This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft File: RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft (raw, json) Hash identifier: lg+riwV9lzMb1+zOqEkQ2DGZO1caZuWgOirdyFz3/sk= Subject key identifier: 20:EB:B0:A3:A5:00:73:46:44:A8:72:E6:94:C6:E0:47:CF:2E:73:03 Authority key identifier: 44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30 Certificate issuer: /CN=448ca39537597cfae60ae0421db8e098b4e26130 Certificate serial: 019C4321E0B43C82F478BFE3F4245BD0B987 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 16:00:19 +0000 Manifest this update: Mon 09 Feb 2026 16:00:19 +0000 Manifest next update: Tue 10 Feb 2026 16:00:19 +0000 Files and hashes: 1: RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl (hash: bdEBxd1/Y7yfipd0DnxAK8e3Xlsh5yyxk5aTwLTYSqQ=) 2: UXnKo4Ey-1UOsTwsFxzecNca4ws.roa (hash: ilB1dCXfkW75QAbnFoJP+oitYYjAJLiYJ/zgOjFv/HU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:e0:b4:3c:82:f4:78:bf:e3:f4:24:5b:d0:b9:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=448ca39537597cfae60ae0421db8e098b4e26130 Validity Not Before: Feb 9 16:00:19 2026 GMT Not After : Feb 10 16:00:19 2026 GMT Subject: CN=20ebb0a3a500734644a872e694c6e047cf2e7303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:86:dd:72:81:b1:6f:f9:f0:43:de:23:5c:79: 76:7d:4b:58:ac:1c:2f:d3:2c:09:55:2f:ec:31:42: 12:19:1f:6f:c3:43:38:5b:c9:ce:56:28:1f:40:00: 04:28:8a:f3:c8:25:73:31:3d:b8:4c:a8:16:cf:b1: 55:bf:a3:31:5c:25:86:54:d9:ef:ac:e1:c8:96:0e: 87:22:a4:76:e3:45:dd:e8:99:82:14:ed:bd:86:56: db:37:ba:32:fd:3b:0e:2b:b0:6a:ff:72:14:1e:0c: 2e:65:f2:ca:fc:34:9b:1c:f5:b4:ab:f8:6c:22:7e: 8d:ca:b2:12:aa:31:ea:09:dc:d0:6d:10:8e:ad:91: da:c2:e2:67:1e:07:7b:f0:aa:14:b3:a5:7f:9a:21: 85:ff:25:ce:0f:25:70:62:92:d4:ff:d1:36:07:b0: 97:18:6d:59:5d:d3:e7:f8:64:89:b8:ff:03:74:b4: 52:47:1a:f4:dd:be:5c:a8:0a:aa:5e:b5:76:db:b5: 04:2e:1f:19:23:8f:a7:75:21:9b:e4:1a:83:a0:26: bb:43:5e:5f:ae:9b:93:6a:e0:23:85:da:b2:80:cf: 52:45:9b:ca:1d:0f:ca:ff:7f:7e:61:4c:05:27:d6: 48:71:51:38:23:aa:38:a8:a3:7e:6d:3b:f2:a0:b5: 82:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EB:B0:A3:A5:00:73:46:44:A8:72:E6:94:C6:E0:47:CF:2E:73:03 X509v3 Authority Key Identifier: keyid:44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4e:72:64:2d:e7:04:d9:20:1c:de:19:99:dc:f2:74:da:16: 0e:6b:ca:36:0b:aa:f7:99:37:2e:dd:0c:1a:81:fd:98:83:45: 