This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft File: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft (raw, json) Hash identifier: sS1UMK/mYbNL0lW3d8pT+W5bOYHvFY8tY08dGiBFIV0= Subject key identifier: D1:14:C4:55:E7:97:6D:CB:33:4E:35:57:86:04:46:53:98:87:56:8F Authority key identifier: FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96 Certificate issuer: /CN=fb280c05b76912a09cb12934db33c8e520acdd96 Certificate serial: 019C43229E4C3D5A1CA6A96AAA7B48EB8690 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft Manifest number: 0B3F Signing time: Mon 09 Feb 2026 16:01:07 +0000 Manifest this update: Mon 09 Feb 2026 16:01:07 +0000 Manifest next update: Tue 10 Feb 2026 16:01:07 +0000 Files and hashes: 1: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl (hash: gbspCHEcbUgpnqyFq21G7XMOrELcPKHwxaSUq70FyJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:9e:4c:3d:5a:1c:a6:a9:6a:aa:7b:48:eb:86:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb280c05b76912a09cb12934db33c8e520acdd96 Validity Not Before: Feb 9 16:01:07 2026 GMT Not After : Feb 10 16:01:07 2026 GMT Subject: CN=d114c455e7976dcb334e3557860446539887568f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:a5:39:54:8b:5f:4f:77:06:6d:86:4b:e5: 1a:cb:84:e8:9b:83:24:21:fd:82:b5:79:a2:94:e6: 2e:f8:b1:58:5a:02:0d:e0:c0:2b:b9:54:7e:e5:91: 3c:25:7e:37:38:56:33:5a:d3:69:b6:9d:22:91:28: d4:0e:4a:f3:fc:23:76:50:79:c3:79:e4:ad:dc:e9: 07:2d:5d:f5:58:35:e1:34:3e:0a:30:94:8d:2f:ee: 1d:aa:c7:f1:b9:af:7d:68:4f:43:4b:87:14:31:f4: a1:c8:59:3a:11:54:bb:1e:25:c1:05:b4:c4:14:1b: d0:8f:13:57:3f:ec:b0:54:a9:a7:29:9c:38:cd:35: 36:9e:6b:ec:fe:70:57:6f:43:c7:ee:37:07:86:91: c1:d9:18:a4:87:92:98:81:8a:b3:c2:44:0c:bd:21: bf:83:d0:d5:a3:03:dc:e8:9b:f2:fa:58:cc:e7:ec: 77:f1:79:7f:d7:d5:9b:81:9f:70:79:93:5e:5e:ba: 16:f1:0d:f2:54:48:ea:a8:18:19:fa:0b:91:02:0c: 38:d4:94:2e:88:2e:a6:85:51:3f:2e:c4:24:88:0c: bb:d2:5c:f3:0a:57:9a:75:ad:af:dc:20:92:2c:dc: d0:8e:4a:96:39:66:4e:67:a6:32:c1:26:01:d7:07: 0a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:14:C4:55:E7:97:6D:CB:33:4E:35:57:86:04:46:53:98:87:56:8F X509v3 Authority Key Identifier: keyid:FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:03:ff:4c:f7:77:64:0b:f7:8d:ad:05:95:9e:72:6e:77:9d: 19:6c:b1:46:c2:2f:f6:dd:32:f1:10:04:b0:73:b3:f2:a1:d6: e5:f6:5f:e5:fd:c1:f9:f8:dd:6c:3d:37:40:3d:66:28:fe:f5: 8e:c5:df:0d:84:9b:b3:af:c1:2c:a9:6c:f9:0f:b8:8d:5b:7e: 44:78:29:6a:15:25:be:ba:59:13:68:93:ac:9f:17:a7:e2:9e: b1:27:8d:99:a5:a3:33:72:52:b2:c5:fc:c9:66:48:de:7f:77: 81:df:31:84:7e:e4:67:75:3f:20:95:55:a4:17:5e:99:70:ae: 92:f5:b4:2d:bb:c1:d5:c5:95:05:36:c9:c0:9d:93:db:a9:de: c9:fa:7c:a8:2b:d1:31:af:06:ec:00:88:3c:b4:1e:96:6b:ad: 3f:ff:56:c0:6f:45:7b:1c:6c:4b:bc:e2:c8:c5:82:f0:37:5d: d6:8f:d6:3f:30:13:63:28:60:b3:1b:aa:ee:00:20:f2:77:55: 96:a4:14:d3:37:34:a9:66:6f:16:a6:91:31:59:22:9a:88:cb: 69:7f:b3:94:70:b1:5e:04:76:be:ac:76:c0:26:52:0c:fa:ef: 36:f6:a6:70:0c:4d:bf:ff:c4:4c:bb:72:ba:7f:0b:97:95:3e: 61:25:b7:52 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxDIp5MPVocpqlqqntI64aQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMjgwYzA1Yjc2OTEyYTA5Y2IxMjkzNGRiMzNjOGU1MjBh Y2RkOTYwHhcNMjYwMjA5MTYwMTA3WhcNMjYwMjEwMTYwMTA3WjAzMTEwLwYDVQQD EyhkMTE0YzQ1NWU3OTc2ZGNiMzM0ZTM1NTc4NjA0NDY1Mzk4ODc1NjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJulOVSLX093Bm2GS+Uay4Tom4Mk If2CtXmilOYu+LFYWgIN4MAruVR+5ZE8JX43OFYzWtNptp0ikSjUDkrz/CN2UHnD eeSt3OkHLV31WDXhND4KMJSNL+4dqsfxua99aE9DS4cUMfShyFk6EVS7HiXBBbTE FBvQjxNXP+ywVKmnKZw4zTU2nmvs/nBXb0PH7jcHhpHB2Rikh5KYgYqzwkQMvSG/ g9DVowPc6Jvy+ljM5+x38Xl/19WbgZ9weZNeXroW8Q3yVEjqqBgZ+guRAgw41JQu iC6mhVE/LsQkiAy70lzzCleada2v3CCSLNzQjkqWOWZOZ6YywSYB1wcKSwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNEUxFXnl23LM041V4YERlOYh1aPMB8GA1UdIwQY MBaAFPsoDAW3aRKgnLEpNNszyOUgrN2WMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS15Z01CYmRwRXFDY3NTazAyelBJNVNDczNaWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvZjQ4Nzg0LWY1ODktNGFiNi1iZTI2 LTI1ZDJmZGJlYTdkMi8xLzEteWdNQmJkcEVxQ2NzU2swMnpQSTVTQ3MzWlkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JiL2Y0ODc4NC1mNTg5LTRhYjYtYmUyNi0yNWQyZmRiZWE3 ZDIvMS8xLXlnTUJiZHBFcUNjc1NrMDJ6UEk1U0NzM1pZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwP/ TPd3ZAv3ja0FlZ5ybnedGWyxRsIv9t0y8RAEsHOz8qHW5fZf5f3B+fjdbD03QD1m KP71jsXfDYSbs6/BLKls+Q+4jVt+RHgpahUlvrpZE2iTrJ8Xp+KesSeNmaWjM3JS ssX8yWZI3n93gd8xhH7kZ3U/IJVVpBdemXCukvW0LbvB1cWVBTbJwJ2T26neyfp8 qCvRMa8G7ACIPLQelmutP/9WwG9FexxsS7ziyMWC8Ddd1o/WPzATYyhgsxuq7gAg 8ndVlqQU0zc0qWZvFqaRMVkimojLaX+zlHCxXgR2vqx2wCZSDPrvNvamcAxNv//E TLtyun8Ll5U+YSW3Ug== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:27 2026 by rpki-client