This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft File: yLbqU9hyUXDrX0KqUN241gXFOB8.mft (raw, json) Hash identifier: BG4os8ZHKZrS0EEl6HpzzchEkHDjdq2cW423JNLBiJo= Subject key identifier: 1B:A9:96:BB:DA:24:4E:79:0E:D3:BF:EF:73:24:79:9A:19:B3:B1:84 Authority key identifier: C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F Certificate issuer: /CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f Certificate serial: 019C4246B7DFD50D7847B25A4E69716C72E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft Manifest number: 0285 Signing time: Mon 09 Feb 2026 12:00:56 +0000 Manifest this update: Mon 09 Feb 2026 12:00:56 +0000 Manifest next update: Tue 10 Feb 2026 12:00:56 +0000 Files and hashes: 1: 0KsnzuH-A_zXm2XLJt2nHb0im0Y.roa (hash: Ja/jRY18A5eip3z5tPS25Gs+cDPzHWqAalXTdxK4240=) 2: yLbqU9hyUXDrX0KqUN241gXFOB8.crl (hash: CpzNsVQbPtPEpmBkZOvAa4xMFURdROm6FqYWGRNMBSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:b7:df:d5:0d:78:47:b2:5a:4e:69:71:6c:72:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f Validity Not Before: Feb 9 12:00:56 2026 GMT Not After : Feb 10 12:00:56 2026 GMT Subject: CN=1ba996bbda244e790ed3bfef7324799a19b3b184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:be:c7:8c:d5:16:13:32:df:dc:f7:e9:45:16: ea:fc:1e:c1:d1:11:9b:f6:4e:ff:f9:e9:af:51:e1: c3:f1:29:c8:9d:5e:1b:6e:6c:6f:47:81:9c:81:8c: 7b:3e:21:41:92:e6:23:fc:8b:eb:a7:ae:8a:0d:0f: 30:8a:f9:a4:87:76:da:79:39:c0:a4:7c:7b:8f:1b: 5d:bb:24:f4:81:b1:55:9b:72:3c:d4:50:2e:f3:d1: ee:c2:9f:6c:22:14:fe:75:07:3a:bc:f6:16:39:a9: 65:21:3a:08:16:01:c6:5f:3f:0d:05:00:d5:71:15: 57:f0:29:45:14:8b:26:c7:b6:66:76:a2:06:ce:76: 58:04:81:44:e7:0d:59:13:ac:6f:b5:c1:f2:2e:b4: b8:94:67:64:95:b4:86:e5:34:70:1e:87:72:ff:ec: 26:16:e6:50:0d:49:2c:c6:87:b0:b2:db:eb:f3:86: a4:55:87:48:4a:da:0b:8d:83:80:de:8e:f3:b5:29: f1:83:fa:ee:0e:ac:21:38:58:8c:95:9f:a6:12:48: 9b:c9:67:56:03:51:76:6e:04:f0:d8:76:de:7c:1e: 9b:0a:1f:16:c0:f6:a1:10:d3:75:16:c5:d1:fd:03: 9f:ca:1a:35:bd:4f:7d:59:f1:17:55:c1:18:49:12: cb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A9:96:BB:DA:24:4E:79:0E:D3:BF:EF:73:24:79:9A:19:B3:B1:84 X509v3 Authority Key Identifier: keyid:C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:17:e2:fc:20:0c:d5:bb:67:13:60:8b:bc:78:ce:4b:82:85: 88:db:68:8e:12:3f:e3:ee:92:c8:12:01:38:c3:64:8a:da:3b: 