This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft File: y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft (raw, json) Hash identifier: 06xiiqqiIWnX7QlhdPOKKXkz+JDHxaURh0KD3kqbG3o= Subject key identifier: D5:8A:04:25:F3:83:9A:55:29:D5:AD:B0:96:77:75:5E:5A:49:8E:B7 Authority key identifier: CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C Certificate issuer: /CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c Certificate serial: 019C41A2625D83B3C9B5254017AD388641B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft Manifest number: 01A9 Signing time: Mon 09 Feb 2026 09:01:26 +0000 Manifest this update: Mon 09 Feb 2026 09:01:26 +0000 Manifest next update: Tue 10 Feb 2026 09:01:26 +0000 Files and hashes: 1: y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl (hash: e88Yr6yPz0UXITFyQIHIuUrUx5wAS+wajH1ZpsxHwTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:62:5d:83:b3:c9:b5:25:40:17:ad:38:86:41:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c Validity Not Before: Feb 9 09:01:26 2026 GMT Not After : Feb 10 09:01:26 2026 GMT Subject: CN=d58a0425f3839a5529d5adb09677755e5a498eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:aa:e4:ca:db:f3:a8:98:ba:c6:4a:78:ca:2e: a3:37:ec:05:ff:be:5b:25:fd:8e:ff:8b:ee:0a:29: 72:04:93:10:b4:b6:68:16:aa:e9:45:fe:a5:ec:7a: b4:bf:43:ae:be:ca:69:23:96:ef:75:a2:b8:d9:fa: 45:1f:87:4d:46:2d:85:d0:fc:02:65:24:8d:e6:4d: dd:00:9f:1c:e0:fd:01:df:ff:40:a2:2c:47:9c:b2: c6:ff:c2:b2:45:c3:a2:1e:84:9d:23:5b:97:87:30: d5:79:25:84:13:aa:a7:18:e7:e1:3c:e3:fb:b4:ff: fb:a7:27:fd:d1:ff:2f:e4:30:ee:b9:8c:e1:35:96: 06:62:26:13:d7:44:96:96:d3:31:76:49:b2:4d:33: 56:98:3d:7a:62:95:ab:28:8f:95:a8:21:70:cb:02: 9a:15:91:5e:39:4b:be:8c:49:e4:6e:59:cf:a3:4c: 39:09:cc:ee:53:32:9a:28:6b:d2:57:e5:9e:ac:d1: b9:e5:e8:b9:25:e8:0e:d5:2d:32:02:14:87:01:51: 0a:f0:1d:7a:0d:d9:48:17:77:43:83:8f:d6:91:3d: 0f:89:9e:c8:5d:56:2d:8b:30:4e:05:f4:b0:24:36: cd:c4:20:b9:2b:f4:77:f8:ac:f7:df:2f:2f:95:4c: 01:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8A:04:25:F3:83:9A:55:29:D5:AD:B0:96:77:75:5E:5A:49:8E:B7 X509v3 Authority Key Identifier: keyid:CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b5:1b:ae:02:fe:90:b4:a2:ab:c7:4b:f0:23:aa:e3:7f:38: 22:cb:34:8d:36:de:f7:2a:5b:15:09:98:c4:5f:d3:86:ff:e3: 5d:60:06:1c:0a:80:99:01:45:c3:b9:32:7d:08:e1:9f:54:86: 85:d6:46:c2:96:ff:32:68:f3:13:b3:47:aa:3f:6b:f8:bb:9f: 21:74:fb:24:2b:ab:1f:7f:e7:a1:b2:ba:75:0d:00:a4:ff:92: 8e:43:03:d2:f1:22:3f:81:48:11:db:0d:ad:29:a3:ec:06:a9: 17:67:41:38:ab:10:23:4b:1d:24:c4:87:a9:8e:8a:b5:a2:51: 73:77:29:ea:f6:60:0f:68:cf:68:5b:d6:ca:21:d3:11:76:10: 49:79:94:57:96:ef:17:aa:01:ac:ea:01:a1:d6:c2:e5:31:2b: 72:1b:5c:b9:e1:e3:ab:f0:66:86:76:4e:e9:f0:81:91:08:63: 93:33:ef:73:48:86:6d:bc:ec:e2:a5:dc:47:d0:54:b2:c0:1c: e2:44:eb:52:61:6f:64:7a:18:2c:d5:1b:d0:e0:61:1c:57:29: db:fe:ed:6f:59:96:77:d5:cd:19:a0:74:85:6e:e7:94:9e:e4: c8:14:b0:1c:69:4c:e0:7f:9b:94:53:a4:76:95:2b:e2:33:ca: e9:45:9e:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBomJdg7PJtSVAF604hkG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYzhjMDY0NmViNmNiZjI2OThiYjBhNzYwNTAzYmNkYjkx ZjFhNWMwHhcNMjYwMjA5MDkwMTI2WhcNMjYwMjEwMDkwMTI2WjAzMTEwLwYDVQQD EyhkNThhMDQyNWYzODM5YTU1MjlkNWFkYjA5Njc3NzU1ZTVhNDk4ZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArarkytvzqJi6xkp4yi6jN+wF/75b Jf2O/4vuCilyBJMQtLZoFqrpRf6l7Hq0v0OuvsppI5bvdaK42fpFH4dNRi2F0PwC ZSSN5k3dAJ8c4P0B3/9AoixHnLLG/8KyRcOiHoSdI1uXhzDVeSWEE6qnGOfhPOP7 tP/7pyf90f8v5DDuuYzhNZYGYiYT10SWltMxdkmyTTNWmD16YpWrKI+VqCFwywKa FZFeOUu+jEnkblnPo0w5CczuUzKaKGvSV+WerNG55ei5JegO1S0yAhSHAVEK8B16 DdlIF3dDg4/WkT0PiZ7IXVYtizBOBfSwJDbNxCC5K/R3+Kz33y8vlUwBXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWKBCXzg5pVKdWtsJZ3dV5aSY63MB8GA1UdIwQY MBaAFMvIwGRutsvyaYuwp2BQO825HxpcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveThqQVpHNjJ5X0pwaTdDbllGQTd6YmtmR2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zN2Q5M2UtZjVkYS00ZWNmLWE3YTgt OTA4ZThiMjc4NTUyLzEveThqQVpHNjJ5X0pwaTdDbllGQTd6YmtmR2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8zN2Q5M2UtZjVkYS00ZWNmLWE3YTgtOTA4ZThiMjc4NTUy LzEveThqQVpHNjJ5X0pwaTdDbllGQTd6YmtmR2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbUbrgL+ kLSiq8dL8COq4384Iss0jTbe9ypbFQmYxF/Thv/jXWAGHAqAmQFFw7kyfQjhn1SG hdZGwpb/MmjzE7NHqj9r+LufIXT7JCurH3/nobK6dQ0ApP+SjkMD0vEiP4FIEdsN rSmj7AapF2dBOKsQI0sdJMSHqY6KtaJRc3cp6vZgD2jPaFvWyiHTEXYQSXmUV5bv F6oBrOoBodbC5TErchtcueHjq/BmhnZO6fCBkQhjkzPvc0iGbbzs4qXcR9BUssAc 4kTrUmFvZHoYLNUb0OBhHFcp2/7tb1mWd9XNGaB0hW7nlJ7kyBSwHGlM4H+blFOk dpUr4jPK6UWeSw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:48:00 2026 by rpki-client