This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft File: __YE3HiSupn1NSlrkQLY16GEQ4g.mft (raw, json) Hash identifier: g/WWK11xqsKLJ6GRQrQHsPsLuivBOahvz2+YrqTYMqg= Subject key identifier: 3D:B3:67:10:E5:8B:6A:CE:7D:F7:7A:92:77:5B:63:8C:00:4E:F9:8B Authority key identifier: FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88 Certificate issuer: /CN=fff604dc7892ba99f535296b9102d8d7a1844388 Certificate serial: 019C446BFC66D3727ECADA632A5BAC527642 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft Manifest number: 17A3 Signing time: Mon 09 Feb 2026 22:00:53 +0000 Manifest this update: Mon 09 Feb 2026 22:00:53 +0000 Manifest next update: Tue 10 Feb 2026 22:00:53 +0000 Files and hashes: 1: __YE3HiSupn1NSlrkQLY16GEQ4g.crl (hash: kAgscrtPK1ppTl575yVqAPixf+1hZ1tHcghKhrhUCew=) 2: gI3uUzSnYf7Q7BZtYjFQ_fPF2OU.roa (hash: ydHk1WEPluuP+9CX+LPaHVAvbLA6LF+fubk2zBDCmt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:fc:66:d3:72:7e:ca:da:63:2a:5b:ac:52:76:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff604dc7892ba99f535296b9102d8d7a1844388 Validity Not Before: Feb 9 22:00:53 2026 GMT Not After : Feb 10 22:00:53 2026 GMT Subject: CN=3db36710e58b6ace7df77a92775b638c004ef98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c9:9c:5f:92:34:db:04:cd:29:f5:93:44:9c: f1:01:5c:bb:37:0b:b9:a5:c3:bf:e2:14:f1:88:ee: 23:51:07:29:c6:69:a3:f3:32:42:a9:da:c6:72:3d: 6b:56:fb:32:79:8d:fb:2a:d0:48:f4:f3:b0:86:46: 68:4f:75:45:bd:60:4c:6f:14:c8:86:76:31:65:0d: 34:2a:42:57:54:74:09:d8:8b:20:bc:ec:8a:54:28: 9f:57:8e:a3:1e:c1:23:89:c5:6c:a3:bf:42:7a:69: c0:ec:57:18:4f:a7:23:a1:a2:9d:a4:d4:26:f3:0c: 6e:0f:28:89:02:e3:df:4b:40:c9:51:6c:e3:cb:d0: bf:0b:7c:32:e7:fe:8f:cb:70:c6:70:31:49:48:69: ec:88:dd:17:75:9b:4c:da:57:a5:7e:00:ab:5a:b6: 19:1f:67:12:db:51:96:2f:43:15:4f:4e:f3:bf:e4: e3:17:c2:0b:2d:de:f0:6b:c2:05:87:dd:66:9e:7f: 7c:13:4a:1a:7a:46:81:50:6f:87:50:21:0a:91:63: 12:8c:b0:de:23:96:60:64:9b:31:e7:2c:42:ce:be: a2:48:ab:49:de:fb:97:0d:9d:80:ab:b1:2c:1b:a1: 36:f2:35:01:ca:51:ba:02:24:0e:0b:a1:ca:3a:81: 20:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B3:67:10:E5:8B:6A:CE:7D:F7:7A:92:77:5B:63:8C:00:4E:F9:8B X509v3 Authority Key Identifier: keyid:FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:be:ea:52:b7:f6:1f:08:1b:8e:8a:ce:09:ec:d6:fd:db:84: 52:d0:9c:1b:7a:f0:fc:05:a5:96:62:d6:34:a5:ee:63:a6:d0: