This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft File: y8Zg8DJNjLG2E3ednoMON9UuqrM.mft (raw, json) Hash identifier: 3+kJsejzDbSCPGqp/UsEMqyfrsGOIQT14tbUYxeSMlo= Subject key identifier: 97:72:16:64:15:E8:63:E2:B6:4D:DA:29:49:5D:BF:BB:06:20:96:44 Authority key identifier: CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3 Certificate issuer: /CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3 Certificate serial: 019C45112C26BF98E6207D4B909CC7C688F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft Manifest number: 0673 Signing time: Tue 10 Feb 2026 01:01:19 +0000 Manifest this update: Tue 10 Feb 2026 01:01:19 +0000 Manifest next update: Wed 11 Feb 2026 01:01:19 +0000 Files and hashes: 1: y8Zg8DJNjLG2E3ednoMON9UuqrM.crl (hash: 124SNZKWIjedhltX4MqsYfXcDtvTBIHzpzBoeagXEJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:11:2c:26:bf:98:e6:20:7d:4b:90:9c:c7:c6:88:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3 Validity Not Before: Feb 10 01:01:19 2026 GMT Not After : Feb 11 01:01:19 2026 GMT Subject: CN=9772166415e863e2b64dda29495dbfbb06209644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7d:c0:05:dc:44:7a:76:61:ea:70:a3:1c:22: c4:63:95:7b:af:46:40:42:dd:97:48:2e:cf:a9:a6: 17:c7:44:fb:f7:d2:78:86:d7:82:4f:84:0f:b9:c4: 42:55:4a:41:58:7d:91:69:b9:63:7c:7a:09:c8:18: 24:ad:55:d6:cf:70:b2:81:18:42:03:0e:f4:2e:90: cb:e7:fa:e0:88:e8:31:d0:3f:c4:96:31:50:af:0a: 80:fc:88:85:47:f2:91:45:37:da:92:91:b3:f9:a8: 45:2e:9b:95:ca:43:18:b9:2c:16:08:73:f6:af:9d: 54:df:08:06:1f:72:32:85:82:b0:7e:56:0e:b4:ff: cc:cf:32:af:5e:17:cf:b9:a1:83:bc:11:31:b3:d4: 33:7e:ea:b2:aa:04:88:54:a3:67:b7:7f:50:10:53: 88:37:5e:49:ef:14:c5:de:d4:7b:74:96:a0:99:68: b6:75:ce:b1:9f:c5:bf:04:33:90:f2:77:1d:0f:4f: 62:b6:a4:d2:26:51:05:3d:70:48:ec:74:8c:1e:0e: 1e:8e:6b:1a:0d:b9:d3:5e:47:0a:96:7d:2a:d7:9f: 5a:dd:4c:12:8a:fc:92:cc:0c:ef:b0:0b:dc:ea:38: 25:75:84:14:ca:9e:04:e7:b6:e6:ef:bf:1d:a6:b4: 27:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:72:16:64:15:E8:63:E2:B6:4D:DA:29:49:5D:BF:BB:06:20:96:44 X509v3 Authority Key Identifier: keyid:CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:73:56:80:67:31:ce:24:2d:78:95:2c:83:ad:a6:dd:0d:15: bb:34:97:d5:29:1a:ad:9a:03:22:4e:5d:ee:e5:9a:6e:b6:1d: da:10:88:81:f7:7a:98:fd:33:4f:4a:b6:9b:84:39:34:fa:1a: 61:5c:dd:57:86:9a:a4:f0:74:6f:6a:1c:4f:b3:a5:7d:af:e9: f5:a7:2a:8a:26:02:95:98:86:62:bf:89:61:53:8e:af:16:4d: e0:ed:75:c6:ce:ac:38:92:b3:89:03:f8:81:7b:e0:55:e0:62: 7b:2b:83:88:b1:0f:21:e8:dc:a2:42:47:1a:4d:99:36:3b:17: 7e:28:c2:1b:6a:3e:26:b9:f4:2d:ca:61:6f:92:2a:bb:b6:8e: 23:df:5b:d2:d6:e5:34:b5:92:01:db:2d:0a:6b:25:af:43:6b: cb:17:bb:34:77:2e:b9:30:06:6e:2e:2a:5a:eb:67:30:9c:9a: 08:96:86:eb:09:5a:5f:cf:a9:98:61:12:ab:e1:af:cc:b3:8a: a0:90:05:45:b0:18:b4:15:84:c0:81:c5:91:da:4f:b6:72:55: 41:26:f4:f7:a7:8a:52:67:91:cc:02:2f:4b:75:51:04:be:27: 85:d8:fa:c0:87:7e:4f:f6:76:1b:b2:34:ba:fa:c2:66:0d:dd: 69:66:04:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFESwmv5jmIH1LkJzHxoj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYzY2MGYwMzI0ZDhjYjFiNjEzNzc5ZDllODMwZTM3ZDUy ZWFhYjMwHhcNMjYwMjEwMDEwMTE5WhcNMjYwMjExMDEwMTE5WjAzMTEwLwYDVQQD Eyg5NzcyMTY2NDE1ZTg2M2UyYjY0ZGRhMjk0OTVkYmZiYjA2MjA5NjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1H3ABdxEenZh6nCjHCLEY5V7r0ZA Qt2XSC7PqaYXx0T799J4hteCT4QPucRCVUpBWH2RabljfHoJyBgkrVXWz3CygRhC Aw70LpDL5/rgiOgx0D/EljFQrwqA/IiFR/KRRTfakpGz+ahFLpuVykMYuSwWCHP2 r51U3wgGH3IyhYKwflYOtP/MzzKvXhfPuaGDvBExs9QzfuqyqgSIVKNnt39QEFOI N15J7xTF3tR7dJagmWi2dc6xn8W/BDOQ8ncdD09itqTSJlEFPXBI7HSMHg4ejmsa DbnTXkcKln0q159a3UwSivySzAzvsAvc6jgldYQUyp4E57bm778dprQnXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdyFmQV6GPitk3aKUldv7sGIJZEMB8GA1UdIwQY MBaAFMvGYPAyTYyxthN3nZ6DDjfVLqqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveThaZzhESk5qTEcyRTNlZG5vTU9OOVV1cXJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hM2QzYmItYWE5OC00Y2VkLTgwYTYt MjY3MzcwN2ZkOGU1LzEveThaZzhESk5qTEcyRTNlZG5vTU9OOVV1cXJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9hM2QzYmItYWE5OC00Y2VkLTgwYTYtMjY3MzcwN2ZkOGU1 LzEveThaZzhESk5qTEcyRTNlZG5vTU9OOVV1cXJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXNWgGcx ziQteJUsg62m3Q0VuzSX1SkarZoDIk5d7uWabrYd2hCIgfd6mP0zT0q2m4Q5NPoa YVzdV4aapPB0b2ocT7Olfa/p9acqiiYClZiGYr+JYVOOrxZN4O11xs6sOJKziQP4 gXvgVeBieyuDiLEPIejcokJHGk2ZNjsXfijCG2o+Jrn0Lcphb5Iqu7aOI99b0tbl NLWSAdstCmslr0Nryxe7NHcuuTAGbi4qWutnMJyaCJaG6wlaX8+pmGESq+GvzLOK oJAFRbAYtBWEwIHFkdpPtnJVQSb096eKUmeRzAIvS3VRBL4nhdj6wId+T/Z2G7I0 uvrCZg3daWYEjA== -----END CERTIFICATE-----Generated at Tue Feb 10 05:50:47 2026 by rpki-client