This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft File: y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft (raw, json) Hash identifier: ANDJfInhpUCKj7LuXJoL/VG9vQBybkPtyLRPidGa8ak= Subject key identifier: 81:F2:9E:E9:23:C7:62:57:E5:9A:CC:CA:C8:FD:34:4E:13:97:EB:BC Authority key identifier: CB:D7:97:3B:6A:3C:32:2E:71:94:6E:7D:A7:00:FF:BD:3B:0A:09:7E Certificate issuer: /CN=cbd7973b6a3c322e71946e7da700ffbd3b0a097e Certificate serial: 019C41A250D9B2120AA5ACE8FB965E31BEA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft Manifest number: 023E Signing time: Mon 09 Feb 2026 09:01:22 +0000 Manifest this update: Mon 09 Feb 2026 09:01:22 +0000 Manifest next update: Tue 10 Feb 2026 09:01:22 +0000 Files and hashes: 1: y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl (hash: kt2b3FoH/rJ5ILBitokw3sLLku4Vq68YBxRMYI4p7Xc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:50:d9:b2:12:0a:a5:ac:e8:fb:96:5e:31:be:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd7973b6a3c322e71946e7da700ffbd3b0a097e Validity Not Before: Feb 9 09:01:22 2026 GMT Not After : Feb 10 09:01:22 2026 GMT Subject: CN=81f29ee923c76257e59acccac8fd344e1397ebbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d6:5d:61:d3:e0:f9:10:86:f2:5c:c9:ba:f6: b6:c8:97:03:2b:06:98:df:6b:5a:dd:5e:10:dc:75: 8d:5f:e1:15:c9:d8:f9:9f:9b:f6:c4:9c:cc:88:49: 1f:47:b6:b5:48:04:5c:b6:97:e6:2d:a0:2b:fe:77: 8f:01:44:92:46:c0:67:b5:d3:6a:a8:8a:fa:5d:1f: 85:6b:01:3b:8a:96:42:7f:fd:96:d7:e4:2b:30:7b: 7f:58:98:ba:f6:33:e1:50:59:c7:71:80:55:50:35: 42:f1:2b:34:4c:89:48:88:44:42:f5:b0:20:58:cb: 34:73:18:74:20:e3:13:66:4c:31:29:84:bf:6f:03: 59:34:78:d3:5c:83:4b:9b:92:90:6b:3f:22:86:15: 54:df:7f:71:46:8a:c2:de:bf:b7:ae:6b:c5:a5:cb: 4f:76:ab:ac:7c:05:8e:57:1e:97:fa:21:67:70:59: ba:4a:51:79:2f:b6:d7:2e:b1:59:a3:52:77:de:23: 57:b0:54:c2:f0:09:f6:c1:f1:e5:f1:ed:90:65:5d: c9:9f:f3:81:e8:26:f4:d4:5d:d1:f1:4b:58:a0:82: 6c:81:ec:8e:fc:57:28:e4:5f:39:cb:5d:0d:4f:93: 8c:ea:f0:4b:d1:79:3a:a9:3e:6d:30:0f:e7:0c:13: f2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F2:9E:E9:23:C7:62:57:E5:9A:CC:CA:C8:FD:34:4E:13:97:EB:BC X509v3 Authority Key Identifier: keyid:CB:D7:97:3B:6A:3C:32:2E:71:94:6E:7D:A7:00:FF:BD:3B:0A:09:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:b1:7c:db:dd:11:b1:51:a3:af:32:0d:c2:e0:0a:26:3a:a3: d1:a9:68:e5:c8:86:30:3a:b0:b5:42:71:ae:9c:0c:a8:37:3e: