This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft File: yzgoFbJRYTZakWEMva1x9mKG94E.mft (raw, json) Hash identifier: 7sQ7IawHAoFNAfF6FDmhv/wbOVGjCAoS4lHkGwBKpHA= Subject key identifier: 13:54:99:35:7F:6F:15:EB:1F:02:6C:C5:8C:59:AE:DD:66:A7:05:B6 Authority key identifier: CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81 Certificate issuer: /CN=cb382815b25161365a91610cbdad71f66286f781 Certificate serial: 019C420F510CC9EF45B62D04A0BF7F4909F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft Manifest number: 0BFD Signing time: Mon 09 Feb 2026 11:00:25 +0000 Manifest this update: Mon 09 Feb 2026 11:00:25 +0000 Manifest next update: Tue 10 Feb 2026 11:00:25 +0000 Files and hashes: 1: QaQXyt1JUOdGAiMPwz_506zawSw.roa (hash: E1jcvO//eEWdMES9KtTK7xOBQZ3PG7iMEerQv3LjsUk=) 2: yzgoFbJRYTZakWEMva1x9mKG94E.crl (hash: fJt4HdVzLIiK/CZkbtZn4u5llV1+6QPiJyhX1v6+STg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:51:0c:c9:ef:45:b6:2d:04:a0:bf:7f:49:09:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb382815b25161365a91610cbdad71f66286f781 Validity Not Before: Feb 9 11:00:25 2026 GMT Not After : Feb 10 11:00:25 2026 GMT Subject: CN=135499357f6f15eb1f026cc58c59aedd66a705b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ab:f1:7e:f0:77:d9:1a:7e:79:0f:0f:fb:0f: d6:14:35:36:53:98:d3:7b:df:8b:d3:84:3d:7b:f0: 9c:09:1d:e2:b8:4c:ac:6e:8a:ff:c6:ed:68:13:90: 76:2a:6c:ab:e9:2a:dc:ec:6b:ce:8f:65:cb:c1:9e: 52:6b:51:9d:5d:fa:f0:65:27:30:da:bd:4d:ef:34: e8:90:74:7a:e3:2a:19:c2:ce:a8:36:d8:12:34:1b: 02:08:68:30:ba:3e:8e:cc:f1:2e:2c:52:59:ab:ae: 87:d6:2f:ab:39:ef:de:e9:e2:21:42:9c:96:a2:ab: 6b:8b:13:bd:e5:2a:06:4a:50:b1:e9:3d:2d:68:47: 20:86:3e:21:da:0c:dc:1a:80:a1:89:3d:27:c2:b7: fa:b0:53:36:1f:ab:72:87:f1:a1:74:33:34:2c:6f: be:17:99:8f:9e:f8:3b:a8:45:bf:37:5b:fb:dc:c9: ad:21:04:51:53:01:64:72:c0:31:2e:a8:0f:00:52: 5b:ad:b5:96:27:a5:34:82:f1:83:2e:94:83:06:3a: 60:86:6f:8b:dc:8b:d3:23:fd:89:ac:e8:c6:72:3d: 7d:48:6c:2e:23:06:c5:53:ad:a6:bd:3a:0c:a4:ee: 9b:9c:09:77:13:d4:47:71:74:64:28:e4:d8:6f:26: a9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:54:99:35:7F:6F:15:EB:1F:02:6C:C5:8C:59:AE:DD:66:A7:05:B6 X509v3 Authority Key Identifier: keyid:CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:34:60:24:b2:a2:88:81:3a:e1:62:fa:b0:07:2d:0f:e8:8a: 0d:1a:4e:9b:70:25:8d:04:32:d5:68:f1:e6:31:7e:e8:fb:8c: 