This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft File: y3yVUPThoer5UHL7G5q7JpVNJj0.mft (raw, json) Hash identifier: bXSZavXqniUtV/oez92ngizKNmcEiYPyXkmYUgI770U= Subject key identifier: FF:48:CD:75:48:E7:17:16:4C:06:AB:26:63:FC:8C:78:C8:C0:79:09 Authority key identifier: CB:7C:95:50:F4:E1:A1:EA:F9:50:72:FB:1B:9A:BB:26:95:4D:26:3D Certificate issuer: /CN=cb7c9550f4e1a1eaf95072fb1b9abb26954d263d Certificate serial: 019C420F7D01E3825FC746797C1C3B4EC2DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y3yVUPThoer5UHL7G5q7JpVNJj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft Manifest number: 0EB7 Signing time: Mon 09 Feb 2026 11:00:37 +0000 Manifest this update: Mon 09 Feb 2026 11:00:37 +0000 Manifest next update: Tue 10 Feb 2026 11:00:37 +0000 Files and hashes: 1: y3yVUPThoer5UHL7G5q7JpVNJj0.crl (hash: 8KqfQGXTDQNdGIlih74C9uffpG9CJjxEazWtVX2YpbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.crl rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft rsync://rpki.ripe.net/repository/DEFAULT/y3yVUPThoer5UHL7G5q7JpVNJj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:7d:01:e3:82:5f:c7:46:79:7c:1c:3b:4e:c2:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb7c9550f4e1a1eaf95072fb1b9abb26954d263d Validity Not Before: Feb 9 11:00:37 2026 GMT Not After : Feb 10 11:00:37 2026 GMT Subject: CN=ff48cd7548e717164c06ab2663fc8c78c8c07909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6f:00:4a:7e:b8:12:d3:bd:d1:09:9a:0f:4a: 5d:65:d8:f3:2f:8a:a7:43:a7:73:30:bf:74:58:39: f9:0f:95:94:a6:19:35:cb:db:9b:a7:de:2f:54:cc: 3a:a9:3c:c6:19:88:f2:1e:f8:2d:80:ec:bc:54:a9: c3:7a:1a:2c:cd:37:74:f9:5f:cd:ef:04:60:73:a9: 0a:16:19:6a:81:11:15:5b:6a:70:46:82:95:64:5c: 61:e8:6f:62:7d:54:70:02:3a:65:3f:db:f8:d3:1d: 7f:ef:82:1a:91:9d:a4:69:6d:25:00:2d:78:0f:2d: 3a:3a:d9:0d:f6:fc:f5:72:5b:fd:68:59:57:16:61: 57:50:26:57:46:80:8a:2d:4d:1b:e3:bf:ea:c4:8f: 87:88:f4:47:9d:a9:88:26:c6:0f:55:28:85:0f:1f: 94:46:20:54:7f:d4:84:e9:c7:ad:b3:fd:0d:21:ca: 0c:9c:a3:57:f9:de:c9:42:66:cd:e6:af:92:ea:b8: c0:28:32:6a:69:cf:78:b3:73:d4:5e:e5:86:49:67: 1b:ed:e1:c2:0c:d8:00:95:e3:47:26:73:d3:78:4e: a7:f3:b7:bb:40:40:6e:cf:81:87:ec:97:16:e6:8b: 6c:8d:d1:a2:f2:bc:f7:6d:f7:e9:cc:fe:33:56:4b: fa:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:48:CD:75:48:E7:17:16:4C:06:AB:26:63:FC:8C:78:C8:C0:79:09 X509v3 Authority Key Identifier: keyid:CB:7C:95:50:F4:E1:A1:EA:F9:50:72:FB:1B:9A:BB:26:95:4D:26:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y3yVUPThoer5UHL7G5q7JpVNJj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:1d:af:74:a3:76:3d:fc:dc:7a:f2:8d:56:b9:c9:f1:48:d3: 