This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft File: y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft (raw, json) Hash identifier: WStb9T1b55+gHvGyqAgA3ORWXmvx6prcTYCPTPIIklA= Subject key identifier: 04:1A:CA:3D:EC:6B:A7:56:99:BF:D6:EA:39:6C:08:99:33:33:DF:89 Authority key identifier: CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48 Certificate issuer: /CN=cbd085027dd3d2b9012533adffc9305e5ff0a548 Certificate serial: 019C420F467E3D403FF5E2CFC09CFE663D0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 11:00:23 +0000 Manifest this update: Mon 09 Feb 2026 11:00:23 +0000 Manifest next update: Tue 10 Feb 2026 11:00:23 +0000 Files and hashes: 1: kRt9bUyJdFBB9Urf88wqGCyD9z8.roa (hash: ru+g8q6Q2p0jDg0nGr5M9c3LVV0Tl9BDqYju45TyK18=) 2: y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl (hash: vs7TGRWZOARjb/pOwkZb5vPHY8oOJMCZyqOWX7JqWvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:46:7e:3d:40:3f:f5:e2:cf:c0:9c:fe:66:3d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd085027dd3d2b9012533adffc9305e5ff0a548 Validity Not Before: Feb 9 11:00:23 2026 GMT Not After : Feb 10 11:00:23 2026 GMT Subject: CN=041aca3dec6ba75699bfd6ea396c08993333df89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:40:67:3d:44:10:49:e6:d5:c2:31:b7:5d:33: 71:86:cf:e1:45:11:f9:d0:82:26:8d:55:30:ed:24: 93:1e:31:d6:d8:a1:ea:97:5e:0e:6a:e4:b2:e1:30: f6:a6:d6:3c:01:10:06:ac:53:c6:fa:12:d8:eb:ec: 82:75:73:fb:b9:6f:72:3c:00:fc:3e:f5:c1:1f:00: 5a:ad:77:24:f9:75:7c:cd:79:37:82:2c:b6:aa:12: 6d:48:96:60:d3:2d:37:fb:b3:e1:77:41:c6:f8:a6: 27:27:23:d9:5c:29:b3:4f:97:44:6a:77:de:e2:9e: 0c:ae:ae:5d:d7:95:54:ec:12:7a:e9:a6:24:cd:c1: dd:f8:9e:ed:35:7e:ee:26:52:5d:9f:50:67:8c:d2: 90:57:ba:bf:07:40:2a:c0:3c:4d:c9:de:54:15:22: 18:47:d7:60:e0:dd:1c:a2:93:a3:a6:e7:0f:15:a4: 39:47:58:9e:63:ea:11:dc:10:a8:69:7f:43:1a:ca: 26:66:e9:18:84:32:36:4e:f4:ec:40:5f:e9:1a:b8: f9:4d:70:8f:06:01:01:8e:79:a4:5f:4a:9c:4d:24: 3d:df:aa:d5:c0:f2:7f:70:94:98:c9:ce:71:d4:a5: e7:b8:cc:dd:89:b0:2f:12:b3:88:1c:20:d5:50:1a: 24:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1A:CA:3D:EC:6B:A7:56:99:BF:D6:EA:39:6C:08:99:33:33:DF:89 X509v3 Authority Key Identifier: keyid:CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:3b:12:20:76:f3:aa:da:eb:f8:d9:0c:e6:86:95:9e:c6:38: de:a9:8e:a3:fc:65:76:11:55:2f:5c:c3:a2:11:fe:25:74:28: