This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft File: yxTTDzseETdCPEsjWVfzMDBk2v8.mft (raw, json) Hash identifier: Oww9moZA7PBH3ITObLE5iDpmC5Tbq6uB7lxJPy98I8k= Subject key identifier: 89:32:5F:9D:51:D9:E3:69:11:A4:14:A8:3B:F6:F6:E5:F6:A9:AD:58 Authority key identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF Certificate issuer: /CN=cb14d30f3b1e1137423c4b235957f3303064daff Certificate serial: 019C4390A3FC4BE8879C91CCFBD0F9FF61DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 18:01:18 +0000 Manifest this update: Mon 09 Feb 2026 18:01:18 +0000 Manifest next update: Tue 10 Feb 2026 18:01:18 +0000 Files and hashes: 1: B_Yga8dFIroZi4oBY8FBGZQGvOc.roa (hash: Xqwgsd+G6A3vjt3PhRx4O36PvKDRIPU7eS7eBDKIq0I=) 2: yxTTDzseETdCPEsjWVfzMDBk2v8.crl (hash: pPHIPqqziNYIUhT0RSivakeHhs6i7a6WCbI95NFGFho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:a3:fc:4b:e8:87:9c:91:cc:fb:d0:f9:ff:61:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb14d30f3b1e1137423c4b235957f3303064daff Validity Not Before: Feb 9 18:01:18 2026 GMT Not After : Feb 10 18:01:18 2026 GMT Subject: CN=89325f9d51d9e36911a414a83bf6f6e5f6a9ad58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:39:28:c1:b2:21:6b:b8:ac:23:7b:33:89:86: 17:04:96:16:a2:a3:7c:34:4f:9d:85:1a:c9:0f:de: 76:c1:db:70:fc:3d:21:a5:4d:19:f8:9b:d1:9a:c7: 3d:bc:aa:55:78:c0:34:c7:c0:11:db:4f:33:04:8f: 47:62:c8:d4:78:84:49:29:38:08:b8:4a:41:47:eb: 4e:ba:91:a9:ef:f5:55:14:ed:02:bc:0e:53:25:6d: f4:7f:53:51:2d:4a:ab:d5:ce:45:41:94:d5:b2:6f: 10:04:16:91:99:c5:1e:db:2e:19:5a:de:e9:00:0b: 24:38:80:c7:05:93:80:4d:d3:ce:70:4a:17:45:d9: 61:60:e2:e0:b7:8b:85:d4:0c:03:7a:c7:3f:ca:e7: 80:0b:b5:74:be:38:a2:0a:df:da:1c:60:55:f2:9f: ed:e3:8a:0a:95:29:c7:b4:97:b8:9d:6c:cd:dd:d0: 8c:86:d1:67:c5:9f:74:07:9f:ac:c2:83:6d:2b:8d: 3c:d7:6d:51:fb:10:5f:6d:96:06:6e:da:22:49:c5: 57:80:c7:04:82:be:4f:44:a3:58:76:90:62:75:39: 9f:31:3b:12:14:92:76:68:3f:1c:94:a6:5e:19:52: 46:cc:0b:23:d8:49:ee:44:c7:12:d2:4d:ac:a3:ab: 78:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:32:5F:9D:51:D9:E3:69:11:A4:14:A8:3B:F6:F6:E5:F6:A9:AD:58 X509v3 Authority Key Identifier: keyid:CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:d6:02:58:b2:60:32:bc:f0:33:39:dc:42:32:ff:b3:08:28: c3:19:22:e7:39:31:54:a3:63:a8:76:df:45:6d:2a:b3:20:e5: