This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft File: YmFlv7I92h-YcLJBf0lkhebAinQ.mft (raw, json) Hash identifier: Z9imglt2R4YcfHz53bGQG0Z2l76cGh+/NhbLi+M3LaE= Subject key identifier: 44:68:8C:21:A3:04:B6:44:25:D4:95:E2:83:17:40:4A:2E:D4:1B:F3 Authority key identifier: 62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74 Certificate issuer: /CN=626165bfb23dda1f9870b2417f496485e6c08a74 Certificate serial: 019C43FDC1C30DD91CEA2F961AA30731E640 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft Manifest number: 059F Signing time: Mon 09 Feb 2026 20:00:29 +0000 Manifest this update: Mon 09 Feb 2026 20:00:29 +0000 Manifest next update: Tue 10 Feb 2026 20:00:29 +0000 Files and hashes: 1: 2AHtmhkmAt12Qh4fBCM-56oX8gY.roa (hash: KJViVmT29xLVAZvhSPdG3WsX06P/yToLqg0u7mRQc34=) 2: YmFlv7I92h-YcLJBf0lkhebAinQ.crl (hash: 9runKP25p57/TqyTOvBFK99gdknIX3crigePvX47CB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:c1:c3:0d:d9:1c:ea:2f:96:1a:a3:07:31:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626165bfb23dda1f9870b2417f496485e6c08a74 Validity Not Before: Feb 9 20:00:29 2026 GMT Not After : Feb 10 20:00:29 2026 GMT Subject: CN=44688c21a304b64425d495e28317404a2ed41bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:31:0a:f6:24:d1:51:f0:cd:5a:26:bc:25:f2: c1:2e:a3:f5:6c:3c:fc:9a:47:f9:af:3e:b1:6d:cc: bd:22:a7:ce:3a:9d:e4:b5:d3:89:35:6f:a7:e1:73: bd:f7:e7:5c:4c:a8:55:0d:37:82:36:5a:69:19:4c: 53:d3:de:86:da:bd:45:f3:9f:7c:00:aa:8f:24:fa: 2c:1f:4f:35:ec:53:6a:86:6e:0c:c5:7f:ab:97:9c: 5f:b2:ca:6c:dd:3e:b3:38:e0:42:eb:0f:b1:05:1d: ce:0e:a0:d9:68:de:b4:0e:e2:52:c3:2c:2a:30:2e: 9e:b5:19:6e:1e:4f:85:09:9a:8b:ed:9f:3b:80:4e: 8b:6b:d1:8f:12:b4:18:03:b1:10:e1:b2:5a:ac:7e: 7e:d3:72:d0:0c:3e:58:8a:78:a3:fd:be:e9:3c:dc: 21:84:3c:d9:3e:90:e0:58:74:08:4c:ba:09:de:31: 1e:23:fc:a9:a7:8e:30:b4:c1:be:1a:55:62:ee:1f: 00:58:52:3e:ff:a9:06:c0:78:25:10:e8:61:d6:b1: eb:73:d9:b7:c3:8c:be:08:ff:df:3a:13:26:a8:55: 20:74:9c:17:be:78:de:f1:14:24:2f:0c:79:51:5d: ce:7b:05:b2:de:9c:54:21:1f:29:e8:e5:3d:92:e4: 5c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:68:8C:21:A3:04:B6:44:25:D4:95:E2:83:17:40:4A:2E:D4:1B:F3 X509v3 Authority Key Identifier: keyid:62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:76:3a:19:1a:4c:63:27:dc:af:1b:8f:cb:c6:6c:8d:6c:99: 