This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft File: Y2NsO-9V0SpkU2twEwp09T9E1tA.mft (raw, json) Hash identifier: 6tFu4CUKYVKhS2JLAJVH7bsBPYTRFZlm+9g/DwPG+Sw= Subject key identifier: 8D:41:B0:04:93:A7:E2:9A:41:84:D6:A1:DD:96:25:52:84:D2:87:63 Authority key identifier: 63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0 Certificate issuer: /CN=63636c3bef55d12a64536b70130a74f53f44d6d0 Certificate serial: 019C4133D8E31B9F2C7AE29CB642257BCC74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft Manifest number: 09FA Signing time: Mon 09 Feb 2026 07:00:42 +0000 Manifest this update: Mon 09 Feb 2026 07:00:42 +0000 Manifest next update: Tue 10 Feb 2026 07:00:42 +0000 Files and hashes: 1: Y2NsO-9V0SpkU2twEwp09T9E1tA.crl (hash: DGR5nSSwKc4lz2pfYR4NE58VR75ZbAgu/qw31yt4vck=) 2: vmbqeh6-vK4ev0adywfz4g1Rvoo.roa (hash: xqWqv6l8nmG+Jik4AMPhv/K9W2arr299/CeqLO5XHe0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:d8:e3:1b:9f:2c:7a:e2:9c:b6:42:25:7b:cc:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63636c3bef55d12a64536b70130a74f53f44d6d0 Validity Not Before: Feb 9 07:00:42 2026 GMT Not After : Feb 10 07:00:42 2026 GMT Subject: CN=8d41b00493a7e29a4184d6a1dd96255284d28763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d5:a4:3d:01:6e:64:5f:83:33:f6:38:6b:26: c1:d9:f7:99:b3:59:04:ec:98:4c:8f:de:1b:ee:ef: 6b:86:95:11:93:d4:c3:b2:22:72:76:8a:df:7d:04: 10:fd:32:d8:79:6a:bc:7f:ce:10:96:e9:11:1c:41: ee:63:f5:74:1f:8b:7f:5d:ce:79:e2:d1:9c:fc:ef: f2:4a:95:f6:e1:21:e0:dc:1e:ee:dc:ea:86:c3:a9: 9e:de:c6:b2:39:31:be:c4:17:f4:21:d8:8e:db:14: 67:ad:24:48:3f:73:3e:8a:e0:a0:ac:49:2f:4c:30: ea:91:a4:3c:2b:12:85:22:81:7d:43:bb:a3:15:71: 0c:9d:9a:78:2e:2d:46:7c:e8:f8:1d:56:41:2b:bb: ad:ec:3e:89:62:a8:45:c3:8c:d8:75:4a:65:ae:2f: e6:67:33:1b:dc:2a:d7:e7:91:1b:33:d0:2f:56:5c: 8c:10:2a:36:29:92:b0:ce:f1:e2:d3:5a:9b:70:1a: 0b:ca:b1:af:69:d0:f4:15:45:c1:06:52:bd:91:dc: a0:b3:01:76:b7:95:09:7c:b5:37:ca:8f:1f:b2:56: 36:dd:94:65:e5:5c:3e:5b:55:02:fb:6c:aa:3c:b5: a1:3c:ee:62:1b:7d:5f:ff:f7:a6:a9:bc:c3:1f:cc: f3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:41:B0:04:93:A7:E2:9A:41:84:D6:A1:DD:96:25:52:84:D2:87:63 X509v3 Authority Key Identifier: keyid:63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:60:b7:98:77:af:10:45:90:7b:de:10:e7:2d:8b:13:22:76: 70:d2:a8:c6:44:31:09:66:db:df:84:74:4f:39:01:92:70:2b: