This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft File: yL68_oKyYn6o3oFhy5J7JFsFjmk.mft (raw, json) Hash identifier: PaPMpddwCtJSVY4Lc+Gr57lfIYsX3uWiNNnNZpOMi9M= Subject key identifier: 32:F2:D1:AC:FB:45:E3:54:96:10:14:23:3E:20:CB:40:C7:A5:CE:AC Authority key identifier: C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69 Certificate issuer: /CN=c8bebcfe82b2627ea8de8161cb927b245b058e69 Certificate serial: 019C44DA4DF22C44CD571265CC24C35A924C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft Manifest number: 13D3 Signing time: Tue 10 Feb 2026 00:01:23 +0000 Manifest this update: Tue 10 Feb 2026 00:01:23 +0000 Manifest next update: Wed 11 Feb 2026 00:01:23 +0000 Files and hashes: 1: 1Xm89aaBpVMV9cKG43MJiEDRyXM.roa (hash: xvK5vKdtM3Q6AqquyM/QFwGngU91NCTC/sOOpP25kiI=) 2: yL68_oKyYn6o3oFhy5J7JFsFjmk.crl (hash: v0DLh2SNgoBsPA0EpBpYhH9bAo1nn169VO2AbAF9f+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:da:4d:f2:2c:44:cd:57:12:65:cc:24:c3:5a:92:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8bebcfe82b2627ea8de8161cb927b245b058e69 Validity Not Before: Feb 10 00:01:23 2026 GMT Not After : Feb 11 00:01:23 2026 GMT Subject: CN=32f2d1acfb45e354961014233e20cb40c7a5ceac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6a:75:16:d0:57:89:08:ac:bd:7a:ee:36:56: 96:95:f0:36:43:a8:50:c0:c1:c4:4a:a2:25:6c:bc: fe:ab:bc:a6:99:6c:cc:a9:4e:c4:7f:da:d1:0c:1f: 6d:d9:cb:a6:75:37:96:ad:b4:75:cc:6b:83:3b:bf: 1f:72:cf:b8:42:ff:ef:82:c7:9b:87:16:b7:58:28: 87:88:2f:9f:fc:fc:e3:da:14:46:09:2f:b4:dc:0f: 61:52:cd:44:6b:77:3b:15:e3:4d:3d:de:02:83:50: c7:ad:36:ca:59:2c:35:85:ca:3b:5a:82:e9:00:c2: cd:ca:1f:e2:42:66:aa:aa:5a:32:d0:e8:7e:2a:45: 1d:ac:90:ff:a4:1c:99:f0:f7:aa:ab:2c:ac:5d:30: 6c:8c:ad:15:5f:00:df:a1:d8:ea:40:3e:b0:83:ed: f8:d8:90:f1:60:ce:33:97:12:3d:6a:fb:3b:d4:2c: e0:c1:6c:ed:43:02:ab:bc:32:a9:d6:e8:d0:d3:4f: a4:eb:d5:e7:c9:07:4f:e3:0e:b2:b6:da:85:c5:41: 77:57:18:23:19:cf:95:3d:3d:9a:da:44:4d:cd:a2: 15:d4:d2:45:de:14:b5:9d:42:e4:96:d5:cb:b9:00: dc:b1:cc:3b:7b:b6:2e:f1:ae:b9:c6:29:c6:3b:d3: bb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F2:D1:AC:FB:45:E3:54:96:10:14:23:3E:20:CB:40:C7:A5:CE:AC X509v3 Authority Key Identifier: keyid:C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:aa:2c:d0:14:72:c7:65:9e:e4:04:65:1f:95:ac:54:de:55: 