This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft File: y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json) Hash identifier: x/jOgC3IF+g2lEnQG9PIiWL1xwLBNMVlSCi99sJZYik= Subject key identifier: 42:61:59:CA:9B:E8:7C:F2:2E:43:E5:8F:83:25:BC:DF:CA:93:AD:D8 Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23 Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23 Certificate serial: 019C41A17D27B75FD62B69C0F50707B5A687 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft Manifest number: 0A1F Signing time: Mon 09 Feb 2026 09:00:28 +0000 Manifest this update: Mon 09 Feb 2026 09:00:28 +0000 Manifest next update: Tue 10 Feb 2026 09:00:28 +0000 Files and hashes: 1: mGTXHUzlo8jZOHFUmBeN6FRI7Bk.roa (hash: 2bfzL2d7ZwGUW9cvd/ehAd7HuPDH/Eytzu1KccPbTks=) 2: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: 2i/TnIHmIhzNCvKTOoNGmqd9tw4DJfaJycDVS4ViFFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:7d:27:b7:5f:d6:2b:69:c0:f5:07:07:b5:a6:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23 Validity Not Before: Feb 9 09:00:28 2026 GMT Not After : Feb 10 09:00:28 2026 GMT Subject: CN=426159ca9be87cf22e43e58f8325bcdfca93add8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5b:0e:d7:9b:ec:d8:dc:6d:86:4b:67:e3:d8: 6e:86:99:8b:5c:15:af:57:8c:56:d7:ee:aa:e8:ee: 47:27:f4:c2:0b:c7:ac:8b:61:c2:bb:26:00:be:b9: 54:d9:3a:a5:39:a7:1a:ac:5e:ea:b1:ec:36:eb:2f: 55:58:2e:c3:a2:e7:9d:c0:22:d8:ad:68:ae:b8:e6: 1e:5f:19:d1:63:65:d8:7a:38:16:15:9c:35:82:1b: 14:55:d0:5a:d9:47:ee:ba:50:7e:9f:a4:0e:69:d4: 01:91:89:8b:5e:a7:f0:a7:33:de:15:f1:df:ea:ef: b9:3d:54:9c:55:97:7b:b0:f7:d8:2b:60:c9:de:9d: 82:91:09:ea:97:01:09:c8:93:73:59:f9:f2:8d:5b: 49:b2:21:27:ea:2b:1a:b7:cd:0b:06:4c:fe:f1:8b: 15:8a:df:fc:da:4b:b4:70:83:74:b1:20:ad:25:3a: d1:9b:2e:9d:c0:26:f8:1e:6c:39:41:77:13:09:b0: d5:55:d7:82:7c:77:8b:89:a7:bc:1d:34:f5:55:9c: 33:b6:fd:e1:93:11:30:d6:8e:4e:cd:3a:14:17:ea: a8:54:0d:4b:1d:81:90:41:e1:3a:88:df:2c:36:8b: 66:a9:7d:0d:60:4e:00:71:6e:fa:02:2e:1c:e9:da: 9a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:61:59:CA:9B:E8:7C:F2:2E:43:E5:8F:83:25:BC:DF:CA:93:AD:D8 X509v3 Authority Key Identifier: keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:f3:41:44:25:9d:93:f9:4f:db:c3:c5:69:54:9e:1c:d1:99: 01:2b:87:ab:ec:b9:da:40:69:4c:be:e1:66:bf:ad:c3:e7:64: 5e:29:24:27:a5:1e:ee:ff:27:b7:60:00:80:03:45:89:68:8c: 3d:59:57:75:b8:ef:4b:19:fb:4c:f0:78:fd:08:cf:75:83:73: 20:de:64:4e:14:f3:0f:56:ec:66:81:d3:d1:fb:df:81:09:97: 11:73:5f:0a:7f:3b:ca:a2:0a:19:08:cc:b8:4c:af:c1:32:58: 19:67:01:a2:38:36:76:5b:10:e2:90:67:c6:27:19:54:fb:f0: f3:2d:00:d6:7d:5a:e5:68:5a:e1:81:89:f4:fb:dc:14:bc:18: 52:1c:18:d0:7d:4f:ff:15:56:38:0a:10:e0:81:ce:dc:48:d0: b1:3d:1b:fc:a6:9d:04:98:c8:7c:60:a1:29:40:64:6d:c4:48: d8:4b:d1:f0:df:94:0c:76:1c:fb:2b:86:a6:d9:a8:75:cd:27: d6:02:47:af:1a:7f:4b:9d:9a:99:ca:ea:5d:1e:6f:22:05:3d: 74:2c:80:da:ba:7d:01:47:23:48:bf:48:be:46:86:6d:21:2c: d8:0a:94:f1:76:d2:68:38:2b:7d:65:3a:51:21:cc:32:53:e8: e2:4f:18:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoX0nt1/WK2nA9QcHtaaHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZTNkYTM1ODJhMjI4MzBlYzRlNjc1NDdlNzVmYTNiOWRh MjBiMjMwHhcNMjYwMjA5MDkwMDI4WhcNMjYwMjEwMDkwMDI4WjAzMTEwLwYDVQQD Eyg0MjYxNTljYTliZTg3Y2YyMmU0M2U1OGY4MzI1YmNkZmNhOTNhZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FsO15vs2Nxthktn49huhpmLXBWv V4xW1+6q6O5HJ/TCC8esi2HCuyYAvrlU2TqlOacarF7qsew26y9VWC7DouedwCLY rWiuuOYeXxnRY2XYejgWFZw1ghsUVdBa2UfuulB+n6QOadQBkYmLXqfwpzPeFfHf 6u+5PVScVZd7sPfYK2DJ3p2CkQnqlwEJyJNzWfnyjVtJsiEn6isat80LBkz+8YsV it/82ku0cIN0sSCtJTrRmy6dwCb4Hmw5QXcTCbDVVdeCfHeLiae8HTT1VZwztv3h kxEw1o5OzToUF+qoVA1LHYGQQeE6iN8sNotmqX0NYE4AcW76Ai4c6dqaCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJhWcqb6HzyLkPlj4MlvN/Kk63YMB8GA1UdIwQY MBaAFMvj2jWCoigw7E5nVH51+judogsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUt NmUzNmIyZjE3MDZiLzEveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUtNmUzNmIyZjE3MDZi LzEveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/NBRCWd k/lP28PFaVSeHNGZASuHq+y52kBpTL7hZr+tw+dkXikkJ6Ue7v8nt2AAgANFiWiM PVlXdbjvSxn7TPB4/QjPdYNzIN5kThTzD1bsZoHT0fvfgQmXEXNfCn87yqIKGQjM uEyvwTJYGWcBojg2dlsQ4pBnxicZVPvw8y0A1n1a5Wha4YGJ9PvcFLwYUhwY0H1P /xVWOAoQ4IHO3EjQsT0b/KadBJjIfGChKUBkbcRI2EvR8N+UDHYc+yuGptmodc0n 1gJHrxp/S52amcrqXR5vIgU9dCyA2rp9AUcjSL9IvkaGbSEs2AqU8XbSaDgrfWU6 USHMMlPo4k8YfA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:23 2026 by rpki-client