This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft File: bYjGZIW7YDRBdFdG-fiGoqahWjY.mft (raw, json) Hash identifier: nQ9I+tjlyYnQvNUOJl1I57i3c8HOmXk13CJU+48hgLU= Subject key identifier: 89:78:E7:82:A7:3A:B9:46:B0:8D:74:8B:C9:C8:52:F5:C7:2F:68:B6 Authority key identifier: 6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36 Certificate issuer: /CN=6d88c66485bb603441745746f9f886a2a6a15a36 Certificate serial: 019C438FAAE6C1352761A0A2C91043853C90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft Manifest number: 021D Signing time: Mon 09 Feb 2026 18:00:14 +0000 Manifest this update: Mon 09 Feb 2026 18:00:14 +0000 Manifest next update: Tue 10 Feb 2026 18:00:14 +0000 Files and hashes: 1: Mtbpc8IAHFgMQsyAgfqJUFJrUrA.roa (hash: V1h3AXSZTLzIGDiJuS9+hhy8lWgG1T0e2v4+3MPHxvM=) 2: bYjGZIW7YDRBdFdG-fiGoqahWjY.crl (hash: zp6aW+Rd5Hq4q3gotg1PHiZ7u23PUDadvwSjq3ZfqPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:aa:e6:c1:35:27:61:a0:a2:c9:10:43:85:3c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d88c66485bb603441745746f9f886a2a6a15a36 Validity Not Before: Feb 9 18:00:14 2026 GMT Not After : Feb 10 18:00:14 2026 GMT Subject: CN=8978e782a73ab946b08d748bc9c852f5c72f68b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b1:3d:04:9f:e7:06:7d:9f:30:8e:45:68:d9: dd:39:12:26:16:62:d3:09:68:68:37:47:dd:75:34: 57:25:f0:95:ef:98:63:ca:e1:04:89:d9:19:b4:5a: 3b:e7:91:0e:ca:e1:26:b8:80:9a:7f:96:5c:7e:3e: 3d:5e:ba:79:35:40:09:2a:50:80:90:d6:28:3b:16: 16:0d:3c:48:cf:ad:25:cb:e7:88:d6:40:89:71:24: 2d:a2:a0:9e:52:cb:f5:30:8f:3c:f4:9d:c2:3c:ce: 27:99:64:99:93:bd:d9:dc:c4:a1:4f:4b:ca:70:65: 8e:58:d0:56:7d:17:b6:aa:ef:a5:c0:60:7c:56:01: 96:5c:d1:86:0a:7d:cc:02:5c:73:4c:43:7b:5e:d9: 2c:1d:50:f2:82:38:ed:e6:da:cf:4e:05:25:a0:19: 53:97:f6:c1:57:11:d0:ec:7a:98:8f:50:c0:a7:c5: 3a:e0:f4:ae:26:0b:b0:78:ad:1f:a5:8b:a2:80:b6: fc:7f:ac:85:4d:b3:2d:37:66:ce:c0:8a:d5:a4:dd: b5:ae:b5:a8:bc:fc:64:49:a0:ae:5c:e2:3c:3b:8c: aa:8c:10:42:e0:d7:03:aa:f9:8a:34:ea:62:6f:8f: a2:06:bc:cd:60:ca:e4:9e:38:6d:4a:b4:b9:db:35: 1b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:78:E7:82:A7:3A:B9:46:B0:8D:74:8B:C9:C8:52:F5:C7:2F:68:B6 X509v3 Authority Key Identifier: keyid:6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:5f:ec:a4:99:c3:1d:7f:cf:e3:48:f3:62:1c:7e:6f:f4:4b: 34:0d:df:db:62:94:df:04:15:05:e7:97:8a:32:06:98:41:ae: 