e1:34:d2:8c:52:73:ca:88:d3:48:0e:a9:d6:e5:ef:cb:1c:30: 7c:6a:66:ff:8e:05:92:e3:5b:e6:a5:9f:9c:58:69:b4:ed:36: 30:4f:22:b1:5f:c0:3b:7d:da:4b:ae:b9:43:17:be:b0:0f:92: 47:1f:2e:40:59:df:d9:09:1c:ff:96:bd:ad:26:f8:81:5c:c8: 82:b5:26:a5:9f:e1:6c:bc:f7:80:46:92:01:92:09:13:4e:01: be:cd:0d:07:e2:f2:96:69:84:f4:d1:d9:17:b2:67:3c:a9:97: af:3f:76:74:0d:9b:32:49:36:63:e1:50:77:ea:30:4b:51:63: 9c:88:94:51:7e:23:6c:39:c4:2d:14:fe:3c:98:2e:b2:99:d5: 84:8a:67:41:2d:18:36:af:54:12:9a:b4:0b:9d:0f:47:0f:f5: ad:bd:7e:35:b1:00:b3:2f:36:78:e6:dd:47:e9:3e:25:cb:b0: 1b:4b:5e:43:34:9c:93:1d:7e:85:79:95:29:bc:53:b6:f7:87: 78:d9:b6:61:8a:ed:4c:2c:22:20:1d:62:75:34:76:36:be:53: e0:74:f2:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa/xm03J+ytpjKlusUnZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZjYwNGRjNzg5MmJhOTlmNTM1Mjk2YjkxMDJkOGQ3YTE4 NDQzODgwHhcNMjYwMjA5MjIwMDUzWhcNMjYwMjEwMjIwMDUzWjAzMTEwLwYDVQQD EygzZGIzNjcxMGU1OGI2YWNlN2RmNzdhOTI3NzViNjM4YzAwNGVmOThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcmcX5I02wTNKfWTRJzxAVy7Nwu5 pcO/4hTxiO4jUQcpxmmj8zJCqdrGcj1rVvsyeY37KtBI9POwhkZoT3VFvWBMbxTI hnYxZQ00KkJXVHQJ2IsgvOyKVCifV46jHsEjicVso79CemnA7FcYT6cjoaKdpNQm 8wxuDyiJAuPfS0DJUWzjy9C/C3wy5/6Py3DGcDFJSGnsiN0XdZtM2lelfgCrWrYZ H2cS21GWL0MVT07zv+TjF8ILLd7wa8IFh91mnn98E0oaekaBUG+HUCEKkWMSjLDe I5ZgZJsx5yxCzr6iSKtJ3vuXDZ2Aq7EsG6E28jUBylG6AiQOC6HKOoEgrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2zZxDli2rOffd6kndbY4wATvmLMB8GA1UdIwQY MBaAFP/2BNx4krqZ9TUpa5EC2NehhEOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX19ZRTNIaVN1cG4xTlNscmtRTFkxNkdFUTRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMzc4YTEtNWIxYi00Yzg5LThiYzUt MWMxOTk0OWI5NmI2LzEvX19ZRTNIaVN1cG4xTlNscmtRTFkxNkdFUTRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9iMzc4YTEtNWIxYi00Yzg5LThiYzUtMWMxOTk0OWI5NmI2 LzEvX19ZRTNIaVN1cG4xTlNscmtRTFkxNkdFUTRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOr7qUrf2 HwgbjorOCezW/duEUtCcG3rw/AWllmLWNKXuY6bQ4TTSjFJzyojTSA6p1uXvyxww fGpm/44FkuNb5qWfnFhptO02ME8isV/AO33aS665Qxe+sA+SRx8uQFnf2Qkc/5a9 rSb4gVzIgrUmpZ/hbLz3gEaSAZIJE04Bvs0NB+LylmmE9NHZF7JnPKmXrz92dA2b Mkk2Y+FQd+owS1FjnIiUUX4jbDnELRT+PJguspnVhIpnQS0YNq9UEpq0C50PRw/1 rb1+NbEAsy82eObdR+k+JcuwG0teQzSckx1+hXmVKbxTtveHeNm2YYrtTCwiIB1i dTR2Nr5T4HTyEg== -----END CERTIFICATE-----Generated at Tue Feb 10 07:16:33 2026 by rpki-client