This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft File: y5idLhUgGyDjQIjdHARVslRE-Pw.mft (raw, json) Hash identifier: BudiQQVGLrnO3vJJ8sE4lF2OaZbok4w6nf7XvCQZY6A= Subject key identifier: AF:11:BB:28:A0:4B:19:28:A9:BD:77:FE:1C:82:BF:C5:81:8C:C9:0F Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc Certificate serial: 019C43C709D3F58893CD49939B8B77BB12AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft Manifest number: 0E4A Signing time: Mon 09 Feb 2026 19:00:43 +0000 Manifest this update: Mon 09 Feb 2026 19:00:43 +0000 Manifest next update: Tue 10 Feb 2026 19:00:43 +0000 Files and hashes: 1: H7NifDoSU6PPqAYGiGzy4_-XfNw.roa (hash: sk5Lex95/S0IAQQhow818tnsCZwdWLab0EALvw3QhYw=) 2: y5idLhUgGyDjQIjdHARVslRE-Pw.crl (hash: V73BVflVt0rM/97Pi0hkadPNVAorV9Qku4i/O80upHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:09:d3:f5:88:93:cd:49:93:9b:8b:77:bb:12:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc Validity Not Before: Feb 9 19:00:43 2026 GMT Not After : Feb 10 19:00:43 2026 GMT Subject: CN=af11bb28a04b1928a9bd77fe1c82bfc5818cc90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fa:2e:48:6c:ac:cf:12:24:57:81:d4:73:e3: 2d:76:63:55:04:ae:eb:37:4a:44:88:e0:a0:28:de: 95:7f:58:0a:e3:a2:d8:a7:9a:e6:a3:0e:b3:5e:44: ef:44:5f:a9:21:44:6a:7e:92:40:1b:01:71:18:b3: 54:40:35:c4:a2:2e:42:43:2c:f2:41:3b:05:d9:29: 63:11:be:a3:84:b2:03:2a:e5:cc:b0:83:b8:20:51: ac:53:b3:36:6f:68:39:41:b3:10:3e:7b:95:6a:dd: f9:b2:4c:b3:f4:2d:2d:4a:88:5d:2f:10:e7:b7:09: 36:1f:0f:6f:42:a3:4f:63:a3:87:11:b4:36:41:43: 56:a1:81:95:86:c1:36:6a:6b:e4:26:c7:e2:4b:51: da:25:c5:4f:1a:85:f4:af:6a:9e:86:77:d8:19:28: 7d:40:3c:7d:fc:8a:e1:c8:07:23:5a:a6:cf:24:2a: 8a:ee:49:fd:93:36:db:f5:9a:f8:e8:0b:85:21:08: 44:a7:fb:69:9c:eb:61:21:a2:e5:92:ab:c4:54:94: 05:fe:d6:8f:d5:e4:bd:d4:46:21:0f:be:f2:1f:7c: 54:be:96:17:8c:d5:88:96:96:31:e8:54:ed:52:07: 27:ec:c7:24:b4:fe:66:b6:6d:31:d6:50:da:d7:88: 9d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:11:BB:28:A0:4B:19:28:A9:BD:77:FE:1C:82:BF:C5:81:8C:C9:0F X509v3 Authority Key Identifier: keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:36:b0:f3:b9:af:87:03:26:74:aa:0f:19:24:92:30:42:f6: c3:b9:ab:24:b9:98:16:cc:ee:64:91:72:98:dc:cb:11:2c:c3: fe:97:3d:ef:e4:89:21:f1:90:6d:14:e3:8f:9d:2d:53:49:a4: 99:43:66:f3:4b:bc:52:c3:1e:31:64:c4:e0:6b:b5:05:46:ae: de:e5:42:3a:fd:64:fe:78:52:69:8d:98:46:da:98:8d:36:19: e4:37:15:1e:e3:f7:9a:67:51:75:25:f0:88:8b:94:98:8c:d2: 71:e2:b8:08:f7:ea:74:8a:09:c3:67:66:27:e4:bb:ef:67:0d: e4:5d:6b:7c:bf:07:44:85:31:db:6e:bf:7c:5a:79:63:1e:75: ac:56:fe:80:fb:33:fa:ad:7a:8d:69:40:63:4d:de:8e:6b:cb: b3:52:e0:0a:cc:04:33:bc:5a:37:99:eb:4d:9d:7e:cb:42:cc: 8b:a0:5e:4c:65:b8:f4:84:ab:96:2d:fd:5e:85:26:c8:7c:d2: 4a:41:b2:72:75:dc:55:87:38:24:7c:6d:98:89:28:fc:e8:ba: 3f:f7:d5:7a:5c:5d:e1:9a:64:f0:97:d0:fd:e0:89:1f:88:44: c3:fe:49:85:32:fe:1f:5e:10:7a:68:1d:21:21:77:b1:3d:19: 57:59:94:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxwnT9YiTzUmTm4t3uxKvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOTg5ZDJlMTUyMDFiMjBlMzQwODhkZDFjMDQ1NWIyNTQ0 NGY4ZmMwHhcNMjYwMjA5MTkwMDQzWhcNMjYwMjEwMTkwMDQzWjAzMTEwLwYDVQQD EyhhZjExYmIyOGEwNGIxOTI4YTliZDc3ZmUxYzgyYmZjNTgxOGNjOTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvouSGyszxIkV4HUc+MtdmNVBK7r N0pEiOCgKN6Vf1gK46LYp5rmow6zXkTvRF+pIURqfpJAGwFxGLNUQDXEoi5CQyzy QTsF2SljEb6jhLIDKuXMsIO4IFGsU7M2b2g5QbMQPnuVat35skyz9C0tSohdLxDn twk2Hw9vQqNPY6OHEbQ2QUNWoYGVhsE2amvkJsfiS1HaJcVPGoX0r2qehnfYGSh9 QDx9/IrhyAcjWqbPJCqK7kn9kzbb9Zr46AuFIQhEp/tpnOthIaLlkqvEVJQF/taP 1eS91EYhD77yH3xUvpYXjNWIlpYx6FTtUgcn7McktP5mtm0x1lDa14idfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8RuyigSxkoqb13/hyCv8WBjMkPMB8GA1UdIwQY MBaAFMuYnS4VIBsg40CI3RwEVbJURPj8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTVpZExoVWdHeURqUUlqZEhBUlZzbFJFLVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iZTU2ZDQtOGRlNi00NGEyLTk2OTEt MzY5MjYzNDQzMDI1LzEveTVpZExoVWdHeURqUUlqZEhBUlZzbFJFLVB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9iZTU2ZDQtOGRlNi00NGEyLTk2OTEtMzY5MjYzNDQzMDI1 LzEveTVpZExoVWdHeURqUUlqZEhBUlZzbFJFLVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzaw87mv hwMmdKoPGSSSMEL2w7mrJLmYFszuZJFymNzLESzD/pc97+SJIfGQbRTjj50tU0mk mUNm80u8UsMeMWTE4Gu1BUau3uVCOv1k/nhSaY2YRtqYjTYZ5DcVHuP3mmdRdSXw iIuUmIzSceK4CPfqdIoJw2dmJ+S772cN5F1rfL8HRIUx226/fFp5Yx51rFb+gPsz +q16jWlAY03ejmvLs1LgCswEM7xaN5nrTZ1+y0LMi6BeTGW49ISrli39XoUmyHzS SkGycnXcVYc4JHxtmIko/Oi6P/fVelxd4Zpk8JfQ/eCJH4hEw/5JhTL+H14Qemgd ISF3sT0ZV1mUEQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:37 2026 by rpki-client