This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft File: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft (raw, json) Hash identifier: TvtTyAVsW0k46U9QrlpCLHUTEyMeFsAj2u0/VzpWQ6o= Subject key identifier: BC:60:54:8A:55:46:B7:77:48:FD:86:2B:4E:60:5F:5F:61:A0:42:D4 Authority key identifier: CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA Certificate issuer: /CN=cb556ab12990f1871a9e1ee743969aa8a2799fca Certificate serial: 019C413422886C5055DA8F73402335438A90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft Manifest number: 1771 Signing time: Mon 09 Feb 2026 07:01:01 +0000 Manifest this update: Mon 09 Feb 2026 07:01:01 +0000 Manifest next update: Tue 10 Feb 2026 07:01:01 +0000 Files and hashes: 1: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl (hash: fj07tJzQIURVu+1oneepRI7EF6hIkqN1mDuZ1gdgu6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:22:88:6c:50:55:da:8f:73:40:23:35:43:8a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb556ab12990f1871a9e1ee743969aa8a2799fca Validity Not Before: Feb 9 07:01:01 2026 GMT Not After : Feb 10 07:01:01 2026 GMT Subject: CN=bc60548a5546b77748fd862b4e605f5f61a042d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:01:b7:e4:18:c3:08:49:18:6b:25:ad:5f:62: 80:f6:2e:94:4d:ea:a7:3b:96:26:3d:53:70:41:c5: 46:0b:a6:d3:20:65:72:20:35:ab:ec:0c:f1:87:8c: 65:95:cb:9b:a4:28:34:c7:a7:ba:ec:8b:25:ae:fd: 7f:66:3d:41:f0:d6:64:ff:c2:97:0a:f3:c0:3f:80: fe:bb:7c:a9:cc:e4:f0:93:50:e6:97:66:8d:f9:e3: 41:55:4c:6a:8d:72:8c:14:71:e1:25:43:7e:25:2b: a9:50:9d:f2:eb:5f:dc:5a:e2:04:64:f5:21:9a:67: c3:b6:75:64:ee:4a:56:97:4e:5c:af:3d:1d:37:1c: 9e:72:6f:74:4f:4d:7f:ab:dd:93:34:1a:d6:ea:20: 5a:dc:b3:94:de:ad:3e:fc:83:af:22:df:4e:a0:85: f8:8e:82:18:ee:13:86:26:de:21:db:ef:e7:e2:75: 79:3b:17:16:68:59:c5:39:f4:53:f7:dc:d9:ef:b6: bc:c9:9f:bb:8b:35:79:6a:38:5b:f5:00:aa:51:3a: 46:60:72:40:8b:d3:ef:ae:3a:00:5e:08:c2:7c:2a: a8:74:b7:85:51:0c:7e:e4:4e:47:e3:3b:05:50:dd: f1:d8:ae:a5:a8:46:50:56:18:49:38:99:3e:35:4a: 7b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:60:54:8A:55:46:B7:77:48:FD:86:2B:4E:60:5F:5F:61:A0:42:D4 X509v3 Authority Key Identifier: keyid:CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9c:f3:fa:ca:31:9a:3d:02:cf:ce:c6:7b:97:03:95:bd:9b: 99:c7:d8:75:49:42:18:67:82:fc:b9:c0:83:26:7b:69:31:db: f7:15:36:3e:19:ac:a8:fe:f0:12:32:82:87:4b:82:bb:11:1a: a9:26:f5:62:4f:0f:59:cd:9d:6b:ad:9e:99:d2:91:32:dc:dc: b3:80:ca:24:35:09:54:f0:e0:f8:7c:f5:be:8e:cc:f5:eb:ec: ec:0d:64:bf:f2:ef:2a:31:29:25:9f:2d:d2:c1:51:ee:2a:78: 09:08:d3:bb:2f:d3:3c:01:15:9d:46:d7:9f:d6:f3:e4:b4:04: 47:22:8f:42:72:fa:f8:0f:a0:13:8a:bb:ed:eb:ff:88:07:9c: db:56:f0:47:fd:9e:96:7e:fa:0e:05:99:2b:63:f9:84:bf:6d: 19:1b:7f:f6:b2:62:2b:47:e3:e6:27:8a:8d:ad:36:68:f7:aa: 24:b0:4b:cf:d8:c2:60:6f:40:6a:1f:57:85:e7:83:6c:95:fb: a8:d7:82:db:3f:c1:d7:eb:09:24:cc:9d:15:e4:6d:7f:b2:03: c1:64:2c:fe:0c:61:64:28:99:e3:97:0c:72:3f:a3:64:97:1b: 38:b9:16:5c:19:79:26:d5:84:f4:87:4d:d6:77:ef:5c:0e:94: 26:0c:00:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNCKIbFBV2o9zQCM1Q4qQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNTU2YWIxMjk5MGYxODcxYTllMWVlNzQzOTY5YWE4YTI3 OTlmY2EwHhcNMjYwMjA5MDcwMTAxWhcNMjYwMjEwMDcwMTAxWjAzMTEwLwYDVQQD EyhiYzYwNTQ4YTU1NDZiNzc3NDhmZDg2MmI0ZTYwNWY1ZjYxYTA0MmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigG35BjDCEkYayWtX2KA9i6UTeqn O5YmPVNwQcVGC6bTIGVyIDWr7Azxh4xllcubpCg0x6e67Islrv1/Zj1B8NZk/8KX CvPAP4D+u3ypzOTwk1Dml2aN+eNBVUxqjXKMFHHhJUN+JSupUJ3y61/cWuIEZPUh mmfDtnVk7kpWl05crz0dNxyecm90T01/q92TNBrW6iBa3LOU3q0+/IOvIt9OoIX4 joIY7hOGJt4h2+/n4nV5OxcWaFnFOfRT99zZ77a8yZ+7izV5ajhb9QCqUTpGYHJA i9PvrjoAXgjCfCqodLeFUQx+5E5H4zsFUN3x2K6lqEZQVhhJOJk+NUp7dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxgVIpVRrd3SP2GK05gX19hoELUMB8GA1UdIwQY MBaAFMtVarEpkPGHGp4e50OWmqiieZ/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTFWcXNTbVE4WWNhbmg3blE1YWFxS0o1bjhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iOTY4NmUtNjU4MC00NTBkLTljMjIt OWM1ODE1OTFlYzkxLzEveTFWcXNTbVE4WWNhbmg3blE1YWFxS0o1bjhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iOTY4NmUtNjU4MC00NTBkLTljMjItOWM1ODE1OTFlYzkx LzEveTFWcXNTbVE4WWNhbmg3blE1YWFxS0o1bjhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpzz+sox mj0Cz87Ge5cDlb2bmcfYdUlCGGeC/LnAgyZ7aTHb9xU2PhmsqP7wEjKCh0uCuxEa qSb1Yk8PWc2da62emdKRMtzcs4DKJDUJVPDg+Hz1vo7M9evs7A1kv/LvKjEpJZ8t 0sFR7ip4CQjTuy/TPAEVnUbXn9bz5LQERyKPQnL6+A+gE4q77ev/iAec21bwR/2e ln76DgWZK2P5hL9tGRt/9rJiK0fj5ieKja02aPeqJLBLz9jCYG9Aah9XheeDbJX7 qNeC2z/B1+sJJMydFeRtf7IDwWQs/gxhZCiZ45cMcj+jZJcbOLkWXBl5JtWE9IdN 1nfvXA6UJgwAWA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:16 2026 by rpki-client