This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft File: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft (raw, json) Hash identifier: 0DadRTwEMWjF1VVqdeWzoUDHdz2eQs8/4dDuhUk5s3E= Subject key identifier: 19:8A:4C:9A:8E:53:86:AF:18:DA:EA:D4:F2:06:3F:87:FF:4D:18:02 Authority key identifier: 63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E Certificate issuer: /CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e Certificate serial: 019C420FA2E4D25EEC55EB2CBA074CA81132 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft Manifest number: 14D1 Signing time: Mon 09 Feb 2026 11:00:46 +0000 Manifest this update: Mon 09 Feb 2026 11:00:46 +0000 Manifest next update: Tue 10 Feb 2026 11:00:46 +0000 Files and hashes: 1: 614IUYG3gRvLH7wKp-4pxVgVM8s.roa (hash: dRzT8GkPgOG738tzI7AWfIU5a3zLHU58ogZFdTFRUqo=) 2: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl (hash: uAaqSKJx9ymOmcYzh71bNGcPTRTM72fNwftCu/r2GEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:a2:e4:d2:5e:ec:55:eb:2c:ba:07:4c:a8:11:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e Validity Not Before: Feb 9 11:00:46 2026 GMT Not After : Feb 10 11:00:46 2026 GMT Subject: CN=198a4c9a8e5386af18daead4f2063f87ff4d1802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:69:2b:00:9a:f2:07:26:63:21:bf:ce:80:90: 76:82:1b:7d:65:23:3e:65:3d:02:88:6a:18:db:d2: 44:4a:9c:a0:ec:7d:61:b2:84:06:d9:7b:cf:b5:3b: 64:e5:04:65:d5:18:cc:59:2d:7b:a6:33:4c:50:74: 3b:71:0f:31:93:83:7f:0d:b0:30:78:fd:0f:d7:a6: 34:f0:93:bc:e9:50:e6:10:e5:ed:d8:70:1b:29:7e: d1:ca:f5:d0:cb:ae:b8:c4:a6:84:22:b6:ab:78:d6: b4:18:eb:8f:65:2f:c4:b2:35:13:c2:80:85:e0:b8: 8a:40:a9:0e:d2:c2:bb:28:d5:25:5a:bb:3b:89:05: 22:3e:21:52:fb:6e:38:55:e3:02:97:e2:a7:a2:c9: eb:64:57:47:c6:ac:54:63:82:9d:3f:bf:90:69:ed: 0c:e0:e9:f7:ad:db:8e:6c:3d:25:0c:a5:8a:49:0c: 43:c4:15:02:c4:2b:8a:c7:b3:43:50:31:61:e1:b2: 88:51:07:d2:87:51:56:e0:eb:2c:be:53:bb:3e:f0: c3:96:ec:4a:dc:6f:49:17:ef:d5:46:6d:69:0e:2c: cb:06:40:ac:72:c3:0f:f9:c0:fc:96:d5:68:61:67: d5:d4:13:47:6c:19:db:d2:6d:2e:64:e1:69:3e:ec: 31:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8A:4C:9A:8E:53:86:AF:18:DA:EA:D4:F2:06:3F:87:FF:4D:18:02 X509v3 Authority Key Identifier: keyid:63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ed:54:5c:fe:36:31:47:6b:19:b9:14:a3:98:3c:3e:ef:0a: 92:e8:6c:4c:c3:a6:2d:46:e2:35:b3:70:85:59:2e:df:1a:15: 