e9:fb:1e:75:dd:d5:76:63:49:fd:d1:4d:55:2d:4b:16:94:2b: b6:e5:67:e4:29:a1:43:6e:3f:40:f2:9a:e8:cf:88:f9:2e:64: 23:27:25:1b:59:04:71:5b:93:f0:fa:73:f4:53:11:ee:a0:36: 6d:89:dc:ff:be:96:6a:01:17:5a:03:c8:c2:9f:03:11:f1:19: e9:cc:52:86:8e:b8:d4:36:5c:26:23:6e:dc:3a:eb:ea:5f:c5: 0b:73:48:0a:51:5a:ff:3e:2b:1a:f6:28:82:3c:b7:da:6c:6d: 5d:ed:a3:1f:fd:35:e5:73:e5:f2:d9:31:d1:ec:9b:cf:77:0d: d5:1f:5b:cb:2f:3e:d3:b9:e8:55:62:0e:ab:a9:3a:fb:ee:76: 88:40:68:35:87:6d:e0:46:9b:1b:31:66:fa:0e:55:23:e5:d4: 3a:e8:39:f5:94:5c:b1:51:87:44:c9:62:d6:c0:3f:03:be:47: 67:4f:fd:ba:b5:e4:7d:26:61:31:3a:62:10:d3:af:62:70:bd: ea:9e:52:71:c4:a1:e3:47:1a:98:a6:8e:f1:c6:44:d9:e8:86: 7d:22:d0:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBolDZshIKpazo+5ZeMb6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDc5NzNiNmEzYzMyMmU3MTk0NmU3ZGE3MDBmZmJkM2Iw YTA5N2UwHhcNMjYwMjA5MDkwMTIyWhcNMjYwMjEwMDkwMTIyWjAzMTEwLwYDVQQD Eyg4MWYyOWVlOTIzYzc2MjU3ZTU5YWNjY2FjOGZkMzQ0ZTEzOTdlYmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NZdYdPg+RCG8lzJuva2yJcDKwaY 32ta3V4Q3HWNX+EVydj5n5v2xJzMiEkfR7a1SARctpfmLaAr/nePAUSSRsBntdNq qIr6XR+FawE7ipZCf/2W1+QrMHt/WJi69jPhUFnHcYBVUDVC8Ss0TIlIiERC9bAg WMs0cxh0IOMTZkwxKYS/bwNZNHjTXINLm5KQaz8ihhVU339xRorC3r+3rmvFpctP dqusfAWOVx6X+iFncFm6SlF5L7bXLrFZo1J33iNXsFTC8An2wfHl8e2QZV3Jn/OB 6Cb01F3R8UtYoIJsgeyO/Fco5F85y10NT5OM6vBL0Xk6qT5tMA/nDBPyZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHynukjx2JX5ZrMysj9NE4Tl+u8MB8GA1UdIwQY MBaAFMvXlztqPDIucZRufacA/707Cgl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTllWE8ybzhNaTV4bEc1OXB3RF92VHNLQ1g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYWQ1MjAtYmIxYS00MDAxLTkyYmQt MGRhZWQ5ODRlODQ5LzEveTllWE8ybzhNaTV4bEc1OXB3RF92VHNLQ1g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jYWQ1MjAtYmIxYS00MDAxLTkyYmQtMGRhZWQ5ODRlODQ5 LzEveTllWE8ybzhNaTV4bEc1OXB3RF92VHNLQ1g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbF8290R sVGjrzINwuAKJjqj0alo5ciGMDqwtUJxrpwMqDc+6fsedd3VdmNJ/dFNVS1LFpQr tuVn5CmhQ24/QPKa6M+I+S5kIyclG1kEcVuT8Ppz9FMR7qA2bYnc/76WagEXWgPI wp8DEfEZ6cxSho641DZcJiNu3Drr6l/FC3NIClFa/z4rGvYogjy32mxtXe2jH/01 5XPl8tkx0eybz3cN1R9byy8+07noVWIOq6k6++52iEBoNYdt4EabGzFm+g5VI+XU Oug59ZRcsVGHRMli1sA/A75HZ0/9urXkfSZhMTpiENOvYnC96p5SccSh40camKaO 8cZE2eiGfSLQAg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:09 2026 by rpki-client