00:11:b1:2a:54:f3:8b:da:d7:d0:8f:05:b8:58:d3:77:30:d1: 1e:b8:7f:98:61:2e:94:d0:71:4c:43:c0:ab:45:66:66:cb:84: f6:c1:0c:77:83:b1:4f:f3:44:8e:c1:b2:61:1a:d8:e7:a0:23: c3:65:4b:8b:ff:15:91:16:89:2a:da:ef:df:a5:3c:5c:e9:bf: 15:f3:7b:5c:60:41:8c:a6:89:4f:44:d4:2a:31:0e:35:83:fb: ca:46:87:87:35:d1:ce:e6:82:3d:84:67:61:e4:d4:f3:48:ad: 89:62:9d:df:9c:73:00:e9:00:4d:15:f2:45:88:7a:a5:bc:ef: 24:a5:a8:c1:27:18:69:c2:f6:b1:33:6f:dc:c6:22:42:23:e1: c8:97:31:ab:4b:12:db:24:27:de:1a:98:79:3d:3f:51:f4:ee: f2:ca:3c:5c:4e:3b:57:09:90:98:b5:bc:fd:e3:70:88:d1:4f: 70:43:f2:c4:c3:2d:e3:dc:ae:0a:00:ae:05:b0:5d:f0:dd:8d: 6f:df:76:90:11:ae:f3:2b:50:ce:02:f9:5f:ef:5e:44:08:4b: 82:d5:0a:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRrff1Q14R7JaTmlxbHLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YjZlYTUzZDg3MjUxNzBlYjVmNDJhYTUwZGRiOGQ2MDVj NTM4MWYwHhcNMjYwMjA5MTIwMDU2WhcNMjYwMjEwMTIwMDU2WjAzMTEwLwYDVQQD EygxYmE5OTZiYmRhMjQ0ZTc5MGVkM2JmZWY3MzI0Nzk5YTE5YjNiMTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r7HjNUWEzLf3PfpRRbq/B7B0RGb 9k7/+emvUeHD8SnInV4bbmxvR4GcgYx7PiFBkuYj/Ivrp66KDQ8wivmkh3baeTnA pHx7jxtduyT0gbFVm3I81FAu89Huwp9sIhT+dQc6vPYWOallIToIFgHGXz8NBQDV cRVX8ClFFIsmx7ZmdqIGznZYBIFE5w1ZE6xvtcHyLrS4lGdklbSG5TRwHody/+wm FuZQDUksxoewstvr84akVYdIStoLjYOA3o7ztSnxg/ruDqwhOFiMlZ+mEkibyWdW A1F2bgTw2HbefB6bCh8WwPahENN1FsXR/QOfyho1vU99WfEXVcEYSRLLcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuplrvaJE55DtO/73MkeZoZs7GEMB8GA1UdIwQY MBaAFMi26lPYclFw619CqlDduNYFxTgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUxicVU5aHlVWERyWDBLcVVOMjQxZ1hGT0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOWJiMWYtZTNkMC00YjA2LWFlNjgt OTM5YWMzZmU0Yjg5LzEveUxicVU5aHlVWERyWDBLcVVOMjQxZ1hGT0I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mOWJiMWYtZTNkMC00YjA2LWFlNjgtOTM5YWMzZmU0Yjg5 LzEveUxicVU5aHlVWERyWDBLcVVOMjQxZ1hGT0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyBfi/CAM 1btnE2CLvHjOS4KFiNtojhI/4+6SyBIBOMNkito7ABGxKlTzi9rX0I8FuFjTdzDR Hrh/mGEulNBxTEPAq0VmZsuE9sEMd4OxT/NEjsGyYRrY56Ajw2VLi/8VkRaJKtrv 36U8XOm/FfN7XGBBjKaJT0TUKjEONYP7ykaHhzXRzuaCPYRnYeTU80itiWKd35xz AOkATRXyRYh6pbzvJKWowScYacL2sTNv3MYiQiPhyJcxq0sS2yQn3hqYeT0/UfTu 8so8XE47VwmQmLW8/eNwiNFPcEPyxMMt49yuCgCuBbBd8N2Nb992kBGu8ytQzgL5 X+9eRAhLgtUKWw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:49 2026 by rpki-client