5f:57:87:7d:e2:ee:79:f8:d8:12:68:0c:8e:66:83:f1:19:43: 4b:5b:76:d8:ea:d1:eb:39:12:1c:c1:7d:d7:7f:e8:57:f9:15: d0:dd:a0:7b:9e:97:a0:fe:42:5b:91:2a:62:70:89:3d:e2:da: df:a9:91:f9:40:d9:27:35:d2:f1:b4:94:7d:78:dc:e6:57:e3: 9d:a3:53:94:a3:61:73:9e:26:07:5a:7f:84:28:1d:b5:3b:81: 5a:10:1a:2a:d3:42:ba:9d:16:85:71:b7:9a:a8:53:d8:80:36: 8d:42:04:9b:f6:2b:c9:8d:87:b2:7e:c2:1f:38:bc:0b:e5:06: 4c:36:35:e1:92:de:9b:e1:b4:da:34:c6:7b:00:f5:de:f6:8e: 62:f6:f3:21:2b:39:08:fb:76:a2:b5:21:17:e5:88:7c:f5:d0: 6e:8c:46:bd:6a:aa:15:58:57:b5:a0:e6:e1:9f:0b:d2:df:e1: 5f:56:42:da:84:82:98:22:02:a0:8d:68:10:5b:26:df:9a:3a: b5:d1:6c:27:5a:c8:86:a1:9f:e1:0c:fd:54:98:3e:56:e5:4d: 04:5d:1a:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj6rmwTUnYaCiyRBDhTyQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkODhjNjY0ODViYjYwMzQ0MTc0NTc0NmY5Zjg4NmEyYTZh MTVhMzYwHhcNMjYwMjA5MTgwMDE0WhcNMjYwMjEwMTgwMDE0WjAzMTEwLwYDVQQD Eyg4OTc4ZTc4MmE3M2FiOTQ2YjA4ZDc0OGJjOWM4NTJmNWM3MmY2OGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7E9BJ/nBn2fMI5FaNndORImFmLT CWhoN0fddTRXJfCV75hjyuEEidkZtFo755EOyuEmuICaf5Zcfj49Xrp5NUAJKlCA kNYoOxYWDTxIz60ly+eI1kCJcSQtoqCeUsv1MI889J3CPM4nmWSZk73Z3MShT0vK cGWOWNBWfRe2qu+lwGB8VgGWXNGGCn3MAlxzTEN7XtksHVDygjjt5trPTgUloBlT l/bBVxHQ7HqYj1DAp8U64PSuJguweK0fpYuigLb8f6yFTbMtN2bOwIrVpN21rrWo vPxkSaCuXOI8O4yqjBBC4NcDqvmKNOpib4+iBrzNYMrknjhtSrS52zUbIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIl454KnOrlGsI10i8nIUvXHL2i2MB8GA1UdIwQY MBaAFG2IxmSFu2A0QXRXRvn4hqKmoVo2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYllqR1pJVzdZRFJCZEZkRy1maUdvcWFoV2pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC84NjQ4YmYtODA0ZS00ZTQyLWEyMTIt YjVhNGMyMjQzMmVmLzEvYllqR1pJVzdZRFJCZEZkRy1maUdvcWFoV2pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC84NjQ4YmYtODA0ZS00ZTQyLWEyMTItYjVhNGMyMjQzMmVm LzEvYllqR1pJVzdZRFJCZEZkRy1maUdvcWFoV2pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArF/spJnD HX/P40jzYhx+b/RLNA3f22KU3wQVBeeXijIGmEGuX1eHfeLuefjYEmgMjmaD8RlD S1t22OrR6zkSHMF913/oV/kV0N2ge56XoP5CW5EqYnCJPeLa36mR+UDZJzXS8bSU fXjc5lfjnaNTlKNhc54mB1p/hCgdtTuBWhAaKtNCup0WhXG3mqhT2IA2jUIEm/Yr yY2Hsn7CHzi8C+UGTDY14ZLem+G02jTGewD13vaOYvbzISs5CPt2orUhF+WIfPXQ boxGvWqqFVhXtaDm4Z8L0t/hX1ZC2oSCmCICoI1oEFsm35o6tdFsJ1rIhqGf4Qz9 VJg+VuVNBF0aeg== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:37 2026 by rpki-client