This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.mft File: byhVbwoxXBallRWO0VmiXqpkOEg.mft (raw, json) Hash identifier: T2CHURZqSigqBKCsjjeZMVcz7E0oa2/CFC5WYIfsANE= Subject key identifier: 1D:34:90:B6:56:6C:66:22:89:8E:6C:AE:E8:23:AA:0B:60:C7:A2:5D Authority key identifier: 6F:28:55:6F:0A:31:5C:16:A5:95:15:8E:D1:59:A2:5E:AA:64:38:48 Certificate issuer: /CN=6f28556f0a315c16a595158ed159a25eaa643848 Certificate serial: 019C420F8BAC5EC3FAB27A767ADF6AABF103 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byhVbwoxXBallRWO0VmiXqpkOEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.mft Manifest number: 79 Signing time: Mon 09 Feb 2026 11:00:40 +0000 Manifest this update: Mon 09 Feb 2026 11:00:40 +0000 Manifest next update: Tue 10 Feb 2026 11:00:40 +0000 Files and hashes: 1: byhVbwoxXBallRWO0VmiXqpkOEg.crl (hash: OEgjHCnUbPm7bw99s9W+EJtm/Nr6DJkBRHiXprJs5NQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.mft rsync://rpki.ripe.net/repository/DEFAULT/byhVbwoxXBallRWO0VmiXqpkOEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:8b:ac:5e:c3:fa:b2:7a:76:7a:df:6a:ab:f1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f28556f0a315c16a595158ed159a25eaa643848 Validity Not Before: Feb 9 11:00:40 2026 GMT Not After : Feb 10 11:00:40 2026 GMT Subject: CN=1d3490b6566c6622898e6caee823aa0b60c7a25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:e8:74:b3:78:be:6e:c7:55:3c:bf:8b:6b: 8c:71:df:30:95:16:a1:a9:7c:ff:53:e2:be:22:d0: 1d:dd:cf:7e:78:07:cb:37:9f:04:bd:41:00:a6:4b: a8:8e:19:78:01:56:16:7b:14:f6:96:17:90:e6:33: 0c:5b:e5:fa:db:11:8c:75:d4:70:33:84:f0:3f:32: 78:da:d5:98:49:be:3e:49:2b:ad:74:02:51:2e:a4: db:ce:4c:93:e6:2b:20:9f:ce:0c:7d:98:11:4e:ea: ed:53:dc:39:5c:35:04:1e:a8:fd:e6:90:06:8b:ed: 98:f7:f1:28:de:18:6f:3f:16:28:55:d3:35:97:73: 6d:b7:7a:3c:3e:89:80:43:e2:a4:81:15:80:6b:97: 4c:12:d8:47:8e:55:fa:2d:02:a1:62:cf:f0:de:33: 8a:34:e5:aa:11:1f:20:5e:de:26:4d:9d:9d:44:4b: e3:e2:a2:a7:03:62:5a:98:e0:eb:13:97:31:70:a4: 28:03:ee:2b:9d:56:f0:0e:b0:a2:8d:c6:6f:18:7e: 10:fe:da:a8:b8:3d:63:c1:17:71:6d:81:8e:74:7b: 4e:4f:70:8f:24:a0:8a:c1:08:a7:46:0c:ac:24:db: 6b:56:91:0d:fd:e1:05:c4:d1:07:8b:4b:fb:90:9b: 2f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:34:90:B6:56:6C:66:22:89:8E:6C:AE:E8:23:AA:0B:60:C7:A2:5D X509v3 Authority Key Identifier: keyid:6F:28:55:6F:0A:31:5C:16:A5:95:15:8E:D1:59:A2:5E:AA:64:38:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byhVbwoxXBallRWO0VmiXqpkOEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e3:af:af:75:56:b2:7e:6f:6a:9c:9c:ce:d8:e5:9d:e6:7e: