This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft File: ybssFI7w7gD_WiIa8bxhx-GKpLw.mft (raw, json) Hash identifier: MjuJTuggs254Oelzm5TX9MF0Afv+ArhfOBTXZsIoL7s= Subject key identifier: 11:DD:89:7E:AB:E7:E9:8A:36:12:24:CB:DB:F6:E2:9D:4A:5B:87:6A Authority key identifier: C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC Certificate issuer: /CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc Certificate serial: 019C1C4C4EBF8EE245358E0E1C198C7C401D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft Manifest number: 0E Signing time: Mon 02 Feb 2026 03:01:28 +0000 Manifest this update: Mon 02 Feb 2026 03:01:28 +0000 Manifest next update: Tue 03 Feb 2026 03:01:28 +0000 Files and hashes: 1: 2vfd_kX6R8_1pSce-qH7ueF_CFI.asa (hash: gyU2q6SGexsT0na8dPH6q8my1zwHUMQLEgtgSUYyBL0=) 2: ybssFI7w7gD_WiIa8bxhx-GKpLw.crl (hash: PuwWhbt2SxuXivoFP+pRRC+sZuqbwMiI4RnCRjMewUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:4c:4e:bf:8e:e2:45:35:8e:0e:1c:19:8c:7c:40:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc Validity Not Before: Feb 2 03:01:28 2026 GMT Not After : Feb 3 03:01:28 2026 GMT Subject: CN=11dd897eabe7e98a361224cbdbf6e29d4a5b876a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:0e:04:7a:f1:c0:90:83:6e:f0:6e:63:8b: eb:32:08:09:66:1b:96:26:d9:0d:77:6d:ff:c9:d7: bc:b0:e5:c3:54:2d:43:93:f1:61:da:6e:31:3e:3f: 59:9e:2d:c8:92:12:8d:1c:30:8f:34:bd:45:7d:58: ee:c6:4f:ce:5c:8c:4d:07:75:0b:51:33:1c:0c:82: 54:e9:3b:61:64:71:c0:fb:14:e4:e7:23:4c:bd:13: 36:c9:bd:9f:07:6d:89:d5:5b:54:20:30:86:3e:99: b9:86:e4:7c:cb:bc:1b:cb:d6:fa:f7:b2:b8:85:94: 05:5b:b5:c4:62:f2:0a:29:ab:01:9d:17:52:be:e8: 69:af:84:df:90:cd:c7:ac:a0:7f:3e:b7:35:78:d2: fc:c6:c2:3a:f9:7e:e4:59:39:69:e2:ec:f7:76:13: 60:f7:d9:2c:b8:ef:03:6f:f4:d8:71:57:0b:2b:63: 5a:ea:a2:66:d0:16:18:dc:1d:ac:ba:3d:a4:13:69: a2:db:86:8e:d7:42:75:17:d9:4d:d9:e9:01:47:5d: 90:7d:fd:96:95:d6:9b:7a:2d:aa:82:7d:0a:7d:59: 9c:c6:a3:98:28:74:d3:25:1c:3a:9c:16:4b:fe:f4: 00:47:90:3c:c5:fc:dc:b0:b7:0c:c4:82:20:26:12: 6f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DD:89:7E:AB:E7:E9:8A:36:12:24:CB:DB:F6:E2:9D:4A:5B:87:6A X509v3 Authority Key Identifier: keyid:C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c0:75:d3:9c:48:51:06:c6:29:66:bd:61:17:11:82:71:bb: df:bc:01:ac:05:b2:be:84:ba:91:ef:35:0e:34:ce:c9:8f:9f: 