This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft File: ryfUX8GLqRerHomhfvC2NgmEgiQ.mft (raw, json) Hash identifier: qPNvqhuFO9yLMebZXUyRywyd19P/EBg9AvMwArmQLmg= Subject key identifier: A9:A6:60:D5:36:84:59:EC:28:25:3D:70:56:F3:3D:EE:08:31:14:BC Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24 Certificate issuer: /CN=af27d45fc18ba917ab1e89a17ef0b63609848224 Certificate serial: 019C427D4FE7C6B64EE7A18EA25415C5ED4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft Manifest number: 14B9 Signing time: Mon 09 Feb 2026 13:00:34 +0000 Manifest this update: Mon 09 Feb 2026 13:00:34 +0000 Manifest next update: Tue 10 Feb 2026 13:00:34 +0000 Files and hashes: 1: UPdd3G2KcdZS3e0YMWJ1mdET7ug.roa (hash: fLa6myDFK6r7xHzOqHrp8ZBgZdrk6WJWWDhaOtDKTYI=) 2: ryfUX8GLqRerHomhfvC2NgmEgiQ.crl (hash: Vw0o+xzh+yoDtRVip9vHxlWcNeou49UlsuPyFFKGSHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:4f:e7:c6:b6:4e:e7:a1:8e:a2:54:15:c5:ed:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224 Validity Not Before: Feb 9 13:00:34 2026 GMT Not After : Feb 10 13:00:34 2026 GMT Subject: CN=a9a660d5368459ec28253d7056f33dee083114bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:57:e6:9d:93:de:54:e4:c6:d9:98:49:dd:7e: 5e:ea:7a:88:59:64:54:ed:b6:3a:e5:26:3c:70:6e: 5b:2f:09:74:50:dc:b1:1c:9e:28:be:6a:7c:cf:bd: 37:5b:d9:51:a8:d8:b0:ef:b8:30:46:0f:b6:1a:6d: c5:5e:f4:ec:d9:03:d0:96:41:12:9f:45:1a:ed:ed: 3d:5c:aa:81:a8:c6:a3:40:97:77:e9:35:ef:b0:c7: a6:2f:f4:9c:69:01:27:f5:03:ef:70:12:3c:9f:3a: 2d:c6:57:65:d1:25:c5:08:90:2c:a9:56:0b:83:b0: e7:98:49:89:4d:75:0f:e8:a0:aa:b7:24:2a:65:18: bb:86:dd:d6:ab:94:98:bf:84:92:3c:08:87:dc:f1: a7:71:d4:9a:e7:26:33:79:16:05:cf:74:59:f3:8c: cb:48:36:e3:5a:84:5d:a4:75:ea:0f:5c:60:28:20: 99:16:f8:cd:93:ab:65:86:5f:fd:64:18:8a:06:2c: ac:bb:02:45:bb:98:fd:6c:75:4b:45:ef:27:35:e7: db:80:c6:ba:c7:8a:5d:6d:01:c6:2d:6f:38:3f:60: a3:b5:d1:16:db:51:06:ca:d6:bf:9e:06:98:f2:95: 44:22:ce:85:c7:85:4a:dc:95:39:13:7d:b1:1e:84: 70:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A6:60:D5:36:84:59:EC:28:25:3D:70:56:F3:3D:EE:08:31:14:BC X509v3 Authority Key Identifier: keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b7:97:81:db:f9:b0:b2:72:c2:f3:05:91:2f:20:3a:dd:6c: 82:b0:89:c9:01:bd:c8:81:ed:24:53:be:35:bc:60:2e:fa:65: 