:2e:1f:c4:f5:ea:d9: 2f:a9:ee:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDInw0D/gX3E6N0T/sr/xcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkOTYwMTk3ZmU1ODkyMTRjMjI1OWY2YWVhODk2YzRlMTAw N2U5ODYwHhcNMjYwMjA5MTYwMDU5WhcNMjYwMjEwMTYwMDU5WjAzMTEwLwYDVQQD EyhhM2Q1NGNjNjkwOTE4YTQ0ODVjZjdhNmU0ZDU2NTMwMGQ0ZGRhNGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXT75Ti/7i+ZdMQbZsdGR41nsFqJ agmNSHxkfw9KK1BpCzsmEa68C53X/U9XAczqZRwyfcb1NRb7dX28kyLXAnn27YEt HshgjKLU/uhYLnrj7ebP0fkPAEraywfDSN4SvBdfZlAyGxvtpzX9MATQDA0DaYc+ kpmNuPsWdTDoG5B8vENQC19FAqs9Gt/Kf5XmAyrvBMt2XoxWJc7nFHm6NGM0UfPs hhIH+OpiQKfq2Gd90qWqJAyFIvdKZgcQesSHdRvIX92/OGQQqXVoW2eocvZte1xj +1oyBw5oHkBt/zYVsmE1QU627M8XItWTY5BwlTyS+eMY4zbHl7edAuvo8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPVTMaQkYpEhc96bk1WUwDU3aSqMB8GA1UdIwQY MBaAFG2WAZf+WJIUwiWfauqJbE4QB+mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlpZQmxfNVlraFRDSlo5cTZvbHNUaEFINllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84NzljMDItZGJmNC00ZTQwLWE0ZWQt MzEzNzU0ZTY0ZTEzLzEvYlpZQmxfNVlraFRDSlo5cTZvbHNUaEFINllZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi84NzljMDItZGJmNC00ZTQwLWE0ZWQtMzEzNzU0ZTY0ZTEz LzEvYlpZQmxfNVlraFRDSlo5cTZvbHNUaEFINllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrQuacGL GRaN/jByFDKxuIWzijwx6jrpBia2MZkavYTmbxhzgdkf9YjsCH+cjohHyBaP9roB TuzJh0J6qd6ZL3XueM/EwHqXH7AUe/TxXrEdGA9+0IEziujurpzLCo1VMcHXX6BH aQniHSM5r+DbUynaHAPTYEzV7KqNlQ7/LfUe3Cv6q5UgUUw/EpWLo8Qd/PORsyOe xvnjLOiqKvVr+dt4wu+f1fKOP1HkskBeSeWh4Go8yeW1Asi6zx+PZIL3ZJkbMmml EZfA7e0YstDrKgHpPAAT4F0qYDSY0pi82k7J89PDIJ8jMO10locUdbIHhnbzfmNw Lh/E9erZL6nukg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:58 2026 by rpki-client