This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft File: yVJqou_HA-knkAcfgubuUpuV6x4.mft (raw, json) Hash identifier: uIhZlHo4WgIIfFURv7BuAoPqFHSh7rhep8BZi/Ipwi8= Subject key identifier: CB:59:69:39:88:A4:E2:9A:BB:AC:3D:E6:52:53:0F:A7:7C:46:A4:53 Authority key identifier: C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E Certificate issuer: /CN=c9526aa2efc703e92790071f82e6ee529b95eb1e Certificate serial: 019C42EAFFC7F88B5F1A8E65C94F2DA5893F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft Manifest number: 0D16 Signing time: Mon 09 Feb 2026 15:00:22 +0000 Manifest this update: Mon 09 Feb 2026 15:00:22 +0000 Manifest next update: Tue 10 Feb 2026 15:00:22 +0000 Files and hashes: 1: yVJqou_HA-knkAcfgubuUpuV6x4.crl (hash: kmzMfXwBP0Mwi3ubhhA6hyvHvLwAGiF7CXEL7j0iDho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:ff:c7:f8:8b:5f:1a:8e:65:c9:4f:2d:a5:89:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9526aa2efc703e92790071f82e6ee529b95eb1e Validity Not Before: Feb 9 15:00:22 2026 GMT Not After : Feb 10 15:00:22 2026 GMT Subject: CN=cb59693988a4e29abbac3de652530fa77c46a453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:c3:40:b4:8f:94:53:36:b2:44:6e:26:b4:5b: 51:1a:2e:05:89:1e:31:54:fe:8b:0e:fb:db:0e:98: 57:f2:dd:1d:b8:11:d1:9c:04:e7:da:e1:be:61:48: 1f:5a:2c:69:f6:cf:b0:db:4f:2c:22:72:44:40:0c: c3:48:bd:b8:60:af:6e:bd:a4:c7:f5:7b:98:2e:62: 98:93:70:1f:22:f2:e5:f0:c1:20:e4:06:33:80:4d: c7:69:76:da:a5:45:fd:41:16:65:0f:09:c6:da:63: 8b:54:40:7c:0f:9b:de:17:2c:c1:d6:ed:e5:c4:d8: bf:93:6d:19:a3:be:19:31:7c:30:13:7d:e2:a7:2b: 1d:36:a7:40:04:2a:ec:6e:30:6b:41:ba:14:73:e6: 02:87:e0:fa:42:79:ed:6b:42:12:92:75:72:40:33: 95:2f:51:c8:84:29:f6:36:9f:61:ed:9a:d8:15:69: c3:f8:20:55:c2:de:77:2f:30:b4:65:93:32:93:38: a8:8d:d1:bd:d3:15:66:24:a2:d2:f9:33:e2:d2:6b: ae:b8:19:e5:f3:78:7b:88:2f:e1:c1:39:f3:90:36: b0:ff:7d:c0:19:91:6e:ae:16:48:d9:0c:04:24:71: 31:66:d0:3c:4e:ed:e8:34:d4:e4:f4:8f:71:35:69: fe:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:59:69:39:88:A4:E2:9A:BB:AC:3D:E6:52:53:0F:A7:7C:46:A4:53 X509v3 Authority Key Identifier: keyid:C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ec:3c:32:5c:62:7c:58:da:df:cd:35:8d:aa:1d:11:f8:5b: 35:95:52:18:a8:41:e4:4d:4d:3b:c2:1c:b4:24:f7:a7:eb:c7: 6f:24:c0:5b:a6:63:69:03:7b:90:89:a7:56:5d:ae:58:69:9b: 5a:14:80:1c:2a:64:13:97:e6:1a:08:d8:7e:66:37:47:36:8a: bf:44:15:e6:c0:68:0d:db:69:48:f9:3b:24:e7:f0:29:fd:72: a1:35:89:48:e7:26:5a:41:a0:40:a7:e7:9b:6f:b0:90:98:b2: 88:47:00:f9:f9:d8:48:38:18:01:71:8e:0c:e0:59:de:6f:81: 9b:70:93:a3:aa:42:f3:2e:d5:25:19:3c:4b:87:8f:a9:1a:fb: 47:59:23:9f:21:e0:f5:32:58:47:ea:d3:e4:21:7f:76:d1:a2: 1f:d1:d5:cf:fb:cf:52:10:28:3c:03:cf:d2:96:e4:9a:c1:76: 1a:01:4e:93:22:2f:af:dd:ef:da:02:de:53:96:63:a7:82:39: 27:54:54:9e:f3:3d:02:92:91:b4:bc:e9:d4:71:f3:09:c4:32: 9a:9b:a8:8d:86:28:1f:a0:10:a6:05:92:5d:d7:3f:63:c9:ba: ee:d1:10:6c:2a:cf:2b:21:9c:76:c7:b7:05:30:ce:e6:b8:14: bf:fb:4b:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6v/H+ItfGo5lyU8tpYk/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NTI2YWEyZWZjNzAzZTkyNzkwMDcxZjgyZTZlZTUyOWI5 NWViMWUwHhcNMjYwMjA5MTUwMDIyWhcNMjYwMjEwMTUwMDIyWjAzMTEwLwYDVQQD EyhjYjU5NjkzOTg4YTRlMjlhYmJhYzNkZTY1MjUzMGZhNzdjNDZhNDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+8NAtI+UUzayRG4mtFtRGi4FiR4x VP6LDvvbDphX8t0duBHRnATn2uG+YUgfWixp9s+w208sInJEQAzDSL24YK9uvaTH 9XuYLmKYk3AfIvLl8MEg5AYzgE3HaXbapUX9QRZlDwnG2mOLVEB8D5veFyzB1u3l xNi/k20Zo74ZMXwwE33ipysdNqdABCrsbjBrQboUc+YCh+D6Qnnta0ISknVyQDOV L1HIhCn2Np9h7ZrYFWnD+CBVwt53LzC0ZZMykziojdG90xVmJKLS+TPi0muuuBnl 83h7iC/hwTnzkDaw/33AGZFurhZI2QwEJHExZtA8Tu3oNNTk9I9xNWn+oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtZaTmIpOKau6w95lJTD6d8RqRTMB8GA1UdIwQY MBaAFMlSaqLvxwPpJ5AHH4Lm7lKbleseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVZKcW91X0hBLWtua0FjZmd1YnVVcHVWNng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83Y2YzYjMtNjE2Zi00NGVlLWEyMTQt ZjdmNjkwYzBhZjU3LzEveVZKcW91X0hBLWtua0FjZmd1YnVVcHVWNng0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83Y2YzYjMtNjE2Zi00NGVlLWEyMTQtZjdmNjkwYzBhZjU3 LzEveVZKcW91X0hBLWtua0FjZmd1YnVVcHVWNng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuw8Mlxi fFja3801jaodEfhbNZVSGKhB5E1NO8IctCT3p+vHbyTAW6ZjaQN7kImnVl2uWGmb WhSAHCpkE5fmGgjYfmY3RzaKv0QV5sBoDdtpSPk7JOfwKf1yoTWJSOcmWkGgQKfn m2+wkJiyiEcA+fnYSDgYAXGODOBZ3m+Bm3CTo6pC8y7VJRk8S4ePqRr7R1kjnyHg 9TJYR+rT5CF/dtGiH9HVz/vPUhAoPAPP0pbkmsF2GgFOkyIvr93v2gLeU5Zjp4I5 J1RUnvM9ApKRtLzp1HHzCcQympuojYYoH6AQpgWSXdc/Y8m67tEQbCrPKyGcdse3 BTDO5rgUv/tLWQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:34 2026 by rpki-client