3c:6b:76:ec:0b:7a:cb:8b:7f:58:2a:d5:78:26:34:10:ec:48: ad:3d:ea:09:b0:5c:c1:d9:57:d8:ad:de:08:ff:de:a4:69:1c: cd:61:4d:d8:df:2f:42:47:36:d2:83:b8:e6:eb:94:85:30:8f: 3b:0a:b7:58:f3:5d:93:70:31:de:43:54:8d:ee:1f:2f:3b:90: 86:42:56:83:35:38:94:a0:1f:40:d3:86:1e:57:81:80:92:6b: c1:dc:84:0a:83:aa:aa:d3:4f:8a:a1:a8:3d:38:bd:13:1f:40: cb:ca:5e:57:67:c9:f3:3e:db:0e:86:fa:e3:e1:70:de:74:fa: cd:c4:75:ce:b7:39:57:d2:e4:31:39:f2:e8:40:f7:cc:ea:22: a5:4b:49:3e:28:91:8e:ee:17:51:7b:3b:32:93:a2:98:00:27: ee:07:9c:51:d9:d4:4e:8e:f8:ad:81:67:0f:f6:3a:a6:e7:54: 86:67:29:58:90:aa:af:30:70:1e:a2:1a:ef:e1:af:7a:ce:5f: f3:d8:c4:49:22:d4:7a:43:30:74:c5:98:c5:0d:4d:a3:af:6f: 70:f6:d1:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD1EMye9Fti0EoL9/SQnxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzgyODE1YjI1MTYxMzY1YTkxNjEwY2JkYWQ3MWY2NjI4 NmY3ODEwHhcNMjYwMjA5MTEwMDI1WhcNMjYwMjEwMTEwMDI1WjAzMTEwLwYDVQQD EygxMzU0OTkzNTdmNmYxNWViMWYwMjZjYzU4YzU5YWVkZDY2YTcwNWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqvxfvB32Rp+eQ8P+w/WFDU2U5jT e9+L04Q9e/CcCR3iuEysbor/xu1oE5B2Kmyr6Src7GvOj2XLwZ5Sa1GdXfrwZScw 2r1N7zTokHR64yoZws6oNtgSNBsCCGgwuj6OzPEuLFJZq66H1i+rOe/e6eIhQpyW oqtrixO95SoGSlCx6T0taEcghj4h2gzcGoChiT0nwrf6sFM2H6tyh/GhdDM0LG++ F5mPnvg7qEW/N1v73MmtIQRRUwFkcsAxLqgPAFJbrbWWJ6U0gvGDLpSDBjpghm+L 3IvTI/2JrOjGcj19SGwuIwbFU62mvToMpO6bnAl3E9RHcXRkKOTYbyapKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNUmTV/bxXrHwJsxYxZrt1mpwW2MB8GA1UdIwQY MBaAFMs4KBWyUWE2WpFhDL2tcfZihveBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpnb0ZiSlJZVFpha1dFTXZhMXg5bUtHOTRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lZjcwZjEtNTJhMS00ZTdhLWIzYzYt NDE0MjM4YzViYmMyLzEveXpnb0ZiSlJZVFpha1dFTXZhMXg5bUtHOTRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9lZjcwZjEtNTJhMS00ZTdhLWIzYzYtNDE0MjM4YzViYmMy LzEveXpnb0ZiSlJZVFpha1dFTXZhMXg5bUtHOTRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDRgJLKi iIE64WL6sActD+iKDRpOm3AljQQy1Wjx5jF+6PuMPGt27At6y4t/WCrVeCY0EOxI rT3qCbBcwdlX2K3eCP/epGkczWFN2N8vQkc20oO45uuUhTCPOwq3WPNdk3Ax3kNU je4fLzuQhkJWgzU4lKAfQNOGHleBgJJrwdyECoOqqtNPiqGoPTi9Ex9Ay8peV2fJ 8z7bDob64+Fw3nT6zcR1zrc5V9LkMTny6ED3zOoipUtJPiiRju4XUXs7MpOimAAn 7gecUdnUTo74rYFnD/Y6pudUhmcpWJCqrzBwHqIa7+Gves5f89jESSLUekMwdMWY xQ1No69vcPbRlw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:27 2026 by rpki-client