c3:94:5d:9b:f9:6c:58:8e:33:00:ca:d0:fc:3d:81:95:f4:86: 23:d8:49:b8:64:0a:95:14:0f:e1:49:25:5c:3c:5c:ce:ad:86: 14:ec:6d:fb:3e:35:8f:7a:d5:20:9c:3b:31:6a:de:d2:92:f5: 0a:49:f2:74:c4:78:74:c7:47:da:c1:96:d5:59:ee:35:72:84: 7e:c5:7c:e2:2b:08:11:4d:6a:3e:20:bd:04:a9:87:7c:2a:c2: 47:77:65:16:f2:1a:d1:06:0c:75:fb:44:df:ad:69:96:a9:3f: a6:b2:5d:b5:45:80:d9:b7:f0:39:d9:ae:07:1a:92:18:38:a4: af:ea:44:7b:73:36:81:86:9d:ce:dd:b9:97:43:44:aa:61:a7: 9e:97:11:67:eb:01:50:16:e2:f1:56:4d:a1:75:fc:fe:3d:f4: f1:55:fc:4c:18:18:77:84:74:48:82:7e:ee:30:35:3d:cd:fd: 0f:97:3c:c6:37:c5:43:ee:72:4c:e6:ea:4d:4a:dc:a0:1f:f2: ef:fe:6f:84:12:fc:56:4f:22:01:e6:36:2d:15:52:83:90:e2: 91:4b:db:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkKP8S+iHnJHM+9D5/2HdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMTRkMzBmM2IxZTExMzc0MjNjNGIyMzU5NTdmMzMwMzA2 NGRhZmYwHhcNMjYwMjA5MTgwMTE4WhcNMjYwMjEwMTgwMTE4WjAzMTEwLwYDVQQD Eyg4OTMyNWY5ZDUxZDllMzY5MTFhNDE0YTgzYmY2ZjZlNWY2YTlhZDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTkowbIha7isI3sziYYXBJYWoqN8 NE+dhRrJD952wdtw/D0hpU0Z+JvRmsc9vKpVeMA0x8AR208zBI9HYsjUeIRJKTgI uEpBR+tOupGp7/VVFO0CvA5TJW30f1NRLUqr1c5FQZTVsm8QBBaRmcUe2y4ZWt7p AAskOIDHBZOATdPOcEoXRdlhYOLgt4uF1AwDesc/yueAC7V0vjiiCt/aHGBV8p/t 44oKlSnHtJe4nWzN3dCMhtFnxZ90B5+swoNtK408121R+xBfbZYGbtoiScVXgMcE gr5PRKNYdpBidTmfMTsSFJJ2aD8clKZeGVJGzAsj2EnuRMcS0k2so6t44QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkyX51R2eNpEaQUqDv29uX2qa1YMB8GA1UdIwQY MBaAFMsU0w87HhE3QjxLI1lX8zAwZNr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXhUVER6c2VFVGRDUEVzaldWZnpNREJrMnY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNjdiZjUtMDIyMC00OGIxLWI3MjMt YTVhZTViMTk5MzlhLzEveXhUVER6c2VFVGRDUEVzaldWZnpNREJrMnY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yNjdiZjUtMDIyMC00OGIxLWI3MjMtYTVhZTViMTk5Mzlh LzEveXhUVER6c2VFVGRDUEVzaldWZnpNREJrMnY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNYCWLJg MrzwMzncQjL/swgowxki5zkxVKNjqHbfRW0qsyDlw5Rdm/lsWI4zAMrQ/D2BlfSG I9hJuGQKlRQP4UklXDxczq2GFOxt+z41j3rVIJw7MWre0pL1CknydMR4dMdH2sGW 1VnuNXKEfsV84isIEU1qPiC9BKmHfCrCR3dlFvIa0QYMdftE361plqk/prJdtUWA 2bfwOdmuBxqSGDikr+pEe3M2gYadzt25l0NEqmGnnpcRZ+sBUBbi8VZNoXX8/j30 8VX8TBgYd4R0SIJ+7jA1Pc39D5c8xjfFQ+5yTObqTUrcoB/y7/5vhBL8Vk8iAeY2 LRVSg5DikUvb+w== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:49 2026 by rpki-client