1b:2c:b7:eb:2d:1d:07:50:12:d8:29:ad:d7:67:79:7f:5a:d6: 9b:03:47:e7:b0:88:47:de:b2:75:92:59:4f:48:d4:a2:70:1e: 3b:fc:c9:dd:10:05:8a:37:91:1f:f2:81:7e:5f:b2:9f:6e:4e: 1c:8e:cf:54:15:49:ba:3e:ee:6e:bb:a5:be:7b:15:86:96:33: 2d:d2:09:e2:ab:a3:a8:36:d0:0f:9e:c5:e6:db:ac:5f:f7:cc: c2:ae:d5:21:62:3d:5f:f5:1c:39:c6:25:27:37:99:67:26:6e: f1:c4:c5:99:84:50:ac:62:c5:55:04:cf:8e:99:34:83:2d:11: 68:63:ae:73:90:4a:38:83:00:2d:27:28:46:0a:3e:17:d3:2b: 0d:2d:ea:2b:57:a4:f7:c6:1a:56:d9:b4:b2:e2:d5:1d:4d:10: 11:ff:37:c7:77:66:53:2a:6f:75:89:fd:ed:ef:a8:c1:01:df: 23:33:0f:4f:e4:46:7b:50:e2:40:18:41:e9:1e:44:95:3b:be: 8d:8d:df:f8:a5:5a:9f:9f:73:cc:60:b7:cd:1f:a7:9c:9a:39: 8b:52:a2:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD6Lk0l7sVessugdMqBEyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZjk3MjY3ZTdjMDA3OTUzMDk1MDlmMWU4ZDNkOWNkZTBh NzZjNGUwHhcNMjYwMjA5MTEwMDQ2WhcNMjYwMjEwMTEwMDQ2WjAzMTEwLwYDVQQD EygxOThhNGM5YThlNTM4NmFmMThkYWVhZDRmMjA2M2Y4N2ZmNGQxODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2krAJryByZjIb/OgJB2ght9ZSM+ ZT0CiGoY29JESpyg7H1hsoQG2XvPtTtk5QRl1RjMWS17pjNMUHQ7cQ8xk4N/DbAw eP0P16Y08JO86VDmEOXt2HAbKX7RyvXQy664xKaEIrareNa0GOuPZS/EsjUTwoCF 4LiKQKkO0sK7KNUlWrs7iQUiPiFS+244VeMCl+KnosnrZFdHxqxUY4KdP7+Qae0M 4On3rduObD0lDKWKSQxDxBUCxCuKx7NDUDFh4bKIUQfSh1FW4OssvlO7PvDDluxK 3G9JF+/VRm1pDizLBkCscsMP+cD8ltVoYWfV1BNHbBnb0m0uZOFpPuwx5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmKTJqOU4avGNrq1PIGP4f/TRgCMB8GA1UdIwQY MBaAFGP5cmfnwAeVMJUJ8ejT2c3gp2xOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWV9seVotZkFCNVV3bFFueDZOUFp6ZUNuYkU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83YTFjMmUtNzVmYi00NGM2LWE4M2Mt MTQ2NzNjNzJhMWRmLzEvWV9seVotZkFCNVV3bFFueDZOUFp6ZUNuYkU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS83YTFjMmUtNzVmYi00NGM2LWE4M2MtMTQ2NzNjNzJhMWRm LzEvWV9seVotZkFCNVV3bFFueDZOUFp6ZUNuYkU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmu1UXP42 MUdrGbkUo5g8Pu8KkuhsTMOmLUbiNbNwhVku3xoVGyy36y0dB1AS2Cmt12d5f1rW mwNH57CIR96ydZJZT0jUonAeO/zJ3RAFijeRH/KBfl+yn25OHI7PVBVJuj7ubrul vnsVhpYzLdIJ4qujqDbQD57F5tusX/fMwq7VIWI9X/UcOcYlJzeZZyZu8cTFmYRQ rGLFVQTPjpk0gy0RaGOuc5BKOIMALScoRgo+F9MrDS3qK1ek98YaVtm0suLVHU0Q Ef83x3dmUypvdYn97e+owQHfIzMPT+RGe1DiQBhB6R5ElTu+jY3f+KVan59zzGC3 zR+nnJo5i1KiCw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:45 2026 by rpki-client