ea:72:2c:6f:62:ae:de:b5:23:b3:39:ec:d1:9f:e0:45:74:c3: d5:c3:4e:bf:6e:83:40:cd:82:ba:77:ae:47:d6:25:62:24:31: 6f:c5:a6:9d:99:be:b9:c5:a2:d1:0c:b5:b5:f1:a2:41:3c:98: 00:db:1e:9a:8f:32:24:e7:f8:0e:c3:2d:b2:8b:26:47:a3:dd: cb:1a:b5:4e:f7:92:1d:33:9c:90:2c:c2:d0:4c:9b:aa:60:4c: 95:04:fd:8c:89:43:9d:0b:be:ab:59:72:c8:89:40:d6:91:93: de:d4:a8:a0:bc:32:0e:15:b7:2d:29:0f:5c:d0:7c:09:cd:01: e2:8d:11:f4:7b:97:df:f5:d8:9a:3b:3c:d0:df:cb:95:01:d4: 6a:a9:e0:6d:07:1a:f8:cb:b9:8c:8a:d9:f0:43:11:9f:95:f3: a0:63:10:70:4d:a9:dd:1b:a2:c0:b6:c5:19:33:fd:07:5b:5f: e5:02:52:3c:ef:71:c6:0e:a8:c8:9f:65:71:34:c4:32:50:69: 24:03:8c:7c:2a:62:a5:b6:9a:ea:89:f4:06:b6:15:98:29:56: 3c:9f:1f:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD0Z+PUA/9eLPwJz+Zj0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDA4NTAyN2RkM2QyYjkwMTI1MzNhZGZmYzkzMDVlNWZm MGE1NDgwHhcNMjYwMjA5MTEwMDIzWhcNMjYwMjEwMTEwMDIzWjAzMTEwLwYDVQQD EygwNDFhY2EzZGVjNmJhNzU2OTliZmQ2ZWEzOTZjMDg5OTMzMzNkZjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskBnPUQQSebVwjG3XTNxhs/hRRH5 0IImjVUw7SSTHjHW2KHql14OauSy4TD2ptY8ARAGrFPG+hLY6+yCdXP7uW9yPAD8 PvXBHwBarXck+XV8zXk3giy2qhJtSJZg0y03+7Phd0HG+KYnJyPZXCmzT5dEanfe 4p4Mrq5d15VU7BJ66aYkzcHd+J7tNX7uJlJdn1BnjNKQV7q/B0AqwDxNyd5UFSIY R9dg4N0copOjpucPFaQ5R1ieY+oR3BCoaX9DGsomZukYhDI2TvTsQF/pGrj5TXCP BgEBjnmkX0qcTSQ936rVwPJ/cJSYyc5x1KXnuMzdibAvErOIHCDVUBokIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQayj3sa6dWmb/W6jlsCJkzM9+JMB8GA1UdIwQY MBaAFMvQhQJ909K5ASUzrf/JMF5f8KVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlDRkFuM1QwcmtCSlRPdF84a3dYbF93cFVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYzIwODMtZjk2Ni00ZTA3LTkyMDct NzljNDEwY2I2NDU4LzEveTlDRkFuM1QwcmtCSlRPdF84a3dYbF93cFVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9jYzIwODMtZjk2Ni00ZTA3LTkyMDctNzljNDEwY2I2NDU4 LzEveTlDRkFuM1QwcmtCSlRPdF84a3dYbF93cFVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDsSIHbz qtrr+NkM5oaVnsY43qmOo/xldhFVL1zDohH+JXQo6nIsb2Ku3rUjszns0Z/gRXTD 1cNOv26DQM2CuneuR9YlYiQxb8WmnZm+ucWi0Qy1tfGiQTyYANsemo8yJOf4DsMt sosmR6Pdyxq1TveSHTOckCzC0EybqmBMlQT9jIlDnQu+q1lyyIlA1pGT3tSooLwy DhW3LSkPXNB8Cc0B4o0R9HuX3/XYmjs80N/LlQHUaqngbQca+Mu5jIrZ8EMRn5Xz oGMQcE2p3RuiwLbFGTP9B1tf5QJSPO9xxg6oyJ9lcTTEMlBpJAOMfCpipbaa6on0 BrYVmClWPJ8fNg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:01 2026 by rpki-client