This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/120a06-bce2-4928-bf78-afec9e6d33fd/1/y7cmPY1qcue3KibEOMxnxmoZRVI.mft File: y7cmPY1qcue3KibEOMxnxmoZRVI.mft (raw, json) Hash identifier: OicdJ0G8saFgh5LcZvVcRASzCuq0emAkj0wcv9kIioE= Subject key identifier: E4:2C:F2:BD:46:32:A3:69:B9:37:2A:5F:50:BE:D9:76:D9:BA:D0:47 Authority key identifier: CB:B7:26:3D:8D:6A:72:E7:B7:2A:26:C4:38:CC:67:C6:6A:19:45:52 Certificate issuer: /CN=cbb7263d8d6a72e7b72a26c438cc67c66a194552 Certificate serial: 019C43594A5B7F9E58E5F9E49B330ED18063 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7cmPY1qcue3KibEOMxnxmoZRVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/120a06-bce2-4928-bf78-afec9e6d33fd/1/y7cmPY1qcue3KibEOMxnxmoZRVI.mft Manifest number: 33 Signing time: Mon 09 Feb 2026 17:00:51 +0000 Manifest this update: Mon 09 Feb 2026 17:00:51 +0000 Manifest next update: Tue 10 Feb 2026 17:00:51 +0000 Files and hashes: 1: y7cmPY1qcue3KibEOMxnxmoZRVI.crl (hash: ffUvbiGJTLkMPAmZ74dvY9pfNXgbFrBr9xphgBGSojE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/120a06-bce2-4928-bf78-afec9e6d33fd/1/y7cmPY1qcue3KibEOMxnxmoZRVI.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/120a06-bce2-4928-bf78-afec9e6d33fd/1/y7cmPY1qcue3KibEOMxnxmoZRVI.mft rsync://rpki.ripe.net/repository/DEFAULT/y7cmPY1qcue3KibEOMxnxmoZRVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:4a:5b:7f:9e:58:e5:f9:e4:9b:33:0e:d1:80:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbb7263d8d6a72e7b72a26c438cc67c66a194552 Validity Not Before: Feb 9 17:00:51 2026 GMT Not After : Feb 10 17:00:51 2026 GMT Subject: CN=e42cf2bd4632a369b9372a5f50bed976d9bad047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e6:fc:f6:b2:a7:7d:e6:8c:8e:3b:cd:1d:b5: 81:2b:ce:4a:e7:1c:bc:15:a3:43:ee:a3:c8:ef:c5: ae:be:40:fb:ae:7e:12:74:f0:21:af:1d:53:62:cd: 8f:95:5a:04:3a:2b:34:5f:7a:ad:d6:7f:af:2d:d1: 3b:52:fe:5e:9f:dc:a1:50:20:41:8d:13:77:0f:28: 35:e3:85:b8:70:24:71:4e:7b:6f:11:55:c3:4e:27: 7e:d4:18:94:6c:98:f7:0c:a4:6b:b6:6b:15:b3:ac: 1e:23:2d:1b:cb:7d:38:1e:81:b3:d8:81:75:75:91: f7:a5:24:c2:cc:a1:e0:20:c1:53:8e:d6:02:81:09: e8:c0:ef:4a:ed:d7:02:16:08:12:19:12:61:36:47: 63:5f:2b:40:48:00:bf:97:c4:49:a8:88:69:9a:b7: 77:10:64:60:dd:3e:c4:12:93:fd:9a:aa:7e:a5:79: 92:32:12:c7:ba:e1:90:f1:70:c7:a0:4a:b9:f2:81: 6a:06:09:03:2f:66:f6:f8:73:f5:23:96:c9:3f:45: e4:2a:d5:92:85:f6:f8:b9:97:8f:0c:79:99:ed:82: bd:82:f6:cc:fd:a3:6f:80:0d:0b:14:4e:bd:d9:b4: f3:29:32:0f:f3:21:e4:a1:43:b8:c4:ff:f9:8e:fe: 70:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2C:F2:BD:46:32:A3:69:B9:37:2A:5F:50:BE:D9:76:D9:BA:D0:47 X509v3 Authority Key Identifier: