This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json) Hash identifier: UIjHu3OHlH1sJvS/VNPqsQQhiBNwHMJ5ka+dWV9v7fY= Subject key identifier: DA:C9:BB:12:63:AE:DA:6E:30:51:DC:08:E0:C9:14:D2:02:DD:2C:2E Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e Certificate serial: 019C4434ED43CC0EB1373BF9CA27A1F60708 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft Manifest number: 0949 Signing time: Mon 09 Feb 2026 21:00:45 +0000 Manifest this update: Mon 09 Feb 2026 21:00:45 +0000 Manifest next update: Tue 10 Feb 2026 21:00:45 +0000 Files and hashes: 1: aZ3Yoe0ZQdIXylk1FrtEwAkUD8k.roa (hash: q1ah2hweQU+cFtZrhhXan7MxnsmHv01bYbCdDje0NNY=) 2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: heLqFjtmoyrg2r1LiPbxyMm6jeNYXEA4329KYzVlFEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:ed:43:cc:0e:b1:37:3b:f9:ca:27:a1:f6:07:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e Validity Not Before: Feb 9 21:00:45 2026 GMT Not After : Feb 10 21:00:45 2026 GMT Subject: CN=dac9bb1263aeda6e3051dc08e0c914d202dd2c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:34:4f:7c:e8:b9:d3:7b:f2:5c:f1:90:ad:63: 9c:6e:07:bd:4a:f8:cd:e5:1a:20:5f:db:75:8c:e7: 65:d6:7a:2c:4b:2e:37:f2:b3:5e:44:da:35:03:a0: 2d:7c:fb:c1:a8:83:c8:dd:46:93:18:9e:66:de:7e: ff:01:1f:7b:2d:6a:56:de:f9:06:0f:68:47:60:43: 4c:c2:37:af:3e:87:a6:01:7a:6e:12:85:eb:c6:ff: 88:0c:f7:a3:d9:c1:75:1a:fc:94:f9:1f:1c:b0:51: 84:49:7b:b2:d2:cf:f6:d0:9e:70:d7:08:a0:dc:f6: 0b:6b:3d:64:13:76:31:4c:a9:70:40:55:66:13:6f: ec:c2:6e:e6:bd:d2:e4:ae:fd:56:bb:dc:54:56:9a: 41:ac:93:a1:79:5e:e3:b8:59:36:bc:cf:35:1c:6d: f4:3b:9a:72:dd:39:ab:be:9d:fc:ea:14:b9:74:e2: ab:e5:0f:41:9d:13:3f:2b:44:a2:ef:fd:92:c4:c7: c4:32:17:8d:3a:ca:cd:1c:0f:2b:bd:cd:f9:c7:07: 9f:b0:89:a5:16:ee:19:d6:b5:47:df:31:6b:47:f4: 4a:10:2c:43:96:a9:d4:c3:41:09:ba:fa:ef:71:37: 47:a3:b4:f9:e8:c6:2f:c1:7a:1c:b5:46:aa:ef:f3: 44:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C9:BB:12:63:AE:DA:6E:30:51:DC:08:E0:C9:14:D2:02:DD:2C:2E X509v3 Authority Key Identifier: keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:9d:81:18:aa:ff:47:3e:4c:6b:cd:5b:3b:f0:fe:05:36:bf: 4e:af:40:3d:6a:03:63:8c:6d:39:a8:22:2b:e7:75:e7:07:de: 5b:8b:aa:c4:dd:02:43:58:d8:c0:b7:38:78:69:50:c4:e9:59: 20:5e:5b:47:a4:5e:ac:fe:90:fb:66:0c:b5:09:e8:9b:2d:8a: cf:59:8e:ca:51:dc:7c:5a:9b:61:79:3d:80:2a:4f:82:26:56: b2:c2:60:d0:14:f1:93:c3:73:86:e0:d0:17:d1:13:6e:c5:e1: 93:d4:34:1d:5a:25:5d:35:c5:73:11:ec:71:92:1c:6a:d2:2d: 93:1d:ce:69:df:de:32:95:fa:d7:b4:a2:5c:ec:8b:a8:bb:d3: 5a:79:56:a5:ac:fd:58:94:4d:c6:4a:63:28:5e:ca:eb:89:05: 20:eb:f0:3b:9a:d5:69:29:ca:d8:95:b5:6f:d7:1d:8f:a1:ec: fc:68:df:c4:f1:27:42:3c:cb:76:f3:ef:33:d5:2f:fd:7e:28: 4e:a5:cb:1b:89:60:eb:84:7a:be:7e:d3:55:83:1f:50:d1:8d: df:0e:0c:2f:c7:ab:a5:fc:39:b9:cb:e4:51:42:68:74:fa:ce: 68:1c:aa:75:11:f5:00:39:4b:73:97:cc:38:58:98:ef:31:e3: 25:5d:30:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENO1DzA6xNzv5yieh9gcIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNDI0YjQwYzFmODQwODRmOGQ0MGYyYjlkY2JlMWUxZjkx NmFmM2UwHhcNMjYwMjA5MjEwMDQ1WhcNMjYwMjEwMjEwMDQ1WjAzMTEwLwYDVQQD EyhkYWM5YmIxMjYzYWVkYTZlMzA1MWRjMDhlMGM5MTRkMjAyZGQyYzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzRPfOi503vyXPGQrWOcbge9SvjN 5RogX9t1jOdl1nosSy438rNeRNo1A6AtfPvBqIPI3UaTGJ5m3n7/AR97LWpW3vkG D2hHYENMwjevPoemAXpuEoXrxv+IDPej2cF1GvyU+R8csFGESXuy0s/20J5w1wig 3PYLaz1kE3YxTKlwQFVmE2/swm7mvdLkrv1Wu9xUVppBrJOheV7juFk2vM81HG30 O5py3Tmrvp386hS5dOKr5Q9BnRM/K0Si7/2SxMfEMheNOsrNHA8rvc35xwefsIml Fu4Z1rVH3zFrR/RKECxDlqnUw0EJuvrvcTdHo7T56MYvwXoctUaq7/NEewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrJuxJjrtpuMFHcCODJFNIC3SwuMB8GA1UdIwQY MBaAFMtCS0DB+ECE+NQPK53L4eH5Fq8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTBKTFFNSDRRSVQ0MUE4cm5jdmg0ZmtXcno0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS81MWJmZDktN2ZmYi00MTU5LTllZDUt M2E1ZmVjYWNkNDlhLzEveTBKTFFNSDRRSVQ0MUE4cm5jdmg0ZmtXcno0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS81MWJmZDktN2ZmYi00MTU5LTllZDUtM2E1ZmVjYWNkNDlh LzEveTBKTFFNSDRRSVQ0MUE4cm5jdmg0ZmtXcno0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZ2BGKr/ Rz5Ma81bO/D+BTa/Tq9APWoDY4xtOagiK+d15wfeW4uqxN0CQ1jYwLc4eGlQxOlZ IF5bR6RerP6Q+2YMtQnomy2Kz1mOylHcfFqbYXk9gCpPgiZWssJg0BTxk8NzhuDQ F9ETbsXhk9Q0HVolXTXFcxHscZIcatItkx3Oad/eMpX617SiXOyLqLvTWnlWpaz9 WJRNxkpjKF7K64kFIOvwO5rVaSnK2JW1b9cdj6Hs/GjfxPEnQjzLdvPvM9Uv/X4o TqXLG4lg64R6vn7TVYMfUNGN3w4ML8erpfw5ucvkUUJodPrOaByqdRH1ADlLc5fM OFiY7zHjJV0wfA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:44 2026 by rpki-client