This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft File: y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft (raw, json) Hash identifier: zi7U62J2+ddFDlldV+cH6Py+spiag9x4chVBisQQPKw= Subject key identifier: D5:45:4E:4B:9D:A4:5F:BE:F0:42:76:1C:D9:6E:6F:33:7D:A1:14:DC Authority key identifier: CB:9A:1C:B8:0F:B6:37:32:E5:30:04:7A:1E:C5:52:9F:8C:8B:1A:06 Certificate issuer: /CN=cb9a1cb80fb63732e530047a1ec5529f8c8b1a06 Certificate serial: 019C41A1FE1899E6E2D9BCD42874E76E970F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5ocuA-2NzLlMAR6HsVSn4yLGgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft Manifest number: 0527 Signing time: Mon 09 Feb 2026 09:01:01 +0000 Manifest this update: Mon 09 Feb 2026 09:01:01 +0000 Manifest next update: Tue 10 Feb 2026 09:01:01 +0000 Files and hashes: 1: y5ocuA-2NzLlMAR6HsVSn4yLGgY.crl (hash: e9jpMCAyu8uTGNmQaNwA92V0DjzCIOo2U3BzGYOueY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft rsync://rpki.ripe.net/repository/DEFAULT/y5ocuA-2NzLlMAR6HsVSn4yLGgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:fe:18:99:e6:e2:d9:bc:d4:28:74:e7:6e:97:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb9a1cb80fb63732e530047a1ec5529f8c8b1a06 Validity Not Before: Feb 9 09:01:01 2026 GMT Not After : Feb 10 09:01:01 2026 GMT Subject: CN=d5454e4b9da45fbef042761cd96e6f337da114dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:01:51:4e:cb:bd:fb:50:bb:d3:1f:ea:57:9c: 0b:23:24:35:5a:8e:3c:a6:6c:39:e1:55:62:98:59: 06:b4:2a:44:01:35:24:93:e9:8e:b9:c6:a4:e7:d1: 42:e9:41:73:ec:ce:f6:85:25:ba:77:12:70:41:e9: 0d:73:5d:18:12:12:5f:bb:d4:b6:93:1a:ba:93:e1: 1a:98:17:0b:4d:87:8a:80:b6:fe:30:96:d4:57:11: c3:33:1f:eb:c6:fa:a4:62:33:63:a4:82:04:ec:ef: 27:04:4f:4c:9d:5b:c1:f3:ca:7f:49:e2:b4:03:58: af:73:1e:8f:21:41:ea:4a:22:3d:a3:8b:88:f1:c7: b1:1e:42:42:6a:43:92:61:43:43:97:32:32:be:f3: 61:b4:9d:62:1d:b6:8c:53:c8:74:3a:34:14:f9:87: 21:b5:63:96:99:22:28:2f:25:f6:47:c2:23:d2:5d: f7:03:72:9a:b4:de:0f:8b:42:22:2a:62:f0:06:07: 40:99:f4:65:f3:84:49:f6:8c:61:78:7c:fd:4a:46: 54:65:a0:84:e0:4f:93:ac:9a:2c:ca:a5:31:7e:03: 7c:ca:78:59:35:55:48:f9:3f:4f:a1:c5:f3:7c:0d: 9f:63:8c:b5:17:bf:d2:22:cf:cb:8d:7b:5b:3e:17: f6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:45:4E:4B:9D:A4:5F:BE:F0:42:76:1C:D9:6E:6F:33:7D:A1:14:DC X509v3 Authority Key Identifier: keyid:CB:9A:1C:B8:0F:B6:37:32:E5:30:04:7A:1E:C5:52:9F:8C:8B:1A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5ocuA-2NzLlMAR6HsVSn4yLGgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:44:d1:40:37:43:93:45:91:80:1f:01:26:a8:f9:32:c0:0e: 