This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft File: yri42pzNTSYbcq2gNKCHVmWmRIc.mft (raw, json) Hash identifier: 31oGh0jFgFEsw0WaEHhBx8WVIgcjwU68Hs/RpDXPhlU= Subject key identifier: 73:9A:27:77:0A:15:18:2B:8A:DB:B3:5F:6F:0F:2F:E9:37:3D:D2:36 Authority key identifier: CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87 Certificate issuer: /CN=cab8b8da9ccd4d261b72ada034a0875665a64487 Certificate serial: 019C43C6B8F1CDDC2F46F680972DB4E8AC6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft Manifest number: 1756 Signing time: Mon 09 Feb 2026 19:00:22 +0000 Manifest this update: Mon 09 Feb 2026 19:00:22 +0000 Manifest next update: Tue 10 Feb 2026 19:00:22 +0000 Files and hashes: 1: mhN_hNZ1j8lwPoNsrGHb44SIv-s.roa (hash: hJkkP4O0XxAi785LCkE7R27Ypx1r454excqvJY+K/QE=) 2: yri42pzNTSYbcq2gNKCHVmWmRIc.crl (hash: VeWSTJgcl7FOBLD+aVr7wzVl9KooyrwwPikIjYntKl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:b8:f1:cd:dc:2f:46:f6:80:97:2d:b4:e8:ac:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cab8b8da9ccd4d261b72ada034a0875665a64487 Validity Not Before: Feb 9 19:00:22 2026 GMT Not After : Feb 10 19:00:22 2026 GMT Subject: CN=739a27770a15182b8adbb35f6f0f2fe9373dd236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:15:a2:52:06:a9:80:77:20:5c:3b:ae:fd:eb: ce:1c:94:49:69:2f:9b:4b:d3:86:2f:23:2b:cc:19: 76:67:5c:dc:69:57:fc:12:2a:49:0a:23:eb:a3:3a: f1:46:be:fb:b1:36:03:7b:c2:f8:4e:a4:ac:9e:45: 63:eb:96:98:2a:d8:37:8c:5f:d2:b4:16:8b:ed:12: 9e:ab:d8:cb:3d:ac:cc:3f:73:24:53:15:c9:b7:14: 2b:06:b7:29:8f:6d:65:25:0b:8f:4c:24:fd:42:b8: 6c:7d:56:95:25:f0:0a:ce:f3:be:de:7a:d8:13:1f: 4b:92:82:53:17:94:3a:24:0b:a8:7d:81:3c:37:21: 77:0e:72:39:52:20:8d:fe:c8:3d:bf:b3:c9:66:16: 78:09:84:50:70:dd:25:26:21:48:a2:3b:0d:1b:6e: ae:07:a1:2f:7d:c8:34:42:bb:b2:eb:17:39:0b:58: 82:26:3f:3b:e9:69:2b:5e:15:c2:aa:16:11:62:03: 81:fe:b3:d1:05:86:c9:c0:59:16:93:59:2a:0c:07: 9c:20:20:36:fc:78:97:65:46:f2:7c:b8:91:b5:d7: b2:23:b5:fa:e3:07:5c:7e:97:3a:80:76:dc:31:d1: 48:ef:12:4a:b5:06:19:56:b3:08:ea:15:f4:70:b4: 52:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9A:27:77:0A:15:18:2B:8A:DB:B3:5F:6F:0F:2F:E9:37:3D:D2:36 X509v3 Authority Key Identifier: keyid:CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:64:56:8f:b5:a3:42:2c:ad:85:0a:53:dd:18:af:22:60:bb: ca:e7:d9:4a:cd:45:8b:8f:65:80:cf:27:1c:97:f4:f2:38:51: 