22:b6:b2:35:ac:86:19:39:97:62:21:c3:66:89:1a:75:a8:df: 3b:24:78:fe:54:4e:b9:95:a4:ad:c3:4f:04:62:24:bd:0e:8b: 82:29:ec:47:7f:5b:7b:a9:ed:bf:1b:11:39:aa:b6:76:14:ff: f2:15:2f:1b:6c:06:3e:ce:23:66:b4:f4:ab:4e:1a:5e:a9:da: b3:9d:7e:a7:2a:df:35:03:ab:dd:8f:4f:a6:77:39:3f:fa:47: a7:38:22:4e:ba:b9:b6:d8:c0:86:44:68:b2:5d:c3:de:53:25: a2:94:b1:1d:ad:e1:5a:59:8c:9e:b8:5b:2f:fd:51:e3:bb:d4: 57:67:68:65:1d:d0:ea:79:12:7d:1f:67:e5:79:9e:2d:48:0d: 42:71:5a:37:d0:93:a6:c0:d5:02:a6:33:23:bf:5d:19:b6:ca: fe:8c:34:a5:23:31:57:44:ba:1b:68:d8:4e:96:c7:ce:9f:75: 52:9e:97:c7:1e:f8:bf:67:55:ac:3f:35:f0:77:4d:a4:87:2d: 3a:8c:2a:bc:67:03:2b:78:2e:36:bb:02:08:74:3a:c2:2e:ea: aa:a2:1a:0b:80:86:35:9e:98:f7:c8:7c:29:5c:95:a0:88:f5: 88:6e:42:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/cHDDdkc6i+WGqMHMeZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNjE2NWJmYjIzZGRhMWY5ODcwYjI0MTdmNDk2NDg1ZTZj MDhhNzQwHhcNMjYwMjA5MjAwMDI5WhcNMjYwMjEwMjAwMDI5WjAzMTEwLwYDVQQD Eyg0NDY4OGMyMWEzMDRiNjQ0MjVkNDk1ZTI4MzE3NDA0YTJlZDQxYmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDEK9iTRUfDNWia8JfLBLqP1bDz8 mkf5rz6xbcy9IqfOOp3ktdOJNW+n4XO99+dcTKhVDTeCNlppGUxT096G2r1F8598 AKqPJPosH0817FNqhm4MxX+rl5xfssps3T6zOOBC6w+xBR3ODqDZaN60DuJSwywq MC6etRluHk+FCZqL7Z87gE6La9GPErQYA7EQ4bJarH5+03LQDD5Yinij/b7pPNwh hDzZPpDgWHQITLoJ3jEeI/ypp44wtMG+GlVi7h8AWFI+/6kGwHglEOhh1rHrc9m3 w4y+CP/fOhMmqFUgdJwXvnje8RQkLwx5UV3OewWy3pxUIR8p6OU9kuRcxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERojCGjBLZEJdSV4oMXQEou1BvzMB8GA1UdIwQY MBaAFGJhZb+yPdofmHCyQX9JZIXmwIp0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83MjEzNWQtZTQ5Ny00NGE2LWI0ZDAt NDYwZmI0YmFjMmRiLzEvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi83MjEzNWQtZTQ5Ny00NGE2LWI0ZDAtNDYwZmI0YmFjMmRi LzEvWW1GbHY3STkyaC1ZY0xKQmYwbGtoZWJBaW5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3Y6GRpM YyfcrxuPy8ZsjWyZIrayNayGGTmXYiHDZokadajfOyR4/lROuZWkrcNPBGIkvQ6L ginsR39be6ntvxsROaq2dhT/8hUvG2wGPs4jZrT0q04aXqnas51+pyrfNQOr3Y9P pnc5P/pHpzgiTrq5ttjAhkRosl3D3lMlopSxHa3hWlmMnrhbL/1R47vUV2doZR3Q 6nkSfR9n5XmeLUgNQnFaN9CTpsDVAqYzI79dGbbK/ow0pSMxV0S6G2jYTpbHzp91 Up6Xxx74v2dVrD818HdNpIctOowqvGcDK3guNrsCCHQ6wi7qqqIaC4CGNZ6Y98h8 KVyVoIj1iG5CqQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:53 2026 by rpki-client