This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft File: y_FtyaS1vU0MQnioXAhVkwIL6jE.mft (raw, json) Hash identifier: +8l1qciZo9rqFZtgmztunalzs+8P+6IKmIiZSe4zcVw= Subject key identifier: 88:E4:99:93:0A:B6:B0:A3:BC:EB:1E:31:21:09:B1:DD:3F:49:B2:B3 Authority key identifier: CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31 Certificate issuer: /CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31 Certificate serial: 019C420F6BD61750B5042617CCBFED7E05E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft Manifest number: 14A2 Signing time: Mon 09 Feb 2026 11:00:32 +0000 Manifest this update: Mon 09 Feb 2026 11:00:32 +0000 Manifest next update: Tue 10 Feb 2026 11:00:32 +0000 Files and hashes: 1: GlWizv2ImorDlJ5qdqf22l6axV0.roa (hash: FPuxge79aWSqPlsBlXbn55Kr6pHUqkAHkE0a0KRPnXI=) 2: y_FtyaS1vU0MQnioXAhVkwIL6jE.crl (hash: iQ/bIrYmoEjazOm96/7HGTeNzvcAyak8jJPwnJNMMsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:6b:d6:17:50:b5:04:26:17:cc:bf:ed:7e:05:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31 Validity Not Before: Feb 9 11:00:32 2026 GMT Not After : Feb 10 11:00:32 2026 GMT Subject: CN=88e499930ab6b0a3bceb1e312109b1dd3f49b2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cd:e2:f4:58:3e:ba:b2:c7:73:35:ce:3a:ec: 42:b8:9f:31:6b:b5:3e:85:2c:55:a1:69:2e:9f:89: a4:30:ed:46:a7:ca:ae:cb:22:db:8a:a4:51:a1:2f: 6f:51:81:fa:d8:e2:cc:1a:c4:34:a8:29:f3:81:37: 8b:81:38:06:b2:83:1b:92:e2:b8:c4:04:97:fb:8e: 81:a3:75:23:c1:af:c9:12:4b:80:40:84:4d:07:e2: 8b:c4:4b:f6:3d:94:78:b7:34:03:24:d3:e3:00:1a: 86:64:27:d7:27:65:27:97:29:ab:fe:d6:b1:8d:cc: fb:5c:d6:18:41:7c:cc:72:47:83:8b:71:26:8b:96: 10:59:7f:9b:08:49:c1:f2:b7:8d:95:31:4c:3e:83: a7:9c:bc:27:3a:a0:2a:cf:41:09:22:d9:fc:37:7e: e9:74:e0:cd:3a:14:ef:6e:e3:8e:9b:03:c3:c7:7a: 64:01:fe:8e:d0:99:43:79:4d:d7:9f:2c:14:10:55: 8b:27:85:f0:cc:91:72:c9:92:c8:bb:6c:64:7d:e4: 9f:32:97:46:6e:83:50:14:5d:1c:a1:b8:22:8f:52: 78:7f:06:ec:a7:46:d3:7b:a9:0f:0c:fd:55:5e:95: e1:22:ec:f2:13:77:32:ed:d7:80:33:50:fd:86:a3: 16:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E4:99:93:0A:B6:B0:A3:BC:EB:1E:31:21:09:B1:DD:3F:49:B2:B3 X509v3 Authority Key Identifier: keyid:CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:31:47:7b:92:cb:ad:a2:30:42:e2:7d:f6:63:f4:10:91:7a: 1d:39:73:a0:66:b1:42:9a:90:37:13:3d:b5:73:cc:da:2d:57: 1b:29:0b:4e:b6:49:73:c6:b2:2f:2f:27:dd:b3:50:24:ee:b8: 1e:88:38:5f:21:f1:04:9d:9a:9a:a2:9f:6e:87:30:72:2c:39: cb:9e:e6:5b:ea:56:da:b3:ce:18:20:50:d9:b1:a3:0f:5b:6a: a6:b4:ce:95:c0:55:92:92:95:44:01:6f:66:99:7a:c6:2f:ab: a3:4a:db:59:0c:bb:a2:2e:fe:0f:b9:ee:d0:db:23:70:af:ea: 3e:65:bb:c6:e6:4b:47:09:76:fd:f1:b4:31:75:7c:01:c8:a9: fe:ac:91:91:08:29:99:4b:b1:87:bb:7a:92:a9:ad:22:73:ca: ba:bd:71:2c:7c:57:00:56:bc:7a:7d:80:10:58:94:10:03:f9: 48:35:0f:7f:d5:81:82:5e:46:17:49:0a:6d:ba:04:c0:06:a2: 12:ee:a7:0d:9b:b3:96:21:93:dd:07:4f:fb:30:d0:4d:0a:d6: 79:eb:58:a0:ff:4d:5a:04:a0:93:58:0f:5b:9f:90:3a:4d:8d: 70:ad:0e:9f:82:f0:6a:98:bd:68:a2:cc:01:87:45:c5:da:ec: 33:95:b2:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD2vWF1C1BCYXzL/tfgXmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZjE2ZGM5YTRiNWJkNGQwYzQyNzhhODVjMDg1NTkzMDIw YmVhMzEwHhcNMjYwMjA5MTEwMDMyWhcNMjYwMjEwMTEwMDMyWjAzMTEwLwYDVQQD Eyg4OGU0OTk5MzBhYjZiMGEzYmNlYjFlMzEyMTA5YjFkZDNmNDliMmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc3i9Fg+urLHczXOOuxCuJ8xa7U+ hSxVoWkun4mkMO1Gp8quyyLbiqRRoS9vUYH62OLMGsQ0qCnzgTeLgTgGsoMbkuK4 xASX+46Bo3Ujwa/JEkuAQIRNB+KLxEv2PZR4tzQDJNPjABqGZCfXJ2Unlymr/tax jcz7XNYYQXzMckeDi3Emi5YQWX+bCEnB8reNlTFMPoOnnLwnOqAqz0EJItn8N37p dODNOhTvbuOOmwPDx3pkAf6O0JlDeU3XnywUEFWLJ4XwzJFyyZLIu2xkfeSfMpdG boNQFF0cobgij1J4fwbsp0bTe6kPDP1VXpXhIuzyE3cy7deAM1D9hqMWnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjkmZMKtrCjvOseMSEJsd0/SbKzMB8GA1UdIwQY MBaAFMvxbcmktb1NDEJ4qFwIVZMCC+oxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8wNzQ4YmItZTdlMi00MjY4LWI3OWMt OGU2NTI5NDBhMDlkLzEveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8wNzQ4YmItZTdlMi00MjY4LWI3OWMtOGU2NTI5NDBhMDlk LzEveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTFHe5LL raIwQuJ99mP0EJF6HTlzoGaxQpqQNxM9tXPM2i1XGykLTrZJc8ayLy8n3bNQJO64 Hog4XyHxBJ2amqKfbocwciw5y57mW+pW2rPOGCBQ2bGjD1tqprTOlcBVkpKVRAFv Zpl6xi+ro0rbWQy7oi7+D7nu0NsjcK/qPmW7xuZLRwl2/fG0MXV8Acip/qyRkQgp mUuxh7t6kqmtInPKur1xLHxXAFa8en2AEFiUEAP5SDUPf9WBgl5GF0kKbboEwAai Eu6nDZuzliGT3QdP+zDQTQrWeetYoP9NWgSgk1gPW5+QOk2NcK0On4Lwapi9aKLM AYdFxdrsM5WyMw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:47 2026 by rpki-client