20:d1:2a:1b:e8:74:2e:49:d9:2b:6c:00:9a:67:a3:c3:3b:1e: c7:7b:c9:91:00:bd:3b:d1:76:06:97:82:e9:ee:fd:ce:7a:73: 74:12:19:f1:aa:8d:8e:c6:96:71:27:86:df:3a:fd:00:59:24: d2:80:db:75:6b:c6:50:5f:86:0e:3d:da:a4:a9:62:d4:88:ad: a7:21:2d:3d:41:81:07:af:f5:33:6d:da:e0:53:7b:57:d5:a3: fb:9a:49:e3:eb:03:62:12:93:84:f5:72:6a:cb:5b:d2:0a:6b: 78:ae:b1:b3:c3:84:66:4d:67:de:53:67:b6:3e:ee:3b:9f:fd: 79:72:6e:aa:97:63:0b:e2:43:eb:69:66:e3:71:96:a5:14:34: dc:51:51:56:67:72:65:3d:6c:d3:7b:2b:f8:91:9e:08:e9:fe: 8b:f3:93:f7:ff:78:5c:94:41:00:02:1c:09:84:6c:76:43:fd: e7:fb:04:9c:f4:16:23:c9:e5:14:94:60:5d:4b:38:f3:bf:ac: 70:ca:dc:02:a4:55:1c:ea:47:7f:79:7d:aa:b2:1f:52:af:8a: 1c:33:fe:cd:74:af:4a:f7:25:1d:45:43:a2:73:64:0f:24:fe: 05:24:78:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD30B44Jfx0Z5fBw7TsLeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiN2M5NTUwZjRlMWExZWFmOTUwNzJmYjFiOWFiYjI2OTU0 ZDI2M2QwHhcNMjYwMjA5MTEwMDM3WhcNMjYwMjEwMTEwMDM3WjAzMTEwLwYDVQQD EyhmZjQ4Y2Q3NTQ4ZTcxNzE2NGMwNmFiMjY2M2ZjOGM3OGM4YzA3OTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW8ASn64EtO90QmaD0pdZdjzL4qn Q6dzML90WDn5D5WUphk1y9ubp94vVMw6qTzGGYjyHvgtgOy8VKnDehoszTd0+V/N 7wRgc6kKFhlqgREVW2pwRoKVZFxh6G9ifVRwAjplP9v40x1/74IakZ2kaW0lAC14 Dy06OtkN9vz1clv9aFlXFmFXUCZXRoCKLU0b47/qxI+HiPRHnamIJsYPVSiFDx+U RiBUf9SE6cets/0NIcoMnKNX+d7JQmbN5q+S6rjAKDJqac94s3PUXuWGSWcb7eHC DNgAleNHJnPTeE6n87e7QEBuz4GH7JcW5otsjdGi8rz3bffpzP4zVkv6lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9IzXVI5xcWTAarJmP8jHjIwHkJMB8GA1UdIwQY MBaAFMt8lVD04aHq+VBy+xuauyaVTSY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTN5VlVQVGhvZXI1VUhMN0c1cTdKcFZOSmowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82ODliMTktNDk1OC00NDIzLTg1YTkt OTYyNmY5ZjZjZGEyLzEveTN5VlVQVGhvZXI1VUhMN0c1cTdKcFZOSmowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS82ODliMTktNDk1OC00NDIzLTg1YTktOTYyNmY5ZjZjZGEy LzEveTN5VlVQVGhvZXI1VUhMN0c1cTdKcFZOSmowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANB2vdKN2 PfzcevKNVrnJ8UjTINEqG+h0LknZK2wAmmejwzsex3vJkQC9O9F2BpeC6e79znpz dBIZ8aqNjsaWcSeG3zr9AFkk0oDbdWvGUF+GDj3apKli1IitpyEtPUGBB6/1M23a 4FN7V9Wj+5pJ4+sDYhKThPVyastb0gpreK6xs8OEZk1n3lNntj7uO5/9eXJuqpdj C+JD62lm43GWpRQ03FFRVmdyZT1s03sr+JGeCOn+i/OT9/94XJRBAAIcCYRsdkP9 5/sEnPQWI8nlFJRgXUs487+scMrcAqRVHOpHf3l9qrIfUq+KHDP+zXSvSvclHUVD onNkDyT+BSR4gA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:46 2026 by rpki-client