This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft File: yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft (raw, json) Hash identifier: kjzadU5Hk58r0j6lItj9/2ljzm7bNSf3GAp4Wj+QDVw= Subject key identifier: 11:F3:7D:1E:08:F6:7F:7C:93:D2:0E:34:27:6A:A4:75:6E:E5:F7:64 Authority key identifier: CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21 Certificate issuer: /CN=cb268b529393018d4bc9fc54073030a03d929721 Certificate serial: 019C427D8C01B40B55F4257C260962A63062 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft Manifest number: 14A4 Signing time: Mon 09 Feb 2026 13:00:49 +0000 Manifest this update: Mon 09 Feb 2026 13:00:49 +0000 Manifest next update: Tue 10 Feb 2026 13:00:49 +0000 Files and hashes: 1: yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl (hash: CwBOmre3fuxcTwHWRDH2LL07Z0hVRXyw3ZPo4uzeKRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:8c:01:b4:0b:55:f4:25:7c:26:09:62:a6:30:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb268b529393018d4bc9fc54073030a03d929721 Validity Not Before: Feb 9 13:00:49 2026 GMT Not After : Feb 10 13:00:49 2026 GMT Subject: CN=11f37d1e08f67f7c93d20e34276aa4756ee5f764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fc:93:89:81:a9:0e:6f:64:9b:a1:2b:60:6b: 7a:0a:43:0b:9e:c4:3a:14:eb:56:fb:5d:4d:67:77: 5a:de:a9:98:d4:23:bc:57:b1:b9:cc:07:17:d3:7f: 8d:13:0f:28:ea:d3:8c:12:cf:dc:4a:fb:c7:fb:39: 34:40:3d:ac:12:0e:6d:56:82:bd:ff:e9:7c:d0:34: 05:82:34:11:0c:bb:9c:b5:f1:b3:c8:fe:62:47:78: 72:fa:58:7a:47:c0:59:98:a7:e4:4e:1e:d8:ed:28: 0d:2b:76:1c:03:8f:7c:85:38:d1:2e:2c:d1:4b:3e: 54:45:55:7d:64:57:ef:91:dd:2e:45:92:e5:2e:ae: c8:5a:77:f2:ad:bb:a1:ed:43:92:48:64:b6:e5:12: 24:67:41:b6:04:1d:06:58:61:35:e0:14:01:bd:51: 65:75:3b:c8:e7:47:dd:cc:1e:13:5c:43:62:73:2c: d0:96:9f:22:84:e8:45:a4:73:dc:69:bb:47:ef:ec: 3f:14:df:4b:20:27:cd:10:ce:e0:87:60:21:68:1e: a6:f8:25:c0:3d:d6:b2:ff:11:ea:0f:a7:0f:ff:9b: 13:52:26:57:88:fe:b5:1a:c6:41:56:ab:e7:ec:b6: 3e:0b:23:d7:1a:f0:47:d2:7f:f0:a1:47:a7:f9:3f: 74:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F3:7D:1E:08:F6:7F:7C:93:D2:0E:34:27:6A:A4:75:6E:E5:F7:64 X509v3 Authority Key Identifier: keyid:CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:0e:a9:48:f5:67:18:df:85:25:1f:08:bd:2d:c3:26:82:58: ca:96:eb:b4:da:b4:d9:0d:e6:cf:77:ba:2a:47:97:d0:35:f4: bb:b3:e5:e3:90:46:27:4f:c5:cf:5b:74:24:c7:5e:78:49:2f: fa:7c:16:43:94:6a:74:29:1b:b8:e7:a5:8d:c1:93:d5:13:07: c9:22:8b:6d:f8:d5:b6:b5:db:53:ad:e5:38:50:0a:cc:19:b8: 23:70:45:b6:96:4b:1a:b8:58:2e:86:21:68:90:fc:cb:dd:00: 99:fa:e9:ad:1e:77:ee:ea:86:c3:65:47:64:42:a5:50:8e:94: 07:c3:5d:f0:eb:fc:dd:ba:c7:6a:50:4e:73:54:6e:36:f9:80: ed:b9:88:29:a1:ec:98:a4:16:96:2a:98:71:f7:58:b9:f7:ab: ed:f0:7c:da:a6:49:b3:d5:0e:c7:0b:d0:da:2f:9b:75:f2:d8: 80:84:96:73:a8:14:b0:08:42:7b:ef:64:c4:98:cb:d6:32:72: 01:87:55:60:84:f6:c0:9d:43:7b:10:7a:39:51:07:0d:1e:a3: 68:ce:e3:61:2b:7b:43:a0:da:82:48:ce:de:47:84:98:ab:1a: 65:79:c3:04:4c:49:72:c5:3b:fa:69:26:58:36:c4:7a:62:ad: 70:a9:b2:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfYwBtAtV9CV8JglipjBiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMjY4YjUyOTM5MzAxOGQ0YmM5ZmM1NDA3MzAzMGEwM2Q5 Mjk3MjEwHhcNMjYwMjA5MTMwMDQ5WhcNMjYwMjEwMTMwMDQ5WjAzMTEwLwYDVQQD EygxMWYzN2QxZTA4ZjY3ZjdjOTNkMjBlMzQyNzZhYTQ3NTZlZTVmNzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/yTiYGpDm9km6ErYGt6CkMLnsQ6 FOtW+11NZ3da3qmY1CO8V7G5zAcX03+NEw8o6tOMEs/cSvvH+zk0QD2sEg5tVoK9 /+l80DQFgjQRDLuctfGzyP5iR3hy+lh6R8BZmKfkTh7Y7SgNK3YcA498hTjRLizR Sz5URVV9ZFfvkd0uRZLlLq7IWnfyrbuh7UOSSGS25RIkZ0G2BB0GWGE14BQBvVFl dTvI50fdzB4TXENicyzQlp8ihOhFpHPcabtH7+w/FN9LICfNEM7gh2AhaB6m+CXA Pday/xHqD6cP/5sTUiZXiP61GsZBVqvn7LY+CyPXGvBH0n/woUen+T90vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHzfR4I9n98k9IONCdqpHVu5fdkMB8GA1UdIwQY MBaAFMsmi1KTkwGNS8n8VAcwMKA9kpchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8zOWE2ZDQtYjkzNy00ZDVmLTgwMTYt ZjI3MDA4NjRjMTg3LzEveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8zOWE2ZDQtYjkzNy00ZDVmLTgwMTYtZjI3MDA4NjRjMTg3 LzEveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFw6pSPVn GN+FJR8IvS3DJoJYypbrtNq02Q3mz3e6KkeX0DX0u7Pl45BGJ0/Fz1t0JMdeeEkv +nwWQ5RqdCkbuOeljcGT1RMHySKLbfjVtrXbU63lOFAKzBm4I3BFtpZLGrhYLoYh aJD8y90AmfrprR537uqGw2VHZEKlUI6UB8Nd8Ov83brHalBOc1RuNvmA7bmIKaHs mKQWliqYcfdYufer7fB82qZJs9UOxwvQ2i+bdfLYgISWc6gUsAhCe+9kxJjL1jJy AYdVYIT2wJ1DexB6OVEHDR6jaM7jYSt7Q6DagkjO3keEmKsaZXnDBExJcsU7+mkm WDbEemKtcKmyaA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:41 2026 by rpki-client