f0:e2:70:85:6d:6d:df:60:96:ef:6f:bf:46:35:2d:4c:cd:8d: 9d:20:14:3f:c5:c0:cc:8c:0d:60:fd:92:78:af:49:74:fa:a6: 17:ad:52:04:8f:19:7a:59:a8:25:a1:e9:f4:ec:5d:ae:f0:26: 2a:83:29:3d:8a:12:28:72:fd:31:84:ef:5a:60:ab:97:7d:03: a9:b6:9c:07:a9:f4:f5:dc:ea:13:04:a8:20:a6:27:cf:2c:f9: 50:a9:14:6d:93:18:85:e6:e5:9d:9e:79:09:f0:16:7b:a2:78: fd:53:16:5d:c5:70:61:25:e0:ac:dd:26:4a:55:72:86:91:24: 5c:73:84:fa:83:80:20:06:35:95:b6:1e:d6:3c:70:e2:76:f4: ad:63:2d:14:bf:59:5b:5e:b2:ac:54:53:69:c0:07:dd:44:dc: 57:e6:ab:98:16:ac:cb:33:ac:eb:04:38:16:cc:e5:f8:2b:6a: 9d:fc:7a:34:57:5a:32:08:14:4b:fb:ef:72:29:d4:1e:a1:38: ab:20:5b:32:2a:28:8e:36:db:40:1b:77:37:92:f9:c0:f5:34: e5:66:38:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM9jjG58seuKctkIle8x0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjM2YzNiZWY1NWQxMmE2NDUzNmI3MDEzMGE3NGY1M2Y0 NGQ2ZDAwHhcNMjYwMjA5MDcwMDQyWhcNMjYwMjEwMDcwMDQyWjAzMTEwLwYDVQQD Eyg4ZDQxYjAwNDkzYTdlMjlhNDE4NGQ2YTFkZDk2MjU1Mjg0ZDI4NzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9WkPQFuZF+DM/Y4aybB2feZs1kE 7JhMj94b7u9rhpURk9TDsiJydorffQQQ/TLYeWq8f84QlukRHEHuY/V0H4t/Xc55 4tGc/O/ySpX24SHg3B7u3OqGw6me3sayOTG+xBf0IdiO2xRnrSRIP3M+iuCgrEkv TDDqkaQ8KxKFIoF9Q7ujFXEMnZp4Li1GfOj4HVZBK7ut7D6JYqhFw4zYdUplri/m ZzMb3CrX55EbM9AvVlyMECo2KZKwzvHi01qbcBoLyrGvadD0FUXBBlK9kdygswF2 t5UJfLU3yo8fslY23ZRl5Vw+W1UC+2yqPLWhPO5iG31f//emqbzDH8zzEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1BsASTp+KaQYTWod2WJVKE0odjMB8GA1UdIwQY MBaAFGNjbDvvVdEqZFNrcBMKdPU/RNbQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJOc08tOVYwU3BrVTJ0d0V3cDA5VDlFMXRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hNTY0ZTktM2E0ZS00ZDRhLTgwN2Qt NzA1NWMyZTA0NzZmLzEvWTJOc08tOVYwU3BrVTJ0d0V3cDA5VDlFMXRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hNTY0ZTktM2E0ZS00ZDRhLTgwN2QtNzA1NWMyZTA0NzZm LzEvWTJOc08tOVYwU3BrVTJ0d0V3cDA5VDlFMXRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmC3mHev EEWQe94Q5y2LEyJ2cNKoxkQxCWbb34R0TzkBknAr8OJwhW1t32CW72+/RjUtTM2N nSAUP8XAzIwNYP2SeK9JdPqmF61SBI8ZelmoJaHp9OxdrvAmKoMpPYoSKHL9MYTv WmCrl30DqbacB6n09dzqEwSoIKYnzyz5UKkUbZMYheblnZ55CfAWe6J4/VMWXcVw YSXgrN0mSlVyhpEkXHOE+oOAIAY1lbYe1jxw4nb0rWMtFL9ZW16yrFRTacAH3UTc V+armBasyzOs6wQ4Fszl+Ctqnfx6NFdaMggUS/vvcinUHqE4qyBbMioojjbbQBt3 N5L5wPU05WY4Cg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:40 2026 by rpki-client