a8:23:87:ab:bb:0a:43:9c:36:04:48:ee:17:c7:10:af:94:b6: ec:9b:24:35:11:f5:86:dc:b3:27:6f:ea:e8:73:59:e3:a2:84: 7a:45:38:31:47:3d:0b:c2:e6:81:c4:1f:c6:f3:71:50:a1:5f: 63:a4:ce:1d:bf:06:e1:a0:98:7e:5a:cf:cd:1d:83:03:9a:89: b4:49:36:dc:64:aa:67:64:4b:81:5b:20:3a:d9:92:1b:09:92: 1f:00:60:86:e5:47:a6:1d:27:04:71:50:d1:af:28:dd:22:1a: e7:61:28:d2:ca:4c:68:9c:f5:0a:2e:21:d3:52:bc:a7:a5:96: 32:16:45:03:3a:2e:b5:c2:e5:28:d3:95:67:10:b1:13:32:b9: 12:ad:a4:c3:a1:9f:c2:dd:23:66:63:77:ff:f6:3d:83:b9:27: fd:96:20:67:7f:11:dd:b8:1e:ec:07:1e:33:59:ce:b3:92:88: f0:6b:ad:31:f4:47:c0:0b:4d:ea:96:a3:90:32:9d:69:94:3e: 7e:41:00:b4:c6:4e:81:84:5f:90:53:01:a5:f0:6b:b2:e3:a5: fc:b9:ef:41:36:80:0c:0e:1b:1c:60:39:f3:1b:52:02:8b:45: a8:63:bf:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD4usXsP6snp2et9qq/EDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMjg1NTZmMGEzMTVjMTZhNTk1MTU4ZWQxNTlhMjVlYWE2 NDM4NDgwHhcNMjYwMjA5MTEwMDQwWhcNMjYwMjEwMTEwMDQwWjAzMTEwLwYDVQQD EygxZDM0OTBiNjU2NmM2NjIyODk4ZTZjYWVlODIzYWEwYjYwYzdhMjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFrodLN4vm7HVTy/i2uMcd8wlRah qXz/U+K+ItAd3c9+eAfLN58EvUEApkuojhl4AVYWexT2lheQ5jMMW+X62xGMddRw M4TwPzJ42tWYSb4+SSutdAJRLqTbzkyT5isgn84MfZgRTurtU9w5XDUEHqj95pAG i+2Y9/Eo3hhvPxYoVdM1l3Ntt3o8PomAQ+KkgRWAa5dMEthHjlX6LQKhYs/w3jOK NOWqER8gXt4mTZ2dREvj4qKnA2JamODrE5cxcKQoA+4rnVbwDrCijcZvGH4Q/tqo uD1jwRdxbYGOdHtOT3CPJKCKwQinRgysJNtrVpEN/eEFxNEHi0v7kJsv3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB00kLZWbGYiiY5srugjqgtgx6JdMB8GA1UdIwQY MBaAFG8oVW8KMVwWpZUVjtFZol6qZDhIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnloVmJ3b3hYQmFsbFJXTzBWbWlYcXBrT0VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS80NjJkNzYtYTVkNC00MWU1LTg3NTQt NjM3YWZlNDYwM2E4LzEvYnloVmJ3b3hYQmFsbFJXTzBWbWlYcXBrT0VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS80NjJkNzYtYTVkNC00MWU1LTg3NTQtNjM3YWZlNDYwM2E4 LzEvYnloVmJ3b3hYQmFsbFJXTzBWbWlYcXBrT0VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOOvr3VW sn5vapycztjlneZ+qCOHq7sKQ5w2BEjuF8cQr5S27JskNRH1htyzJ2/q6HNZ46KE ekU4MUc9C8LmgcQfxvNxUKFfY6TOHb8G4aCYflrPzR2DA5qJtEk23GSqZ2RLgVsg OtmSGwmSHwBghuVHph0nBHFQ0a8o3SIa52Eo0spMaJz1Ci4h01K8p6WWMhZFAzou tcLlKNOVZxCxEzK5Eq2kw6Gfwt0jZmN3//Y9g7kn/ZYgZ38R3bge7AceM1nOs5KI 8GutMfRHwAtN6pajkDKdaZQ+fkEAtMZOgYRfkFMBpfBrsuOl/LnvQTaADA4bHGA5 8xtSAotFqGO/aQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:02 2026 by rpki-client