This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft File: y92Il7O48S4yaeHZHBXqtLNHkHA.mft (raw, json) Hash identifier: Y3ovVEuyxDQ8iHUeFVdiwgQVD/qKsF6Rg1IU2XjNxBs= Subject key identifier: 80:48:05:D1:60:A7:A2:7C:82:46:0E:C8:CE:D2:60:B4:8D:13:8D:94 Authority key identifier: CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70 Certificate issuer: /CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070 Certificate serial: 019C42EB838F6446630527ED09EC463CC268 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft Manifest number: 0F15 Signing time: Mon 09 Feb 2026 15:00:56 +0000 Manifest this update: Mon 09 Feb 2026 15:00:56 +0000 Manifest next update: Tue 10 Feb 2026 15:00:56 +0000 Files and hashes: 1: y92Il7O48S4yaeHZHBXqtLNHkHA.crl (hash: PDr1FSQSUxCd/phg+JnT0EVxYSN9foIy/CCWxbWryhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:83:8f:64:46:63:05:27:ed:09:ec:46:3c:c2:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070 Validity Not Before: Feb 9 15:00:56 2026 GMT Not After : Feb 10 15:00:56 2026 GMT Subject: CN=804805d160a7a27c82460ec8ced260b48d138d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f9:13:0c:2b:c3:4b:17:a4:00:54:50:d4:23: 54:c8:1a:aa:1a:6c:a4:6e:ff:53:a7:ae:3b:7a:78: 3e:90:0f:47:da:60:80:8d:54:a3:40:16:b7:68:5a: 3e:ef:c0:8f:f6:53:5c:a8:aa:e6:9a:60:5f:6b:df: 24:15:69:93:57:d0:d2:8d:7c:4e:cd:8b:27:d5:b5: 02:6f:e2:64:f2:8d:fa:52:e8:a7:0e:25:dc:17:b0: 50:36:cd:9b:0c:4e:c8:d9:dd:8b:74:cd:2a:1a:38: 56:87:76:19:f9:2f:ee:83:d9:c5:d1:5b:87:ec:1d: 25:40:48:00:2b:a7:fd:38:4a:c4:b8:e5:48:75:fc: 86:04:cd:28:4f:7d:cd:36:c5:44:54:40:c0:1a:f7: 33:f1:43:82:e1:47:4d:a1:5c:a5:72:0d:81:a1:30: d5:b5:3d:c1:50:77:57:32:5c:f9:88:69:95:b3:f0: 2b:4c:55:e8:f6:bd:49:b2:d0:b4:7e:e1:68:ea:46: e0:c8:27:1d:f4:fc:91:18:52:74:37:2d:0f:94:88: f2:e4:85:b9:cb:60:cd:18:02:de:ee:71:57:53:fe: 56:0a:1d:c6:91:a4:e7:81:48:79:d5:9c:0f:57:39: 71:d2:28:30:3d:ad:b4:e7:ca:ce:ed:b9:3e:a7:fc: 9f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:48:05:D1:60:A7:A2:7C:82:46:0E:C8:CE:D2:60:B4:8D:13:8D:94 X509v3 Authority Key Identifier: keyid:CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:4f:4b:a9:d3:55:c3:66:3d:e0:f4:11:75:32:0e:35:4d:74: 2e:74:99:ff:fb:72:90:93:21:9a:61:ab:aa:74:9d:b1:54:27: 44:db:89:99:b0:9c:34:82:1f:3f:06:c9:2d:cb:41:ad:ff:27: 18:ad:34:b5:05:d7:25:58:1c:1b:3c:60:e1:27:c3:de:4b:37: 00:bb:86:01:d9:5b:e0:2a:9c:fb:2a:2d:0b:9e:43:e0:90:5f: 71:ac:3c:89:67:b1:44:c2:44:0e:13:6c:bf:d5:d4:af:f9:19: 61:a7:e1:8b:fc:45:6f:b4:11:85:d3:1b:3c:7f:b0:a1:62:bd: f1:bc:ae:00:b5:ee:d9:03:8f:31:e6:fe:8f:00:c3:54:0b:14: 6c:7b:e3:07:29:c8:d1:77:34:d9:77:5b:88:a0:9f:11:a8:f5: b9:84:f8:a5:92:76:22:e7:49:b7:b8:5b:77:61:04:f9:74:f5: d0:11:64:7b:08:75:f4:49:23:ef:0c:7c:4b:f6:26:cf:1e:ff: db:bb:25:8f:26:a5:cd:f1:74:54:4e:e9:5f:60:d6:b1:9f:92: 9a:84:91:4d:81:86:81:d6:e5:c9:50:28:1b:98:76:a3:7e:39: ab:8e:de:24:f4:99:19:3b:f7:a1:3b:08:2f:22:23:a8:82:14: 7f:4c:96:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC64OPZEZjBSftCexGPMJoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZGQ4ODk3YjNiOGYxMmUzMjY5ZTFkOTFjMTVlYWI0YjM0 NzkwNzAwHhcNMjYwMjA5MTUwMDU2WhcNMjYwMjEwMTUwMDU2WjAzMTEwLwYDVQQD Eyg4MDQ4MDVkMTYwYTdhMjdjODI0NjBlYzhjZWQyNjBiNDhkMTM4ZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/kTDCvDSxekAFRQ1CNUyBqqGmyk bv9Tp647eng+kA9H2mCAjVSjQBa3aFo+78CP9lNcqKrmmmBfa98kFWmTV9DSjXxO zYsn1bUCb+Jk8o36UuinDiXcF7BQNs2bDE7I2d2LdM0qGjhWh3YZ+S/ug9nF0VuH 7B0lQEgAK6f9OErEuOVIdfyGBM0oT33NNsVEVEDAGvcz8UOC4UdNoVylcg2BoTDV tT3BUHdXMlz5iGmVs/ArTFXo9r1JstC0fuFo6kbgyCcd9PyRGFJ0Ny0PlIjy5IW5 y2DNGALe7nFXU/5WCh3GkaTngUh51ZwPVzlx0igwPa2058rO7bk+p/yfpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBIBdFgp6J8gkYOyM7SYLSNE42UMB8GA1UdIwQY MBaAFMvdiJezuPEuMmnh2RwV6rSzR5BwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTkySWw3TzQ4UzR5YWVIWkhCWHF0TE5Ia0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9mNTc1NzEtOTgwZi00YzU3LWE0Y2Yt NmNiNDg0OWNmZDcxLzEveTkySWw3TzQ4UzR5YWVIWkhCWHF0TE5Ia0hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9mNTc1NzEtOTgwZi00YzU3LWE0Y2YtNmNiNDg0OWNmZDcx LzEveTkySWw3TzQ4UzR5YWVIWkhCWHF0TE5Ia0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp09LqdNV w2Y94PQRdTIONU10LnSZ//tykJMhmmGrqnSdsVQnRNuJmbCcNIIfPwbJLctBrf8n GK00tQXXJVgcGzxg4SfD3ks3ALuGAdlb4Cqc+yotC55D4JBfcaw8iWexRMJEDhNs v9XUr/kZYafhi/xFb7QRhdMbPH+woWK98byuALXu2QOPMeb+jwDDVAsUbHvjBynI 0Xc02XdbiKCfEaj1uYT4pZJ2IudJt7hbd2EE+XT10BFkewh19Ekj7wx8S/Ymzx7/ 27sljyalzfF0VE7pX2DWsZ+SmoSRTYGGgdblyVAoG5h2o345q47eJPSZGTv3oTsI LyIjqIIUf0yWKA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:53 2026 by rpki-client