87:b9:5a:99:76:68:90:40:b8:3c:bf:b7:6f:13:0c:41:d2:ee: 67:26:89:03:b5:19:02:f7:26:85:64:f6:05:b9:65:62:1e:ef: 81:0e:99:b4:bd:be:fb:27:88:62:d6:4d:1a:56:e4:e0:66:bb: 33:50:f4:9a:82:94:c5:7c:1c:42:7a:1d:b2:3d:65:66:6b:ab: a6:0d:ac:e7:e7:db:2c:90:60:64:22:a2:de:52:7e:7d:ed:b3: c4:50:a4:77:f2:62:75:96:03:65:7a:01:0c:fb:85:d0:a4:55: e9:f7:8d:d9:e9:39:ad:bd:27:0e:65:62:90:3f:cd:ab:b0:df: 04:7e:1d:8c:b7:2f:58:8d:37:6a:8e:0b:d8:10:03:cf:e5:a6: e3:1c:1f:12:d6:5a:30:f8:6d:5a:08:38:de:06:8f:29:5b:d8: 3b:21:01:24:b2:98:81:00:b8:9e:7e:3b:12:f5:3a:3e:82:e9: 98:25:38:67:d0:4a:de:db:59:e7:ce:32:63:9e:1e:bd:ed:18: 84:97:1c:24:b5:27:47:04:ef:92:35:d5:c4:fb:30:97:d1:77: ab:01:00:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIeC0PIL0eL/j9CRb0LmHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0OGNhMzk1Mzc1OTdjZmFlNjBhZTA0MjFkYjhlMDk4YjRl MjYxMzAwHhcNMjYwMjA5MTYwMDE5WhcNMjYwMjEwMTYwMDE5WjAzMTEwLwYDVQQD EygyMGViYjBhM2E1MDA3MzQ2NDRhODcyZTY5NGM2ZTA0N2NmMmU3MzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54bdcoGxb/nwQ94jXHl2fUtYrBwv 0ywJVS/sMUISGR9vw0M4W8nOVigfQAAEKIrzyCVzMT24TKgWz7FVv6MxXCWGVNnv rOHIlg6HIqR240Xd6JmCFO29hlbbN7oy/TsOK7Bq/3IUHgwuZfLK/DSbHPW0q/hs In6NyrISqjHqCdzQbRCOrZHawuJnHgd78KoUs6V/miGF/yXODyVwYpLU/9E2B7CX GG1ZXdPn+GSJuP8DdLRSRxr03b5cqAqqXrV227UELh8ZI4+ndSGb5BqDoCa7Q15f rpuTauAjhdqygM9SRZvKHQ/K/39+YUwFJ9ZIcVE4I6o4qKN+bTvyoLWCXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDrsKOlAHNGRKhy5pTG4EfPLnMDMB8GA1UdIwQY MBaAFESMo5U3WXz65grgQh244Ji04mEwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkl5amxUZFpmUHJtQ3VCQ0hiamdtTFRpWVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kYjA1MTktNGU1YS00Yjc1LTg4ZmQt YmJjMjM5ZTg5N2ViLzEvUkl5amxUZFpmUHJtQ3VCQ0hiamdtTFRpWVRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kYjA1MTktNGU1YS00Yjc1LTg4ZmQtYmJjMjM5ZTg5N2Vi LzEvUkl5amxUZFpmUHJtQ3VCQ0hiamdtTFRpWVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbk5yZC3n BNkgHN4ZmdzydNoWDmvKNguq95k3Lt0MGoH9mINFh7lamXZokEC4PL+3bxMMQdLu ZyaJA7UZAvcmhWT2BbllYh7vgQ6ZtL2++yeIYtZNGlbk4Ga7M1D0moKUxXwcQnod sj1lZmurpg2s5+fbLJBgZCKi3lJ+fe2zxFCkd/JidZYDZXoBDPuF0KRV6feN2ek5 rb0nDmVikD/Nq7DfBH4djLcvWI03ao4L2BADz+Wm4xwfEtZaMPhtWgg43gaPKVvY OyEBJLKYgQC4nn47EvU6PoLpmCU4Z9BK3ttZ584yY54eve0YhJccJLUnRwTvkjXV xPswl9F3qwEAeA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:31 2026 by rpki-client