5e:e6:39:a7:d4:51:5f:5b:22:2c:12:b6:31:b5:09:3e:0b:65: 5b:02:87:73:14:40:e9:e5:6e:d8:99:2b:d2:4c:1c:83:6c:e4: 49:78:1b:6b:8b:b9:05:34:4f:2d:81:5c:63:4a:1f:e2:f6:bc: 3f:41:9f:9f:e2:97:29:c7:c5:fe:fe:82:28:28:8c:29:97:07: dc:b1:75:42:e1:6b:e9:99:99:bf:2e:d5:a5:ae:03:71:f6:20: 42:2f:80:cf:bf:e1:91:b4:b8:e6:b1:91:a5:a7:2e:ea:ab:e0: 23:f5:3c:be:de:16:a0:3f:8d:47:6f:cd:9e:68:8d:23:3b:fd: e9:75:1b:97:34:17:16:fe:80:44:75:c8:5f:da:ce:1d:a9:6a: 2c:77:e8:d4:34:47:6a:b7:6d:e9:79:11:20:ab:99:5c:0e:7b: 31:10:73:67:15:61:41:34:0d:86:16:d2:87:8b:fd:3f:15:1b: 08:51:84:48:e6:04:25:74:30:a7:ff:7f:b9:78:1e:33:d0:58: 0c:1e:f0:4d:b1:88:eb:98:2c:62:0f:a8:df:3f:d6:51:5b:05: cc:8d:6a:0a:62:d8:ee:68:f9:d6:75:33:73:da:c7:75:41:34: a6:c5:8d:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2k3yLETNVxJlzCTDWpJMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YmViY2ZlODJiMjYyN2VhOGRlODE2MWNiOTI3YjI0NWIw NThlNjkwHhcNMjYwMjEwMDAwMTIzWhcNMjYwMjExMDAwMTIzWjAzMTEwLwYDVQQD EygzMmYyZDFhY2ZiNDVlMzU0OTYxMDE0MjMzZTIwY2I0MGM3YTVjZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2p1FtBXiQisvXruNlaWlfA2Q6hQ wMHESqIlbLz+q7ymmWzMqU7Ef9rRDB9t2cumdTeWrbR1zGuDO78fcs+4Qv/vgseb hxa3WCiHiC+f/Pzj2hRGCS+03A9hUs1Ea3c7FeNNPd4Cg1DHrTbKWSw1hco7WoLp AMLNyh/iQmaqqloy0Oh+KkUdrJD/pByZ8PeqqyysXTBsjK0VXwDfodjqQD6wg+34 2JDxYM4zlxI9avs71CzgwWztQwKrvDKp1ujQ00+k69XnyQdP4w6yttqFxUF3Vxgj Gc+VPT2a2kRNzaIV1NJF3hS1nULkltXLuQDcscw7e7Yu8a65xinGO9O7ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLy0az7ReNUlhAUIz4gy0DHpc6sMB8GA1UdIwQY MBaAFMi+vP6CsmJ+qN6BYcuSeyRbBY5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYTE3YjMtZDU0ZS00Mjc5LWFkOTgt ZGVlZjdmMTUxZThlLzEveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYTE3YjMtZDU0ZS00Mjc5LWFkOTgtZGVlZjdmMTUxZThl LzEveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACaos0BRy x2We5ARlH5WsVN5VXuY5p9RRX1siLBK2MbUJPgtlWwKHcxRA6eVu2Jkr0kwcg2zk SXgba4u5BTRPLYFcY0of4va8P0Gfn+KXKcfF/v6CKCiMKZcH3LF1QuFr6ZmZvy7V pa4DcfYgQi+Az7/hkbS45rGRpacu6qvgI/U8vt4WoD+NR2/NnmiNIzv96XUblzQX Fv6ARHXIX9rOHalqLHfo1DRHardt6XkRIKuZXA57MRBzZxVhQTQNhhbSh4v9PxUb CFGESOYEJXQwp/9/uXgeM9BYDB7wTbGI65gsYg+o3z/WUVsFzI1qCmLY7mj51nUz c9rHdUE0psWNwg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:29 2026 by rpki-client