6a:36:f2:a6:1b:1b:8f:0e:6a:fc:d4:9a:36:31:d9:f1:e7:b6: b4:d4:f8:97:68:76:cc:45:27:ac:41:b2:e8:33:03:7d:13:5a: 91:4a:0d:eb:0f:18:71:e5:fa:83:51:95:49:5c:4a:3e:d1:ec: 15:47:8b:15:d1:59:35:d1:cb:4e:d0:e9:d1:3f:4f:6f:15:a3: 3f:49:9a:ab:7f:ba:18:8d:12:cb:26:8d:ca:be:c5:e1:6d:7a: 80:57:78:f4:5c:73:ed:a7:12:1a:fc:39:48:e9:87:60:cf:ec: 9e:28:ea:97:38:60:cc:87:02:98:eb:6a:63:1d:6b:1b:7e:cd: ce:15:b0:c2:bc:d9:d7:e1:7e:a3:a0:6d:f1:ed:3a:43:b1:d5: f4:e4:da:79:d5:37:9e:0c:b8:7f:a3:95:23:9b:74:39:b8:d4: 72:cf:06:fe:46:c6:a0:ac:f6:3c:61:0f:50:5b:cc:46:60:19: cb:2e:1c:f4:86:12:23:d2:13:39:5f:1e:59:c4:69:d2:5c:10: d3:4d:01:f5:aa:4d:3b:32:5e:71:62:53:08:1a:d9:fc:58:7b: ab:44:ba:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxrjxzdwvRvaAly206KxrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYjhiOGRhOWNjZDRkMjYxYjcyYWRhMDM0YTA4NzU2NjVh NjQ0ODcwHhcNMjYwMjA5MTkwMDIyWhcNMjYwMjEwMTkwMDIyWjAzMTEwLwYDVQQD Eyg3MzlhMjc3NzBhMTUxODJiOGFkYmIzNWY2ZjBmMmZlOTM3M2RkMjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhWiUgapgHcgXDuu/evOHJRJaS+b S9OGLyMrzBl2Z1zcaVf8EipJCiProzrxRr77sTYDe8L4TqSsnkVj65aYKtg3jF/S tBaL7RKeq9jLPazMP3MkUxXJtxQrBrcpj21lJQuPTCT9QrhsfVaVJfAKzvO+3nrY Ex9LkoJTF5Q6JAuofYE8NyF3DnI5UiCN/sg9v7PJZhZ4CYRQcN0lJiFIojsNG26u B6Evfcg0Qruy6xc5C1iCJj876WkrXhXCqhYRYgOB/rPRBYbJwFkWk1kqDAecICA2 /HiXZUbyfLiRtdeyI7X64wdcfpc6gHbcMdFI7xJKtQYZVrMI6hX0cLRSvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOaJ3cKFRgrituzX28PL+k3PdI2MB8GA1UdIwQY MBaAFMq4uNqczU0mG3KtoDSgh1ZlpkSHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXJpNDJwek5UU1liY3EyZ05LQ0hWbVdtUkljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9kYjQxYzktZThhMC00ZjkwLWEwZDUt ODg3NTA5YzQ2MDJhLzEveXJpNDJwek5UU1liY3EyZ05LQ0hWbVdtUkljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9kYjQxYzktZThhMC00ZjkwLWEwZDUtODg3NTA5YzQ2MDJh LzEveXJpNDJwek5UU1liY3EyZ05LQ0hWbVdtUkljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu2RWj7Wj QiythQpT3RivImC7yufZSs1Fi49lgM8nHJf08jhRajbyphsbjw5q/NSaNjHZ8ee2 tNT4l2h2zEUnrEGy6DMDfRNakUoN6w8YceX6g1GVSVxKPtHsFUeLFdFZNdHLTtDp 0T9PbxWjP0maq3+6GI0SyyaNyr7F4W16gFd49Fxz7acSGvw5SOmHYM/snijqlzhg zIcCmOtqYx1rG37NzhWwwrzZ1+F+o6Bt8e06Q7HV9OTaedU3ngy4f6OVI5t0ObjU cs8G/kbGoKz2PGEPUFvMRmAZyy4c9IYSI9ITOV8eWcRp0lwQ000B9apNOzJecWJT CBrZ/Fh7q0S6Gg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:50 2026 by rpki-client