24:4c:ff:f6:9a:39:69:42:41:23:8f:d9:99:01:fd:ba:eb:1a: b7:5f:3b:47:c5:da:71:bf:da:3f:38:f9:31:65:2b:59:fc:be: 2d:54:4f:4e:1c:6f:36:fa:ce:f6:e1:16:e8:61:27:15:fa:e7: 01:9e:60:7b:5e:43:c6:64:f0:04:cd:9f:ae:51:f7:83:74:43: a4:d0:b9:91:56:84:7d:f6:fa:6d:c9:fa:52:ee:77:a2:b7:86: 53:18:b6:8b:4c:55:cf:16:dd:1d:02:e0:2c:24:b7:63:df:f2: 9b:f6:61:70:f0:bb:3c:1f:24:30:f9:ec:63:51:16:8f:1b:12: 56:50:d7:fe:99:37:eb:80:87:64:c8:96:c1:e3:04:e8:8e:d7: 06:d2:38:e4:a1:85:f6:a7:36:94:17:a1:f2:8c:a0:79:bd:6d: c3:33:63:f9:e3:a1:df:a3:11:f7:f4:4f:7d:ed:60:65:04:a0: 8a:a7:01:44:9f:34:e9:cb:e0:d2:81:55:88:27:0a:f3:8a:2f: 42:9d:77:56:80:e0:0e:7b:87:3a:9d:ab:3f:79:78:99:11:3d: 9a:61:2e:4b:d7:01:f4:3d:58:2d:31:85:97:0b:ce:f2:67:79: 31:01:65:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBof4Ymebi2bzUKHTnbpcPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOWExY2I4MGZiNjM3MzJlNTMwMDQ3YTFlYzU1MjlmOGM4 YjFhMDYwHhcNMjYwMjA5MDkwMTAxWhcNMjYwMjEwMDkwMTAxWjAzMTEwLwYDVQQD EyhkNTQ1NGU0YjlkYTQ1ZmJlZjA0Mjc2MWNkOTZlNmYzMzdkYTExNGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wFRTsu9+1C70x/qV5wLIyQ1Wo48 pmw54VVimFkGtCpEATUkk+mOucak59FC6UFz7M72hSW6dxJwQekNc10YEhJfu9S2 kxq6k+EamBcLTYeKgLb+MJbUVxHDMx/rxvqkYjNjpIIE7O8nBE9MnVvB88p/SeK0 A1ivcx6PIUHqSiI9o4uI8cexHkJCakOSYUNDlzIyvvNhtJ1iHbaMU8h0OjQU+Ych tWOWmSIoLyX2R8Ij0l33A3KatN4Pi0IiKmLwBgdAmfRl84RJ9oxheHz9SkZUZaCE 4E+TrJosyqUxfgN8ynhZNVVI+T9PocXzfA2fY4y1F7/SIs/LjXtbPhf2XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVFTkudpF++8EJ2HNlubzN9oRTcMB8GA1UdIwQY MBaAFMuaHLgPtjcy5TAEeh7FUp+MixoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTVvY3VBLTJOekxsTUFSNkhzVlNuNHlMR2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wNWJiNDMtNGFlOC00YjZkLWI0NmMt MTEzZWRlM2FmZjc5LzEveTVvY3VBLTJOekxsTUFSNkhzVlNuNHlMR2dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8wNWJiNDMtNGFlOC00YjZkLWI0NmMtMTEzZWRlM2FmZjc5 LzEveTVvY3VBLTJOekxsTUFSNkhzVlNuNHlMR2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0TRQDdD k0WRgB8BJqj5MsAOJEz/9po5aUJBI4/ZmQH9uusat187R8Xacb/aPzj5MWUrWfy+ LVRPThxvNvrO9uEW6GEnFfrnAZ5ge15DxmTwBM2frlH3g3RDpNC5kVaEffb6bcn6 Uu53oreGUxi2i0xVzxbdHQLgLCS3Y9/ym/ZhcPC7PB8kMPnsY1EWjxsSVlDX/pk3 64CHZMiWweME6I7XBtI45KGF9qc2lBeh8oygeb1twzNj+eOh36MR9/RPfe1gZQSg iqcBRJ806cvg0oFViCcK84ovQp13VoDgDnuHOp2rP3l4mRE9mmEuS9cB9D1YLTGF lwvO8md5MQFlzg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:38 2026 by rpki-client