35:a2:23:10:1b:d5:5a:8f:83:cb:75:4d:52:a7:db:a7:04:7d: 6f:c5:ed:78:f1:89:c4:e7:db:9e:85:e8:d5:d9:e7:f4:fa:a7: f6:7a:69:d6:59:fb:a9:79:35:d3:d1:5c:7d:40:be:4e:39:9f: f7:51:48:ef:ed:16:62:13:09:d5:35:09:c5:40:48:10:be:0f: c8:03:9d:9a:bb:70:60:d3:88:82:a3:e4:35:42:e2:2c:c5:1b: c2:86:6a:99:2a:3b:99:42:45:3a:e6:10:06:08:fc:e5:4b:2a: 2e:46:ab:b7:2b:47:18:c9:ed:35:1d:b4:27:a3:b8:84:08:9e: 35:d5:01:16:87:e7:a8:8f:aa:0c:b2:38:df:e0:48:de:d6:7d: 2d:fe:23:a5:da:ce:4d:81:68:91:d9:24:d2:15:14:af:f6:c3: 0e:87:22:0d:ba:2e:39:02:88:ec:cd:28:59:f2:68:df:d0:3f: 4c:c0:8c:3b:33:99:5e:36:84:4f:c0:9b:29:e0:e4:8f:dc:34: 73:51:8b:bd:96:c5:db:5e:a6:35:1d:d8:30:64:6e:7d:72:9a: 4b:56:56:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcTE6/juJFNY4OHBmMfEAdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YmIyYzE0OGVmMGVlMDBmZjVhMjIxYWYxYmM2MWM3ZTE4 YWE0YmMwHhcNMjYwMjAyMDMwMTI4WhcNMjYwMjAzMDMwMTI4WjAzMTEwLwYDVQQD EygxMWRkODk3ZWFiZTdlOThhMzYxMjI0Y2JkYmY2ZTI5ZDRhNWI4NzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHEOBHrxwJCDbvBuY4vrMggJZhuW JtkNd23/yde8sOXDVC1Dk/Fh2m4xPj9Zni3IkhKNHDCPNL1FfVjuxk/OXIxNB3UL UTMcDIJU6TthZHHA+xTk5yNMvRM2yb2fB22J1VtUIDCGPpm5huR8y7wby9b697K4 hZQFW7XEYvIKKasBnRdSvuhpr4TfkM3HrKB/Prc1eNL8xsI6+X7kWTlp4uz3dhNg 99ksuO8Db/TYcVcLK2Na6qJm0BYY3B2suj2kE2mi24aO10J1F9lN2ekBR12Qff2W ldabei2qgn0KfVmcxqOYKHTTJRw6nBZL/vQAR5A8xfzcsLcMxIIgJhJvcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHdiX6r5+mKNhIky9v24p1KW4dqMB8GA1UdIwQY MBaAFMm7LBSO8O4A/1oiGvG8YcfhiqS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWJzc0ZJN3c3Z0RfV2lJYThieGh4LUdLcEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zMGM3OTYtOWQyNC00MDVhLTlkNzUt MmVhNzA5OGZlODg1LzEveWJzc0ZJN3c3Z0RfV2lJYThieGh4LUdLcEx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zMGM3OTYtOWQyNC00MDVhLTlkNzUtMmVhNzA5OGZlODg1 LzEveWJzc0ZJN3c3Z0RfV2lJYThieGh4LUdLcEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcB105xI UQbGKWa9YRcRgnG737wBrAWyvoS6ke81DjTOyY+fNaIjEBvVWo+Dy3VNUqfbpwR9 b8XtePGJxOfbnoXo1dnn9Pqn9npp1ln7qXk109FcfUC+Tjmf91FI7+0WYhMJ1TUJ xUBIEL4PyAOdmrtwYNOIgqPkNULiLMUbwoZqmSo7mUJFOuYQBgj85UsqLkartytH GMntNR20J6O4hAieNdUBFofnqI+qDLI43+BI3tZ9Lf4jpdrOTYFokdkk0hUUr/bD DociDbouOQKI7M0oWfJo39A/TMCMOzOZXjaET8CbKeDkj9w0c1GLvZbF216mNR3Y MGRufXKaS1ZWbA== -----END CERTIFICATE-----Generated at Mon Feb 2 08:01:49 2026 by rpki-client