keyid:CB:B7:26:3D:8D:6A:72:E7:B7:2A:26:C4:38:CC:67:C6:6A:19:45:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7cmPY1qcue3KibEOMxnxmoZRVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/120a06-bce2-4928-bf78-afec9e6d33fd/1/y7cmPY1qcue3KibEOMxnxmoZRVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/120a06-bce2-4928-bf78-afec9e6d33fd/1/y7cmPY1qcue3KibEOMxnxmoZRVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:b8:05:d0:4d:ae:d8:af:86:ce:9f:a9:1a:38:2b:66:80:e0: 99:e4:54:a2:2e:e5:04:8c:eb:36:26:16:e2:33:32:86:10:17: 2d:b6:b9:f5:7c:7e:66:fa:7e:9b:02:4a:af:d5:4a:ba:df:63: 02:39:d9:83:30:8a:66:06:fa:ca:0e:9c:6d:0c:ad:b8:9c:e3: 84:09:9e:c2:ee:6b:d8:d7:07:3c:6b:b1:86:92:eb:d4:5e:c1: 5c:f1:e1:06:73:96:e3:c5:68:5a:ac:1c:1a:ba:98:3d:02:ec: 3a:e9:92:cf:61:5b:9f:c1:6f:09:cb:40:e7:fe:30:2d:63:7f: bb:5a:78:d1:63:ea:b6:35:75:f6:46:4b:7d:9c:26:9f:95:b8: e4:18:94:2f:ee:8a:1f:64:75:14:d2:a5:3a:c2:4f:28:a6:d1: cb:2e:7a:27:2a:b5:d7:b8:69:06:4f:b8:fd:56:5b:cf:db:4b: 4e:9d:01:e3:86:d7:81:21:0d:e4:38:ed:57:27:f2:89:17:b5: 19:ef:88:da:a9:39:0c:2f:95:7a:92:d3:9f:57:31:e5:e8:6e: cb:0f:17:48:61:0b:57:dd:74:0c:7d:57:b3:70:a6:17:14:d0: 04:c7:9e:f8:2f:79:66:87:b9:f6:a8:ef:fb:c3:a9:9d:dd:38: e5:fc:fd:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWUpbf55Y5fnkmzMO0YBjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYjcyNjNkOGQ2YTcyZTdiNzJhMjZjNDM4Y2M2N2M2NmEx OTQ1NTIwHhcNMjYwMjA5MTcwMDUxWhcNMjYwMjEwMTcwMDUxWjAzMTEwLwYDVQQD EyhlNDJjZjJiZDQ2MzJhMzY5YjkzNzJhNWY1MGJlZDk3NmQ5YmFkMDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+b89rKnfeaMjjvNHbWBK85K5xy8 FaND7qPI78WuvkD7rn4SdPAhrx1TYs2PlVoEOis0X3qt1n+vLdE7Uv5en9yhUCBB jRN3Dyg144W4cCRxTntvEVXDTid+1BiUbJj3DKRrtmsVs6weIy0by304HoGz2IF1 dZH3pSTCzKHgIMFTjtYCgQnowO9K7dcCFggSGRJhNkdjXytASAC/l8RJqIhpmrd3 EGRg3T7EEpP9mqp+pXmSMhLHuuGQ8XDHoEq58oFqBgkDL2b2+HP1I5bJP0XkKtWS hfb4uZePDHmZ7YK9gvbM/aNvgA0LFE692bTzKTIP8yHkoUO4xP/5jv5wDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQs8r1GMqNpuTcqX1C+2XbZutBHMB8GA1UdIwQY MBaAFMu3Jj2NanLntyomxDjMZ8ZqGUVSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTdjbVBZMXFjdWUzS2liRU9NeG54bW9aUlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xMjBhMDYtYmNlMi00OTI4LWJmNzgt YWZlYzllNmQzM2ZkLzEveTdjbVBZMXFjdWUzS2liRU9NeG54bW9aUlZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xMjBhMDYtYmNlMi00OTI4LWJmNzgtYWZlYzllNmQzM2Zk LzEveTdjbVBZMXFjdWUzS2liRU9NeG54bW9aUlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALgF0E2u 2K+Gzp+pGjgrZoDgmeRUoi7lBIzrNiYW4jMyhhAXLba59Xx+Zvp+mwJKr9VKut9j AjnZgzCKZgb6yg6cbQytuJzjhAmewu5r2NcHPGuxhpLr1F7BXPHhBnOW48VoWqwc GrqYPQLsOumSz2Fbn8FvCctA5/4wLWN/u1p40WPqtjV19kZLfZwmn5W45BiUL+6K H2R1FNKlOsJPKKbRyy56Jyq117hpBk+4/VZbz9tLTp0B44bXgSEN5DjtVyfyiRe1 Ge+I2qk5DC+VepLTn1cx5ehuyw8XSGELV910DH1Xs3CmFxTQBMee+C95Zoe59qjv +8Opnd045fz98A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:10 2026 by rpki-client