53:da:2c:17:9d:9d:d4:49:12:23:f7:c2:2a:2b:c2:33:55:25: 62:2a:c9:f3:3f:e1:c3:21:e3:5c:88:ba:41:68:eb:53:39:98: 8a:4f:39:f0:75:cf:c4:43:7b:28:7f:01:51:36:0c:ad:50:ad: 2d:15:4f:83:1c:ce:54:5c:01:88:58:fc:64:9e:c3:06:cd:6b: 87:8b:9b:e9:26:42:31:bb:4e:42:de:2d:b1:c5:fa:8f:da:49: 70:cc:ea:af:09:48:00:26:46:a4:43:ff:b7:eb:56:b7:4f:b7: 56:2a:fc:f0:06:16:b9:4b:80:a2:b7:6a:e3:98:1b:e0:30:ae: cd:3e:18:b8:c0:d8:74:4a:b4:2c:33:26:d5:d5:4c:c6:05:bf: 5e:15:50:da:cc:c4:4e:02:50:c3:f5:0c:7d:d5:44:13:f9:0e: 1e:97:ab:30:27:ea:2f:fe:99:c3:8d:59:19:2d:5e:66:38:cb: 4a:c2:c3:a1:d7:73:e3:8f:51:30:2f:d7:fe:35:cb:8e:ee:18: 79:27:9c:0a:11:7a:5c:5f:2c:e0:dd:f6:c8:b0:97:3c:a8:3f: 56:6a:d2:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfU/nxrZO56GOolQVxe1LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMjdkNDVmYzE4YmE5MTdhYjFlODlhMTdlZjBiNjM2MDk4 NDgyMjQwHhcNMjYwMjA5MTMwMDM0WhcNMjYwMjEwMTMwMDM0WjAzMTEwLwYDVQQD EyhhOWE2NjBkNTM2ODQ1OWVjMjgyNTNkNzA1NmYzM2RlZTA4MzExNGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FfmnZPeVOTG2ZhJ3X5e6nqIWWRU 7bY65SY8cG5bLwl0UNyxHJ4ovmp8z703W9lRqNiw77gwRg+2Gm3FXvTs2QPQlkES n0Ua7e09XKqBqMajQJd36TXvsMemL/ScaQEn9QPvcBI8nzotxldl0SXFCJAsqVYL g7DnmEmJTXUP6KCqtyQqZRi7ht3Wq5SYv4SSPAiH3PGncdSa5yYzeRYFz3RZ84zL SDbjWoRdpHXqD1xgKCCZFvjNk6tlhl/9ZBiKBiysuwJFu5j9bHVLRe8nNefbgMa6 x4pdbQHGLW84P2CjtdEW21EGyta/ngaY8pVEIs6Fx4VK3JU5E32xHoRwcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmmYNU2hFnsKCU9cFbzPe4IMRS8MB8GA1UdIwQY MBaAFK8n1F/Bi6kXqx6JoX7wtjYJhIIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnlmVVg4R0xxUmVySG9taGZ2QzJOZ21FZ2lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80NDE3NTUtYjUyZi00ZmI2LWIzZWYt N2FjYmM2YzlmOTg1LzEvcnlmVVg4R0xxUmVySG9taGZ2QzJOZ21FZ2lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80NDE3NTUtYjUyZi00ZmI2LWIzZWYtN2FjYmM2YzlmOTg1 LzEvcnlmVVg4R0xxUmVySG9taGZ2QzJOZ21FZ2lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAreXgdv5 sLJywvMFkS8gOt1sgrCJyQG9yIHtJFO+NbxgLvplU9osF52d1EkSI/fCKivCM1Ul YirJ8z/hwyHjXIi6QWjrUzmYik858HXPxEN7KH8BUTYMrVCtLRVPgxzOVFwBiFj8 ZJ7DBs1rh4ub6SZCMbtOQt4tscX6j9pJcMzqrwlIACZGpEP/t+tWt0+3Vir88AYW uUuAordq45gb4DCuzT4YuMDYdEq0LDMm1dVMxgW/XhVQ2szETgJQw/UMfdVEE/kO HperMCfqL/6Zw41ZGS1eZjjLSsLDoddz449RMC/X/jXLju4YeSecChF6XF8s4N32 yLCXPKg/VmrSiQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:06 2026 by rpki-client